Sep 24 15:18:53 prd-ubuntu1804-docker-4c-4g-4554 passwd[924]: password for 'ubuntu' changed by 'root' Sep 24 15:18:53 prd-ubuntu1804-docker-4c-4g-4554 systemd-logind[954]: Watching system buttons on /dev/input/event0 (Power Button) Sep 24 15:18:53 prd-ubuntu1804-docker-4c-4g-4554 systemd-logind[954]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 24 15:18:53 prd-ubuntu1804-docker-4c-4g-4554 systemd-logind[954]: New seat seat0. Sep 24 15:18:53 prd-ubuntu1804-docker-4c-4g-4554 sshd[1228]: Server listening on 0.0.0.0 port 22. Sep 24 15:18:53 prd-ubuntu1804-docker-4c-4g-4554 sshd[1228]: Server listening on :: port 22. Sep 24 15:18:54 prd-ubuntu1804-docker-4c-4g-4554 sshd[1280]: Did not receive identification string from 10.32.4.5 port 46478 Sep 24 15:18:55 prd-ubuntu1804-docker-4c-4g-4554 sshd[1406]: Invalid user jenkins from 10.32.4.5 port 46480 Sep 24 15:18:56 prd-ubuntu1804-docker-4c-4g-4554 sshd[1406]: Received disconnect from 10.32.4.5 port 46480:11: Closed due to user request. [preauth] Sep 24 15:18:56 prd-ubuntu1804-docker-4c-4g-4554 sshd[1406]: Disconnected from invalid user jenkins 10.32.4.5 port 46480 [preauth] Sep 24 15:18:58 prd-ubuntu1804-docker-4c-4g-4554 sshd[1433]: Invalid user jenkins from 10.32.4.5 port 46482 Sep 24 15:18:58 prd-ubuntu1804-docker-4c-4g-4554 sshd[1433]: Received disconnect from 10.32.4.5 port 46482:11: Closed due to user request. [preauth] Sep 24 15:18:58 prd-ubuntu1804-docker-4c-4g-4554 sshd[1433]: Disconnected from invalid user jenkins 10.32.4.5 port 46482 [preauth] Sep 24 15:19:00 prd-ubuntu1804-docker-4c-4g-4554 sshd[1479]: Invalid user jenkins from 10.32.4.5 port 46490 Sep 24 15:19:00 prd-ubuntu1804-docker-4c-4g-4554 sshd[1479]: Received disconnect from 10.32.4.5 port 46490:11: Closed due to user request. [preauth] Sep 24 15:19:00 prd-ubuntu1804-docker-4c-4g-4554 sshd[1479]: Disconnected from invalid user jenkins 10.32.4.5 port 46490 [preauth] Sep 24 15:19:01 prd-ubuntu1804-docker-4c-4g-4554 CRON[1488]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 15:19:01 prd-ubuntu1804-docker-4c-4g-4554 CRON[1488]: pam_unix(cron:session): session closed for user root Sep 24 15:19:02 prd-ubuntu1804-docker-4c-4g-4554 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 46492 Sep 24 15:19:02 prd-ubuntu1804-docker-4c-4g-4554 sshd[1494]: Received disconnect from 10.32.4.5 port 46492:11: Closed due to user request. [preauth] Sep 24 15:19:02 prd-ubuntu1804-docker-4c-4g-4554 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 46492 [preauth] Sep 24 15:19:04 prd-ubuntu1804-docker-4c-4g-4554 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 46494 Sep 24 15:19:04 prd-ubuntu1804-docker-4c-4g-4554 sshd[1496]: Received disconnect from 10.32.4.5 port 46494:11: Closed due to user request. [preauth] Sep 24 15:19:04 prd-ubuntu1804-docker-4c-4g-4554 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 46494 [preauth] Sep 24 15:19:06 prd-ubuntu1804-docker-4c-4g-4554 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 46498 Sep 24 15:19:06 prd-ubuntu1804-docker-4c-4g-4554 sshd[1498]: Received disconnect from 10.32.4.5 port 46498:11: Closed due to user request. [preauth] Sep 24 15:19:06 prd-ubuntu1804-docker-4c-4g-4554 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 46498 [preauth] Sep 24 15:19:08 prd-ubuntu1804-docker-4c-4g-4554 sshd[1500]: Invalid user jenkins from 10.32.4.5 port 46502 Sep 24 15:19:08 prd-ubuntu1804-docker-4c-4g-4554 sshd[1500]: Received disconnect from 10.32.4.5 port 46502:11: Closed due to user request. [preauth] Sep 24 15:19:08 prd-ubuntu1804-docker-4c-4g-4554 sshd[1500]: Disconnected from invalid user jenkins 10.32.4.5 port 46502 [preauth] Sep 24 15:19:10 prd-ubuntu1804-docker-4c-4g-4554 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 46504 Sep 24 15:19:10 prd-ubuntu1804-docker-4c-4g-4554 sshd[1502]: Received disconnect from 10.32.4.5 port 46504:11: Closed due to user request. [preauth] Sep 24 15:19:10 prd-ubuntu1804-docker-4c-4g-4554 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 46504 [preauth] Sep 24 15:19:12 prd-ubuntu1804-docker-4c-4g-4554 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 46506 Sep 24 15:19:12 prd-ubuntu1804-docker-4c-4g-4554 sshd[1504]: Received disconnect from 10.32.4.5 port 46506:11: Closed due to user request. [preauth] Sep 24 15:19:12 prd-ubuntu1804-docker-4c-4g-4554 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 46506 [preauth] Sep 24 15:19:15 prd-ubuntu1804-docker-4c-4g-4554 sshd[1525]: Invalid user jenkins from 10.32.4.5 port 46508 Sep 24 15:19:15 prd-ubuntu1804-docker-4c-4g-4554 sshd[1525]: Received disconnect from 10.32.4.5 port 46508:11: Closed due to user request. [preauth] Sep 24 15:19:15 prd-ubuntu1804-docker-4c-4g-4554 sshd[1525]: Disconnected from invalid user jenkins 10.32.4.5 port 46508 [preauth] Sep 24 15:19:17 prd-ubuntu1804-docker-4c-4g-4554 sshd[1744]: Invalid user jenkins from 10.32.4.5 port 46510 Sep 24 15:19:17 prd-ubuntu1804-docker-4c-4g-4554 sshd[1744]: Received disconnect from 10.32.4.5 port 46510:11: Closed due to user request. [preauth] Sep 24 15:19:17 prd-ubuntu1804-docker-4c-4g-4554 sshd[1744]: Disconnected from invalid user jenkins 10.32.4.5 port 46510 [preauth] Sep 24 15:19:19 prd-ubuntu1804-docker-4c-4g-4554 sshd[1783]: Invalid user jenkins from 10.32.4.5 port 46512 Sep 24 15:19:20 prd-ubuntu1804-docker-4c-4g-4554 sshd[1783]: Received disconnect from 10.32.4.5 port 46512:11: Closed due to user request. [preauth] Sep 24 15:19:20 prd-ubuntu1804-docker-4c-4g-4554 sshd[1783]: Disconnected from invalid user jenkins 10.32.4.5 port 46512 [preauth] Sep 24 15:19:22 prd-ubuntu1804-docker-4c-4g-4554 sshd[1790]: Invalid user jenkins from 10.32.4.5 port 46514 Sep 24 15:19:22 prd-ubuntu1804-docker-4c-4g-4554 sshd[1790]: Received disconnect from 10.32.4.5 port 46514:11: Closed due to user request. [preauth] Sep 24 15:19:22 prd-ubuntu1804-docker-4c-4g-4554 sshd[1790]: Disconnected from invalid user jenkins 10.32.4.5 port 46514 [preauth] Sep 24 15:19:24 prd-ubuntu1804-docker-4c-4g-4554 useradd[1806]: new group: name=jenkins, GID=1001 Sep 24 15:19:24 prd-ubuntu1804-docker-4c-4g-4554 useradd[1806]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 24 15:19:24 prd-ubuntu1804-docker-4c-4g-4554 usermod[1815]: add 'jenkins' to group 'docker' Sep 24 15:19:24 prd-ubuntu1804-docker-4c-4g-4554 usermod[1815]: add 'jenkins' to shadow group 'docker' Sep 24 15:19:24 prd-ubuntu1804-docker-4c-4g-4554 sshd[1807]: Received disconnect from 10.32.4.5 port 46518:11: Closed due to user request. [preauth] Sep 24 15:19:24 prd-ubuntu1804-docker-4c-4g-4554 sshd[1807]: Disconnected from authenticating user jenkins 10.32.4.5 port 46518 [preauth] Sep 24 15:19:26 prd-ubuntu1804-docker-4c-4g-4554 sshd[1870]: Accepted publickey for jenkins from 10.32.4.5 port 46520 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 24 15:19:26 prd-ubuntu1804-docker-4c-4g-4554 sshd[1870]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 24 15:19:26 prd-ubuntu1804-docker-4c-4g-4554 systemd-logind[954]: New session 2 of user jenkins. Sep 24 15:19:26 prd-ubuntu1804-docker-4c-4g-4554 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 24 15:20:02 prd-ubuntu1804-docker-4c-4g-4554 CRON[2370]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 15:20:02 prd-ubuntu1804-docker-4c-4g-4554 CRON[2370]: pam_unix(cron:session): session closed for user root Sep 24 15:21:01 prd-ubuntu1804-docker-4c-4g-4554 CRON[2421]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 15:21:01 prd-ubuntu1804-docker-4c-4g-4554 CRON[2421]: pam_unix(cron:session): session closed for user root Sep 24 15:22:01 prd-ubuntu1804-docker-4c-4g-4554 CRON[3140]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 15:22:01 prd-ubuntu1804-docker-4c-4g-4554 CRON[3140]: pam_unix(cron:session): session closed for user root Sep 24 15:22:38 prd-ubuntu1804-docker-4c-4g-4554 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-rappcatalogue-enhanced-docker-merge-h-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Sep 24 15:22:38 prd-ubuntu1804-docker-4c-4g-4554 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)