Oct 28 01:07:45 prd-ubuntu1804-docker-4c-4g-7552 passwd[946]: password for 'ubuntu' changed by 'root' Oct 28 01:07:46 prd-ubuntu1804-docker-4c-4g-7552 systemd-logind[1098]: Watching system buttons on /dev/input/event0 (Power Button) Oct 28 01:07:46 prd-ubuntu1804-docker-4c-4g-7552 systemd-logind[1098]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 28 01:07:46 prd-ubuntu1804-docker-4c-4g-7552 systemd-logind[1098]: New seat seat0. Oct 28 01:07:46 prd-ubuntu1804-docker-4c-4g-7552 sshd[1287]: Server listening on 0.0.0.0 port 22. Oct 28 01:07:46 prd-ubuntu1804-docker-4c-4g-7552 sshd[1287]: Server listening on :: port 22. Oct 28 01:07:49 prd-ubuntu1804-docker-4c-4g-7552 sshd[1477]: Did not receive identification string from 10.32.4.5 port 33898 Oct 28 01:07:55 prd-ubuntu1804-docker-4c-4g-7552 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 33902 Oct 28 01:07:55 prd-ubuntu1804-docker-4c-4g-7552 sshd[1536]: Received disconnect from 10.32.4.5 port 33902:11: Closed due to user request. [preauth] Oct 28 01:07:55 prd-ubuntu1804-docker-4c-4g-7552 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 33902 [preauth] Oct 28 01:07:57 prd-ubuntu1804-docker-4c-4g-7552 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 33904 Oct 28 01:07:57 prd-ubuntu1804-docker-4c-4g-7552 sshd[1540]: Received disconnect from 10.32.4.5 port 33904:11: Closed due to user request. [preauth] Oct 28 01:07:57 prd-ubuntu1804-docker-4c-4g-7552 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 33904 [preauth] Oct 28 01:07:59 prd-ubuntu1804-docker-4c-4g-7552 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 33912 Oct 28 01:07:59 prd-ubuntu1804-docker-4c-4g-7552 sshd[1542]: Received disconnect from 10.32.4.5 port 33912:11: Closed due to user request. [preauth] Oct 28 01:07:59 prd-ubuntu1804-docker-4c-4g-7552 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 33912 [preauth] Oct 28 01:08:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[1544]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:08:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[1544]: pam_unix(cron:session): session closed for user root Oct 28 01:08:02 prd-ubuntu1804-docker-4c-4g-7552 sshd[1553]: Invalid user jenkins from 10.32.4.5 port 33914 Oct 28 01:08:02 prd-ubuntu1804-docker-4c-4g-7552 sshd[1553]: Received disconnect from 10.32.4.5 port 33914:11: Closed due to user request. [preauth] Oct 28 01:08:02 prd-ubuntu1804-docker-4c-4g-7552 sshd[1553]: Disconnected from invalid user jenkins 10.32.4.5 port 33914 [preauth] Oct 28 01:08:04 prd-ubuntu1804-docker-4c-4g-7552 sshd[1555]: Invalid user jenkins from 10.32.4.5 port 33916 Oct 28 01:08:04 prd-ubuntu1804-docker-4c-4g-7552 sshd[1555]: Received disconnect from 10.32.4.5 port 33916:11: Closed due to user request. [preauth] Oct 28 01:08:04 prd-ubuntu1804-docker-4c-4g-7552 sshd[1555]: Disconnected from invalid user jenkins 10.32.4.5 port 33916 [preauth] Oct 28 01:08:06 prd-ubuntu1804-docker-4c-4g-7552 sshd[1557]: Invalid user jenkins from 10.32.4.5 port 33924 Oct 28 01:08:06 prd-ubuntu1804-docker-4c-4g-7552 sshd[1557]: Received disconnect from 10.32.4.5 port 33924:11: Closed due to user request. [preauth] Oct 28 01:08:06 prd-ubuntu1804-docker-4c-4g-7552 sshd[1557]: Disconnected from invalid user jenkins 10.32.4.5 port 33924 [preauth] Oct 28 01:08:08 prd-ubuntu1804-docker-4c-4g-7552 sshd[1613]: Invalid user jenkins from 10.32.4.5 port 33928 Oct 28 01:08:08 prd-ubuntu1804-docker-4c-4g-7552 sshd[1613]: Received disconnect from 10.32.4.5 port 33928:11: Closed due to user request. [preauth] Oct 28 01:08:08 prd-ubuntu1804-docker-4c-4g-7552 sshd[1613]: Disconnected from invalid user jenkins 10.32.4.5 port 33928 [preauth] Oct 28 01:08:11 prd-ubuntu1804-docker-4c-4g-7552 sshd[1796]: Invalid user jenkins from 10.32.4.5 port 33930 Oct 28 01:08:11 prd-ubuntu1804-docker-4c-4g-7552 sshd[1796]: Received disconnect from 10.32.4.5 port 33930:11: Closed due to user request. [preauth] Oct 28 01:08:11 prd-ubuntu1804-docker-4c-4g-7552 sshd[1796]: Disconnected from invalid user jenkins 10.32.4.5 port 33930 [preauth] Oct 28 01:08:13 prd-ubuntu1804-docker-4c-4g-7552 sshd[1832]: Invalid user jenkins from 10.32.4.5 port 33932 Oct 28 01:08:13 prd-ubuntu1804-docker-4c-4g-7552 sshd[1832]: Received disconnect from 10.32.4.5 port 33932:11: Closed due to user request. [preauth] Oct 28 01:08:13 prd-ubuntu1804-docker-4c-4g-7552 sshd[1832]: Disconnected from invalid user jenkins 10.32.4.5 port 33932 [preauth] Oct 28 01:08:16 prd-ubuntu1804-docker-4c-4g-7552 sshd[1840]: Invalid user jenkins from 10.32.4.5 port 33934 Oct 28 01:08:16 prd-ubuntu1804-docker-4c-4g-7552 sshd[1840]: Received disconnect from 10.32.4.5 port 33934:11: Closed due to user request. [preauth] Oct 28 01:08:16 prd-ubuntu1804-docker-4c-4g-7552 sshd[1840]: Disconnected from invalid user jenkins 10.32.4.5 port 33934 [preauth] Oct 28 01:08:18 prd-ubuntu1804-docker-4c-4g-7552 sshd[1856]: Invalid user jenkins from 10.32.4.5 port 33936 Oct 28 01:08:18 prd-ubuntu1804-docker-4c-4g-7552 sshd[1856]: Received disconnect from 10.32.4.5 port 33936:11: Closed due to user request. [preauth] Oct 28 01:08:18 prd-ubuntu1804-docker-4c-4g-7552 sshd[1856]: Disconnected from invalid user jenkins 10.32.4.5 port 33936 [preauth] Oct 28 01:08:18 prd-ubuntu1804-docker-4c-4g-7552 useradd[1868]: new group: name=jenkins, GID=1001 Oct 28 01:08:18 prd-ubuntu1804-docker-4c-4g-7552 useradd[1868]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 28 01:08:18 prd-ubuntu1804-docker-4c-4g-7552 usermod[1875]: add 'jenkins' to group 'docker' Oct 28 01:08:18 prd-ubuntu1804-docker-4c-4g-7552 usermod[1875]: add 'jenkins' to shadow group 'docker' Oct 28 01:08:20 prd-ubuntu1804-docker-4c-4g-7552 sshd[1920]: Accepted publickey for jenkins from 10.32.4.5 port 33938 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 28 01:08:20 prd-ubuntu1804-docker-4c-4g-7552 sshd[1920]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 28 01:08:20 prd-ubuntu1804-docker-4c-4g-7552 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 28 01:08:20 prd-ubuntu1804-docker-4c-4g-7552 systemd-logind[1098]: New session 2 of user jenkins. Oct 28 01:09:02 prd-ubuntu1804-docker-4c-4g-7552 CRON[2436]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:09:02 prd-ubuntu1804-docker-4c-4g-7552 CRON[2436]: pam_unix(cron:session): session closed for user root Oct 28 01:10:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[2497]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:10:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[2497]: pam_unix(cron:session): session closed for user root Oct 28 01:11:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3214]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:11:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3214]: pam_unix(cron:session): session closed for user root Oct 28 01:12:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3337]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:12:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3337]: pam_unix(cron:session): session closed for user root Oct 28 01:13:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3503]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:13:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3503]: pam_unix(cron:session): session closed for user root Oct 28 01:14:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3508]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:14:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3508]: pam_unix(cron:session): session closed for user root Oct 28 01:15:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3664]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:15:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3664]: pam_unix(cron:session): session closed for user root Oct 28 01:16:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3692]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:16:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3692]: pam_unix(cron:session): session closed for user root Oct 28 01:17:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3737]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:17:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3738]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:17:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3737]: pam_unix(cron:session): session closed for user root Oct 28 01:17:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3738]: pam_unix(cron:session): session closed for user root Oct 28 01:18:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3967]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 28 01:18:01 prd-ubuntu1804-docker-4c-4g-7552 CRON[3967]: pam_unix(cron:session): session closed for user root Oct 28 01:18:25 prd-ubuntu1804-docker-4c-4g-7552 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-nonrtric-controlpanel-docker-merge-g-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 28 01:18:25 prd-ubuntu1804-docker-4c-4g-7552 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)