May 26 10:03:24 prd-ubuntu1804-docker-4c-4g-1806 passwd[924]: password for 'ubuntu' changed by 'root' May 26 10:03:24 prd-ubuntu1804-docker-4c-4g-1806 systemd-logind[969]: Watching system buttons on /dev/input/event0 (Power Button) May 26 10:03:24 prd-ubuntu1804-docker-4c-4g-1806 systemd-logind[969]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 26 10:03:24 prd-ubuntu1804-docker-4c-4g-1806 systemd-logind[969]: New seat seat0. May 26 10:03:24 prd-ubuntu1804-docker-4c-4g-1806 sshd[1154]: Server listening on 0.0.0.0 port 22. May 26 10:03:24 prd-ubuntu1804-docker-4c-4g-1806 sshd[1154]: Server listening on :: port 22. May 26 10:03:27 prd-ubuntu1804-docker-4c-4g-1806 sshd[1373]: Did not receive identification string from 10.32.4.5 port 59052 May 26 10:03:32 prd-ubuntu1804-docker-4c-4g-1806 sshd[1438]: Invalid user jenkins from 10.32.4.5 port 59074 May 26 10:03:32 prd-ubuntu1804-docker-4c-4g-1806 sshd[1438]: Received disconnect from 10.32.4.5 port 59074:11: Closed due to user request. [preauth] May 26 10:03:32 prd-ubuntu1804-docker-4c-4g-1806 sshd[1438]: Disconnected from invalid user jenkins 10.32.4.5 port 59074 [preauth] May 26 10:03:34 prd-ubuntu1804-docker-4c-4g-1806 sshd[1442]: Invalid user jenkins from 10.32.4.5 port 59094 May 26 10:03:35 prd-ubuntu1804-docker-4c-4g-1806 sshd[1442]: Received disconnect from 10.32.4.5 port 59094:11: Closed due to user request. [preauth] May 26 10:03:35 prd-ubuntu1804-docker-4c-4g-1806 sshd[1442]: Disconnected from invalid user jenkins 10.32.4.5 port 59094 [preauth] May 26 10:03:37 prd-ubuntu1804-docker-4c-4g-1806 sshd[1444]: Invalid user jenkins from 10.32.4.5 port 59102 May 26 10:03:37 prd-ubuntu1804-docker-4c-4g-1806 sshd[1444]: Received disconnect from 10.32.4.5 port 59102:11: Closed due to user request. [preauth] May 26 10:03:37 prd-ubuntu1804-docker-4c-4g-1806 sshd[1444]: Disconnected from invalid user jenkins 10.32.4.5 port 59102 [preauth] May 26 10:03:39 prd-ubuntu1804-docker-4c-4g-1806 sshd[1446]: Invalid user jenkins from 10.32.4.5 port 59112 May 26 10:03:39 prd-ubuntu1804-docker-4c-4g-1806 sshd[1446]: Received disconnect from 10.32.4.5 port 59112:11: Closed due to user request. [preauth] May 26 10:03:39 prd-ubuntu1804-docker-4c-4g-1806 sshd[1446]: Disconnected from invalid user jenkins 10.32.4.5 port 59112 [preauth] May 26 10:03:41 prd-ubuntu1804-docker-4c-4g-1806 sshd[1448]: Invalid user jenkins from 10.32.4.5 port 59120 May 26 10:03:41 prd-ubuntu1804-docker-4c-4g-1806 sshd[1448]: Received disconnect from 10.32.4.5 port 59120:11: Closed due to user request. [preauth] May 26 10:03:41 prd-ubuntu1804-docker-4c-4g-1806 sshd[1448]: Disconnected from invalid user jenkins 10.32.4.5 port 59120 [preauth] May 26 10:03:43 prd-ubuntu1804-docker-4c-4g-1806 sshd[1450]: Invalid user jenkins from 10.32.4.5 port 59134 May 26 10:03:43 prd-ubuntu1804-docker-4c-4g-1806 sshd[1450]: Received disconnect from 10.32.4.5 port 59134:11: Closed due to user request. [preauth] May 26 10:03:43 prd-ubuntu1804-docker-4c-4g-1806 sshd[1450]: Disconnected from invalid user jenkins 10.32.4.5 port 59134 [preauth] May 26 10:03:45 prd-ubuntu1804-docker-4c-4g-1806 sshd[1462]: Invalid user jenkins from 10.32.4.5 port 59152 May 26 10:03:45 prd-ubuntu1804-docker-4c-4g-1806 sshd[1462]: Received disconnect from 10.32.4.5 port 59152:11: Closed due to user request. [preauth] May 26 10:03:45 prd-ubuntu1804-docker-4c-4g-1806 sshd[1462]: Disconnected from invalid user jenkins 10.32.4.5 port 59152 [preauth] May 26 10:03:48 prd-ubuntu1804-docker-4c-4g-1806 sshd[1670]: Invalid user jenkins from 10.32.4.5 port 59166 May 26 10:03:48 prd-ubuntu1804-docker-4c-4g-1806 sshd[1670]: Received disconnect from 10.32.4.5 port 59166:11: Closed due to user request. [preauth] May 26 10:03:48 prd-ubuntu1804-docker-4c-4g-1806 sshd[1670]: Disconnected from invalid user jenkins 10.32.4.5 port 59166 [preauth] May 26 10:03:50 prd-ubuntu1804-docker-4c-4g-1806 sshd[1715]: Invalid user jenkins from 10.32.4.5 port 59172 May 26 10:03:50 prd-ubuntu1804-docker-4c-4g-1806 sshd[1715]: Received disconnect from 10.32.4.5 port 59172:11: Closed due to user request. [preauth] May 26 10:03:50 prd-ubuntu1804-docker-4c-4g-1806 sshd[1715]: Disconnected from invalid user jenkins 10.32.4.5 port 59172 [preauth] May 26 10:03:52 prd-ubuntu1804-docker-4c-4g-1806 sshd[1733]: Invalid user jenkins from 10.32.4.5 port 59174 May 26 10:03:52 prd-ubuntu1804-docker-4c-4g-1806 sshd[1733]: Received disconnect from 10.32.4.5 port 59174:11: Closed due to user request. [preauth] May 26 10:03:52 prd-ubuntu1804-docker-4c-4g-1806 sshd[1733]: Disconnected from invalid user jenkins 10.32.4.5 port 59174 [preauth] May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 useradd[1742]: new group: name=jenkins, GID=1001 May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 useradd[1742]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 usermod[1749]: add 'jenkins' to group 'docker' May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 usermod[1749]: add 'jenkins' to shadow group 'docker' May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 sshd[1783]: Accepted publickey for jenkins from 10.32.4.5 port 59198 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 sshd[1783]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 systemd-logind[969]: New session 1 of user jenkins. May 26 10:03:54 prd-ubuntu1804-docker-4c-4g-1806 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 26 10:04:02 prd-ubuntu1804-docker-4c-4g-1806 CRON[2012]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 10:04:02 prd-ubuntu1804-docker-4c-4g-1806 CRON[2012]: pam_unix(cron:session): session closed for user root May 26 10:05:01 prd-ubuntu1804-docker-4c-4g-1806 CRON[2353]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 10:05:01 prd-ubuntu1804-docker-4c-4g-1806 CRON[2353]: pam_unix(cron:session): session closed for user root May 26 10:06:01 prd-ubuntu1804-docker-4c-4g-1806 CRON[2786]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 10:06:01 prd-ubuntu1804-docker-4c-4g-1806 CRON[2786]: pam_unix(cron:session): session closed for user root May 26 10:07:01 prd-ubuntu1804-docker-4c-4g-1806 CRON[5225]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 10:07:01 prd-ubuntu1804-docker-4c-4g-1806 CRON[5225]: pam_unix(cron:session): session closed for user root May 26 10:07:40 prd-ubuntu1804-docker-4c-4g-1806 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-pm-file-converter-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 26 10:07:40 prd-ubuntu1804-docker-4c-4g-1806 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)