Sep 28 05:45:49 prd-ubuntu1804-docker-4c-4g-4984 passwd[937]: password for 'ubuntu' changed by 'root' Sep 28 05:45:49 prd-ubuntu1804-docker-4c-4g-4984 systemd-logind[1028]: Watching system buttons on /dev/input/event0 (Power Button) Sep 28 05:45:49 prd-ubuntu1804-docker-4c-4g-4984 systemd-logind[1028]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 28 05:45:49 prd-ubuntu1804-docker-4c-4g-4984 systemd-logind[1028]: New seat seat0. Sep 28 05:45:49 prd-ubuntu1804-docker-4c-4g-4984 sshd[1175]: Server listening on 0.0.0.0 port 22. Sep 28 05:45:49 prd-ubuntu1804-docker-4c-4g-4984 sshd[1175]: Server listening on :: port 22. Sep 28 05:45:53 prd-ubuntu1804-docker-4c-4g-4984 sshd[1438]: Did not receive identification string from 10.32.4.5 port 43152 Sep 28 05:45:55 prd-ubuntu1804-docker-4c-4g-4984 sshd[1467]: Invalid user jenkins from 10.32.4.5 port 43154 Sep 28 05:45:56 prd-ubuntu1804-docker-4c-4g-4984 sshd[1467]: Received disconnect from 10.32.4.5 port 43154:11: Closed due to user request. [preauth] Sep 28 05:45:56 prd-ubuntu1804-docker-4c-4g-4984 sshd[1467]: Disconnected from invalid user jenkins 10.32.4.5 port 43154 [preauth] Sep 28 05:45:58 prd-ubuntu1804-docker-4c-4g-4984 sshd[1503]: Invalid user jenkins from 10.32.4.5 port 43156 Sep 28 05:45:58 prd-ubuntu1804-docker-4c-4g-4984 sshd[1503]: Received disconnect from 10.32.4.5 port 43156:11: Closed due to user request. [preauth] Sep 28 05:45:58 prd-ubuntu1804-docker-4c-4g-4984 sshd[1503]: Disconnected from invalid user jenkins 10.32.4.5 port 43156 [preauth] Sep 28 05:46:00 prd-ubuntu1804-docker-4c-4g-4984 sshd[1505]: Invalid user jenkins from 10.32.4.5 port 43164 Sep 28 05:46:00 prd-ubuntu1804-docker-4c-4g-4984 sshd[1505]: Received disconnect from 10.32.4.5 port 43164:11: Closed due to user request. [preauth] Sep 28 05:46:00 prd-ubuntu1804-docker-4c-4g-4984 sshd[1505]: Disconnected from invalid user jenkins 10.32.4.5 port 43164 [preauth] Sep 28 05:46:01 prd-ubuntu1804-docker-4c-4g-4984 CRON[1507]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 28 05:46:02 prd-ubuntu1804-docker-4c-4g-4984 CRON[1507]: pam_unix(cron:session): session closed for user root Sep 28 05:46:02 prd-ubuntu1804-docker-4c-4g-4984 sshd[1516]: Invalid user jenkins from 10.32.4.5 port 43166 Sep 28 05:46:02 prd-ubuntu1804-docker-4c-4g-4984 sshd[1516]: Received disconnect from 10.32.4.5 port 43166:11: Closed due to user request. [preauth] Sep 28 05:46:02 prd-ubuntu1804-docker-4c-4g-4984 sshd[1516]: Disconnected from invalid user jenkins 10.32.4.5 port 43166 [preauth] Sep 28 05:46:04 prd-ubuntu1804-docker-4c-4g-4984 sshd[1518]: Invalid user jenkins from 10.32.4.5 port 43168 Sep 28 05:46:04 prd-ubuntu1804-docker-4c-4g-4984 sshd[1518]: Received disconnect from 10.32.4.5 port 43168:11: Closed due to user request. [preauth] Sep 28 05:46:04 prd-ubuntu1804-docker-4c-4g-4984 sshd[1518]: Disconnected from invalid user jenkins 10.32.4.5 port 43168 [preauth] Sep 28 05:46:06 prd-ubuntu1804-docker-4c-4g-4984 sshd[1520]: Invalid user jenkins from 10.32.4.5 port 43170 Sep 28 05:46:06 prd-ubuntu1804-docker-4c-4g-4984 sshd[1520]: Received disconnect from 10.32.4.5 port 43170:11: Closed due to user request. [preauth] Sep 28 05:46:06 prd-ubuntu1804-docker-4c-4g-4984 sshd[1520]: Disconnected from invalid user jenkins 10.32.4.5 port 43170 [preauth] Sep 28 05:46:08 prd-ubuntu1804-docker-4c-4g-4984 sshd[1522]: Invalid user jenkins from 10.32.4.5 port 43174 Sep 28 05:46:08 prd-ubuntu1804-docker-4c-4g-4984 sshd[1522]: Received disconnect from 10.32.4.5 port 43174:11: Closed due to user request. [preauth] Sep 28 05:46:08 prd-ubuntu1804-docker-4c-4g-4984 sshd[1522]: Disconnected from invalid user jenkins 10.32.4.5 port 43174 [preauth] Sep 28 05:46:10 prd-ubuntu1804-docker-4c-4g-4984 sshd[1535]: Invalid user jenkins from 10.32.4.5 port 43176 Sep 28 05:46:10 prd-ubuntu1804-docker-4c-4g-4984 sshd[1535]: Received disconnect from 10.32.4.5 port 43176:11: Closed due to user request. [preauth] Sep 28 05:46:10 prd-ubuntu1804-docker-4c-4g-4984 sshd[1535]: Disconnected from invalid user jenkins 10.32.4.5 port 43176 [preauth] Sep 28 05:46:13 prd-ubuntu1804-docker-4c-4g-4984 sshd[1742]: Invalid user jenkins from 10.32.4.5 port 43178 Sep 28 05:46:13 prd-ubuntu1804-docker-4c-4g-4984 sshd[1742]: Received disconnect from 10.32.4.5 port 43178:11: Closed due to user request. [preauth] Sep 28 05:46:13 prd-ubuntu1804-docker-4c-4g-4984 sshd[1742]: Disconnected from invalid user jenkins 10.32.4.5 port 43178 [preauth] Sep 28 05:46:15 prd-ubuntu1804-docker-4c-4g-4984 sshd[1787]: Invalid user jenkins from 10.32.4.5 port 43180 Sep 28 05:46:15 prd-ubuntu1804-docker-4c-4g-4984 sshd[1787]: Received disconnect from 10.32.4.5 port 43180:11: Closed due to user request. [preauth] Sep 28 05:46:15 prd-ubuntu1804-docker-4c-4g-4984 sshd[1787]: Disconnected from invalid user jenkins 10.32.4.5 port 43180 [preauth] Sep 28 05:46:17 prd-ubuntu1804-docker-4c-4g-4984 sshd[1805]: Invalid user jenkins from 10.32.4.5 port 43182 Sep 28 05:46:17 prd-ubuntu1804-docker-4c-4g-4984 sshd[1805]: Received disconnect from 10.32.4.5 port 43182:11: Closed due to user request. [preauth] Sep 28 05:46:17 prd-ubuntu1804-docker-4c-4g-4984 sshd[1805]: Disconnected from invalid user jenkins 10.32.4.5 port 43182 [preauth] Sep 28 05:46:19 prd-ubuntu1804-docker-4c-4g-4984 sshd[1817]: Invalid user jenkins from 10.32.4.5 port 43184 Sep 28 05:46:19 prd-ubuntu1804-docker-4c-4g-4984 sshd[1817]: Received disconnect from 10.32.4.5 port 43184:11: Closed due to user request. [preauth] Sep 28 05:46:19 prd-ubuntu1804-docker-4c-4g-4984 sshd[1817]: Disconnected from invalid user jenkins 10.32.4.5 port 43184 [preauth] Sep 28 05:46:20 prd-ubuntu1804-docker-4c-4g-4984 useradd[1825]: new group: name=jenkins, GID=1001 Sep 28 05:46:20 prd-ubuntu1804-docker-4c-4g-4984 useradd[1825]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 28 05:46:20 prd-ubuntu1804-docker-4c-4g-4984 usermod[1832]: add 'jenkins' to group 'docker' Sep 28 05:46:20 prd-ubuntu1804-docker-4c-4g-4984 usermod[1832]: add 'jenkins' to shadow group 'docker' Sep 28 05:46:22 prd-ubuntu1804-docker-4c-4g-4984 sshd[1889]: Accepted publickey for jenkins from 10.32.4.5 port 43186 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 28 05:46:22 prd-ubuntu1804-docker-4c-4g-4984 sshd[1889]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 28 05:46:22 prd-ubuntu1804-docker-4c-4g-4984 systemd-logind[1028]: New session 2 of user jenkins. Sep 28 05:46:22 prd-ubuntu1804-docker-4c-4g-4984 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 28 05:47:01 prd-ubuntu1804-docker-4c-4g-4984 CRON[2396]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 28 05:47:01 prd-ubuntu1804-docker-4c-4g-4984 CRON[2396]: pam_unix(cron:session): session closed for user root Sep 28 05:48:01 prd-ubuntu1804-docker-4c-4g-4984 CRON[2442]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 28 05:48:01 prd-ubuntu1804-docker-4c-4g-4984 CRON[2442]: pam_unix(cron:session): session closed for user root Sep 28 05:49:01 prd-ubuntu1804-docker-4c-4g-4984 CRON[3343]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 28 05:49:01 prd-ubuntu1804-docker-4c-4g-4984 CRON[3343]: pam_unix(cron:session): session closed for user root Sep 28 05:49:37 prd-ubuntu1804-docker-4c-4g-4984 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-auth-token-fetch-docker-merge-h-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Sep 28 05:49:37 prd-ubuntu1804-docker-4c-4g-4984 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)