Oct 15 12:29:53 prd-ubuntu1804-docker-4c-4g-6520 passwd[938]: password for 'ubuntu' changed by 'root' Oct 15 12:29:53 prd-ubuntu1804-docker-4c-4g-6520 systemd-logind[1096]: Watching system buttons on /dev/input/event0 (Power Button) Oct 15 12:29:53 prd-ubuntu1804-docker-4c-4g-6520 systemd-logind[1096]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 15 12:29:53 prd-ubuntu1804-docker-4c-4g-6520 systemd-logind[1096]: New seat seat0. Oct 15 12:29:53 prd-ubuntu1804-docker-4c-4g-6520 sshd[1260]: Server listening on 0.0.0.0 port 22. Oct 15 12:29:53 prd-ubuntu1804-docker-4c-4g-6520 sshd[1260]: Server listening on :: port 22. Oct 15 12:29:57 prd-ubuntu1804-docker-4c-4g-6520 sshd[1481]: Did not receive identification string from 10.32.4.5 port 48258 Oct 15 12:30:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[1531]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:30:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[1531]: pam_unix(cron:session): session closed for user root Oct 15 12:30:06 prd-ubuntu1804-docker-4c-4g-6520 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 48284 Oct 15 12:30:06 prd-ubuntu1804-docker-4c-4g-6520 sshd[1546]: Received disconnect from 10.32.4.5 port 48284:11: Closed due to user request. [preauth] Oct 15 12:30:06 prd-ubuntu1804-docker-4c-4g-6520 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 48284 [preauth] Oct 15 12:30:08 prd-ubuntu1804-docker-4c-4g-6520 sshd[1550]: Invalid user jenkins from 10.32.4.5 port 48288 Oct 15 12:30:08 prd-ubuntu1804-docker-4c-4g-6520 sshd[1550]: Received disconnect from 10.32.4.5 port 48288:11: Closed due to user request. [preauth] Oct 15 12:30:08 prd-ubuntu1804-docker-4c-4g-6520 sshd[1550]: Disconnected from invalid user jenkins 10.32.4.5 port 48288 [preauth] Oct 15 12:30:10 prd-ubuntu1804-docker-4c-4g-6520 sshd[1552]: Invalid user jenkins from 10.32.4.5 port 48292 Oct 15 12:30:11 prd-ubuntu1804-docker-4c-4g-6520 sshd[1552]: Received disconnect from 10.32.4.5 port 48292:11: Closed due to user request. [preauth] Oct 15 12:30:11 prd-ubuntu1804-docker-4c-4g-6520 sshd[1552]: Disconnected from invalid user jenkins 10.32.4.5 port 48292 [preauth] Oct 15 12:30:13 prd-ubuntu1804-docker-4c-4g-6520 sshd[1554]: Invalid user jenkins from 10.32.4.5 port 48294 Oct 15 12:30:13 prd-ubuntu1804-docker-4c-4g-6520 sshd[1554]: Received disconnect from 10.32.4.5 port 48294:11: Closed due to user request. [preauth] Oct 15 12:30:13 prd-ubuntu1804-docker-4c-4g-6520 sshd[1554]: Disconnected from invalid user jenkins 10.32.4.5 port 48294 [preauth] Oct 15 12:30:15 prd-ubuntu1804-docker-4c-4g-6520 sshd[1577]: Invalid user jenkins from 10.32.4.5 port 48296 Oct 15 12:30:15 prd-ubuntu1804-docker-4c-4g-6520 sshd[1577]: Received disconnect from 10.32.4.5 port 48296:11: Closed due to user request. [preauth] Oct 15 12:30:15 prd-ubuntu1804-docker-4c-4g-6520 sshd[1577]: Disconnected from invalid user jenkins 10.32.4.5 port 48296 [preauth] Oct 15 12:30:17 prd-ubuntu1804-docker-4c-4g-6520 sshd[1778]: Invalid user jenkins from 10.32.4.5 port 48298 Oct 15 12:30:17 prd-ubuntu1804-docker-4c-4g-6520 sshd[1778]: Received disconnect from 10.32.4.5 port 48298:11: Closed due to user request. [preauth] Oct 15 12:30:17 prd-ubuntu1804-docker-4c-4g-6520 sshd[1778]: Disconnected from invalid user jenkins 10.32.4.5 port 48298 [preauth] Oct 15 12:30:19 prd-ubuntu1804-docker-4c-4g-6520 sshd[1822]: Invalid user jenkins from 10.32.4.5 port 48314 Oct 15 12:30:19 prd-ubuntu1804-docker-4c-4g-6520 sshd[1822]: Received disconnect from 10.32.4.5 port 48314:11: Closed due to user request. [preauth] Oct 15 12:30:19 prd-ubuntu1804-docker-4c-4g-6520 sshd[1822]: Disconnected from invalid user jenkins 10.32.4.5 port 48314 [preauth] Oct 15 12:30:21 prd-ubuntu1804-docker-4c-4g-6520 sshd[1841]: Invalid user jenkins from 10.32.4.5 port 48316 Oct 15 12:30:21 prd-ubuntu1804-docker-4c-4g-6520 sshd[1841]: Received disconnect from 10.32.4.5 port 