Sep 25 05:10:49 prd-ubuntu1804-docker-4c-4g-4594 passwd[943]: password for 'ubuntu' changed by 'root' Sep 25 05:10:49 prd-ubuntu1804-docker-4c-4g-4594 systemd-logind[1026]: Watching system buttons on /dev/input/event0 (Power Button) Sep 25 05:10:49 prd-ubuntu1804-docker-4c-4g-4594 systemd-logind[1026]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 25 05:10:49 prd-ubuntu1804-docker-4c-4g-4594 systemd-logind[1026]: New seat seat0. Sep 25 05:10:49 prd-ubuntu1804-docker-4c-4g-4594 sshd[1273]: Server listening on 0.0.0.0 port 22. Sep 25 05:10:49 prd-ubuntu1804-docker-4c-4g-4594 sshd[1273]: Server listening on :: port 22. Sep 25 05:10:50 prd-ubuntu1804-docker-4c-4g-4594 sshd[1288]: Did not receive identification string from 10.32.4.5 port 58382 Sep 25 05:10:56 prd-ubuntu1804-docker-4c-4g-4594 sshd[1508]: Invalid user jenkins from 10.32.4.5 port 58386 Sep 25 05:10:56 prd-ubuntu1804-docker-4c-4g-4594 sshd[1508]: Received disconnect from 10.32.4.5 port 58386:11: Closed due to user request. [preauth] Sep 25 05:10:56 prd-ubuntu1804-docker-4c-4g-4594 sshd[1508]: Disconnected from invalid user jenkins 10.32.4.5 port 58386 [preauth] Sep 25 05:10:58 prd-ubuntu1804-docker-4c-4g-4594 sshd[1526]: Invalid user jenkins from 10.32.4.5 port 58388 Sep 25 05:10:58 prd-ubuntu1804-docker-4c-4g-4594 sshd[1526]: Received disconnect from 10.32.4.5 port 58388:11: Closed due to user request. [preauth] Sep 25 05:10:58 prd-ubuntu1804-docker-4c-4g-4594 sshd[1526]: Disconnected from invalid user jenkins 10.32.4.5 port 58388 [preauth] Sep 25 05:11:00 prd-ubuntu1804-docker-4c-4g-4594 sshd[1528]: Invalid user jenkins from 10.32.4.5 port 58396 Sep 25 05:11:00 prd-ubuntu1804-docker-4c-4g-4594 sshd[1528]: Received disconnect from 10.32.4.5 port 58396:11: Closed due to user request. [preauth] Sep 25 05:11:00 prd-ubuntu1804-docker-4c-4g-4594 sshd[1528]: Disconnected from invalid user jenkins 10.32.4.5 port 58396 [preauth] Sep 25 05:11:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[1531]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 25 05:11:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[1531]: pam_unix(cron:session): session closed for user root Sep 25 05:11:02 prd-ubuntu1804-docker-4c-4g-4594 sshd[1538]: Invalid user jenkins from 10.32.4.5 port 58398 Sep 25 05:11:02 prd-ubuntu1804-docker-4c-4g-4594 sshd[1538]: Received disconnect from 10.32.4.5 port 58398:11: Closed due to user request. [preauth] Sep 25 05:11:02 prd-ubuntu1804-docker-4c-4g-4594 sshd[1538]: Disconnected from invalid user jenkins 10.32.4.5 port 58398 [preauth] Sep 25 05:11:04 prd-ubuntu1804-docker-4c-4g-4594 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 58400 Sep 25 05:11:04 prd-ubuntu1804-docker-4c-4g-4594 sshd[1540]: Received disconnect from 10.32.4.5 port 58400:11: Closed due to user request. [preauth] Sep 25 05:11:04 prd-ubuntu1804-docker-4c-4g-4594 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 58400 [preauth] Sep 25 05:11:06 prd-ubuntu1804-docker-4c-4g-4594 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 58402 Sep 25 05:11:07 prd-ubuntu1804-docker-4c-4g-4594 sshd[1542]: Received disconnect from 10.32.4.5 port 58402:11: Closed due to user request. [preauth] Sep 25 05:11:07 prd-ubuntu1804-docker-4c-4g-4594 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 58402 [preauth] Sep 25 05:11:09 prd-ubuntu1804-docker-4c-4g-4594 sshd[1544]: Invalid user jenkins from 10.32.4.5 port 58406 Sep 25 05:11:09 prd-ubuntu1804-docker-4c-4g-4594 sshd[1544]: Received disconnect from 10.32.4.5 port 58406:11: Closed due to user request. [preauth] Sep 25 05:11:09 prd-ubuntu1804-docker-4c-4g-4594 sshd[1544]: Disconnected from invalid user jenkins 10.32.4.5 port 58406 [preauth] Sep 25 05:11:11 prd-ubuntu1804-docker-4c-4g-4594 sshd[1587]: Invalid user jenkins from 10.32.4.5 port 58408 Sep 25 05:11:11 prd-ubuntu1804-docker-4c-4g-4594 