Nov 4 06:53:07 prd-ubuntu1804-docker-4c-4g-8137 passwd[927]: password for 'ubuntu' changed by 'root' Nov 4 06:53:07 prd-ubuntu1804-docker-4c-4g-8137 systemd-logind[979]: Watching system buttons on /dev/input/event0 (Power Button) Nov 4 06:53:07 prd-ubuntu1804-docker-4c-4g-8137 systemd-logind[979]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 4 06:53:07 prd-ubuntu1804-docker-4c-4g-8137 systemd-logind[979]: New seat seat0. Nov 4 06:53:08 prd-ubuntu1804-docker-4c-4g-8137 sshd[1203]: Server listening on 0.0.0.0 port 22. Nov 4 06:53:08 prd-ubuntu1804-docker-4c-4g-8137 sshd[1203]: Server listening on :: port 22. Nov 4 06:53:09 prd-ubuntu1804-docker-4c-4g-8137 sshd[1242]: Did not receive identification string from 10.32.4.5 port 57566 Nov 4 06:53:16 prd-ubuntu1804-docker-4c-4g-8137 sshd[1441]: Invalid user jenkins from 10.32.4.5 port 57570 Nov 4 06:53:16 prd-ubuntu1804-docker-4c-4g-8137 sshd[1441]: Received disconnect from 10.32.4.5 port 57570:11: Closed due to user request. [preauth] Nov 4 06:53:16 prd-ubuntu1804-docker-4c-4g-8137 sshd[1441]: Disconnected from invalid user jenkins 10.32.4.5 port 57570 [preauth] Nov 4 06:53:18 prd-ubuntu1804-docker-4c-4g-8137 sshd[1445]: Invalid user jenkins from 10.32.4.5 port 57572 Nov 4 06:53:18 prd-ubuntu1804-docker-4c-4g-8137 sshd[1445]: Received disconnect from 10.32.4.5 port 57572:11: Closed due to user request. [preauth] Nov 4 06:53:18 prd-ubuntu1804-docker-4c-4g-8137 sshd[1445]: Disconnected from invalid user jenkins 10.32.4.5 port 57572 [preauth] Nov 4 06:53:20 prd-ubuntu1804-docker-4c-4g-8137 sshd[1447]: Invalid user jenkins from 10.32.4.5 port 57574 Nov 4 06:53:20 prd-ubuntu1804-docker-4c-4g-8137 sshd[1447]: Received disconnect from 10.32.4.5 port 57574:11: Closed due to user request. [preauth] Nov 4 06:53:20 prd-ubuntu1804-docker-4c-4g-8137 sshd[1447]: Disconnected from invalid user jenkins 10.32.4.5 port 57574 [preauth] Nov 4 06:53:22 prd-ubuntu1804-docker-4c-4g-8137 sshd[1449]: Invalid user jenkins from 10.32.4.5 port 57578 Nov 4 06:53:22 prd-ubuntu1804-docker-4c-4g-8137 sshd[1449]: Received disconnect from 10.32.4.5 port 57578:11: Closed due to user request. [preauth] Nov 4 06:53:22 prd-ubuntu1804-docker-4c-4g-8137 sshd[1449]: Disconnected from invalid user jenkins 10.32.4.5 port 57578 [preauth] Nov 4 06:53:24 prd-ubuntu1804-docker-4c-4g-8137 sshd[1451]: Invalid user jenkins from 10.32.4.5 port 57580 Nov 4 06:53:24 prd-ubuntu1804-docker-4c-4g-8137 sshd[1451]: Received disconnect from 10.32.4.5 port 57580:11: Closed due to user request. [preauth] Nov 4 06:53:24 prd-ubuntu1804-docker-4c-4g-8137 sshd[1451]: Disconnected from invalid user jenkins 10.32.4.5 port 57580 [preauth] Nov 4 06:53:27 prd-ubuntu1804-docker-4c-4g-8137 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 57582 Nov 4 06:53:27 prd-ubuntu1804-docker-4c-4g-8137 sshd[1453]: Received disconnect from 10.32.4.5 port 57582:11: Closed due to user request. [preauth] Nov 4 06:53:27 prd-ubuntu1804-docker-4c-4g-8137 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 57582 [preauth] Nov 4 06:53:29 prd-ubuntu1804-docker-4c-4g-8137 sshd[1473]: Invalid user jenkins from 10.32.4.5 port 57584 Nov 4 06:53:29 prd-ubuntu1804-docker-4c-4g-8137 sshd[1473]: Received disconnect from 10.32.4.5 port 57584:11: Closed due to user request. [preauth] Nov 4 06:53:29 prd-ubuntu1804-docker-4c-4g-8137 sshd[1473]: Disconnected from invalid user jenkins 10.32.4.5 port 57584 [preauth] Nov 4 06:53:31 prd-ubuntu1804-docker-4c-4g-8137 sshd[1677]: Invalid user jenkins from 10.32.4.5 port 57592 Nov 4 06:53:31 prd-ubuntu1804-docker-4c-4g-8137 sshd[1677]: Received disconnect from 10.32.4.5 port 57592:11: Closed due to user request. [preauth] Nov 4 06:53:31 prd-ubuntu1804-docker-4c-4g-8137 sshd[1677]: Disconnected from invalid user jenkins 10.32.4.5 port 57592 [preauth] Nov 4 06:53:33 prd-ubuntu1804-docker-4c-4g-8137 sshd[1720]: Invalid user jenkins from 10.32.4.5 port 57594 Nov 4 06:53:33 prd-ubuntu1804-docker-4c-4g-8137 sshd[1720]: Received disconnect from 10.32.4.5 port 57594:11: Closed due to user request. [preauth] Nov 4 06:53:33 prd-ubuntu1804-docker-4c-4g-8137 sshd[1720]: Disconnected from invalid user jenkins 10.32.4.5 port 57594 [preauth] Nov 4 06:53:36 prd-ubuntu1804-docker-4c-4g-8137 sshd[1737]: Invalid user jenkins from 10.32.4.5 port 57596 Nov 4 06:53:36 prd-ubuntu1804-docker-4c-4g-8137 sshd[1737]: Received disconnect from 10.32.4.5 port 57596:11: Closed due to user request. [preauth] Nov 4 06:53:36 prd-ubuntu1804-docker-4c-4g-8137 sshd[1737]: Disconnected from invalid user jenkins 10.32.4.5 port 57596 [preauth] Nov 4 06:53:38 prd-ubuntu1804-docker-4c-4g-8137 sshd[1747]: Invalid user jenkins from 10.32.4.5 port 57600 Nov 4 06:53:38 prd-ubuntu1804-docker-4c-4g-8137 sshd[1747]: Received disconnect from 10.32.4.5 port 57600:11: Closed due to user request. [preauth] Nov 4 06:53:38 prd-ubuntu1804-docker-4c-4g-8137 sshd[1747]: Disconnected from invalid user jenkins 10.32.4.5 port 57600 [preauth] Nov 4 06:53:38 prd-ubuntu1804-docker-4c-4g-8137 useradd[1757]: new group: name=jenkins, GID=1001 Nov 4 06:53:38 prd-ubuntu1804-docker-4c-4g-8137 useradd[1757]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 4 06:53:38 prd-ubuntu1804-docker-4c-4g-8137 usermod[1764]: add 'jenkins' to group 'docker' Nov 4 06:53:38 prd-ubuntu1804-docker-4c-4g-8137 usermod[1764]: add 'jenkins' to shadow group 'docker' Nov 4 06:53:40 prd-ubuntu1804-docker-4c-4g-8137 sshd[1819]: Accepted publickey for jenkins from 10.32.4.5 port 57602 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Nov 4 06:53:40 prd-ubuntu1804-docker-4c-4g-8137 sshd[1819]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 4 06:53:40 prd-ubuntu1804-docker-4c-4g-8137 systemd-logind[979]: New session 1 of user jenkins. Nov 4 06:53:40 prd-ubuntu1804-docker-4c-4g-8137 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 4 06:54:01 prd-ubuntu1804-docker-4c-4g-8137 CRON[2501]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:54:01 prd-ubuntu1804-docker-4c-4g-8137 CRON[2501]: pam_unix(cron:session): session closed for user root Nov 4 06:55:01 prd-ubuntu1804-docker-4c-4g-8137 CRON[2927]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:55:01 prd-ubuntu1804-docker-4c-4g-8137 CRON[2927]: pam_unix(cron:session): session closed for user root Nov 4 06:56:01 prd-ubuntu1804-docker-4c-4g-8137 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-rappmanager-maven-verify-master-mvn39-openjdk17 ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Nov 4 06:56:01 prd-ubuntu1804-docker-4c-4g-8137 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)