Sep 21 19:43:55 prd-ubuntu1804-docker-4c-4g-4297 passwd[992]: password for 'ubuntu' changed by 'root' Sep 21 19:43:55 prd-ubuntu1804-docker-4c-4g-4297 systemd-logind[1112]: Watching system buttons on /dev/input/event0 (Power Button) Sep 21 19:43:55 prd-ubuntu1804-docker-4c-4g-4297 systemd-logind[1112]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 21 19:43:55 prd-ubuntu1804-docker-4c-4g-4297 systemd-logind[1112]: New seat seat0. Sep 21 19:43:55 prd-ubuntu1804-docker-4c-4g-4297 sshd[1280]: Server listening on 0.0.0.0 port 22. Sep 21 19:43:55 prd-ubuntu1804-docker-4c-4g-4297 sshd[1280]: Server listening on :: port 22. Sep 21 19:44:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[1566]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 19:44:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[1566]: pam_unix(cron:session): session closed for user root Sep 21 19:44:01 prd-ubuntu1804-docker-4c-4g-4297 sshd[1576]: Did not receive identification string from 10.32.4.5 port 45324 Sep 21 19:44:06 prd-ubuntu1804-docker-4c-4g-4297 sshd[1587]: Invalid user jenkins from 10.32.4.5 port 45326 Sep 21 19:44:06 prd-ubuntu1804-docker-4c-4g-4297 sshd[1587]: Received disconnect from 10.32.4.5 port 45326:11: Closed due to user request. [preauth] Sep 21 19:44:06 prd-ubuntu1804-docker-4c-4g-4297 sshd[1587]: Disconnected from invalid user jenkins 10.32.4.5 port 45326 [preauth] Sep 21 19:44:08 prd-ubuntu1804-docker-4c-4g-4297 sshd[1591]: Invalid user jenkins from 10.32.4.5 port 45330 Sep 21 19:44:08 prd-ubuntu1804-docker-4c-4g-4297 sshd[1591]: Received disconnect from 10.32.4.5 port 45330:11: Closed due to user request. [preauth] Sep 21 19:44:08 prd-ubuntu1804-docker-4c-4g-4297 sshd[1591]: Disconnected from invalid user jenkins 10.32.4.5 port 45330 [preauth] Sep 21 19:44:10 prd-ubuntu1804-docker-4c-4g-4297 sshd[1593]: Invalid user jenkins from 10.32.4.5 port 45332 Sep 21 19:44:10 prd-ubuntu1804-docker-4c-4g-4297 sshd[1593]: Received disconnect from 10.32.4.5 port 45332:11: Closed due to user request. [preauth] Sep 21 19:44:10 prd-ubuntu1804-docker-4c-4g-4297 sshd[1593]: Disconnected from invalid user jenkins 10.32.4.5 port 45332 [preauth] Sep 21 19:44:12 prd-ubuntu1804-docker-4c-4g-4297 sshd[1595]: Invalid user jenkins from 10.32.4.5 port 45334 Sep 21 19:44:12 prd-ubuntu1804-docker-4c-4g-4297 sshd[1595]: Received disconnect from 10.32.4.5 port 45334:11: Closed due to user request. [preauth] Sep 21 19:44:12 prd-ubuntu1804-docker-4c-4g-4297 sshd[1595]: Disconnected from invalid user jenkins 10.32.4.5 port 45334 [preauth] Sep 21 19:44:14 prd-ubuntu1804-docker-4c-4g-4297 sshd[1604]: Invalid user jenkins from 10.32.4.5 port 45336 Sep 21 19:44:15 prd-ubuntu1804-docker-4c-4g-4297 sshd[1604]: Received disconnect from 10.32.4.5 port 45336:11: Closed due to user request. [preauth] Sep 21 19:44:15 prd-ubuntu1804-docker-4c-4g-4297 sshd[1604]: Disconnected from invalid user jenkins 10.32.4.5 port 45336 [preauth] Sep 21 19:44:17 prd-ubuntu1804-docker-4c-4g-4297 sshd[1611]: Invalid user jenkins from 10.32.4.5 port 45338 Sep 21 19:44:17 prd-ubuntu1804-docker-4c-4g-4297 sshd[1611]: Received disconnect from 10.32.4.5 port 45338:11: Closed due to user request. [preauth] Sep 21 19:44:17 prd-ubuntu1804-docker-4c-4g-4297 sshd[1611]: Disconnected from invalid user jenkins 10.32.4.5 port 45338 [preauth] Sep 21 19:44:19 prd-ubuntu1804-docker-4c-4g-4297 sshd[1769]: Invalid user jenkins from 10.32.4.5 port 45340 Sep 21 19:44:19 prd-ubuntu1804-docker-4c-4g-4297 sshd[1769]: Received disconnect from 10.32.4.5 