Jan 22 13:42:48 prd-ubuntu1804-docker-4c-4g-3856 passwd[954]: password for 'ubuntu' changed by 'root' Jan 22 13:42:48 prd-ubuntu1804-docker-4c-4g-3856 systemd-logind[1026]: Watching system buttons on /dev/input/event0 (Power Button) Jan 22 13:42:48 prd-ubuntu1804-docker-4c-4g-3856 systemd-logind[1026]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 22 13:42:48 prd-ubuntu1804-docker-4c-4g-3856 systemd-logind[1026]: New seat seat0. Jan 22 13:42:48 prd-ubuntu1804-docker-4c-4g-3856 sshd[1241]: Server listening on 0.0.0.0 port 22. Jan 22 13:42:48 prd-ubuntu1804-docker-4c-4g-3856 sshd[1241]: Server listening on :: port 22. Jan 22 13:42:49 prd-ubuntu1804-docker-4c-4g-3856 sshd[1256]: Did not receive identification string from 10.32.4.5 port 53114 Jan 22 13:42:51 prd-ubuntu1804-docker-4c-4g-3856 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 53116 Jan 22 13:42:51 prd-ubuntu1804-docker-4c-4g-3856 sshd[1453]: Received disconnect from 10.32.4.5 port 53116:11: Closed due to user request. [preauth] Jan 22 13:42:51 prd-ubuntu1804-docker-4c-4g-3856 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 53116 [preauth] Jan 22 13:42:53 prd-ubuntu1804-docker-4c-4g-3856 sshd[1497]: Invalid user jenkins from 10.32.4.5 port 53120 Jan 22 13:42:53 prd-ubuntu1804-docker-4c-4g-3856 sshd[1497]: Received disconnect from 10.32.4.5 port 53120:11: Closed due to user request. [preauth] Jan 22 13:42:53 prd-ubuntu1804-docker-4c-4g-3856 sshd[1497]: Disconnected from invalid user jenkins 10.32.4.5 port 53120 [preauth] Jan 22 13:42:55 prd-ubuntu1804-docker-4c-4g-3856 sshd[1521]: Invalid user jenkins from 10.32.4.5 port 53122 Jan 22 13:42:55 prd-ubuntu1804-docker-4c-4g-3856 sshd[1521]: Received disconnect from 10.32.4.5 port 53122:11: Closed due to user request. [preauth] Jan 22 13:42:55 prd-ubuntu1804-docker-4c-4g-3856 sshd[1521]: Disconnected from invalid user jenkins 10.32.4.5 port 53122 [preauth] Jan 22 13:42:58 prd-ubuntu1804-docker-4c-4g-3856 sshd[1529]: Invalid user jenkins from 10.32.4.5 port 53124 Jan 22 13:42:58 prd-ubuntu1804-docker-4c-4g-3856 sshd[1529]: Received disconnect from 10.32.4.5 port 53124:11: Closed due to user request. [preauth] Jan 22 13:42:58 prd-ubuntu1804-docker-4c-4g-3856 sshd[1529]: Disconnected from invalid user jenkins 10.32.4.5 port 53124 [preauth] Jan 22 13:43:00 prd-ubuntu1804-docker-4c-4g-3856 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 53132 Jan 22 13:43:00 prd-ubuntu1804-docker-4c-4g-3856 sshd[1531]: Received disconnect from 10.32.4.5 port 53132:11: Closed due to user request. [preauth] Jan 22 13:43:00 prd-ubuntu1804-docker-4c-4g-3856 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 53132 [preauth] Jan 22 13:43:01 prd-ubuntu1804-docker-4c-4g-3856 CRON[1534]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 22 13:43:01 prd-ubuntu1804-docker-4c-4g-3856 CRON[1534]: pam_unix(cron:session): session closed for user root Jan 22 13:43:02 prd-ubuntu1804-docker-4c-4g-3856 sshd[1543]: Invalid user jenkins from 10.32.4.5 port 53134 Jan 22 13:43:02 prd-ubuntu1804-docker-4c-4g-3856 sshd[1543]: Received disconnect from 10.32.4.5 port 53134:11: Closed due to user request. [preauth] Jan 22 13:43:02 prd-ubuntu1804-docker-4c-4g-3856 sshd[1543]: Disconnected from invalid user jenkins 10.32.4.5 port 53134 [preauth] Jan 22 13:43:04 prd-ubuntu1804-docker-4c-4g-3856 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 53136 Jan 22 13:43:04 prd-ubuntu1804-docker-4c-4g-3856 sshd[1545]: Received disconnect from 10.32.4.5 port 53136:11: Closed due to user request. [preauth] Jan 22 13:43:04 prd-ubuntu1804-docker-4c-4g-3856 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 53136 [preauth] Jan 22 13:43:06 prd-ubuntu1804-docker-4c-4g-3856 sshd[1547]: Invalid user jenkins from 10.32.4.5 port 53138 Jan 22 13:43:06 prd-ubuntu1804-docker-4c-4g-3856 sshd[1547]: Received disconnect from 10.32.4.5 port 53138:11: Closed due to user request. [preauth] Jan 22 13:43:06 prd-ubuntu1804-docker-4c-4g-3856 sshd[1547]: Disconnected from invalid user jenkins 10.32.4.5 port 53138 [preauth] Jan 22 13:43:08 prd-ubuntu1804-docker-4c-4g-3856 sshd[1549]: Invalid user jenkins from 10.32.4.5 port 53142 Jan 22 13:43:08 prd-ubuntu1804-docker-4c-4g-3856 sshd[1549]: Received disconnect from 10.32.4.5 port 53142:11: Closed due to user request. [preauth] Jan 22 13:43:08 prd-ubuntu1804-docker-4c-4g-3856 sshd[1549]: Disconnected from invalid user jenkins 10.32.4.5 port 53142 [preauth] Jan 22 13:43:10 prd-ubuntu1804-docker-4c-4g-3856 sshd[1568]: Invalid user jenkins from 10.32.4.5 port 53144 Jan 22 13:43:10 prd-ubuntu1804-docker-4c-4g-3856 sshd[1568]: Received disconnect from 10.32.4.5 port 53144:11: Closed due to user request. [preauth] Jan 22 13:43:10 prd-ubuntu1804-docker-4c-4g-3856 sshd[1568]: Disconnected from invalid user jenkins 10.32.4.5 port 53144 [preauth] Jan 22 13:43:13 prd-ubuntu1804-docker-4c-4g-3856 sshd[1786]: Invalid user jenkins from 10.32.4.5 port 53146 Jan 22 13:43:13 prd-ubuntu1804-docker-4c-4g-3856 sshd[1786]: Received disconnect from 10.32.4.5 port 53146:11: Closed due to user request. [preauth] Jan 22 13:43:13 prd-ubuntu1804-docker-4c-4g-3856 sshd[1786]: Disconnected from invalid user jenkins 10.32.4.5 port 53146 [preauth] Jan 22 13:43:15 prd-ubuntu1804-docker-4c-4g-3856 sshd[1825]: Invalid user jenkins from 10.32.4.5 port 53148 Jan 22 13:43:15 prd-ubuntu1804-docker-4c-4g-3856 sshd[1825]: Received disconnect from 10.32.4.5 port 53148:11: Closed due to user request. [preauth] Jan 22 13:43:15 prd-ubuntu1804-docker-4c-4g-3856 sshd[1825]: Disconnected from invalid user jenkins 10.32.4.5 port 53148 [preauth] Jan 22 13:43:18 prd-ubuntu1804-docker-4c-4g-3856 sshd[1832]: Invalid user jenkins from 10.32.4.5 port 53150 Jan 22 13:43:18 prd-ubuntu1804-docker-4c-4g-3856 sshd[1832]: Received disconnect from 10.32.4.5 port 53150:11: Closed due to user request. [preauth] Jan 22 13:43:18 prd-ubuntu1804-docker-4c-4g-3856 sshd[1832]: Disconnected from invalid user jenkins 10.32.4.5 port 53150 [preauth] Jan 22 13:43:20 prd-ubuntu1804-docker-4c-4g-3856 sshd[1846]: Invalid user jenkins from 10.32.4.5 port 53152 Jan 22 13:43:20 prd-ubuntu1804-docker-4c-4g-3856 sshd[1846]: Received disconnect from 10.32.4.5 port 53152:11: Closed due to user request. [preauth] Jan 22 13:43:20 prd-ubuntu1804-docker-4c-4g-3856 sshd[1846]: Disconnected from invalid user jenkins 10.32.4.5 port 53152 [preauth] Jan 22 13:43:20 prd-ubuntu1804-docker-4c-4g-3856 useradd[1850]: new group: name=jenkins, GID=1001 Jan 22 13:43:20 prd-ubuntu1804-docker-4c-4g-3856 useradd[1850]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 22 13:43:20 prd-ubuntu1804-docker-4c-4g-3856 usermod[1857]: add 'jenkins' to group 'docker' Jan 22 13:43:20 prd-ubuntu1804-docker-4c-4g-3856 usermod[1857]: add 'jenkins' to shadow group 'docker' Jan 22 13:43:22 prd-ubuntu1804-docker-4c-4g-3856 sshd[1913]: Accepted publickey for jenkins from 10.32.4.5 port 53154 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 22 13:43:22 prd-ubuntu1804-docker-4c-4g-3856 sshd[1913]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 22 13:43:22 prd-ubuntu1804-docker-4c-4g-3856 systemd-logind[1026]: New session 2 of user jenkins. Jan 22 13:43:22 prd-ubuntu1804-docker-4c-4g-3856 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 22 13:44:02 prd-ubuntu1804-docker-4c-4g-3856 CRON[2423]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 22 13:44:02 prd-ubuntu1804-docker-4c-4g-3856 CRON[2423]: pam_unix(cron:session): session closed for user root Jan 22 13:45:01 prd-ubuntu1804-docker-4c-4g-3856 CRON[2468]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 22 13:45:01 prd-ubuntu1804-docker-4c-4g-3856 CRON[2468]: pam_unix(cron:session): session closed for user root Jan 22 13:46:01 prd-ubuntu1804-docker-4c-4g-3856 CRON[6847]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 22 13:46:01 prd-ubuntu1804-docker-4c-4g-3856 CRON[6847]: pam_unix(cron:session): session closed for user root Jan 22 13:46:59 prd-ubuntu1804-docker-4c-4g-3856 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/smo-ves-post-config-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 22 13:46:59 prd-ubuntu1804-docker-4c-4g-3856 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)