Mar 9 12:06:45 prd-ubuntu1804-docker-4c-4g-8482 passwd[938]: password for 'ubuntu' changed by 'root' Mar 9 12:06:45 prd-ubuntu1804-docker-4c-4g-8482 systemd-logind[1109]: Watching system buttons on /dev/input/event0 (Power Button) Mar 9 12:06:45 prd-ubuntu1804-docker-4c-4g-8482 systemd-logind[1109]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 9 12:06:45 prd-ubuntu1804-docker-4c-4g-8482 systemd-logind[1109]: New seat seat0. Mar 9 12:06:45 prd-ubuntu1804-docker-4c-4g-8482 sshd[1306]: Server listening on 0.0.0.0 port 22. Mar 9 12:06:45 prd-ubuntu1804-docker-4c-4g-8482 sshd[1306]: Server listening on :: port 22. Mar 9 12:06:47 prd-ubuntu1804-docker-4c-4g-8482 sshd[1419]: Did not receive identification string from 10.32.4.5 port 35426 Mar 9 12:06:52 prd-ubuntu1804-docker-4c-4g-8482 sshd[1586]: Invalid user jenkins from 10.32.4.5 port 35428 Mar 9 12:06:52 prd-ubuntu1804-docker-4c-4g-8482 sshd[1586]: Received disconnect from 10.32.4.5 port 35428:11: Closed due to user request. [preauth] Mar 9 12:06:52 prd-ubuntu1804-docker-4c-4g-8482 sshd[1586]: Disconnected from invalid user jenkins 10.32.4.5 port 35428 [preauth] Mar 9 12:06:54 prd-ubuntu1804-docker-4c-4g-8482 sshd[1605]: Invalid user jenkins from 10.32.4.5 port 35430 Mar 9 12:06:54 prd-ubuntu1804-docker-4c-4g-8482 sshd[1605]: Received disconnect from 10.32.4.5 port 35430:11: Closed due to user request. [preauth] Mar 9 12:06:54 prd-ubuntu1804-docker-4c-4g-8482 sshd[1605]: Disconnected from invalid user jenkins 10.32.4.5 port 35430 [preauth] Mar 9 12:06:56 prd-ubuntu1804-docker-4c-4g-8482 sshd[1607]: Invalid user jenkins from 10.32.4.5 port 35434 Mar 9 12:06:56 prd-ubuntu1804-docker-4c-4g-8482 sshd[1607]: Received disconnect from 10.32.4.5 port 35434:11: Closed due to user request. [preauth] Mar 9 12:06:56 prd-ubuntu1804-docker-4c-4g-8482 sshd[1607]: Disconnected from invalid user jenkins 10.32.4.5 port 35434 [preauth] Mar 9 12:06:58 prd-ubuntu1804-docker-4c-4g-8482 sshd[1609]: Invalid user jenkins from 10.32.4.5 port 35436 Mar 9 12:06:58 prd-ubuntu1804-docker-4c-4g-8482 sshd[1609]: Received disconnect from 10.32.4.5 port 35436:11: Closed due to user request. [preauth] Mar 9 12:06:58 prd-ubuntu1804-docker-4c-4g-8482 sshd[1609]: Disconnected from invalid user jenkins 10.32.4.5 port 35436 [preauth] Mar 9 12:07:01 prd-ubuntu1804-docker-4c-4g-8482 sshd[1611]: Invalid user jenkins from 10.32.4.5 port 35438 Mar 9 12:07:01 prd-ubuntu1804-docker-4c-4g-8482 sshd[1611]: Received disconnect from 10.32.4.5 port 35438:11: Closed due to user request. [preauth] Mar 9 12:07:01 prd-ubuntu1804-docker-4c-4g-8482 sshd[1611]: Disconnected from invalid user jenkins 10.32.4.5 port 35438 [preauth] Mar 9 12:07:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[1614]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 9 12:07:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[1614]: pam_unix(cron:session): session closed for user root Mar 9 12:07:03 prd-ubuntu1804-docker-4c-4g-8482 sshd[1621]: Invalid user jenkins from 10.32.4.5 port 35440 Mar 9 12:07:03 prd-ubuntu1804-docker-4c-4g-8482 sshd[1621]: Received disconnect from 10.32.4.5 port 35440:11: Closed due to user request. [preauth] Mar 9 12:07:03 prd-ubuntu1804-docker-4c-4g-8482 sshd[1621]: Disconnected from invalid user jenkins 10.32.4.5 port 35440 [preauth] Mar 9 12:07:05 prd-ubuntu1804-docker-4c-4g-8482 sshd[1623]: Invalid user jenkins from 10.32.4.5 port 35442 Mar 9 12:07:05 prd-ubuntu1804-docker-4c-4g-8482 sshd[1623]: Received disconnect from 10.32.4.5 port 35442:11: Closed due to user request. [preauth] Mar 9 12:07:05 prd-ubuntu1804-docker-4c-4g-8482 sshd[1623]: Disconnected from invalid user jenkins 10.32.4.5 port 35442 [preauth] Mar 9 12:07:07 prd-ubuntu1804-docker-4c-4g-8482 sshd[1635]: Invalid user jenkins from 10.32.4.5 port 35444 Mar 9 12:07:07 prd-ubuntu1804-docker-4c-4g-8482 sshd[1635]: Received disconnect from 10.32.4.5 port 35444:11: Closed due to user request. [preauth] Mar 9 12:07:07 prd-ubuntu1804-docker-4c-4g-8482 sshd[1635]: Disconnected from invalid user jenkins 10.32.4.5 port 35444 [preauth] Mar 9 12:07:09 prd-ubuntu1804-docker-4c-4g-8482 sshd[1864]: Invalid user jenkins from 10.32.4.5 port 35446 Mar 9 12:07:09 prd-ubuntu1804-docker-4c-4g-8482 sshd[1864]: Received disconnect from 10.32.4.5 port 35446:11: Closed due to user request. [preauth] Mar 9 12:07:09 prd-ubuntu1804-docker-4c-4g-8482 sshd[1864]: Disconnected from invalid user jenkins 10.32.4.5 port 35446 [preauth] Mar 9 12:07:11 prd-ubuntu1804-docker-4c-4g-8482 sshd[1902]: Invalid user jenkins from 10.32.4.5 port 35448 Mar 9 12:07:11 prd-ubuntu1804-docker-4c-4g-8482 sshd[1902]: Received disconnect from 10.32.4.5 port 35448:11: Closed due to user request. [preauth] Mar 9 12:07:11 prd-ubuntu1804-docker-4c-4g-8482 sshd[1902]: Disconnected from invalid user jenkins 10.32.4.5 port 35448 [preauth] Mar 9 12:07:13 prd-ubuntu1804-docker-4c-4g-8482 sshd[1909]: Invalid user jenkins from 10.32.4.5 port 35452 Mar 9 12:07:13 prd-ubuntu1804-docker-4c-4g-8482 sshd[1909]: Received disconnect from 10.32.4.5 port 35452:11: Closed due to user request. [preauth] Mar 9 12:07:13 prd-ubuntu1804-docker-4c-4g-8482 sshd[1909]: Disconnected from invalid user jenkins 10.32.4.5 port 35452 [preauth] Mar 9 12:07:15 prd-ubuntu1804-docker-4c-4g-8482 useradd[1927]: new group: name=jenkins, GID=1001 Mar 9 12:07:15 prd-ubuntu1804-docker-4c-4g-8482 useradd[1927]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 9 12:07:15 prd-ubuntu1804-docker-4c-4g-8482 sshd[1925]: Invalid user jenkins from 10.32.4.5 port 35456 Mar 9 12:07:15 prd-ubuntu1804-docker-4c-4g-8482 sshd[1925]: Received disconnect from 10.32.4.5 port 35456:11: Closed due to user request. [preauth] Mar 9 12:07:15 prd-ubuntu1804-docker-4c-4g-8482 sshd[1925]: Disconnected from invalid user jenkins 10.32.4.5 port 35456 [preauth] Mar 9 12:07:15 prd-ubuntu1804-docker-4c-4g-8482 usermod[1934]: add 'jenkins' to group 'docker' Mar 9 12:07:15 prd-ubuntu1804-docker-4c-4g-8482 usermod[1934]: add 'jenkins' to shadow group 'docker' Mar 9 12:07:18 prd-ubuntu1804-docker-4c-4g-8482 sshd[1987]: Accepted publickey for jenkins from 10.32.4.5 port 35458 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 9 12:07:18 prd-ubuntu1804-docker-4c-4g-8482 sshd[1987]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 9 12:07:18 prd-ubuntu1804-docker-4c-4g-8482 systemd-logind[1109]: New session 2 of user jenkins. Mar 9 12:07:18 prd-ubuntu1804-docker-4c-4g-8482 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 9 12:08:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[2506]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 9 12:08:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[2506]: pam_unix(cron:session): session closed for user root Mar 9 12:09:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[2585]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 9 12:09:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[2585]: pam_unix(cron:session): session closed for user root Mar 9 12:10:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[3440]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 9 12:10:01 prd-ubuntu1804-docker-4c-4g-8482 CRON[3440]: pam_unix(cron:session): session closed for user root Mar 9 12:10:14 prd-ubuntu1804-docker-4c-4g-8482 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-rapp-healthcheck-verify-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 9 12:10:14 prd-ubuntu1804-docker-4c-4g-8482 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)