Jan 25 19:43:49 prd-ubuntu1804-docker-4c-4g-4135 passwd[923]: password for 'ubuntu' changed by 'root' Jan 25 19:43:49 prd-ubuntu1804-docker-4c-4g-4135 systemd-logind[1022]: Watching system buttons on /dev/input/event0 (Power Button) Jan 25 19:43:49 prd-ubuntu1804-docker-4c-4g-4135 systemd-logind[1022]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 25 19:43:49 prd-ubuntu1804-docker-4c-4g-4135 systemd-logind[1022]: New seat seat0. Jan 25 19:43:50 prd-ubuntu1804-docker-4c-4g-4135 sshd[1249]: Server listening on 0.0.0.0 port 22. Jan 25 19:43:50 prd-ubuntu1804-docker-4c-4g-4135 sshd[1249]: Server listening on :: port 22. Jan 25 19:43:50 prd-ubuntu1804-docker-4c-4g-4135 sshd[1280]: Did not receive identification string from 10.32.4.5 port 36322 Jan 25 19:43:52 prd-ubuntu1804-docker-4c-4g-4135 sshd[1425]: Invalid user jenkins from 10.32.4.5 port 36324 Jan 25 19:43:52 prd-ubuntu1804-docker-4c-4g-4135 sshd[1425]: Received disconnect from 10.32.4.5 port 36324:11: Closed due to user request. [preauth] Jan 25 19:43:52 prd-ubuntu1804-docker-4c-4g-4135 sshd[1425]: Disconnected from invalid user jenkins 10.32.4.5 port 36324 [preauth] Jan 25 19:43:54 prd-ubuntu1804-docker-4c-4g-4135 sshd[1485]: Invalid user jenkins from 10.32.4.5 port 36328 Jan 25 19:43:54 prd-ubuntu1804-docker-4c-4g-4135 sshd[1485]: Received disconnect from 10.32.4.5 port 36328:11: Closed due to user request. [preauth] Jan 25 19:43:54 prd-ubuntu1804-docker-4c-4g-4135 sshd[1485]: Disconnected from invalid user jenkins 10.32.4.5 port 36328 [preauth] Jan 25 19:43:56 prd-ubuntu1804-docker-4c-4g-4135 sshd[1522]: Invalid user jenkins from 10.32.4.5 port 36330 Jan 25 19:43:56 prd-ubuntu1804-docker-4c-4g-4135 sshd[1522]: Received disconnect from 10.32.4.5 port 36330:11: Closed due to user request. [preauth] Jan 25 19:43:56 prd-ubuntu1804-docker-4c-4g-4135 sshd[1522]: Disconnected from invalid user jenkins 10.32.4.5 port 36330 [preauth] Jan 25 19:43:58 prd-ubuntu1804-docker-4c-4g-4135 sshd[1544]: Invalid user jenkins from 10.32.4.5 port 36332 Jan 25 19:43:58 prd-ubuntu1804-docker-4c-4g-4135 sshd[1544]: Received disconnect from 10.32.4.5 port 36332:11: Closed due to user request. [preauth] Jan 25 19:43:58 prd-ubuntu1804-docker-4c-4g-4135 sshd[1544]: Disconnected from invalid user jenkins 10.32.4.5 port 36332 [preauth] Jan 25 19:44:00 prd-ubuntu1804-docker-4c-4g-4135 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 36340 Jan 25 19:44:00 prd-ubuntu1804-docker-4c-4g-4135 sshd[1546]: Received disconnect from 10.32.4.5 port 36340:11: Closed due to user request. [preauth] Jan 25 19:44:00 prd-ubuntu1804-docker-4c-4g-4135 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 36340 [preauth] Jan 25 19:44:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[1548]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 25 19:44:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[1548]: pam_unix(cron:session): session closed for user root Jan 25 19:44:02 prd-ubuntu1804-docker-4c-4g-4135 sshd[1557]: Invalid user jenkins from 10.32.4.5 port 36342 Jan 25 19:44:02 prd-ubuntu1804-docker-4c-4g-4135 sshd[1557]: Received disconnect from 10.32.4.5 port 36342:11: Closed due to user request. [preauth] Jan 25 19:44:02 prd-ubuntu1804-docker-4c-4g-4135 sshd[1557]: Disconnected from invalid user jenkins 10.32.4.5 port 36342 [preauth] Jan 25 19:44:05 prd-ubuntu1804-docker-4c-4g-4135 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 36344 Jan 25 19:44:05 prd-ubuntu1804-docker-4c-4g-4135 sshd[1559]: Received disconnect from 10.32.4.5 port 36344:11: Closed due to user request. [preauth] Jan 25 19:44:05 prd-ubuntu1804-docker-4c-4g-4135 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 36344 [preauth] Jan 25 19:44:07 prd-ubuntu1804-docker-4c-4g-4135 sshd[1561]: Invalid user jenkins from 10.32.4.5 port 36346 Jan 25 19:44:07 prd-ubuntu1804-docker-4c-4g-4135 sshd[1561]: Received disconnect from 10.32.4.5 port 36346:11: Closed due to user request. [preauth] Jan 25 19:44:07 prd-ubuntu1804-docker-4c-4g-4135 sshd[1561]: Disconnected from invalid user jenkins 10.32.4.5 port 36346 [preauth] Jan 25 19:44:09 prd-ubuntu1804-docker-4c-4g-4135 sshd[1563]: Invalid