Feb 11 07:18:07 prd-ubuntu1804-docker-4c-4g-5645 passwd[900]: password for 'ubuntu' changed by 'root' Feb 11 07:18:07 prd-ubuntu1804-docker-4c-4g-5645 systemd-logind[943]: Watching system buttons on /dev/input/event0 (Power Button) Feb 11 07:18:07 prd-ubuntu1804-docker-4c-4g-5645 systemd-logind[943]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 11 07:18:07 prd-ubuntu1804-docker-4c-4g-5645 systemd-logind[943]: New seat seat0. Feb 11 07:18:08 prd-ubuntu1804-docker-4c-4g-5645 sshd[1237]: Server listening on 0.0.0.0 port 22. Feb 11 07:18:08 prd-ubuntu1804-docker-4c-4g-5645 sshd[1237]: Server listening on :: port 22. Feb 11 07:18:09 prd-ubuntu1804-docker-4c-4g-5645 sshd[1326]: Did not receive identification string from 10.32.4.5 port 35958 Feb 11 07:18:11 prd-ubuntu1804-docker-4c-4g-5645 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 35962 Feb 11 07:18:12 prd-ubuntu1804-docker-4c-4g-5645 sshd[1453]: Received disconnect from 10.32.4.5 port 35962:11: Closed due to user request. [preauth] Feb 11 07:18:12 prd-ubuntu1804-docker-4c-4g-5645 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 35962 [preauth] Feb 11 07:18:14 prd-ubuntu1804-docker-4c-4g-5645 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 35964 Feb 11 07:18:14 prd-ubuntu1804-docker-4c-4g-5645 sshd[1496]: Received disconnect from 10.32.4.5 port 35964:11: Closed due to user request. [preauth] Feb 11 07:18:14 prd-ubuntu1804-docker-4c-4g-5645 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 35964 [preauth] Feb 11 07:18:16 prd-ubuntu1804-docker-4c-4g-5645 sshd[1509]: Invalid user jenkins from 10.32.4.5 port 35966 Feb 11 07:18:16 prd-ubuntu1804-docker-4c-4g-5645 sshd[1509]: Received disconnect from 10.32.4.5 port 35966:11: Closed due to user request. [preauth] Feb 11 07:18:16 prd-ubuntu1804-docker-4c-4g-5645 sshd[1509]: Disconnected from invalid user jenkins 10.32.4.5 port 35966 [preauth] Feb 11 07:18:18 prd-ubuntu1804-docker-4c-4g-5645 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 35968 Feb 11 07:18:18 prd-ubuntu1804-docker-4c-4g-5645 sshd[1514]: Received disconnect from 10.32.4.5 port 35968:11: Closed due to user request. [preauth] Feb 11 07:18:18 prd-ubuntu1804-docker-4c-4g-5645 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 35968 [preauth] Feb 11 07:18:20 prd-ubuntu1804-docker-4c-4g-5645 sshd[1516]: Invalid user jenkins from 10.32.4.5 port 35970 Feb 11 07:18:20 prd-ubuntu1804-docker-4c-4g-5645 sshd[1516]: Received disconnect from 10.32.4.5 port 35970:11: Closed due to user request. [preauth] Feb 11 07:18:20 prd-ubuntu1804-docker-4c-4g-5645 sshd[1516]: Disconnected from invalid user jenkins 10.32.4.5 port 35970 [preauth] Feb 11 07:18:22 prd-ubuntu1804-docker-4c-4g-5645 sshd[1518]: Invalid user jenkins from 10.32.4.5 port 35972 Feb 11 07:18:22 prd-ubuntu1804-docker-4c-4g-5645 sshd[1518]: Received disconnect from 10.32.4.5 port 35972:11: Closed due to user request. [preauth] Feb 11 07:18:22 prd-ubuntu1804-docker-4c-4g-5645 sshd[1518]: Disconnected from invalid user jenkins 10.32.4.5 port 35972 [preauth] Feb 11 07:18:24 prd-ubuntu1804-docker-4c-4g-5645 sshd[1520]: Invalid user jenkins from 10.32.4.5 port 35974 Feb 11 07:18:24 prd-ubuntu1804-docker-4c-4g-5645 sshd[1520]: Received disconnect from 10.32.4.5 port 35974:11: Closed due to user request. [preauth] Feb 11 07:18:24 prd-ubuntu1804-docker-4c-4g-5645 sshd[1520]: Disconnected from invalid user jenkins 10.32.4.5 port 35974 [preauth] Feb 11 07:18:26 prd-ubuntu1804-docker-4c-4g-5645 sshd[1522]: Invalid user jenkins from 10.32.4.5 port 35978 Feb 11 07:18:26 prd-ubuntu1804-docker-4c-4g-5645 sshd[1522]: Received disconnect from 10.32.4.5 port 35978:11: Closed due to user request. [preauth] Feb 11 07:18:26 prd-ubuntu1804-docker-4c-4g-5645 sshd[1522]: Disconnected from invalid user jenkins 10.32.4.5 port 35978 [preauth] Feb 11 07:18:28 prd-ubuntu1804-docker-4c-4g-5645 sshd[1524]: Invalid user jenkins from 10.32.4.5 port 35980 Feb 11 07:18:28 prd-ubuntu1804-docker-4c-4g-5645 sshd[1524]: Received disconnect from 10.32.4.5 port 35980:11: Closed due to user