Sep 21 05:45:49 prd-ubuntu1804-docker-4c-4g-4254 passwd[959]: password for 'ubuntu' changed by 'root' Sep 21 05:45:49 prd-ubuntu1804-docker-4c-4g-4254 systemd-logind[988]: Watching system buttons on /dev/input/event0 (Power Button) Sep 21 05:45:49 prd-ubuntu1804-docker-4c-4g-4254 systemd-logind[988]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 21 05:45:49 prd-ubuntu1804-docker-4c-4g-4254 systemd-logind[988]: New seat seat0. Sep 21 05:45:50 prd-ubuntu1804-docker-4c-4g-4254 sshd[1273]: Server listening on 0.0.0.0 port 22. Sep 21 05:45:50 prd-ubuntu1804-docker-4c-4g-4254 sshd[1273]: Server listening on :: port 22. Sep 21 05:45:52 prd-ubuntu1804-docker-4c-4g-4254 sshd[1381]: Did not receive identification string from 10.32.4.5 port 54370 Sep 21 05:45:56 prd-ubuntu1804-docker-4c-4g-4254 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 54374 Sep 21 05:45:56 prd-ubuntu1804-docker-4c-4g-4254 sshd[1546]: Received disconnect from 10.32.4.5 port 54374:11: Closed due to user request. [preauth] Sep 21 05:45:56 prd-ubuntu1804-docker-4c-4g-4254 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 54374 [preauth] Sep 21 05:45:58 prd-ubuntu1804-docker-4c-4g-4254 sshd[1567]: Invalid user jenkins from 10.32.4.5 port 54376 Sep 21 05:45:58 prd-ubuntu1804-docker-4c-4g-4254 sshd[1567]: Received disconnect from 10.32.4.5 port 54376:11: Closed due to user request. [preauth] Sep 21 05:45:58 prd-ubuntu1804-docker-4c-4g-4254 sshd[1567]: Disconnected from invalid user jenkins 10.32.4.5 port 54376 [preauth] Sep 21 05:46:00 prd-ubuntu1804-docker-4c-4g-4254 sshd[1571]: Invalid user jenkins from 10.32.4.5 port 54384 Sep 21 05:46:00 prd-ubuntu1804-docker-4c-4g-4254 sshd[1571]: Received disconnect from 10.32.4.5 port 54384:11: Closed due to user request. [preauth] Sep 21 05:46:00 prd-ubuntu1804-docker-4c-4g-4254 sshd[1571]: Disconnected from invalid user jenkins 10.32.4.5 port 54384 [preauth] Sep 21 05:46:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[1574]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 05:46:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[1574]: pam_unix(cron:session): session closed for user root Sep 21 05:46:02 prd-ubuntu1804-docker-4c-4g-4254 sshd[1581]: Invalid user jenkins from 10.32.4.5 port 54386 Sep 21 05:46:02 prd-ubuntu1804-docker-4c-4g-4254 sshd[1581]: Received disconnect from 10.32.4.5 port 54386:11: Closed due to user request. [preauth] Sep 21 05:46:02 prd-ubuntu1804-docker-4c-4g-4254 sshd[1581]: Disconnected from invalid user jenkins 10.32.4.5 port 54386 [preauth] Sep 21 05:46:04 prd-ubuntu1804-docker-4c-4g-4254 sshd[1583]: Invalid user jenkins from 10.32.4.5 port 54388 Sep 21 05:46:04 prd-ubuntu1804-docker-4c-4g-4254 sshd[1583]: Received disconnect from 10.32.4.5 port 54388:11: Closed due to user request. [preauth] Sep 21 05:46:04 prd-ubuntu1804-docker-4c-4g-4254 sshd[1583]: Disconnected from invalid user jenkins 10.32.4.5 port 54388 [preauth] Sep 21 05:46:06 prd-ubuntu1804-docker-4c-4g-4254 sshd[1585]: Invalid user jenkins from 10.32.4.5 port 54390 Sep 21 05:46:06 prd-ubuntu1804-docker-4c-4g-4254 sshd[1585]: Received disconnect from 10.32.4.5 port 54390:11: Closed due to user request. [preauth] Sep 21 05:46:06 prd-ubuntu1804-docker-4c-4g-4254 sshd[1585]: Disconnected from invalid user jenkins 10.32.4.5 port 54390 [preauth] Sep 21 05:46:09 prd-ubuntu1804-docker-4c-4g-4254 sshd[1587]: Invalid user jenkins from 10.32.4.5 port 54394 Sep 21 05:46:09 prd-ubuntu1804-docker-4c-4g-4254 sshd[1587]: Received disconnect from 10.32.4.5 port 54394:11: Closed due to user request. [preauth] Sep 21 05:46:09 prd-ubuntu1804-docker-4c-4g-4254 sshd[1587]: Disconnected from invalid user jenkins 10.32.4.5 port 54394 [preauth] Sep 21 05:46:11 prd-ubuntu1804-docker-4c-4g-4254 sshd[1589]: Invalid user jenkins from 10.32.4.5 port 54396 Sep 21 05:46:11 prd-ubuntu1804-docker-4c-4g-4254 sshd[1589]: Received disconnect from 10.32.4.5 port 54396:11: Closed due to user request. [preauth] Sep 21 05:46:11 prd-ubuntu1804-docker-4c-4g-4254 sshd[1589]: Disconnected from invalid user jenkins 10.32.4.5 port 54396 [preauth] Sep 21 05:46:13 prd-ubuntu1804-docker-4c-4g-4254 sshd[1669]: Invalid user jenkins from 10.32.4.5 port 54398 Sep 21 05:46:13 prd-ubuntu1804-docker-4c-4g-4254 sshd[1669]: Received disconnect from 10.32.4.5 port 54398:11: Closed due to user request. [preauth] Sep 21 05:46:13 prd-ubuntu1804-docker-4c-4g-4254 sshd[1669]: Disconnected from invalid user jenkins 10.32.4.5 port 54398 [preauth] Sep 21 05:46:15 prd-ubuntu1804-docker-4c-4g-4254 sshd[1822]: Invalid user jenkins from 10.32.4.5 port 54400 Sep 21 05:46:15 prd-ubuntu1804-docker-4c-4g-4254 sshd[1822]: Received disconnect from 10.32.4.5 port 54400:11: Closed due to user request. [preauth] Sep 21 05:46:15 prd-ubuntu1804-docker-4c-4g-4254 sshd[1822]: Disconnected from invalid user jenkins 10.32.4.5 port 54400 [preauth] Sep 21 05:46:17 prd-ubuntu1804-docker-4c-4g-4254 sshd[1859]: Invalid user jenkins from 10.32.4.5 port 54402 Sep 21 05:46:17 prd-ubuntu1804-docker-4c-4g-4254 sshd[1859]: Received disconnect from 10.32.4.5 port 54402:11: Closed due to user request. [preauth] Sep 21 05:46:17 prd-ubuntu1804-docker-4c-4g-4254 sshd[1859]: Disconnected from invalid user jenkins 10.32.4.5 port 54402 [preauth] Sep 21 05:46:19 prd-ubuntu1804-docker-4c-4g-4254 sshd[1877]: Invalid user jenkins from 10.32.4.5 port 54404 Sep 21 05:46:20 prd-ubuntu1804-docker-4c-4g-4254 sshd[1877]: Received disconnect from 10.32.4.5 port 54404:11: Closed due to user request. [preauth] Sep 21 05:46:20 prd-ubuntu1804-docker-4c-4g-4254 sshd[1877]: Disconnected from invalid user jenkins 10.32.4.5 port 54404 [preauth] Sep 21 05:46:22 prd-ubuntu1804-docker-4c-4g-4254 sshd[1893]: Invalid user jenkins from 10.32.4.5 port 54406 Sep 21 05:46:22 prd-ubuntu1804-docker-4c-4g-4254 sshd[1893]: Received disconnect from 10.32.4.5 port 54406:11: Closed due to user request. [preauth] Sep 21 05:46:22 prd-ubuntu1804-docker-4c-4g-4254 sshd[1893]: Disconnected from invalid user jenkins 10.32.4.5 port 54406 [preauth] Sep 21 05:46:23 prd-ubuntu1804-docker-4c-4g-4254 useradd[1921]: new group: name=jenkins, GID=1001 Sep 21 05:46:23 prd-ubuntu1804-docker-4c-4g-4254 useradd[1921]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 21 05:46:23 prd-ubuntu1804-docker-4c-4g-4254 usermod[1928]: add 'jenkins' to group 'docker' Sep 21 05:46:23 prd-ubuntu1804-docker-4c-4g-4254 usermod[1928]: add 'jenkins' to shadow group 'docker' Sep 21 05:46:24 prd-ubuntu1804-docker-4c-4g-4254 sshd[1976]: Accepted publickey for jenkins from 10.32.4.5 port 54410 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 21 05:46:24 prd-ubuntu1804-docker-4c-4g-4254 sshd[1976]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 21 05:46:24 prd-ubuntu1804-docker-4c-4g-4254 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 21 05:46:24 prd-ubuntu1804-docker-4c-4g-4254 systemd-logind[988]: New session 2 of user jenkins. Sep 21 05:47:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[2480]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 05:47:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[2480]: pam_unix(cron:session): session closed for user root Sep 21 05:48:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[2532]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 05:48:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[2532]: pam_unix(cron:session): session closed for user root Sep 21 05:49:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[3057]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 21 05:49:01 prd-ubuntu1804-docker-4c-4g-4254 CRON[3057]: pam_unix(cron:session): session closed for user root Sep 21 05:49:58 prd-ubuntu1804-docker-4c-4g-4254 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-auth-token-fetch-docker-merge-h-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Sep 21 05:49:58 prd-ubuntu1804-docker-4c-4g-4254 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)