Oct 5 09:44:28 prd-ubuntu1804-docker-4c-4g-5675 passwd[943]: password for 'ubuntu' changed by 'root' Oct 5 09:44:28 prd-ubuntu1804-docker-4c-4g-5675 systemd-logind[985]: Watching system buttons on /dev/input/event0 (Power Button) Oct 5 09:44:28 prd-ubuntu1804-docker-4c-4g-5675 systemd-logind[985]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 5 09:44:28 prd-ubuntu1804-docker-4c-4g-5675 systemd-logind[985]: New seat seat0. Oct 5 09:44:29 prd-ubuntu1804-docker-4c-4g-5675 sshd[1264]: Server listening on 0.0.0.0 port 22. Oct 5 09:44:29 prd-ubuntu1804-docker-4c-4g-5675 sshd[1264]: Server listening on :: port 22. Oct 5 09:44:30 prd-ubuntu1804-docker-4c-4g-5675 sshd[1342]: Did not receive identification string from 10.32.4.5 port 55306 Oct 5 09:44:35 prd-ubuntu1804-docker-4c-4g-5675 sshd[1490]: Invalid user jenkins from 10.32.4.5 port 55308 Oct 5 09:44:35 prd-ubuntu1804-docker-4c-4g-5675 sshd[1490]: Received disconnect from 10.32.4.5 port 55308:11: Closed due to user request. [preauth] Oct 5 09:44:35 prd-ubuntu1804-docker-4c-4g-5675 sshd[1490]: Disconnected from invalid user jenkins 10.32.4.5 port 55308 [preauth] Oct 5 09:44:37 prd-ubuntu1804-docker-4c-4g-5675 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 55312 Oct 5 09:44:38 prd-ubuntu1804-docker-4c-4g-5675 sshd[1498]: Received disconnect from 10.32.4.5 port 55312:11: Closed due to user request. [preauth] Oct 5 09:44:38 prd-ubuntu1804-docker-4c-4g-5675 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 55312 [preauth] Oct 5 09:44:40 prd-ubuntu1804-docker-4c-4g-5675 sshd[1500]: Invalid user jenkins from 10.32.4.5 port 55314 Oct 5 09:44:40 prd-ubuntu1804-docker-4c-4g-5675 sshd[1500]: Received disconnect from 10.32.4.5 port 55314:11: Closed due to user request. [preauth] Oct 5 09:44:40 prd-ubuntu1804-docker-4c-4g-5675 sshd[1500]: Disconnected from invalid user jenkins 10.32.4.5 port 55314 [preauth] Oct 5 09:44:42 prd-ubuntu1804-docker-4c-4g-5675 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 55316 Oct 5 09:44:42 prd-ubuntu1804-docker-4c-4g-5675 sshd[1502]: Received disconnect from 10.32.4.5 port 55316:11: Closed due to user request. [preauth] Oct 5 09:44:42 prd-ubuntu1804-docker-4c-4g-5675 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 55316 [preauth] Oct 5 09:44:44 prd-ubuntu1804-docker-4c-4g-5675 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 55318 Oct 5 09:44:44 prd-ubuntu1804-docker-4c-4g-5675 sshd[1504]: Received disconnect from 10.32.4.5 port 55318:11: Closed due to user request. [preauth] Oct 5 09:44:44 prd-ubuntu1804-docker-4c-4g-5675 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 55318 [preauth] Oct 5 09:44:46 prd-ubuntu1804-docker-4c-4g-5675 sshd[1506]: Invalid user jenkins from 10.32.4.5 port 55320 Oct 5 09:44:46 prd-ubuntu1804-docker-4c-4g-5675 sshd[1506]: Received disconnect from 10.32.4.5 port 55320:11: Closed due to user request. [preauth] Oct 5 09:44:46 prd-ubuntu1804-docker-4c-4g-5675 sshd[1506]: Disconnected from invalid user jenkins 10.32.4.5 port 55320 [preauth] Oct 5 09:44:48 prd-ubuntu1804-docker-4c-4g-5675 sshd[1508]: Invalid user jenkins from 10.32.4.5 port 55322 Oct 5 09:44:48 prd-ubuntu1804-docker-4c-4g-5675 sshd[1508]: Received disconnect from 10.32.4.5 port 55322:11: Closed due to user request. [preauth] Oct 5 09:44:48 prd-ubuntu1804-docker-4c-4g-5675 sshd[1508]: Disconnected from invalid user jenkins 10.32.4.5 port 55322 [preauth] Oct 5 09:44:50 prd-ubuntu1804-docker-4c-4g-5675 sshd[1526]: Invalid user jenkins from 10.32.4.5 port 55324 Oct 5 09:44:50 prd-ubuntu1804-docker-4c-4g-5675 sshd[1526]: Received disconnect from 10.32.4.5 port 55324:11: Closed due to user request. [preauth] Oct 5 09:44:50 prd-ubuntu1804-docker-4c-4g-5675 sshd[1526]: Disconnected from invalid user jenkins 10.32.4.5 port 55324 [preauth] Oct 5 09:44:53 prd-ubuntu1804-docker-4c-4g-5675 sshd[1731]: Invalid user jenkins from 10.32.4.5 port 55328 Oct 5 09:44:53 prd-ubuntu1804-docker-4c-4g-5675 sshd[1731]: Received disconnect from 10.32.4.5 port 55328:11: Closed due to user request. [preauth] Oct 5 09:44:53 prd-ubuntu1804-docker-4c-4g-5675 sshd[1731]: Disconnected from invalid user jenkins 10.32.4.5 port 55328 [preauth] Oct 5 09:44:55 prd-ubuntu1804-docker-4c-4g-5675 sshd[1772]: Invalid user jenkins from 10.32.4.5 port 55330 Oct 5 09:44:55 prd-ubuntu1804-docker-4c-4g-5675 sshd[1772]: Received disconnect from 10.32.4.5 port 55330:11: Closed due to user request. [preauth] Oct 5 09:44:55 prd-ubuntu1804-docker-4c-4g-5675 sshd[1772]: Disconnected from invalid user jenkins 10.32.4.5 port 55330 [preauth] Oct 5 09:44:57 prd-ubuntu1804-docker-4c-4g-5675 sshd[1788]: Invalid user jenkins from 10.32.4.5 port 55332 Oct 5 09:44:57 prd-ubuntu1804-docker-4c-4g-5675 sshd[1788]: Received disconnect from 10.32.4.5 port 55332:11: Closed due to user request. [preauth] Oct 5 09:44:57 prd-ubuntu1804-docker-4c-4g-5675 sshd[1788]: Disconnected from invalid user jenkins 10.32.4.5 port 55332 [preauth] Oct 5 09:44:59 prd-ubuntu1804-docker-4c-4g-5675 sshd[1802]: Invalid user jenkins from 10.32.4.5 port 55334 Oct 5 09:45:00 prd-ubuntu1804-docker-4c-4g-5675 sshd[1802]: Received disconnect from 10.32.4.5 port 55334:11: Closed due to user request. [preauth] Oct 5 09:45:00 prd-ubuntu1804-docker-4c-4g-5675 sshd[1802]: Disconnected from invalid user jenkins 10.32.4.5 port 55334 [preauth] Oct 5 09:45:00 prd-ubuntu1804-docker-4c-4g-5675 useradd[1806]: new group: name=jenkins, GID=1001 Oct 5 09:45:00 prd-ubuntu1804-docker-4c-4g-5675 useradd[1806]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 5 09:45:00 prd-ubuntu1804-docker-4c-4g-5675 usermod[1813]: add 'jenkins' to group 'docker' Oct 5 09:45:00 prd-ubuntu1804-docker-4c-4g-5675 usermod[1813]: add 'jenkins' to shadow group 'docker' Oct 5 09:45:02 prd-ubuntu1804-docker-4c-4g-5675 sshd[1869]: Accepted publickey for jenkins from 10.32.4.5 port 55344 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 5 09:45:02 prd-ubuntu1804-docker-4c-4g-5675 sshd[1869]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 5 09:45:02 prd-ubuntu1804-docker-4c-4g-5675 CRON[1872]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 5 09:45:02 prd-ubuntu1804-docker-4c-4g-5675 CRON[1872]: pam_unix(cron:session): session closed for user root Oct 5 09:45:02 prd-ubuntu1804-docker-4c-4g-5675 systemd-logind[985]: New session 1 of user jenkins. Oct 5 09:45:02 prd-ubuntu1804-docker-4c-4g-5675 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 5 09:46:01 prd-ubuntu1804-docker-4c-4g-5675 CRON[2095]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 5 09:46:01 prd-ubuntu1804-docker-4c-4g-5675 CRON[2095]: pam_unix(cron:session): session closed for user root Oct 5 09:47:01 prd-ubuntu1804-docker-4c-4g-5675 CRON[2437]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 5 09:47:01 prd-ubuntu1804-docker-4c-4g-5675 CRON[2437]: pam_unix(cron:session): session closed for user root Oct 5 09:48:01 prd-ubuntu1804-docker-4c-4g-5675 CRON[3099]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 5 09:48:01 prd-ubuntu1804-docker-4c-4g-5675 CRON[3099]: pam_unix(cron:session): session closed for user root Oct 5 09:48:43 prd-ubuntu1804-docker-4c-4g-5675 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-rapp-orufhrecovery-docker-merge-g-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 5 09:48:43 prd-ubuntu1804-docker-4c-4g-5675 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)