request. [preauth] Feb 11 07:18:28 prd-ubuntu1804-docker-4c-4g-5645 sshd[1524]: Disconnected from invalid user jenkins 10.32.4.5 port 35980 [preauth] Feb 11 07:18:31 prd-ubuntu1804-docker-4c-4g-5645 sshd[1691]: Invalid user jenkins from 10.32.4.5 port 35982 Feb 11 07:18:31 prd-ubuntu1804-docker-4c-4g-5645 sshd[1691]: Received disconnect from 10.32.4.5 port 35982:11: Closed due to user request. [preauth] Feb 11 07:18:31 prd-ubuntu1804-docker-4c-4g-5645 sshd[1691]: Disconnected from invalid user jenkins 10.32.4.5 port 35982 [preauth] Feb 11 07:18:33 prd-ubuntu1804-docker-4c-4g-5645 sshd[1765]: Invalid user jenkins from 10.32.4.5 port 35984 Feb 11 07:18:33 prd-ubuntu1804-docker-4c-4g-5645 sshd[1765]: Received disconnect from 10.32.4.5 port 35984:11: Closed due to user request. [preauth] Feb 11 07:18:33 prd-ubuntu1804-docker-4c-4g-5645 sshd[1765]: Disconnected from invalid user jenkins 10.32.4.5 port 35984 [preauth] Feb 11 07:18:35 prd-ubuntu1804-docker-4c-4g-5645 sshd[1802]: Invalid user jenkins from 10.32.4.5 port 35986 Feb 11 07:18:36 prd-ubuntu1804-docker-4c-4g-5645 sshd[1802]: Received disconnect from 10.32.4.5 port 35986:11: Closed due to user request. [preauth] Feb 11 07:18:36 prd-ubuntu1804-docker-4c-4g-5645 sshd[1802]: Disconnected from invalid user jenkins 10.32.4.5 port 35986 [preauth] Feb 11 07:18:38 prd-ubuntu1804-docker-4c-4g-5645 sshd[1806]: Invalid user jenkins from 10.32.4.5 port 35988 Feb 11 07:18:38 prd-ubuntu1804-docker-4c-4g-5645 sshd[1806]: Received disconnect from 10.32.4.5 port 35988:11: Closed due to user request. [preauth] Feb 11 07:18:38 prd-ubuntu1804-docker-4c-4g-5645 sshd[1806]: Disconnected from invalid user jenkins 10.32.4.5 port 35988 [preauth] Feb 11 07:18:39 prd-ubuntu1804-docker-4c-4g-5645 useradd[1824]: new group: name=jenkins, GID=1001 Feb 11 07:18:39 prd-ubuntu1804-docker-4c-4g-5645 useradd[1824]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 11 07:18:39 prd-ubuntu1804-docker-4c-4g-5645 usermod[1838]: add 'jenkins' to group 'docker' Feb 11 07:18:39 prd-ubuntu1804-docker-4c-4g-5645 usermod[1838]: add 'jenkins' to shadow group 'docker' Feb 11 07:18:40 prd-ubuntu1804-docker-4c-4g-5645 sshd[1873]: Accepted publickey for jenkins from 10.32.4.5 port 35990 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 11 07:18:40 prd-ubuntu1804-docker-4c-4g-5645 sshd[1873]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 11 07:18:40 prd-ubuntu1804-docker-4c-4g-5645 systemd-logind[943]: New session 1 of user jenkins. Feb 11 07:18:40 prd-ubuntu1804-docker-4c-4g-5645 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 11 07:19:02 prd-ubuntu1804-docker-4c-4g-5645 CRON[2380]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 11 07:19:02 prd-ubuntu1804-docker-4c-4g-5645 CRON[2380]: pam_unix(cron:session): session closed for user root Feb 11 07:20:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[2445]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 11 07:20:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[2445]: pam_unix(cron:session): session closed for user root Feb 11 07:21:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[2922]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 11 07:21:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[2922]: pam_unix(cron:session): session closed for user root Feb 11 07:22:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[6327]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 11 07:22:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[6327]: pam_unix(cron:session): session closed for user root Feb 11 07:23:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[7600]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 11 07:23:01 prd-ubuntu1804-docker-4c-4g-5645 CRON[7600]: pam_unix(cron:session): session closed for user root Feb 11 07:23:25 prd-ubuntu1804-docker-4c-4g-5645 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-sme-capifcore-docker-merge-l-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 11 07:23:25 prd-ubuntu1804-docker-4c-4g-5645 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)