Mar 5 10:28:45 prd-ubuntu1804-docker-4c-4g-8156 passwd[910]: password for 'ubuntu' changed by 'root' Mar 5 10:28:45 prd-ubuntu1804-docker-4c-4g-8156 systemd-logind[996]: Watching system buttons on /dev/input/event0 (Power Button) Mar 5 10:28:45 prd-ubuntu1804-docker-4c-4g-8156 systemd-logind[996]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 5 10:28:45 prd-ubuntu1804-docker-4c-4g-8156 systemd-logind[996]: New seat seat0. Mar 5 10:28:46 prd-ubuntu1804-docker-4c-4g-8156 sshd[1081]: Server listening on 0.0.0.0 port 22. Mar 5 10:28:46 prd-ubuntu1804-docker-4c-4g-8156 sshd[1081]: Server listening on :: port 22. Mar 5 10:28:48 prd-ubuntu1804-docker-4c-4g-8156 sshd[1388]: Did not receive identification string from 10.32.4.5 port 37258 Mar 5 10:28:52 prd-ubuntu1804-docker-4c-4g-8156 sshd[1441]: Invalid user jenkins from 10.32.4.5 port 37270 Mar 5 10:28:52 prd-ubuntu1804-docker-4c-4g-8156 sshd[1441]: Received disconnect from 10.32.4.5 port 37270:11: Closed due to user request. [preauth] Mar 5 10:28:52 prd-ubuntu1804-docker-4c-4g-8156 sshd[1441]: Disconnected from invalid user jenkins 10.32.4.5 port 37270 [preauth] Mar 5 10:28:54 prd-ubuntu1804-docker-4c-4g-8156 sshd[1460]: Invalid user jenkins from 10.32.4.5 port 37272 Mar 5 10:28:54 prd-ubuntu1804-docker-4c-4g-8156 sshd[1460]: Received disconnect from 10.32.4.5 port 37272:11: Closed due to user request. [preauth] Mar 5 10:28:54 prd-ubuntu1804-docker-4c-4g-8156 sshd[1460]: Disconnected from invalid user jenkins 10.32.4.5 port 37272 [preauth] Mar 5 10:28:56 prd-ubuntu1804-docker-4c-4g-8156 sshd[1462]: Invalid user jenkins from 10.32.4.5 port 37274 Mar 5 10:28:56 prd-ubuntu1804-docker-4c-4g-8156 sshd[1462]: Received disconnect from 10.32.4.5 port 37274:11: Closed due to user request. [preauth] Mar 5 10:28:56 prd-ubuntu1804-docker-4c-4g-8156 sshd[1462]: Disconnected from invalid user jenkins 10.32.4.5 port 37274 [preauth] Mar 5 10:28:58 prd-ubuntu1804-docker-4c-4g-8156 sshd[1464]: Invalid user jenkins from 10.32.4.5 port 37278 Mar 5 10:28:58 prd-ubuntu1804-docker-4c-4g-8156 sshd[1464]: Received disconnect from 10.32.4.5 port 37278:11: Closed due to user request. [preauth] Mar 5 10:28:58 prd-ubuntu1804-docker-4c-4g-8156 sshd[1464]: Disconnected from invalid user jenkins 10.32.4.5 port 37278 [preauth] Mar 5 10:29:00 prd-ubuntu1804-docker-4c-4g-8156 sshd[1466]: Invalid user jenkins from 10.32.4.5 port 37280 Mar 5 10:29:00 prd-ubuntu1804-docker-4c-4g-8156 sshd[1466]: Received disconnect from 10.32.4.5 port 37280:11: Closed due to user request. [preauth] Mar 5 10:29:00 prd-ubuntu1804-docker-4c-4g-8156 sshd[1466]: Disconnected from invalid user jenkins 10.32.4.5 port 37280 [preauth] Mar 5 10:29:01 prd-ubuntu1804-docker-4c-4g-8156 CRON[1468]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 5 10:29:01 prd-ubuntu1804-docker-4c-4g-8156 CRON[1468]: pam_unix(cron:session): session closed for user root Mar 5 10:29:02 prd-ubuntu1804-docker-4c-4g-8156 sshd[1478]: Invalid user jenkins from 10.32.4.5 port 37282 Mar 5 10:29:02 prd-ubuntu1804-docker-4c-4g-8156 sshd[1478]: Received disconnect from 10.32.4.5 port 37282:11: Closed due to user request. [preauth] Mar 5 10:29:02 prd-ubuntu1804-docker-4c-4g-8156 sshd[1478]: Disconnected from invalid user jenkins 10.32.4.5 port 37282 [preauth] Mar 5 10:29:04 prd-ubuntu1804-docker-4c-4g-8156 sshd[1480]: Invalid user jenkins from 10.32.4.5 port 37284 Mar 5 10:29:04 prd-ubuntu1804-docker-4c-4g-8156 sshd[1480]: Received disconnect from 10.32.4.5 port 37284:11: Closed due to user request. [preauth] Mar 5 10:29:04 prd-ubuntu1804-docker-4c-4g-8156 sshd[1480]: Disconnected from invalid user jenkins 10.32.4.5 port 37284 [preauth] Mar 5 10:29:07 prd-ubuntu1804-docker-4c-4g-8156 sshd[1482]: Invalid user jenkins from 10.32.4.5 port 37286 Mar 5 10:29:07 prd-ubuntu1804-docker-4c-4g-8156 sshd[1482]: Received disconnect from 10.32.4.5 port 37286:11: Closed due to user request. [preauth] Mar 5 10:29:07 prd-ubuntu1804-docker-4c-4g-8156 sshd[1482]: Disconnected from invalid user jenkins 10.32.4.5 port 37286 [preauth] Mar 5 10:29:09 prd-ubuntu1804-docker-4c-4g-8156 sshd[1648]: Invalid user jenkins from 10.32.4.5 port 37290 Mar 5 10:29:09 prd-ubuntu1804-docker-4c-4g-8156 sshd[1648]: Received disconnect from 10.32.4.5 port 37290:11: Closed due to user request. [preauth] Mar 5 10:29:09 prd-ubuntu1804-docker-4c-4g-8156 sshd[1648]: Disconnected from invalid user jenkins 10.32.4.5 port 37290 [preauth] Mar 5 10:29:11 prd-ubuntu1804-docker-4c-4g-8156 sshd[1724]: Invalid user jenkins from 10.32.4.5 port 37292 Mar 5 10:29:11 prd-ubuntu1804-docker-4c-4g-8156 sshd[1724]: Received disconnect from 10.32.4.5 port 37292:11: Closed due to user request. [preauth] Mar 5 10:29:11 prd-ubuntu1804-docker-4c-4g-8156 sshd[1724]: Disconnected from invalid user jenkins 10.32.4.5 port 37292 [preauth] Mar 5 10:29:13 prd-ubuntu1804-docker-4c-4g-8156 sshd[1757]: Invalid user jenkins from 10.32.4.5 port 37296 Mar 5 10:29:13 prd-ubuntu1804-docker-4c-4g-8156 sshd[1757]: Received disconnect from 10.32.4.5 port 37296:11: Closed due to user request. [preauth] Mar 5 10:29:13 prd-ubuntu1804-docker-4c-4g-8156 sshd[1757]: Disconnected from invalid user jenkins 10.32.4.5 port 37296 [preauth] Mar 5 10:29:15 prd-ubuntu1804-docker-4c-4g-8156 sshd[1761]: Invalid user jenkins from 10.32.4.5 port 37298 Mar 5 10:29:16 prd-ubuntu1804-docker-4c-4g-8156 sshd[1761]: Received disconnect from 10.32.4.5 port 37298:11: Closed due to user request. [preauth] Mar 5 10:29:16 prd-ubuntu1804-docker-4c-4g-8156 sshd[1761]: Disconnected from invalid user jenkins 10.32.4.5 port 37298 [preauth] Mar 5 10:29:17 prd-ubuntu1804-docker-4c-4g-8156 useradd[1777]: new group: name=jenkins, GID=1001 Mar 5 10:29:17 prd-ubuntu1804-docker-4c-4g-8156 useradd[1777]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 5 10:29:17 prd-ubuntu1804-docker-4c-4g-8156 usermod[1786]: add 'jenkins' to group 'docker' Mar 5 10:29:17 prd-ubuntu1804-docker-4c-4g-8156 usermod[1786]: add 'jenkins' to shadow group 'docker' Mar 5 10:29:18 prd-ubuntu1804-docker-4c-4g-8156 sshd[1830]: Accepted publickey for jenkins from 10.32.4.5 port 37300 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 5 10:29:18 prd-ubuntu1804-docker-4c-4g-8156 sshd[1830]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 5 10:29:18 prd-ubuntu1804-docker-4c-4g-8156 systemd-logind[996]: New session 2 of user jenkins. Mar 5 10:29:18 prd-ubuntu1804-docker-4c-4g-8156 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 5 10:30:02 prd-ubuntu1804-docker-4c-4g-8156 CRON[2393]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 5 10:30:02 prd-ubuntu1804-docker-4c-4g-8156 CRON[2393]: pam_unix(cron:session): session closed for user root Mar 5 10:31:01 prd-ubuntu1804-docker-4c-4g-8156 CRON[2593]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 5 10:31:01 prd-ubuntu1804-docker-4c-4g-8156 CRON[2593]: pam_unix(cron:session): session closed for user root Mar 5 10:31:15 prd-ubuntu1804-docker-4c-4g-8156 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-nonrtric-controlpanel-cli-sonar ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 5 10:31:15 prd-ubuntu1804-docker-4c-4g-8156 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)