Aug 22 08:03:44 prd-ubuntu1804-docker-4c-4g-3094 passwd[923]: password for 'ubuntu' changed by 'root' Aug 22 08:03:44 prd-ubuntu1804-docker-4c-4g-3094 systemd-logind[966]: Watching system buttons on /dev/input/event0 (Power Button) Aug 22 08:03:44 prd-ubuntu1804-docker-4c-4g-3094 systemd-logind[966]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 22 08:03:44 prd-ubuntu1804-docker-4c-4g-3094 systemd-logind[966]: New seat seat0. Aug 22 08:03:44 prd-ubuntu1804-docker-4c-4g-3094 sshd[1289]: Server listening on 0.0.0.0 port 22. Aug 22 08:03:44 prd-ubuntu1804-docker-4c-4g-3094 sshd[1289]: Server listening on :: port 22. Aug 22 08:03:48 prd-ubuntu1804-docker-4c-4g-3094 sshd[1496]: Did not receive identification string from 10.32.4.5 port 60520 Aug 22 08:03:50 prd-ubuntu1804-docker-4c-4g-3094 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 60526 Aug 22 08:03:50 prd-ubuntu1804-docker-4c-4g-3094 sshd[1531]: Received disconnect from 10.32.4.5 port 60526:11: Closed due to user request. [preauth] Aug 22 08:03:50 prd-ubuntu1804-docker-4c-4g-3094 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 60526 [preauth] Aug 22 08:03:52 prd-ubuntu1804-docker-4c-4g-3094 sshd[1550]: Invalid user jenkins from 10.32.4.5 port 60530 Aug 22 08:03:52 prd-ubuntu1804-docker-4c-4g-3094 sshd[1550]: Received disconnect from 10.32.4.5 port 60530:11: Closed due to user request. [preauth] Aug 22 08:03:52 prd-ubuntu1804-docker-4c-4g-3094 sshd[1550]: Disconnected from invalid user jenkins 10.32.4.5 port 60530 [preauth] Aug 22 08:03:54 prd-ubuntu1804-docker-4c-4g-3094 sshd[1552]: Invalid user jenkins from 10.32.4.5 port 60532 Aug 22 08:03:54 prd-ubuntu1804-docker-4c-4g-3094 sshd[1552]: Received disconnect from 10.32.4.5 port 60532:11: Closed due to user request. [preauth] Aug 22 08:03:54 prd-ubuntu1804-docker-4c-4g-3094 sshd[1552]: Disconnected from invalid user jenkins 10.32.4.5 port 60532 [preauth] Aug 22 08:03:56 prd-ubuntu1804-docker-4c-4g-3094 sshd[1554]: Invalid user jenkins from 10.32.4.5 port 60538 Aug 22 08:03:56 prd-ubuntu1804-docker-4c-4g-3094 sshd[1554]: Received disconnect from 10.32.4.5 port 60538:11: Closed due to user request. [preauth] Aug 22 08:03:56 prd-ubuntu1804-docker-4c-4g-3094 sshd[1554]: Disconnected from invalid user jenkins 10.32.4.5 port 60538 [preauth] Aug 22 08:03:59 prd-ubuntu1804-docker-4c-4g-3094 sshd[1556]: Invalid user jenkins from 10.32.4.5 port 60542 Aug 22 08:03:59 prd-ubuntu1804-docker-4c-4g-3094 sshd[1556]: Received disconnect from 10.32.4.5 port 60542:11: Closed due to user request. [preauth] Aug 22 08:03:59 prd-ubuntu1804-docker-4c-4g-3094 sshd[1556]: Disconnected from invalid user jenkins 10.32.4.5 port 60542 [preauth] Aug 22 08:04:01 prd-ubuntu1804-docker-4c-4g-3094 sshd[1558]: Invalid user jenkins from 10.32.4.5 port 60546 Aug 22 08:04:01 prd-ubuntu1804-docker-4c-4g-3094 sshd[1558]: Received disconnect from 10.32.4.5 port 60546:11: Closed due to user request. [preauth] Aug 22 08:04:01 prd-ubuntu1804-docker-4c-4g-3094 sshd[1558]: Disconnected from invalid user jenkins 10.32.4.5 port 60546 [preauth] Aug 22 08:04:01 prd-ubuntu1804-docker-4c-4g-3094 CRON[1561]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 08:04:01 prd-ubuntu1804-docker-4c-4g-3094 CRON[1561]: pam_unix(cron:session): session closed for user root Aug 22 08:04:03 prd-ubuntu1804-docker-4c-4g-3094 sshd[1569]: Invalid user jenkins from 10.32.4.5 port 60550 Aug 22 08:04:03 prd-ubuntu1804-docker-4c-4g-3094 sshd[1569]: Received disconnect from 10.32.4.5 port 60550:11: Closed due to user request. [preauth] Aug 22 08:04:03 prd-ubuntu1804-docker-4c-4g-3094 sshd[1569]: Disconnected from invalid user jenkins 10.32.4.5 port 60550 [preauth] Aug 22 08:04:05 prd-ubuntu1804-docker-4c-4g-3094 sshd[1581]: Invalid user jenkins from 10.32.4.5 port 60554 Aug 22 08:04:05 prd-ubuntu1804-docker-4c-4g-3094 sshd[1581]: Received disconnect from 10.32.4.5 port 60554:11: Closed due to user request. [preauth] Aug 22 08:04:05 prd-ubuntu1804-docker-4c-4g-3094 sshd[1581]: Disconnected from invalid user jenkins 10.32.4.5 port 60554 [preauth] Aug 22 08:04:08 prd-ubuntu1804-docker-4c-4g-3094 sshd[1793]: Invalid user jenkins from 10.32.4.5 port 60558 Aug 22 08:04:08 prd-ubuntu1804-docker-4c-4g-3094 sshd[1793]: Received disconnect from 10.32.4.5 port 60558:11: Closed due to user request. [preauth] Aug 22 08:04:08 prd-ubuntu1804-docker-4c-4g-3094 sshd[1793]: Disconnected from invalid user jenkins 10.32.4.5 port 60558 [preauth] Aug 22 08:04:10 prd-ubuntu1804-docker-4c-4g-3094 sshd[1851]: Invalid user jenkins from 10.32.4.5 port 60564 Aug 22 08:04:10 prd-ubuntu1804-docker-4c-4g-3094 sshd[1851]: Received disconnect from 10.32.4.5 port 60564:11: Closed due to user request. [preauth] Aug 22 08:04:10 prd-ubuntu1804-docker-4c-4g-3094 sshd[1851]: Disconnected from invalid user jenkins 10.32.4.5 port 60564 [preauth] Aug 22 08:04:12 prd-ubuntu1804-docker-4c-4g-3094 sshd[1858]: Invalid user jenkins from 10.32.4.5 port 60568 Aug 22 08:04:12 prd-ubuntu1804-docker-4c-4g-3094 sshd[1858]: Received disconnect from 10.32.4.5 port 60568:11: Closed due to user request. [preauth] Aug 22 08:04:12 prd-ubuntu1804-docker-4c-4g-3094 sshd[1858]: Disconnected from invalid user jenkins 10.32.4.5 port 60568 [preauth] Aug 22 08:04:13 prd-ubuntu1804-docker-4c-4g-3094 useradd[1874]: new group: name=jenkins, GID=1001 Aug 22 08:04:13 prd-ubuntu1804-docker-4c-4g-3094 useradd[1874]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 22 08:04:13 prd-ubuntu1804-docker-4c-4g-3094 usermod[1881]: add 'jenkins' to group 'docker' Aug 22 08:04:13 prd-ubuntu1804-docker-4c-4g-3094 usermod[1881]: add 'jenkins' to shadow group 'docker' Aug 22 08:04:14 prd-ubuntu1804-docker-4c-4g-3094 sshd[1915]: Accepted publickey for jenkins from 10.32.4.5 port 60572 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 22 08:04:14 prd-ubuntu1804-docker-4c-4g-3094 sshd[1915]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 22 08:04:14 prd-ubuntu1804-docker-4c-4g-3094 systemd-logind[966]: New session 2 of user jenkins. Aug 22 08:04:14 prd-ubuntu1804-docker-4c-4g-3094 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 22 08:05:02 prd-ubuntu1804-docker-4c-4g-3094 CRON[2650]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 08:05:02 prd-ubuntu1804-docker-4c-4g-3094 CRON[2650]: pam_unix(cron:session): session closed for user root Aug 22 08:06:01 prd-ubuntu1804-docker-4c-4g-3094 CRON[3508]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 08:06:01 prd-ubuntu1804-docker-4c-4g-3094 CRON[3508]: pam_unix(cron:session): session closed for user root Aug 22 08:07:01 prd-ubuntu1804-docker-4c-4g-3094 CRON[7914]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 08:07:01 prd-ubuntu1804-docker-4c-4g-3094 CRON[7914]: pam_unix(cron:session): session closed for user root Aug 22 08:07:22 prd-ubuntu1804-docker-4c-4g-3094 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-sme-capifcore-docker-merge-h-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 22 08:07:22 prd-ubuntu1804-docker-4c-4g-3094 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)