sshd[1587]: Received disconnect from 10.32.4.5 port 58408:11: Closed due to user request. [preauth] Sep 25 05:11:11 prd-ubuntu1804-docker-4c-4g-4594 sshd[1587]: Disconnected from invalid user jenkins 10.32.4.5 port 58408 [preauth] Sep 25 05:11:13 prd-ubuntu1804-docker-4c-4g-4594 sshd[1774]: Invalid user jenkins from 10.32.4.5 port 58410 Sep 25 05:11:13 prd-ubuntu1804-docker-4c-4g-4594 sshd[1774]: Received disconnect from 10.32.4.5 port 58410:11: Closed due to user request. [preauth] Sep 25 05:11:13 prd-ubuntu1804-docker-4c-4g-4594 sshd[1774]: Disconnected from invalid user jenkins 10.32.4.5 port 58410 [preauth] Sep 25 05:11:15 prd-ubuntu1804-docker-4c-4g-4594 sshd[1811]: Invalid user jenkins from 10.32.4.5 port 58412 Sep 25 05:11:15 prd-ubuntu1804-docker-4c-4g-4594 sshd[1811]: Received disconnect from 10.32.4.5 port 58412:11: Closed due to user request. [preauth] Sep 25 05:11:15 prd-ubuntu1804-docker-4c-4g-4594 sshd[1811]: Disconnected from invalid user jenkins 10.32.4.5 port 58412 [preauth] Sep 25 05:11:17 prd-ubuntu1804-docker-4c-4g-4594 sshd[1829]: Invalid user jenkins from 10.32.4.5 port 58414 Sep 25 05:11:17 prd-ubuntu1804-docker-4c-4g-4594 sshd[1829]: Received disconnect from 10.32.4.5 port 58414:11: Closed due to user request. [preauth] Sep 25 05:11:17 prd-ubuntu1804-docker-4c-4g-4594 sshd[1829]: Disconnected from invalid user jenkins 10.32.4.5 port 58414 [preauth] Sep 25 05:11:20 prd-ubuntu1804-docker-4c-4g-4594 sshd[1833]: Invalid user jenkins from 10.32.4.5 port 58416 Sep 25 05:11:20 prd-ubuntu1804-docker-4c-4g-4594 sshd[1833]: Received disconnect from 10.32.4.5 port 58416:11: Closed due to user request. [preauth] Sep 25 05:11:20 prd-ubuntu1804-docker-4c-4g-4594 sshd[1833]: Disconnected from invalid user jenkins 10.32.4.5 port 58416 [preauth] Sep 25 05:11:20 prd-ubuntu1804-docker-4c-4g-4594 useradd[1859]: new group: name=jenkins, GID=1001 Sep 25 05:11:20 prd-ubuntu1804-docker-4c-4g-4594 useradd[1859]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 25 05:11:21 prd-ubuntu1804-docker-4c-4g-4594 usermod[1866]: add 'jenkins' to group 'docker' Sep 25 05:11:21 prd-ubuntu1804-docker-4c-4g-4594 usermod[1866]: add 'jenkins' to shadow group 'docker' Sep 25 05:11:22 prd-ubuntu1804-docker-4c-4g-4594 sshd[1914]: Accepted publickey for jenkins from 10.32.4.5 port 58418 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 25 05:11:22 prd-ubuntu1804-docker-4c-4g-4594 sshd[1914]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 25 05:11:22 prd-ubuntu1804-docker-4c-4g-4594 systemd-logind[1026]: New session 2 of user jenkins. Sep 25 05:11:22 prd-ubuntu1804-docker-4c-4g-4594 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 25 05:12:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[2438]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 25 05:12:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[2438]: pam_unix(cron:session): session closed for user root Sep 25 05:13:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[2490]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 25 05:13:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[2490]: pam_unix(cron:session): session closed for user root Sep 25 05:14:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[3500]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 25 05:14:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[3500]: pam_unix(cron:session): session closed for user root Sep 25 05:15:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[7786]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 25 05:15:01 prd-ubuntu1804-docker-4c-4g-4594 CRON[7786]: pam_unix(cron:session): session closed for user root Sep 25 05:15:46 prd-ubuntu1804-docker-4c-4g-4594 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/smo-ves-dmaap-adapter-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp