Oct 16 10:34:14 prd-ubuntu1804-docker-4c-4g-6603 passwd[997]: password for 'ubuntu' changed by 'root' Oct 16 10:34:14 prd-ubuntu1804-docker-4c-4g-6603 systemd-logind[1064]: Watching system buttons on /dev/input/event0 (Power Button) Oct 16 10:34:14 prd-ubuntu1804-docker-4c-4g-6603 systemd-logind[1064]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 16 10:34:14 prd-ubuntu1804-docker-4c-4g-6603 systemd-logind[1064]: New seat seat0. Oct 16 10:34:14 prd-ubuntu1804-docker-4c-4g-6603 sshd[1183]: Server listening on 0.0.0.0 port 22. Oct 16 10:34:14 prd-ubuntu1804-docker-4c-4g-6603 sshd[1183]: Server listening on :: port 22. Oct 16 10:34:17 prd-ubuntu1804-docker-4c-4g-6603 sshd[1507]: Did not receive identification string from 10.32.4.5 port 43808 Oct 16 10:34:26 prd-ubuntu1804-docker-4c-4g-6603 sshd[1564]: Invalid user jenkins from 10.32.4.5 port 43812 Oct 16 10:34:26 prd-ubuntu1804-docker-4c-4g-6603 sshd[1564]: Received disconnect from 10.32.4.5 port 43812:11: Closed due to user request. [preauth] Oct 16 10:34:26 prd-ubuntu1804-docker-4c-4g-6603 sshd[1564]: Disconnected from invalid user jenkins 10.32.4.5 port 43812 [preauth] Oct 16 10:34:28 prd-ubuntu1804-docker-4c-4g-6603 sshd[1568]: Invalid user jenkins from 10.32.4.5 port 43814 Oct 16 10:34:28 prd-ubuntu1804-docker-4c-4g-6603 sshd[1568]: Received disconnect from 10.32.4.5 port 43814:11: Closed due to user request. [preauth] Oct 16 10:34:28 prd-ubuntu1804-docker-4c-4g-6603 sshd[1568]: Disconnected from invalid user jenkins 10.32.4.5 port 43814 [preauth] Oct 16 10:34:30 prd-ubuntu1804-docker-4c-4g-6603 sshd[1570]: Invalid user jenkins from 10.32.4.5 port 43822 Oct 16 10:34:30 prd-ubuntu1804-docker-4c-4g-6603 sshd[1570]: Received disconnect from 10.32.4.5 port 43822:11: Closed due to user request. [preauth] Oct 16 10:34:30 prd-ubuntu1804-docker-4c-4g-6603 sshd[1570]: Disconnected from invalid user jenkins 10.32.4.5 port 43822 [preauth] Oct 16 10:34:32 prd-ubuntu1804-docker-4c-4g-6603 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 43824 Oct 16 10:34:32 prd-ubuntu1804-docker-4c-4g-6603 sshd[1572]: Received disconnect from 10.32.4.5 port 43824:11: Closed due to user request. [preauth] Oct 16 10:34:32 prd-ubuntu1804-docker-4c-4g-6603 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 43824 [preauth] Oct 16 10:34:35 prd-ubuntu1804-docker-4c-4g-6603 sshd[1582]: Invalid user jenkins from 10.32.4.5 port 43826 Oct 16 10:34:35 prd-ubuntu1804-docker-4c-4g-6603 sshd[1582]: Received disconnect from 10.32.4.5 port 43826:11: Closed due to user request. [preauth] Oct 16 10:34:35 prd-ubuntu1804-docker-4c-4g-6603 sshd[1582]: Disconnected from invalid user jenkins 10.32.4.5 port 43826 [preauth] Oct 16 10:34:37 prd-ubuntu1804-docker-4c-4g-6603 sshd[1601]: Invalid user jenkins from 10.32.4.5 port 43828 Oct 16 10:34:37 prd-ubuntu1804-docker-4c-4g-6603 sshd[1601]: Received disconnect from 10.32.4.5 port 43828:11: Closed due to user request. [preauth] Oct 16 10:34:37 prd-ubuntu1804-docker-4c-4g-6603 sshd[1601]: Disconnected from invalid user jenkins 10.32.4.5 port 43828 [preauth] Oct 16 10:34:39 prd-ubuntu1804-docker-4c-4g-6603 sshd[1786]: Invalid user jenkins from 10.32.4.5 port 43832 Oct 16 10:34:39 prd-ubuntu1804-docker-4c-4g-6603 sshd[1786]: Received disconnect from 10.32.4.5 port 43832:11: Closed due to user request. [preauth] Oct 16 10:34:39 prd-ubuntu1804-docker-4c-4g-6603 sshd[1786]: Disconnected from invalid user jenkins 10.32.4.5 port 43832 [preauth] Oct 16 10:34:41 prd-ubuntu1804-docker-4c-4g-6603 sshd[1822]: Invalid user jenkins from 10.32.4.5 port 43834 Oct 16 10:34:41 prd-ubuntu1804-docker-4c-4g-6603 sshd[1822]: Received disconnect from 10.32.4.5 port 43834:11: Closed due to user request. [preauth] Oct 16 10:34:41 prd-ubuntu1804-docker-4c-4g-6603 sshd[1822]: Disconnected from invalid user jenkins 10.32.4.5 port 43834 [preauth] Oct 16 10:34:44 prd-ubuntu1804-docker-4c-4g-6603 sshd[1852]: Invalid user jenkins from 10.32.4.5 port 43836 Oct 16 10:34:44 prd-ubuntu1804-docker-4c-4g-6603 sshd[1852]: Received disconnect from 10.32.4.5 port 43836:11: Closed due to user request. [preauth] Oct 16 10:34:44 prd-ubuntu1804-docker-4c-4g-6603 sshd[1852]: Disconnected from invalid user jenkins 10.32.4.5 port 43836 [preauth] Oct 16 10:34:46 prd-ubuntu1804-docker-4c-4g-6603 sshd[1877]: Invalid user jenkins from 10.32.4.5 port 43838 Oct 16 10:34:46 prd-ubuntu1804-docker-4c-4g-6603 sshd[1877]: Received disconnect from 10.32.4.5 port 43838:11: Closed due to user request. [preauth] Oct 16 10:34:46 prd-ubuntu1804-docker-4c-4g-6603 sshd[1877]: Disconnected from invalid user jenkins 10.32.4.5 port 43838 [preauth] Oct 16 10:34:48 prd-ubuntu1804-docker-4c-4g-6603 sshd[1896]: Invalid user jenkins from 10.32.4.5 port 43840 Oct 16 10:34:48 prd-ubuntu1804-docker-4c-4g-6603 sshd[1896]: Received disconnect from 10.32.4.5 port 43840:11: Closed due to user request. [preauth] Oct 16 10:34:48 prd-ubuntu1804-docker-4c-4g-6603 sshd[1896]: Disconnected from invalid user jenkins 10.32.4.5 port 43840 [preauth] Oct 16 10:34:49 prd-ubuntu1804-docker-4c-4g-6603 useradd[1912]: new group: name=jenkins, GID=1001 Oct 16 10:34:49 prd-ubuntu1804-docker-4c-4g-6603 useradd[1912]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 16 10:34:49 prd-ubuntu1804-docker-4c-4g-6603 usermod[1919]: add 'jenkins' to group 'docker' Oct 16 10:34:49 prd-ubuntu1804-docker-4c-4g-6603 usermod[1919]: add 'jenkins' to shadow group 'docker' Oct 16 10:34:50 prd-ubuntu1804-docker-4c-4g-6603 sshd[1960]: Accepted publickey for jenkins from 10.32.4.5 port 43842 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 16 10:34:50 prd-ubuntu1804-docker-4c-4g-6603 sshd[1960]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 16 10:34:50 prd-ubuntu1804-docker-4c-4g-6603 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 16 10:34:50 prd-ubuntu1804-docker-4c-4g-6603 systemd-logind[1064]: New session 1 of user jenkins. Oct 16 10:35:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[2158]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 16 10:35:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[2158]: pam_unix(cron:session): session closed for user root Oct 16 10:36:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[2499]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 16 10:36:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[2499]: pam_unix(cron:session): session closed for user root Oct 16 10:37:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[2807]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 16 10:37:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[2807]: pam_unix(cron:session): session closed for user root Oct 16 10:38:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[3703]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 16 10:38:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[3703]: pam_unix(cron:session): session closed for user root Oct 16 10:39:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[7863]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 16 10:39:01 prd-ubuntu1804-docker-4c-4g-6603 CRON[7863]: pam_unix(cron:session): session closed for user root Oct 16 10:39:50 prd-ubuntu1804-docker-4c-4g-6603 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/smo-ves-influxdb-connector-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp