Jan 24 08:23:34 prd-ubuntu1804-docker-4c-4g-3995 passwd[944]: password for 'ubuntu' changed by 'root' Jan 24 08:23:34 prd-ubuntu1804-docker-4c-4g-3995 systemd-logind[1034]: Watching system buttons on /dev/input/event0 (Power Button) Jan 24 08:23:34 prd-ubuntu1804-docker-4c-4g-3995 systemd-logind[1034]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 24 08:23:34 prd-ubuntu1804-docker-4c-4g-3995 systemd-logind[1034]: New seat seat0. Jan 24 08:23:34 prd-ubuntu1804-docker-4c-4g-3995 sshd[1218]: Server listening on 0.0.0.0 port 22. Jan 24 08:23:34 prd-ubuntu1804-docker-4c-4g-3995 sshd[1218]: Server listening on :: port 22. Jan 24 08:23:37 prd-ubuntu1804-docker-4c-4g-3995 sshd[1440]: Did not receive identification string from 10.32.4.5 port 52908 Jan 24 08:23:42 prd-ubuntu1804-docker-4c-4g-3995 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 52912 Jan 24 08:23:42 prd-ubuntu1804-docker-4c-4g-3995 sshd[1496]: Received disconnect from 10.32.4.5 port 52912:11: Closed due to user request. [preauth] Jan 24 08:23:42 prd-ubuntu1804-docker-4c-4g-3995 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 52912 [preauth] Jan 24 08:23:44 prd-ubuntu1804-docker-4c-4g-3995 sshd[1500]: Invalid user jenkins from 10.32.4.5 port 52914 Jan 24 08:23:44 prd-ubuntu1804-docker-4c-4g-3995 sshd[1500]: Received disconnect from 10.32.4.5 port 52914:11: Closed due to user request. [preauth] Jan 24 08:23:44 prd-ubuntu1804-docker-4c-4g-3995 sshd[1500]: Disconnected from invalid user jenkins 10.32.4.5 port 52914 [preauth] Jan 24 08:23:46 prd-ubuntu1804-docker-4c-4g-3995 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 52916 Jan 24 08:23:46 prd-ubuntu1804-docker-4c-4g-3995 sshd[1502]: Received disconnect from 10.32.4.5 port 52916:11: Closed due to user request. [preauth] Jan 24 08:23:46 prd-ubuntu1804-docker-4c-4g-3995 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 52916 [preauth] Jan 24 08:23:48 prd-ubuntu1804-docker-4c-4g-3995 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 52918 Jan 24 08:23:48 prd-ubuntu1804-docker-4c-4g-3995 sshd[1504]: Received disconnect from 10.32.4.5 port 52918:11: Closed due to user request. [preauth] Jan 24 08:23:48 prd-ubuntu1804-docker-4c-4g-3995 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 52918 [preauth] Jan 24 08:23:50 prd-ubuntu1804-docker-4c-4g-3995 sshd[1506]: Invalid user jenkins from 10.32.4.5 port 52920 Jan 24 08:23:50 prd-ubuntu1804-docker-4c-4g-3995 sshd[1506]: Received disconnect from 10.32.4.5 port 52920:11: Closed due to user request. [preauth] Jan 24 08:23:50 prd-ubuntu1804-docker-4c-4g-3995 sshd[1506]: Disconnected from invalid user jenkins 10.32.4.5 port 52920 [preauth] Jan 24 08:23:52 prd-ubuntu1804-docker-4c-4g-3995 sshd[1508]: Invalid user jenkins from 10.32.4.5 port 52924 Jan 24 08:23:52 prd-ubuntu1804-docker-4c-4g-3995 sshd[1508]: Received disconnect from 10.32.4.5 port 52924:11: Closed due to user request. [preauth] Jan 24 08:23:52 prd-ubuntu1804-docker-4c-4g-3995 sshd[1508]: Disconnected from invalid user jenkins 10.32.4.5 port 52924 [preauth] Jan 24 08:23:54 prd-ubuntu1804-docker-4c-4g-3995 sshd[1510]: Invalid user jenkins from 10.32.4.5 port 52926 Jan 24 08:23:54 prd-ubuntu1804-docker-4c-4g-3995 sshd[1510]: Received disconnect from 10.32.4.5 port 52926:11: Closed due to user request. [preauth] Jan 24 08:23:54 prd-ubuntu1804-docker-4c-4g-3995 sshd[1510]: Disconnected from invalid user jenkins 10.32.4.5 port 52926 [preauth] Jan 24 08:23:57 prd-ubuntu1804-docker-4c-4g-3995 sshd[1678]: Invalid user jenkins from 10.32.4.5 port 52928 Jan 24 08:23:57 prd-ubuntu1804-docker-4c-4g-3995 sshd[1678]: Received disconnect from 10.32.4.5 port 52928:11: Closed due to user request. [preauth] Jan 24 08:23:57 prd-ubuntu1804-docker-4c-4g-3995 sshd[1678]: Disconnected from invalid user jenkins 10.32.4.5 port 52928 [preauth] Jan 24 08:23:59 prd-ubuntu1804-docker-4c-4g-3995 sshd[1761]: Invalid user jenkins from 10.32.4.5 port 52930 Jan 24 08:23:59 prd-ubuntu1804-docker-4c-4g-3995 sshd[1761]: Received disconnect from 10.32.4.5 port 52930:11: Closed due to user request. [preauth] Jan 24 08:23:59 prd-ubuntu1804-docker-4c-4g-3995 sshd[1761]: Disconnected