Jun 8 04:29:43 prd-ubuntu1804-docker-4c-4g-2920 passwd[923]: password for 'ubuntu' changed by 'root' Jun 8 04:29:43 prd-ubuntu1804-docker-4c-4g-2920 systemd-logind[958]: Watching system buttons on /dev/input/event0 (Power Button) Jun 8 04:29:43 prd-ubuntu1804-docker-4c-4g-2920 systemd-logind[958]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 8 04:29:43 prd-ubuntu1804-docker-4c-4g-2920 systemd-logind[958]: New seat seat0. Jun 8 04:29:43 prd-ubuntu1804-docker-4c-4g-2920 sshd[1062]: Server listening on 0.0.0.0 port 22. Jun 8 04:29:43 prd-ubuntu1804-docker-4c-4g-2920 sshd[1062]: Server listening on :: port 22. Jun 8 04:29:48 prd-ubuntu1804-docker-4c-4g-2920 sshd[1411]: Did not receive identification string from 10.32.4.5 port 48484 Jun 8 04:29:51 prd-ubuntu1804-docker-4c-4g-2920 sshd[1430]: Invalid user jenkins from 10.32.4.5 port 48492 Jun 8 04:29:51 prd-ubuntu1804-docker-4c-4g-2920 sshd[1430]: Received disconnect from 10.32.4.5 port 48492:11: Closed due to user request. [preauth] Jun 8 04:29:51 prd-ubuntu1804-docker-4c-4g-2920 sshd[1430]: Disconnected from invalid user jenkins 10.32.4.5 port 48492 [preauth] Jun 8 04:29:53 prd-ubuntu1804-docker-4c-4g-2920 sshd[1434]: Invalid user jenkins from 10.32.4.5 port 48494 Jun 8 04:29:53 prd-ubuntu1804-docker-4c-4g-2920 sshd[1434]: Received disconnect from 10.32.4.5 port 48494:11: Closed due to user request. [preauth] Jun 8 04:29:53 prd-ubuntu1804-docker-4c-4g-2920 sshd[1434]: Disconnected from invalid user jenkins 10.32.4.5 port 48494 [preauth] Jun 8 04:29:55 prd-ubuntu1804-docker-4c-4g-2920 sshd[1436]: Invalid user jenkins from 10.32.4.5 port 48498 Jun 8 04:29:55 prd-ubuntu1804-docker-4c-4g-2920 sshd[1436]: Received disconnect from 10.32.4.5 port 48498:11: Closed due to user request. [preauth] Jun 8 04:29:55 prd-ubuntu1804-docker-4c-4g-2920 sshd[1436]: Disconnected from invalid user jenkins 10.32.4.5 port 48498 [preauth] Jun 8 04:29:57 prd-ubuntu1804-docker-4c-4g-2920 sshd[1438]: Invalid user jenkins from 10.32.4.5 port 48500 Jun 8 04:29:57 prd-ubuntu1804-docker-4c-4g-2920 sshd[1438]: Received disconnect from 10.32.4.5 port 48500:11: Closed due to user request. [preauth] Jun 8 04:29:57 prd-ubuntu1804-docker-4c-4g-2920 sshd[1438]: Disconnected from invalid user jenkins 10.32.4.5 port 48500 [preauth] Jun 8 04:29:59 prd-ubuntu1804-docker-4c-4g-2920 sshd[1440]: Invalid user jenkins from 10.32.4.5 port 48508 Jun 8 04:29:59 prd-ubuntu1804-docker-4c-4g-2920 sshd[1440]: Received disconnect from 10.32.4.5 port 48508:11: Closed due to user request. [preauth] Jun 8 04:29:59 prd-ubuntu1804-docker-4c-4g-2920 sshd[1440]: Disconnected from invalid user jenkins 10.32.4.5 port 48508 [preauth] Jun 8 04:30:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[1442]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 8 04:30:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[1442]: pam_unix(cron:session): session closed for user root Jun 8 04:30:01 prd-ubuntu1804-docker-4c-4g-2920 sshd[1451]: Invalid user jenkins from 10.32.4.5 port 48648 Jun 8 04:30:01 prd-ubuntu1804-docker-4c-4g-2920 sshd[1451]: Received disconnect from 10.32.4.5 port 48648:11: Closed due to user request. [preauth] Jun 8 04:30:01 prd-ubuntu1804-docker-4c-4g-2920 sshd[1451]: Disconnected from invalid user jenkins 10.32.4.5 port 48648 [preauth] Jun 8 04:30:03 prd-ubuntu1804-docker-4c-4g-2920 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 48654 Jun 8 04:30:03 prd-ubuntu1804-docker-4c-4g-2920 sshd[1453]: Received disconnect from 10.32.4.5 port 48654:11: Closed due to user request. [preauth] Jun 8 04:30:03 prd-ubuntu1804-docker-4c-4g-2920 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 48654 [preauth] Jun 8 04:30:05 prd-ubuntu1804-docker-4c-4g-2920 sshd[1470]: Invalid user jenkins from 10.32.4.5 port 48658 Jun 8 04:30:05 prd-ubuntu1804-docker-4c-4g-2920 sshd[1470]: Received disconnect from 10.32.4.5 port 48658:11: Closed due to user request. [preauth] Jun 8 04:30:05 prd-ubuntu1804-docker-4c-4g-2920 sshd[1470]: Disconnected from invalid user jenkins 10.32.4.5 port 48658 [preauth] Jun 8 04:30:08 prd-ubuntu1804-docker-4c-4g-2920 sshd[1692]: Invalid user jenkins from 10.32.4.5 port 48660 Jun 8 04:30:08 prd-ubuntu1804-docker-4c-4g-2920 sshd[1692]: Received disconnect from 10.32.4.5 port 48660:11: Closed due to user request. [preauth] Jun 8 04:30:08 prd-ubuntu1804-docker-4c-4g-2920 sshd[1692]: Disconnected from invalid user jenkins 10.32.4.5 port 48660 [preauth] Jun 8 04:30:10 prd-ubuntu1804-docker-4c-4g-2920 sshd[1732]: Invalid user jenkins from 10.32.4.5 port 48668 Jun 8 04:30:10 prd-ubuntu1804-docker-4c-4g-2920 sshd[1732]: Received disconnect from 10.32.4.5 port 48668:11: Closed due to user request. [preauth] Jun 8 04:30:10 prd-ubuntu1804-docker-4c-4g-2920 sshd[1732]: Disconnected from invalid user jenkins 10.32.4.5 port 48668 [preauth] Jun 8 04:30:12 prd-ubuntu1804-docker-4c-4g-2920 sshd[1748]: Invalid user jenkins from 10.32.4.5 port 48670 Jun 8 04:30:12 prd-ubuntu1804-docker-4c-4g-2920 sshd[1748]: Received disconnect from 10.32.4.5 port 48670:11: Closed due to user request. [preauth] Jun 8 04:30:12 prd-ubuntu1804-docker-4c-4g-2920 sshd[1748]: Disconnected from invalid user jenkins 10.32.4.5 port 48670 [preauth] Jun 8 04:30:12 prd-ubuntu1804-docker-4c-4g-2920 useradd[1752]: new group: name=jenkins, GID=1001 Jun 8 04:30:12 prd-ubuntu1804-docker-4c-4g-2920 useradd[1752]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 8 04:30:12 prd-ubuntu1804-docker-4c-4g-2920 usermod[1759]: add 'jenkins' to group 'docker' Jun 8 04:30:12 prd-ubuntu1804-docker-4c-4g-2920 usermod[1759]: add 'jenkins' to shadow group 'docker' Jun 8 04:30:14 prd-ubuntu1804-docker-4c-4g-2920 sshd[1813]: Accepted publickey for jenkins from 10.32.4.5 port 48676 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 8 04:30:14 prd-ubuntu1804-docker-4c-4g-2920 sshd[1813]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 8 04:30:14 prd-ubuntu1804-docker-4c-4g-2920 systemd-logind[958]: New session 2 of user jenkins. Jun 8 04:30:14 prd-ubuntu1804-docker-4c-4g-2920 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 8 04:31:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[2540]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 8 04:31:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[2540]: pam_unix(cron:session): session closed for user root Jun 8 04:32:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[2963]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 8 04:32:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[2963]: pam_unix(cron:session): session closed for user root Jun 8 04:33:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[5139]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 8 04:33:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[5139]: pam_unix(cron:session): session closed for user root Jun 8 04:34:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[7754]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 8 04:34:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[7754]: pam_unix(cron:session): session closed for user root Jun 8 04:35:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[9884]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 8 04:35:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[9884]: pam_unix(cron:session): session closed for user root Jun 8 04:36:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[10099]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 8 04:36:01 prd-ubuntu1804-docker-4c-4g-2920 CRON[10099]: pam_unix(cron:session): session closed for user root Jun 8 04:36:17 prd-ubuntu1804-docker-4c-4g-2920 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-app-kpimon-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 8 04:36:17 prd-ubuntu1804-docker-4c-4g-2920 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)