Jul 5 08:13:38 prd-ubuntu1804-docker-4c-4g-5063 passwd[953]: password for 'ubuntu' changed by 'root' Jul 5 08:13:38 prd-ubuntu1804-docker-4c-4g-5063 systemd-logind[1113]: Watching system buttons on /dev/input/event0 (Power Button) Jul 5 08:13:38 prd-ubuntu1804-docker-4c-4g-5063 systemd-logind[1113]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 5 08:13:38 prd-ubuntu1804-docker-4c-4g-5063 systemd-logind[1113]: New seat seat0. Jul 5 08:13:38 prd-ubuntu1804-docker-4c-4g-5063 sshd[1261]: Server listening on 0.0.0.0 port 22. Jul 5 08:13:38 prd-ubuntu1804-docker-4c-4g-5063 sshd[1261]: Server listening on :: port 22. Jul 5 08:13:42 prd-ubuntu1804-docker-4c-4g-5063 sshd[1545]: Did not receive identification string from 10.32.4.5 port 57170 Jul 5 08:13:42 prd-ubuntu1804-docker-4c-4g-5063 sshd[1555]: Invalid user jenkins from 10.32.4.5 port 57172 Jul 5 08:13:43 prd-ubuntu1804-docker-4c-4g-5063 sshd[1555]: Received disconnect from 10.32.4.5 port 57172:11: Closed due to user request. [preauth] Jul 5 08:13:43 prd-ubuntu1804-docker-4c-4g-5063 sshd[1555]: Disconnected from invalid user jenkins 10.32.4.5 port 57172 [preauth] Jul 5 08:13:45 prd-ubuntu1804-docker-4c-4g-5063 sshd[1582]: Invalid user jenkins from 10.32.4.5 port 57176 Jul 5 08:13:45 prd-ubuntu1804-docker-4c-4g-5063 sshd[1582]: Received disconnect from 10.32.4.5 port 57176:11: Closed due to user request. [preauth] Jul 5 08:13:45 prd-ubuntu1804-docker-4c-4g-5063 sshd[1582]: Disconnected from invalid user jenkins 10.32.4.5 port 57176 [preauth] Jul 5 08:13:47 prd-ubuntu1804-docker-4c-4g-5063 sshd[1598]: Invalid user jenkins from 10.32.4.5 port 57178 Jul 5 08:13:47 prd-ubuntu1804-docker-4c-4g-5063 sshd[1598]: Received disconnect from 10.32.4.5 port 57178:11: Closed due to user request. [preauth] Jul 5 08:13:47 prd-ubuntu1804-docker-4c-4g-5063 sshd[1598]: Disconnected from invalid user jenkins 10.32.4.5 port 57178 [preauth] Jul 5 08:13:49 prd-ubuntu1804-docker-4c-4g-5063 sshd[1600]: Invalid user jenkins from 10.32.4.5 port 57180 Jul 5 08:13:49 prd-ubuntu1804-docker-4c-4g-5063 sshd[1600]: Received disconnect from 10.32.4.5 port 57180:11: Closed due to user request. [preauth] Jul 5 08:13:49 prd-ubuntu1804-docker-4c-4g-5063 sshd[1600]: Disconnected from invalid user jenkins 10.32.4.5 port 57180 [preauth] Jul 5 08:13:51 prd-ubuntu1804-docker-4c-4g-5063 sshd[1602]: Invalid user jenkins from 10.32.4.5 port 57182 Jul 5 08:13:51 prd-ubuntu1804-docker-4c-4g-5063 sshd[1602]: Received disconnect from 10.32.4.5 port 57182:11: Closed due to user request. [preauth] Jul 5 08:13:51 prd-ubuntu1804-docker-4c-4g-5063 sshd[1602]: Disconnected from invalid user jenkins 10.32.4.5 port 57182 [preauth] Jul 5 08:13:53 prd-ubuntu1804-docker-4c-4g-5063 sshd[1604]: Invalid user jenkins from 10.32.4.5 port 57184 Jul 5 08:13:53 prd-ubuntu1804-docker-4c-4g-5063 sshd[1604]: Received disconnect from 10.32.4.5 port 57184:11: Closed due to user request. [preauth] Jul 5 08:13:53 prd-ubuntu1804-docker-4c-4g-5063 sshd[1604]: Disconnected from invalid user jenkins 10.32.4.5 port 57184 [preauth] Jul 5 08:13:55 prd-ubuntu1804-docker-4c-4g-5063 sshd[1606]: Invalid user jenkins from 10.32.4.5 port 57186 Jul 5 08:13:55 prd-ubuntu1804-docker-4c-4g-5063 sshd[1606]: Received disconnect from 10.32.4.5 port 57186:11: Closed due to user request. [preauth] Jul 5 08:13:55 prd-ubuntu1804-docker-4c-4g-5063 sshd[1606]: Disconnected from invalid user jenkins 10.32.4.5 port 57186 [preauth] Jul 5 08:13:57 prd-ubuntu1804-docker-4c-4g-5063 sshd[1608]: Invalid user jenkins from 10.32.4.5 port 57188 Jul 5 08:13:57 prd-ubuntu1804-docker-4c-4g-5063 sshd[1608]: Received disconnect from 10.32.4.5 port 57188:11: Closed due to user request. [preauth] Jul 5 08:13:57 prd-ubuntu1804-docker-4c-4g-5063 sshd[1608]: Disconnected from invalid user jenkins 10.32.4.5 port 57188 [preauth] Jul 5 08:13:59 prd-ubuntu1804-docker-4c-4g-5063 sshd[1610]: Invalid user jenkins from 10.32.4.5 port 57192 Jul 5 08:13:59 prd-ubuntu1804-docker-4c-4g-5063 sshd[1610]: Received disconnect from 10.32.4.5 port 57192:11: Closed due to user request. [preauth] Jul 5 08:13:59 prd-ubuntu1804-docker-4c-4g-5063 sshd[1610]: Disconnected from invalid user jenkins 10.32.4.5 port 57192 [preauth] Jul 5 08:14:02 prd-ubuntu1804-docker-4c-4g-5063 CRON[1742]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 08:14:02 prd-ubuntu1804-docker-4c-4g-5063 CRON[1742]: pam_unix(cron:session): session closed for user root Jul 5 08:14:02 prd-ubuntu1804-docker-4c-4g-5063 sshd[1822]: Invalid user jenkins from 10.32.4.5 port 57194 Jul 5 08:14:02 prd-ubuntu1804-docker-4c-4g-5063 sshd[1822]: Received disconnect from 10.32.4.5 port 57194:11: Closed due to user request. [preauth] Jul 5 08:14:02 prd-ubuntu1804-docker-4c-4g-5063 sshd[1822]: Disconnected from invalid user jenkins 10.32.4.5 port 57194 [preauth] Jul 5 08:14:04 prd-ubuntu1804-docker-4c-4g-5063 sshd[1862]: Invalid user jenkins from 10.32.4.5 port 57196 Jul 5 08:14:04 prd-ubuntu1804-docker-4c-4g-5063 sshd[1862]: Received disconnect from 10.32.4.5 port 57196:11: Closed due to user request. [preauth] Jul 5 08:14:04 prd-ubuntu1804-docker-4c-4g-5063 sshd[1862]: Disconnected from invalid user jenkins 10.32.4.5 port 57196 [preauth] Jul 5 08:14:06 prd-ubuntu1804-docker-4c-4g-5063 sshd[1895]: Invalid user jenkins from 10.32.4.5 port 57198 Jul 5 08:14:06 prd-ubuntu1804-docker-4c-4g-5063 sshd[1895]: Received disconnect from 10.32.4.5 port 57198:11: Closed due to user request. [preauth] Jul 5 08:14:06 prd-ubuntu1804-docker-4c-4g-5063 sshd[1895]: Disconnected from invalid user jenkins 10.32.4.5 port 57198 [preauth] Jul 5 08:14:09 prd-ubuntu1804-docker-4c-4g-5063 sshd[1899]: Invalid user jenkins from 10.32.4.5 port 57200 Jul 5 08:14:09 prd-ubuntu1804-docker-4c-4g-5063 sshd[1899]: Received disconnect from 10.32.4.5 port 57200:11: Closed due to user request. [preauth] Jul 5 08:14:09 prd-ubuntu1804-docker-4c-4g-5063 sshd[1899]: Disconnected from invalid user jenkins 10.32.4.5 port 57200 [preauth] Jul 5 08:14:09 prd-ubuntu1804-docker-4c-4g-5063 useradd[1906]: new group: name=jenkins, GID=1001 Jul 5 08:14:09 prd-ubuntu1804-docker-4c-4g-5063 useradd[1906]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 5 08:14:09 prd-ubuntu1804-docker-4c-4g-5063 usermod[1913]: add 'jenkins' to group 'docker' Jul 5 08:14:09 prd-ubuntu1804-docker-4c-4g-5063 usermod[1913]: add 'jenkins' to shadow group 'docker' Jul 5 08:14:11 prd-ubuntu1804-docker-4c-4g-5063 sshd[1956]: Accepted publickey for jenkins from 10.32.4.5 port 57208 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jul 5 08:14:11 prd-ubuntu1804-docker-4c-4g-5063 sshd[1956]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 5 08:14:11 prd-ubuntu1804-docker-4c-4g-5063 systemd-logind[1113]: New session 2 of user jenkins. Jul 5 08:14:11 prd-ubuntu1804-docker-4c-4g-5063 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 5 08:15:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2485]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 08:15:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2485]: pam_unix(cron:session): session closed for user root Jul 5 08:16:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2517]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 08:16:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2517]: pam_unix(cron:session): session closed for user root Jul 5 08:17:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2974]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 08:17:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2973]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 08:17:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2973]: pam_unix(cron:session): session closed for user root Jul 5 08:17:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[2974]: pam_unix(cron:session): session closed for user root Jul 5 08:18:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[5613]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 08:18:01 prd-ubuntu1804-docker-4c-4g-5063 CRON[5613]: pam_unix(cron:session): session closed for user root Jul 5 08:19:00 prd-ubuntu1804-docker-4c-4g-5063 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-app-rc-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp