Apr 24 19:23:34 prd-ubuntu1804-docker-4c-4g-829 passwd[938]: password for 'ubuntu' changed by 'root' Apr 24 19:23:34 prd-ubuntu1804-docker-4c-4g-829 systemd-logind[1027]: Watching system buttons on /dev/input/event0 (Power Button) Apr 24 19:23:34 prd-ubuntu1804-docker-4c-4g-829 systemd-logind[1027]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 24 19:23:34 prd-ubuntu1804-docker-4c-4g-829 systemd-logind[1027]: New seat seat0. Apr 24 19:23:34 prd-ubuntu1804-docker-4c-4g-829 sshd[1263]: Server listening on 0.0.0.0 port 22. Apr 24 19:23:34 prd-ubuntu1804-docker-4c-4g-829 sshd[1263]: Server listening on :: port 22. Apr 24 19:23:37 prd-ubuntu1804-docker-4c-4g-829 sshd[1483]: Did not receive identification string from 10.32.4.5 port 50002 Apr 24 19:23:45 prd-ubuntu1804-docker-4c-4g-829 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 50012 Apr 24 19:23:45 prd-ubuntu1804-docker-4c-4g-829 sshd[1546]: Received disconnect from 10.32.4.5 port 50012:11: Closed due to user request. [preauth] Apr 24 19:23:45 prd-ubuntu1804-docker-4c-4g-829 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 50012 [preauth] Apr 24 19:23:47 prd-ubuntu1804-docker-4c-4g-829 sshd[1550]: Invalid user jenkins from 10.32.4.5 port 50022 Apr 24 19:23:47 prd-ubuntu1804-docker-4c-4g-829 sshd[1550]: Received disconnect from 10.32.4.5 port 50022:11: Closed due to user request. [preauth] Apr 24 19:23:47 prd-ubuntu1804-docker-4c-4g-829 sshd[1550]: Disconnected from invalid user jenkins 10.32.4.5 port 50022 [preauth] Apr 24 19:23:49 prd-ubuntu1804-docker-4c-4g-829 sshd[1552]: Invalid user jenkins from 10.32.4.5 port 50032 Apr 24 19:23:49 prd-ubuntu1804-docker-4c-4g-829 sshd[1552]: Received disconnect from 10.32.4.5 port 50032:11: Closed due to user request. [preauth] Apr 24 19:23:49 prd-ubuntu1804-docker-4c-4g-829 sshd[1552]: Disconnected from invalid user jenkins 10.32.4.5 port 50032 [preauth] Apr 24 19:23:51 prd-ubuntu1804-docker-4c-4g-829 sshd[1554]: Invalid user jenkins from 10.32.4.5 port 50036 Apr 24 19:23:51 prd-ubuntu1804-docker-4c-4g-829 sshd[1554]: Received disconnect from 10.32.4.5 port 50036:11: Closed due to user request. [preauth] Apr 24 19:23:51 prd-ubuntu1804-docker-4c-4g-829 sshd[1554]: Disconnected from invalid user jenkins 10.32.4.5 port 50036 [preauth] Apr 24 19:23:53 prd-ubuntu1804-docker-4c-4g-829 sshd[1556]: Invalid user jenkins from 10.32.4.5 port 50042 Apr 24 19:23:53 prd-ubuntu1804-docker-4c-4g-829 sshd[1556]: Received disconnect from 10.32.4.5 port 50042:11: Closed due to user request. [preauth] Apr 24 19:23:53 prd-ubuntu1804-docker-4c-4g-829 sshd[1556]: Disconnected from invalid user jenkins 10.32.4.5 port 50042 [preauth] Apr 24 19:23:55 prd-ubuntu1804-docker-4c-4g-829 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 50046 Apr 24 19:23:55 prd-ubuntu1804-docker-4c-4g-829 sshd[1559]: Received disconnect from 10.32.4.5 port 50046:11: Closed due to user request. [preauth] Apr 24 19:23:55 prd-ubuntu1804-docker-4c-4g-829 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 50046 [preauth] Apr 24 19:23:57 prd-ubuntu1804-docker-4c-4g-829 sshd[1724]: Invalid user jenkins from 10.32.4.5 port 50054 Apr 24 19:23:58 prd-ubuntu1804-docker-4c-4g-829 sshd[1724]: Received disconnect from 10.32.4.5 port 50054:11: Closed due to user request. [preauth] Apr 24 19:23:58 prd-ubuntu1804-docker-4c-4g-829 sshd[1724]: Disconnected from invalid user jenkins 10.32.4.5 port 50054 [preauth] Apr 24 19:24:00 prd-ubuntu1804-docker-4c-4g-829 sshd[1822]: Invalid user jenkins from 10.32.4.5 port 50060 Apr 24 19:24:00 prd-ubuntu1804-docker-4c-4g-829 sshd[1822]: Received disconnect from 10.32.4.5 port 50060:11: Closed due to user request. [preauth] Apr 24 19:24:00 prd-ubuntu1804-docker-4c-4g-829 sshd[1822]: Disconnected from invalid user jenkins 10.32.4.5 port 50060 [preauth] Apr 24 19:24:02 prd-ubuntu1804-docker-4c-4g-829 CRON[1840]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 19:24:02 prd-ubuntu1804-docker-4c-4g-829 CRON[1840]: pam_unix(cron:session): session closed for user root Apr 24 19:24:02 prd-ubuntu1804-docker-4c-4g-829 sshd[1851]: Invalid user jenkins from 10.32.4.5 port 50062 Apr 24 19:24:02 prd-ubuntu1804-docker-4c-4g-829 sshd[1851]: Received disconnect from 10.32.4.5 port 50062:11: Closed due to user request. [preauth] Apr 24 19:24:02 prd-ubuntu1804-docker-4c-4g-829 sshd[1851]: Disconnected from invalid user jenkins 10.32.4.5 port 50062 [preauth] Apr 24 19:24:03 prd-ubuntu1804-docker-4c-4g-829 useradd[1867]: new group: name=jenkins, GID=1001 Apr 24 19:24:03 prd-ubuntu1804-docker-4c-4g-829 useradd[1867]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 24 19:24:03 prd-ubuntu1804-docker-4c-4g-829 usermod[1874]: add 'jenkins' to group 'docker' Apr 24 19:24:03 prd-ubuntu1804-docker-4c-4g-829 usermod[1874]: add 'jenkins' to shadow group 'docker' Apr 24 19:24:04 prd-ubuntu1804-docker-4c-4g-829 sshd[1908]: Accepted publickey for jenkins from 10.32.4.5 port 50064 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 24 19:24:04 prd-ubuntu1804-docker-4c-4g-829 sshd[1908]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 24 19:24:04 prd-ubuntu1804-docker-4c-4g-829 systemd-logind[1027]: New session 2 of user jenkins. Apr 24 19:24:04 prd-ubuntu1804-docker-4c-4g-829 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 24 19:25:01 prd-ubuntu1804-docker-4c-4g-829 CRON[2500]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 19:25:01 prd-ubuntu1804-docker-4c-4g-829 CRON[2500]: pam_unix(cron:session): session closed for user root Apr 24 19:26:01 prd-ubuntu1804-docker-4c-4g-829 CRON[5351]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 24 19:26:01 prd-ubuntu1804-docker-4c-4g-829 CRON[5351]: pam_unix(cron:session): session closed for user root Apr 24 19:26:14 prd-ubuntu1804-docker-4c-4g-829 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-pm-file-converter-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 24 19:26:14 prd-ubuntu1804-docker-4c-4g-829 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)