Mar 10 01:07:43 prd-ubuntu1804-docker-4c-4g-8521 passwd[922]: password for 'ubuntu' changed by 'root' Mar 10 01:07:43 prd-ubuntu1804-docker-4c-4g-8521 systemd-logind[973]: Watching system buttons on /dev/input/event0 (Power Button) Mar 10 01:07:43 prd-ubuntu1804-docker-4c-4g-8521 systemd-logind[973]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 10 01:07:43 prd-ubuntu1804-docker-4c-4g-8521 systemd-logind[973]: New seat seat0. Mar 10 01:07:44 prd-ubuntu1804-docker-4c-4g-8521 sshd[1090]: Server listening on 0.0.0.0 port 22. Mar 10 01:07:44 prd-ubuntu1804-docker-4c-4g-8521 sshd[1090]: Server listening on :: port 22. Mar 10 01:07:45 prd-ubuntu1804-docker-4c-4g-8521 sshd[1241]: Did not receive identification string from 10.32.4.5 port 45286 Mar 10 01:07:51 prd-ubuntu1804-docker-4c-4g-8521 sshd[1475]: Invalid user jenkins from 10.32.4.5 port 45294 Mar 10 01:07:51 prd-ubuntu1804-docker-4c-4g-8521 sshd[1475]: Received disconnect from 10.32.4.5 port 45294:11: Closed due to user request. [preauth] Mar 10 01:07:51 prd-ubuntu1804-docker-4c-4g-8521 sshd[1475]: Disconnected from invalid user jenkins 10.32.4.5 port 45294 [preauth] Mar 10 01:07:53 prd-ubuntu1804-docker-4c-4g-8521 sshd[1485]: Invalid user jenkins from 10.32.4.5 port 45296 Mar 10 01:07:53 prd-ubuntu1804-docker-4c-4g-8521 sshd[1485]: Received disconnect from 10.32.4.5 port 45296:11: Closed due to user request. [preauth] Mar 10 01:07:53 prd-ubuntu1804-docker-4c-4g-8521 sshd[1485]: Disconnected from invalid user jenkins 10.32.4.5 port 45296 [preauth] Mar 10 01:07:55 prd-ubuntu1804-docker-4c-4g-8521 sshd[1487]: Invalid user jenkins from 10.32.4.5 port 45300 Mar 10 01:07:55 prd-ubuntu1804-docker-4c-4g-8521 sshd[1487]: Received disconnect from 10.32.4.5 port 45300:11: Closed due to user request. [preauth] Mar 10 01:07:55 prd-ubuntu1804-docker-4c-4g-8521 sshd[1487]: Disconnected from invalid user jenkins 10.32.4.5 port 45300 [preauth] Mar 10 01:07:57 prd-ubuntu1804-docker-4c-4g-8521 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 45302 Mar 10 01:07:57 prd-ubuntu1804-docker-4c-4g-8521 sshd[1489]: Received disconnect from 10.32.4.5 port 45302:11: Closed due to user request. [preauth] Mar 10 01:07:57 prd-ubuntu1804-docker-4c-4g-8521 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 45302 [preauth] Mar 10 01:08:00 prd-ubuntu1804-docker-4c-4g-8521 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 45304 Mar 10 01:08:00 prd-ubuntu1804-docker-4c-4g-8521 sshd[1491]: Received disconnect from 10.32.4.5 port 45304:11: Closed due to user request. [preauth] Mar 10 01:08:00 prd-ubuntu1804-docker-4c-4g-8521 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 45304 [preauth] Mar 10 01:08:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[1494]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:08:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[1494]: pam_unix(cron:session): session closed for user root Mar 10 01:08:02 prd-ubuntu1804-docker-4c-4g-8521 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 45306 Mar 10 01:08:02 prd-ubuntu1804-docker-4c-4g-8521 sshd[1502]: Received disconnect from 10.32.4.5 port 45306:11: Closed due to user request. [preauth] Mar 10 01:08:02 prd-ubuntu1804-docker-4c-4g-8521 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 45306 [preauth] Mar 10 01:08:04 prd-ubuntu1804-docker-4c-4g-8521 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 45308 Mar 10 01:08:04 prd-ubuntu1804-docker-4c-4g-8521 sshd[1504]: Received disconnect from 10.32.4.5 port 45308:11: Closed due to user request. [preauth] Mar 10 01:08:04 prd-ubuntu1804-docker-4c-4g-8521 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 45308 [preauth] Mar 10 01:08:06 prd-ubuntu1804-docker-4c-4g-8521 sshd[1523]: Invalid user jenkins from 10.32.4.5 port 45312 Mar 10 01:08:06 prd-ubuntu1804-docker-4c-4g-8521 sshd[1523]: Received disconnect from 10.32.4.5 port 45312:11: Closed due to user request. [preauth] Mar 10 01:08:06 prd-ubuntu1804-docker-4c-4g-8521 sshd[1523]: Disconnected from invalid user jenkins 10.32.4.5 port 45312 [preauth] Mar 10 01:08:09 prd-ubuntu1804-docker-4c-4g-8521 sshd[1743]: Invalid user jenkins from 10.32.4.5 port 45314 Mar 10 01:08:09 prd-ubuntu1804-docker-4c-4g-8521 sshd[1743]: Received disconnect from 10.32.4.5 port 45314:11: Closed due to user request. [preauth] Mar 10 01:08:09 prd-ubuntu1804-docker-4c-4g-8521 sshd[1743]: Disconnected from invalid user jenkins 10.32.4.5 port 45314 [preauth] Mar 10 01:08:11 prd-ubuntu1804-docker-4c-4g-8521 sshd[1768]: Invalid user jenkins from 10.32.4.5 port 45316 Mar 10 01:08:11 prd-ubuntu1804-docker-4c-4g-8521 sshd[1768]: Received disconnect from 10.32.4.5 port 45316:11: Closed due to user request. [preauth] Mar 10 01:08:11 prd-ubuntu1804-docker-4c-4g-8521 sshd[1768]: Disconnected from invalid user jenkins 10.32.4.5 port 45316 [preauth] Mar 10 01:08:13 prd-ubuntu1804-docker-4c-4g-8521 sshd[1786]: Invalid user jenkins from 10.32.4.5 port 45320 Mar 10 01:08:13 prd-ubuntu1804-docker-4c-4g-8521 sshd[1786]: Received disconnect from 10.32.4.5 port 45320:11: Closed due to user request. [preauth] Mar 10 01:08:13 prd-ubuntu1804-docker-4c-4g-8521 sshd[1786]: Disconnected from invalid user jenkins 10.32.4.5 port 45320 [preauth] Mar 10 01:08:15 prd-ubuntu1804-docker-4c-4g-8521 sshd[1796]: Invalid user jenkins from 10.32.4.5 port 45322 Mar 10 01:08:15 prd-ubuntu1804-docker-4c-4g-8521 sshd[1796]: Received disconnect from 10.32.4.5 port 45322:11: Closed due to user request. [preauth] Mar 10 01:08:15 prd-ubuntu1804-docker-4c-4g-8521 sshd[1796]: Disconnected from invalid user jenkins 10.32.4.5 port 45322 [preauth] Mar 10 01:08:16 prd-ubuntu1804-docker-4c-4g-8521 useradd[1816]: new group: name=jenkins, GID=1001 Mar 10 01:08:16 prd-ubuntu1804-docker-4c-4g-8521 useradd[1816]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 10 01:08:16 prd-ubuntu1804-docker-4c-4g-8521 usermod[1824]: add 'jenkins' to group 'docker' Mar 10 01:08:16 prd-ubuntu1804-docker-4c-4g-8521 usermod[1824]: add 'jenkins' to shadow group 'docker' Mar 10 01:08:18 prd-ubuntu1804-docker-4c-4g-8521 sshd[1870]: Accepted publickey for jenkins from 10.32.4.5 port 45324 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 10 01:08:18 prd-ubuntu1804-docker-4c-4g-8521 sshd[1870]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 10 01:08:18 prd-ubuntu1804-docker-4c-4g-8521 systemd-logind[973]: New session 2 of user jenkins. Mar 10 01:08:18 prd-ubuntu1804-docker-4c-4g-8521 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 10 01:09:02 prd-ubuntu1804-docker-4c-4g-8521 CRON[2390]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:09:02 prd-ubuntu1804-docker-4c-4g-8521 CRON[2390]: pam_unix(cron:session): session closed for user root Mar 10 01:10:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[2419]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:10:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[2419]: pam_unix(cron:session): session closed for user root Mar 10 01:11:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3136]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:11:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3136]: pam_unix(cron:session): session closed for user root Mar 10 01:12:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3280]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:12:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3280]: pam_unix(cron:session): session closed for user root Mar 10 01:13:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3407]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:13:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3407]: pam_unix(cron:session): session closed for user root Mar 10 01:14:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3412]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:14:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3412]: pam_unix(cron:session): session closed for user root Mar 10 01:15:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3562]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:15:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3562]: pam_unix(cron:session): session closed for user root Mar 10 01:16:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3588]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:16:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3588]: pam_unix(cron:session): session closed for user root Mar 10 01:17:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3638]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:17:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3639]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:17:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3638]: pam_unix(cron:session): session closed for user root Mar 10 01:17:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3639]: pam_unix(cron:session): session closed for user root Mar 10 01:18:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3866]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 01:18:01 prd-ubuntu1804-docker-4c-4g-8521 CRON[3866]: pam_unix(cron:session): session closed for user root Mar 10 01:18:31 prd-ubuntu1804-docker-4c-4g-8521 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-nonrtric-controlpanel-docker-merge-g-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 10 01:18:31 prd-ubuntu1804-docker-4c-4g-8521 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)