Jan 18 10:28:37 prd-ubuntu1804-docker-4c-4g-3566 passwd[926]: password for 'ubuntu' changed by 'root' Jan 18 10:28:37 prd-ubuntu1804-docker-4c-4g-3566 systemd-logind[1095]: Watching system buttons on /dev/input/event0 (Power Button) Jan 18 10:28:37 prd-ubuntu1804-docker-4c-4g-3566 systemd-logind[1095]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 18 10:28:37 prd-ubuntu1804-docker-4c-4g-3566 systemd-logind[1095]: New seat seat0. Jan 18 10:28:38 prd-ubuntu1804-docker-4c-4g-3566 sshd[1276]: Server listening on 0.0.0.0 port 22. Jan 18 10:28:38 prd-ubuntu1804-docker-4c-4g-3566 sshd[1276]: Server listening on :: port 22. Jan 18 10:28:38 prd-ubuntu1804-docker-4c-4g-3566 sshd[1282]: Did not receive identification string from 10.32.4.5 port 53390 Jan 18 10:28:41 prd-ubuntu1804-docker-4c-4g-3566 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 53392 Jan 18 10:28:42 prd-ubuntu1804-docker-4c-4g-3566 sshd[1502]: Received disconnect from 10.32.4.5 port 53392:11: Closed due to user request. [preauth] Jan 18 10:28:42 prd-ubuntu1804-docker-4c-4g-3566 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 53392 [preauth] Jan 18 10:28:44 prd-ubuntu1804-docker-4c-4g-3566 sshd[1535]: Invalid user jenkins from 10.32.4.5 port 53394 Jan 18 10:28:44 prd-ubuntu1804-docker-4c-4g-3566 sshd[1535]: Received disconnect from 10.32.4.5 port 53394:11: Closed due to user request. [preauth] Jan 18 10:28:44 prd-ubuntu1804-docker-4c-4g-3566 sshd[1535]: Disconnected from invalid user jenkins 10.32.4.5 port 53394 [preauth] Jan 18 10:28:46 prd-ubuntu1804-docker-4c-4g-3566 sshd[1553]: Invalid user jenkins from 10.32.4.5 port 53396 Jan 18 10:28:46 prd-ubuntu1804-docker-4c-4g-3566 sshd[1553]: Received disconnect from 10.32.4.5 port 53396:11: Closed due to user request. [preauth] Jan 18 10:28:46 prd-ubuntu1804-docker-4c-4g-3566 sshd[1553]: Disconnected from invalid user jenkins 10.32.4.5 port 53396 [preauth] Jan 18 10:28:48 prd-ubuntu1804-docker-4c-4g-3566 sshd[1555]: Invalid user jenkins from 10.32.4.5 port 53400 Jan 18 10:28:48 prd-ubuntu1804-docker-4c-4g-3566 sshd[1555]: Received disconnect from 10.32.4.5 port 53400:11: Closed due to user request. [preauth] Jan 18 10:28:48 prd-ubuntu1804-docker-4c-4g-3566 sshd[1555]: Disconnected from invalid user jenkins 10.32.4.5 port 53400 [preauth] Jan 18 10:28:50 prd-ubuntu1804-docker-4c-4g-3566 sshd[1578]: Invalid user jenkins from 10.32.4.5 port 53402 Jan 18 10:28:50 prd-ubuntu1804-docker-4c-4g-3566 sshd[1578]: Received disconnect from 10.32.4.5 port 53402:11: Closed due to user request. [preauth] Jan 18 10:28:50 prd-ubuntu1804-docker-4c-4g-3566 sshd[1578]: Disconnected from invalid user jenkins 10.32.4.5 port 53402 [preauth] Jan 18 10:28:52 prd-ubuntu1804-docker-4c-4g-3566 sshd[1580]: Invalid user jenkins from 10.32.4.5 port 53408 Jan 18 10:28:52 prd-ubuntu1804-docker-4c-4g-3566 sshd[1580]: Received disconnect from 10.32.4.5 port 53408:11: Closed due to user request. [preauth] Jan 18 10:28:52 prd-ubuntu1804-docker-4c-4g-3566 sshd[1580]: Disconnected from invalid user jenkins 10.32.4.5 port 53408 [preauth] Jan 18 10:28:54 prd-ubuntu1804-docker-4c-4g-3566 sshd[1582]: Invalid user jenkins from 10.32.4.5 port 53410 Jan 18 10:28:54 prd-ubuntu1804-docker-4c-4g-3566 sshd[1582]: Received disconnect from 10.32.4.5 port 53410:11: Closed due to user request. [preauth] Jan 18 10:28:54 prd-ubuntu1804-docker-4c-4g-3566 sshd[1582]: Disconnected from invalid user jenkins 10.32.4.5 port 53410 [preauth] Jan 18 10:28:56 prd-ubuntu1804-docker-4c-4g-3566 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 53412 Jan 18 10:28:56 prd-ubuntu1804-docker-4c-4g-3566 sshd[1584]: Received disconnect from 10.32.4.5 port 53412:11: Closed due to user request. [preauth] Jan 18 10:28:56 prd-ubuntu1804-docker-4c-4g-3566 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 53412 [preauth] Jan 18 10:28:58 prd-ubuntu1804-docker-4c-4g-3566 sshd[1586]: Invalid user jenkins from 10.32.4.5 port 53414 Jan 18 10:28:58 prd-ubuntu1804-docker-4c-4g-3566 sshd[1586]: Received disconnect from 10.32.4.5 port 53414:11: Closed due to user request. [preauth] Jan 18 10:28:58 prd-ubuntu1804-docker-4c-4g-3566 sshd[1586]: Disconnected from invalid user jenkins 10.32.4.5 port 53414 [preauth] Jan 18 10:29:01 prd-ubuntu1804-docker-4c-4g-3566 sshd[1754]: Invalid user jenkins from 10.32.4.5 port 53422 Jan 18 10:29:01 prd-ubuntu1804-docker-4c-4g-3566 sshd[1754]: Received disconnect from 10.32.4.5 port 53422:11: Closed due to user request. [preauth] Jan 18 10:29:01 prd-ubuntu1804-docker-4c-4g-3566 sshd[1754]: Disconnected from invalid user jenkins 10.32.4.5 port 53422 [preauth] Jan 18 10:29:02 prd-ubuntu1804-docker-4c-4g-3566 CRON[1796]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 10:29:02 prd-ubuntu1804-docker-4c-4g-3566 CRON[1796]: pam_unix(cron:session): session closed for user root Jan 18 10:29:03 prd-ubuntu1804-docker-4c-4g-3566 sshd[1833]: Invalid user jenkins from 10.32.4.5 port 53424 Jan 18 10:29:03 prd-ubuntu1804-docker-4c-4g-3566 sshd[1833]: Received disconnect from 10.32.4.5 port 53424:11: Closed due to user request. [preauth] Jan 18 10:29:03 prd-ubuntu1804-docker-4c-4g-3566 sshd[1833]: Disconnected from invalid user jenkins 10.32.4.5 port 53424 [preauth] Jan 18 10:29:06 prd-ubuntu1804-docker-4c-4g-3566 sshd[1870]: Invalid user jenkins from 10.32.4.5 port 53426 Jan 18 10:29:06 prd-ubuntu1804-docker-4c-4g-3566 sshd[1870]: Received disconnect from 10.32.4.5 port 53426:11: Closed due to user request. [preauth] Jan 18 10:29:06 prd-ubuntu1804-docker-4c-4g-3566 sshd[1870]: Disconnected from invalid user jenkins 10.32.4.5 port 53426 [preauth] Jan 18 10:29:08 prd-ubuntu1804-docker-4c-4g-3566 sshd[1874]: Invalid user jenkins from 10.32.4.5 port 53430 Jan 18 10:29:08 prd-ubuntu1804-docker-4c-4g-3566 sshd[1874]: Received disconnect from 10.32.4.5 port 53430:11: Closed due to user request. [preauth] Jan 18 10:29:08 prd-ubuntu1804-docker-4c-4g-3566 sshd[1874]: Disconnected from invalid user jenkins 10.32.4.5 port 53430 [preauth] Jan 18 10:29:10 prd-ubuntu1804-docker-4c-4g-3566 useradd[1901]: new group: name=jenkins, GID=1001 Jan 18 10:29:10 prd-ubuntu1804-docker-4c-4g-3566 useradd[1901]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 18 10:29:10 prd-ubuntu1804-docker-4c-4g-3566 usermod[1910]: add 'jenkins' to group 'docker' Jan 18 10:29:10 prd-ubuntu1804-docker-4c-4g-3566 usermod[1910]: add 'jenkins' to shadow group 'docker' Jan 18 10:29:10 prd-ubuntu1804-docker-4c-4g-3566 sshd[1904]: Received disconnect from 10.32.4.5 port 53432:11: Closed due to user request. [preauth] Jan 18 10:29:10 prd-ubuntu1804-docker-4c-4g-3566 sshd[1904]: Disconnected from authenticating user jenkins 10.32.4.5 port 53432 [preauth] Jan 18 10:29:12 prd-ubuntu1804-docker-4c-4g-3566 sshd[1953]: Accepted publickey for jenkins from 10.32.4.5 port 53434 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 18 10:29:12 prd-ubuntu1804-docker-4c-4g-3566 sshd[1953]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 18 10:29:12 prd-ubuntu1804-docker-4c-4g-3566 systemd-logind[1095]: New session 2 of user jenkins. Jan 18 10:29:12 prd-ubuntu1804-docker-4c-4g-3566 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 18 10:30:01 prd-ubuntu1804-docker-4c-4g-3566 CRON[2503]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 10:30:01 prd-ubuntu1804-docker-4c-4g-3566 CRON[2503]: pam_unix(cron:session): session closed for user root Jan 18 10:31:01 prd-ubuntu1804-docker-4c-4g-3566 CRON[2703]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 10:31:01 prd-ubuntu1804-docker-4c-4g-3566 CRON[2703]: pam_unix(cron:session): session closed for user root Jan 18 10:31:12 prd-ubuntu1804-docker-4c-4g-3566 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-nonrtric-controlpanel-cli-sonar ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 18 10:31:12 prd-ubuntu1804-docker-4c-4g-3566 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)