48316:11: Closed due to user request. [preauth] Oct 15 12:30:21 prd-ubuntu1804-docker-4c-4g-6520 sshd[1841]: Disconnected from invalid user jenkins 10.32.4.5 port 48316 [preauth] Oct 15 12:30:24 prd-ubuntu1804-docker-4c-4g-6520 sshd[1845]: Invalid user jenkins from 10.32.4.5 port 48320 Oct 15 12:30:24 prd-ubuntu1804-docker-4c-4g-6520 sshd[1845]: Received disconnect from 10.32.4.5 port 48320:11: Closed due to user request. [preauth] Oct 15 12:30:24 prd-ubuntu1804-docker-4c-4g-6520 sshd[1845]: Disconnected from invalid user jenkins 10.32.4.5 port 48320 [preauth] Oct 15 12:30:25 prd-ubuntu1804-docker-4c-4g-6520 useradd[1872]: new group: name=jenkins, GID=1001 Oct 15 12:30:25 prd-ubuntu1804-docker-4c-4g-6520 useradd[1872]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 15 12:30:25 prd-ubuntu1804-docker-4c-4g-6520 usermod[1879]: add 'jenkins' to group 'docker' Oct 15 12:30:25 prd-ubuntu1804-docker-4c-4g-6520 usermod[1879]: add 'jenkins' to shadow group 'docker' Oct 15 12:30:26 prd-ubuntu1804-docker-4c-4g-6520 sshd[1926]: Accepted publickey for jenkins from 10.32.4.5 port 48322 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 15 12:30:26 prd-ubuntu1804-docker-4c-4g-6520 sshd[1926]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 15 12:30:26 prd-ubuntu1804-docker-4c-4g-6520 systemd-logind[1096]: New session 2 of user jenkins. Oct 15 12:30:26 prd-ubuntu1804-docker-4c-4g-6520 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 15 12:31:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[2452]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:31:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[2452]: pam_unix(cron:session): session closed for user root Oct 15 12:32:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[2503]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:32:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[2503]: pam_unix(cron:session): session closed for user root Oct 15 12:33:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[3035]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:33:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[3035]: pam_unix(cron:session): session closed for user root Oct 15 12:34:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[3224]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:34:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[3224]: pam_unix(cron:session): session closed for user root Oct 15 12:35:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[5847]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:35:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[5847]: pam_unix(cron:session): session closed for user root Oct 15 12:36:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[6364]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:36:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[6364]: pam_unix(cron:session): session closed for user root Oct 15 12:37:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[6675]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:37:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[6675]: pam_unix(cron:session): session closed for user root Oct 15 12:38:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[7542]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:38:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[7542]: pam_unix(cron:session): session closed for user root Oct 15 12:39:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[8498]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 15 12:39:01 prd-ubuntu1804-docker-4c-4g-6520 CRON[8498]: pam_unix(cron:session): session closed for user root Oct 15 12:39:32 prd-ubuntu1804-docker-4c-4g-6520 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-sample-simplekafkaproducer-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 15 12:39:32 prd-ubuntu1804-docker-4c-4g-6520 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)