user jenkins from 10.32.4.5 port 36350 Jan 25 19:44:09 prd-ubuntu1804-docker-4c-4g-4135 sshd[1563]: Received disconnect from 10.32.4.5 port 36350:11: Closed due to user request. [preauth] Jan 25 19:44:09 prd-ubuntu1804-docker-4c-4g-4135 sshd[1563]: Disconnected from invalid user jenkins 10.32.4.5 port 36350 [preauth] Jan 25 19:44:11 prd-ubuntu1804-docker-4c-4g-4135 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 36352 Jan 25 19:44:11 prd-ubuntu1804-docker-4c-4g-4135 sshd[1572]: Received disconnect from 10.32.4.5 port 36352:11: Closed due to user request. [preauth] Jan 25 19:44:11 prd-ubuntu1804-docker-4c-4g-4135 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 36352 [preauth] Jan 25 19:44:13 prd-ubuntu1804-docker-4c-4g-4135 sshd[1777]: Invalid user jenkins from 10.32.4.5 port 36354 Jan 25 19:44:13 prd-ubuntu1804-docker-4c-4g-4135 sshd[1777]: Received disconnect from 10.32.4.5 port 36354:11: Closed due to user request. [preauth] Jan 25 19:44:13 prd-ubuntu1804-docker-4c-4g-4135 sshd[1777]: Disconnected from invalid user jenkins 10.32.4.5 port 36354 [preauth] Jan 25 19:44:15 prd-ubuntu1804-docker-4c-4g-4135 sshd[1832]: Invalid user jenkins from 10.32.4.5 port 36356 Jan 25 19:44:15 prd-ubuntu1804-docker-4c-4g-4135 sshd[1832]: Received disconnect from 10.32.4.5 port 36356:11: Closed due to user request. [preauth] Jan 25 19:44:15 prd-ubuntu1804-docker-4c-4g-4135 sshd[1832]: Disconnected from invalid user jenkins 10.32.4.5 port 36356 [preauth] Jan 25 19:44:17 prd-ubuntu1804-docker-4c-4g-4135 sshd[1850]: Invalid user jenkins from 10.32.4.5 port 36358 Jan 25 19:44:18 prd-ubuntu1804-docker-4c-4g-4135 sshd[1850]: Received disconnect from 10.32.4.5 port 36358:11: Closed due to user request. [preauth] Jan 25 19:44:18 prd-ubuntu1804-docker-4c-4g-4135 sshd[1850]: Disconnected from invalid user jenkins 10.32.4.5 port 36358 [preauth] Jan 25 19:44:20 prd-ubuntu1804-docker-4c-4g-4135 sshd[1859]: Invalid user jenkins from 10.32.4.5 port 36360 Jan 25 19:44:20 prd-ubuntu1804-docker-4c-4g-4135 sshd[1859]: Received disconnect from 10.32.4.5 port 36360:11: Closed due to user request. [preauth] Jan 25 19:44:20 prd-ubuntu1804-docker-4c-4g-4135 sshd[1859]: Disconnected from invalid user jenkins 10.32.4.5 port 36360 [preauth] Jan 25 19:44:20 prd-ubuntu1804-docker-4c-4g-4135 useradd[1870]: new group: name=jenkins, GID=1001 Jan 25 19:44:20 prd-ubuntu1804-docker-4c-4g-4135 useradd[1870]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 25 19:44:20 prd-ubuntu1804-docker-4c-4g-4135 usermod[1877]: add 'jenkins' to group 'docker' Jan 25 19:44:20 prd-ubuntu1804-docker-4c-4g-4135 usermod[1877]: add 'jenkins' to shadow group 'docker' Jan 25 19:44:22 prd-ubuntu1804-docker-4c-4g-4135 sshd[1932]: Accepted publickey for jenkins from 10.32.4.5 port 36362 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 25 19:44:22 prd-ubuntu1804-docker-4c-4g-4135 sshd[1932]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 25 19:44:22 prd-ubuntu1804-docker-4c-4g-4135 systemd-logind[1022]: New session 2 of user jenkins. Jan 25 19:44:22 prd-ubuntu1804-docker-4c-4g-4135 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 25 19:45:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[2436]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 25 19:45:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[2436]: pam_unix(cron:session): session closed for user root Jan 25 19:46:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[2480]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 25 19:46:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[2480]: pam_unix(cron:session): session closed for user root Jan 25 19:47:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[3420]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 25 19:47:01 prd-ubuntu1804-docker-4c-4g-4135 CRON[3420]: pam_unix(cron:session): session closed for user root Jan 25 19:47:36 prd-ubuntu1804-docker-4c-4g-4135 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-rapp-orufhrecovery-consumer-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 25 19:47:36 prd-ubuntu1804-docker-4c-4g-4135 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)