port 45340:11: Closed due to user request. [preauth] Sep 21 19:44:19 prd-ubuntu1804-docker-4c-4g-4297 sshd[1769]: Disconnected from invalid user jenkins 10.32.4.5 port 45340 [preauth] Sep 21 19:44:21 prd-ubuntu1804-docker-4c-4g-4297 sshd[1847]: Invalid user jenkins from 10.32.4.5 port 45342 Sep 21 19:44:21 prd-ubuntu1804-docker-4c-4g-4297 sshd[1847]: Received disconnect from 10.32.4.5 port 45342:11: Closed due to user request. [preauth] Sep 21 19:44:21 prd-ubuntu1804-docker-4c-4g-4297 sshd[1847]: Disconnected from invalid user jenkins 10.32.4.5 port 45342 [preauth] Sep 21 19:44:23 prd-ubuntu1804-docker-4c-4g-4297 sshd[1884]: Invalid user jenkins from 10.32.4.5 port 45346 Sep 21 19:44:23 prd-ubuntu1804-docker-4c-4g-4297 sshd[1884]: Received disconnect from 10.32.4.5 port 45346:11: Closed due to user request. [preauth] Sep 21 19:44:23 prd-ubuntu1804-docker-4c-4g-4297 sshd[1884]: Disconnected from invalid user jenkins 10.32.4.5 port 45346 [preauth] Sep 21 19:44:25 prd-ubuntu1804-docker-4c-4g-4297 sshd[1888]: Invalid user jenkins from 10.32.4.5 port 45348 Sep 21 19:44:25 prd-ubuntu1804-docker-4c-4g-4297 sshd[1888]: Received disconnect from 10.32.4.5 port 45348:11: Closed due to user request. [preauth] Sep 21 19:44:25 prd-ubuntu1804-docker-4c-4g-4297 sshd[1888]: Disconnected from invalid user jenkins 10.32.4.5 port 45348 [preauth] Sep 21 19:44:27 prd-ubuntu1804-docker-4c-4g-4297 useradd[1919]: new group: name=jenkins, GID=1001 Sep 21 19:44:27 prd-ubuntu1804-docker-4c-4g-4297 useradd[1919]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 21 19:44:27 prd-ubuntu1804-docker-4c-4g-4297 sshd[1920]: Received disconnect from 10.32.4.5 port 45350:11: Closed due to user request. [preauth] Sep 21 19:44:27 prd-ubuntu1804-docker-4c-4g-4297 sshd[1920]: Disconnected from authenticating user jenkins 10.32.4.5 port 45350 [preauth] Sep 21 19:44:28 prd-ubuntu1804-docker-4c-4g-4297 usermod[1930]: add 'jenkins' to group 'docker' Sep 21 19:44:28 prd-ubuntu1804-docker-4c-4g-4297 usermod[1930]: add 'jenkins' to shadow group 'docker' Sep 21 19:44:30 prd-ubuntu1804-docker-4c-4g-4297 sshd[1977]: Accepted publickey for jenkins from 10.32.4.5 port 45358 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 21 19:44:30 prd-ubuntu1804-docker-4c-4g-4297 sshd[1977]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 21 19:44:30 prd-ubuntu1804-docker-4c-4g-4297 systemd-logind[1112]: New session 2 of user jenkins. Sep 21 19:44:30 prd-ubuntu1804-docker-4c-4g-4297 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 21 19:45:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[2473]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 19:45:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[2473]: pam_unix(cron:session): session closed for user root Sep 21 19:46:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[2528]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 19:46:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[2528]: pam_unix(cron:session): session closed for user root Sep 21 19:47:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[3010]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 19:47:01 prd-ubuntu1804-docker-4c-4g-4297 CRON[3010]: pam_unix(cron:session): session closed for user root Sep 21 19:48:01 prd-ubuntu1804-docker-4c-4g-4297 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-rapp-orufhrecovery-consumer-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Sep 21 19:48:01 prd-ubuntu1804-docker-4c-4g-4297 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)