from invalid user jenkins 10.32.4.5 port 52930 [preauth] Jan 24 08:24:01 prd-ubuntu1804-docker-4c-4g-3995 sshd[1794]: Invalid user jenkins from 10.32.4.5 port 52938 Jan 24 08:24:01 prd-ubuntu1804-docker-4c-4g-3995 sshd[1794]: Received disconnect from 10.32.4.5 port 52938:11: Closed due to user request. [preauth] Jan 24 08:24:01 prd-ubuntu1804-docker-4c-4g-3995 sshd[1794]: Disconnected from invalid user jenkins 10.32.4.5 port 52938 [preauth] Jan 24 08:24:02 prd-ubuntu1804-docker-4c-4g-3995 CRON[1797]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:24:02 prd-ubuntu1804-docker-4c-4g-3995 CRON[1797]: pam_unix(cron:session): session closed for user root Jan 24 08:24:03 prd-ubuntu1804-docker-4c-4g-3995 sshd[1806]: Invalid user jenkins from 10.32.4.5 port 52940 Jan 24 08:24:03 prd-ubuntu1804-docker-4c-4g-3995 sshd[1806]: Received disconnect from 10.32.4.5 port 52940:11: Closed due to user request. [preauth] Jan 24 08:24:03 prd-ubuntu1804-docker-4c-4g-3995 sshd[1806]: Disconnected from invalid user jenkins 10.32.4.5 port 52940 [preauth] Jan 24 08:24:04 prd-ubuntu1804-docker-4c-4g-3995 useradd[1822]: new group: name=jenkins, GID=1001 Jan 24 08:24:04 prd-ubuntu1804-docker-4c-4g-3995 useradd[1822]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 24 08:24:04 prd-ubuntu1804-docker-4c-4g-3995 usermod[1829]: add 'jenkins' to group 'docker' Jan 24 08:24:04 prd-ubuntu1804-docker-4c-4g-3995 usermod[1829]: add 'jenkins' to shadow group 'docker' Jan 24 08:24:05 prd-ubuntu1804-docker-4c-4g-3995 sshd[1873]: Accepted publickey for jenkins from 10.32.4.5 port 52942 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 24 08:24:05 prd-ubuntu1804-docker-4c-4g-3995 sshd[1873]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 24 08:24:05 prd-ubuntu1804-docker-4c-4g-3995 systemd-logind[1034]: New session 2 of user jenkins. Jan 24 08:24:05 prd-ubuntu1804-docker-4c-4g-3995 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 24 08:25:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[2427]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:25:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[2427]: pam_unix(cron:session): session closed for user root Jan 24 08:26:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[2844]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:26:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[2844]: pam_unix(cron:session): session closed for user root Jan 24 08:27:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[3137]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:27:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[3137]: pam_unix(cron:session): session closed for user root Jan 24 08:28:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[5756]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:28:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[5756]: pam_unix(cron:session): session closed for user root Jan 24 08:29:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[6368]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:29:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[6368]: pam_unix(cron:session): session closed for user root Jan 24 08:30:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[6768]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:30:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[6768]: pam_unix(cron:session): session closed for user root Jan 24 08:31:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[8235]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:31:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[8235]: pam_unix(cron:session): session closed for user root Jan 24 08:32:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[8610]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 08:32:01 prd-ubuntu1804-docker-4c-4g-3995 CRON[8610]: pam_unix(cron:session): session closed for user root Jan 24 08:32:01 prd-ubuntu1804-docker-4c-4g-3995 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-sample-simplekafkaconsumer-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 24 08:32:01 prd-ubuntu1804-docker-4c-4g-3995 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)