Dec 5 07:29:46 prd-ubuntu1804-docker-4c-4g-10978 passwd[932]: password for 'ubuntu' changed by 'root' Dec 5 07:29:46 prd-ubuntu1804-docker-4c-4g-10978 systemd-logind[997]: Watching system buttons on /dev/input/event0 (Power Button) Dec 5 07:29:46 prd-ubuntu1804-docker-4c-4g-10978 systemd-logind[997]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 5 07:29:46 prd-ubuntu1804-docker-4c-4g-10978 systemd-logind[997]: New seat seat0. Dec 5 07:29:47 prd-ubuntu1804-docker-4c-4g-10978 sshd[1239]: Server listening on 0.0.0.0 port 22. Dec 5 07:29:47 prd-ubuntu1804-docker-4c-4g-10978 sshd[1239]: Server listening on :: port 22. Dec 5 07:29:49 prd-ubuntu1804-docker-4c-4g-10978 sshd[1378]: Did not receive identification string from 10.32.4.5 port 41770 Dec 5 07:29:55 prd-ubuntu1804-docker-4c-4g-10978 sshd[1488]: Invalid user jenkins from 10.32.4.5 port 41774 Dec 5 07:29:55 prd-ubuntu1804-docker-4c-4g-10978 sshd[1488]: Received disconnect from 10.32.4.5 port 41774:11: Closed due to user request. [preauth] Dec 5 07:29:55 prd-ubuntu1804-docker-4c-4g-10978 sshd[1488]: Disconnected from invalid user jenkins 10.32.4.5 port 41774 [preauth] Dec 5 07:29:57 prd-ubuntu1804-docker-4c-4g-10978 sshd[1492]: Invalid user jenkins from 10.32.4.5 port 41776 Dec 5 07:29:57 prd-ubuntu1804-docker-4c-4g-10978 sshd[1492]: Received disconnect from 10.32.4.5 port 41776:11: Closed due to user request. [preauth] Dec 5 07:29:57 prd-ubuntu1804-docker-4c-4g-10978 sshd[1492]: Disconnected from invalid user jenkins 10.32.4.5 port 41776 [preauth] Dec 5 07:29:59 prd-ubuntu1804-docker-4c-4g-10978 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 41784 Dec 5 07:29:59 prd-ubuntu1804-docker-4c-4g-10978 sshd[1494]: Received disconnect from 10.32.4.5 port 41784:11: Closed due to user request. [preauth] Dec 5 07:29:59 prd-ubuntu1804-docker-4c-4g-10978 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 41784 [preauth] Dec 5 07:30:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[1497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 07:30:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[1497]: pam_unix(cron:session): session closed for user root Dec 5 07:30:01 prd-ubuntu1804-docker-4c-4g-10978 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 41806 Dec 5 07:30:01 prd-ubuntu1804-docker-4c-4g-10978 sshd[1504]: Received disconnect from 10.32.4.5 port 41806:11: Closed due to user request. [preauth] Dec 5 07:30:01 prd-ubuntu1804-docker-4c-4g-10978 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 41806 [preauth] Dec 5 07:30:03 prd-ubuntu1804-docker-4c-4g-10978 sshd[1506]: Invalid user jenkins from 10.32.4.5 port 41808 Dec 5 07:30:03 prd-ubuntu1804-docker-4c-4g-10978 sshd[1506]: Received disconnect from 10.32.4.5 port 41808:11: Closed due to user request. [preauth] Dec 5 07:30:03 prd-ubuntu1804-docker-4c-4g-10978 sshd[1506]: Disconnected from invalid user jenkins 10.32.4.5 port 41808 [preauth] Dec 5 07:30:05 prd-ubuntu1804-docker-4c-4g-10978 sshd[1508]: Invalid user jenkins from 10.32.4.5 port 41810 Dec 5 07:30:05 prd-ubuntu1804-docker-4c-4g-10978 sshd[1508]: Received disconnect from 10.32.4.5 port 41810:11: Closed due to user request. [preauth] Dec 5 07:30:05 prd-ubuntu1804-docker-4c-4g-10978 sshd[1508]: Disconnected from invalid user jenkins 10.32.4.5 port 41810 [preauth] Dec 5 07:30:08 prd-ubuntu1804-docker-4c-4g-10978 sshd[1510]: Invalid user jenkins from 10.32.4.5 port 41816 Dec 5 07:30:08 prd-ubuntu1804-docker-4c-4g-10978 sshd[1510]: Received disconnect from 10.32.4.5 port 41816:11: Closed due to user request. [preauth] Dec 5 07:30:08 prd-ubuntu1804-docker-4c-4g-10978 sshd[1510]: Disconnected from invalid user jenkins 10.32.4.5 port 41816 [preauth] Dec 5 07:30:11 prd-ubuntu1804-docker-4c-4g-10978 sshd[1640]: Invalid user jenkins from 10.32.4.5 port 41818 Dec 5 07:30:11 prd-ubuntu1804-docker-4c-4g-10978 sshd[1640]: Received disconnect from 10.32.4.5 port 41818:11: Closed due to user request. [preauth] Dec 5 07:30:11 prd-ubuntu1804-docker-4c-4g-10978 sshd[1640]: Disconnected from invalid user jenkins 10.32.4.5 port 41818 [preauth] Dec 5 07:30:13 prd-ubuntu1804-docker-4c-4g-10978 sshd[1749]: Invalid user jenkins from 10.32.4.5 port 41820 Dec 5 07:30:13 prd-ubuntu1804-docker-4c-4g-10978 sshd[1749]: Received disconnect from 10.32.4.5 port 41820:11: Closed due to user request. [preauth] Dec 5 07:30:13 prd-ubuntu1804-docker-4c-4g-10978 sshd[1749]: Disconnected from invalid user jenkins 10.32.4.5 port 41820 [preauth] Dec 5 07:30:15 prd-ubuntu1804-docker-4c-4g-10978 sshd[1786]: Invalid user jenkins from 10.32.4.5 port 41822 Dec 5 07:30:15 prd-ubuntu1804-docker-4c-4g-10978 sshd[1786]: Received disconnect from 10.32.4.5 port 41822:11: Closed due to user request. [preauth] Dec 5 07:30:15 prd-ubuntu1804-docker-4c-4g-10978 sshd[1786]: Disconnected from invalid user jenkins 10.32.4.5 port 41822 [preauth] Dec 5 07:30:17 prd-ubuntu1804-docker-4c-4g-10978 sshd[1790]: Invalid user jenkins from 10.32.4.5 port 41826 Dec 5 07:30:17 prd-ubuntu1804-docker-4c-4g-10978 sshd[1790]: Received disconnect from 10.32.4.5 port 41826:11: Closed due to user request. [preauth] Dec 5 07:30:17 prd-ubuntu1804-docker-4c-4g-10978 sshd[1790]: Disconnected from invalid user jenkins 10.32.4.5 port 41826 [preauth] Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 useradd[1806]: new group: name=jenkins, GID=1001 Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 useradd[1806]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 usermod[1813]: add 'jenkins' to group 'docker' Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 usermod[1813]: add 'jenkins' to shadow group 'docker' Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 sshd[1866]: Accepted publickey for jenkins from 10.32.4.5 port 41840 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 sshd[1866]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 systemd-logind[997]: New session 2 of user jenkins. Dec 5 07:30:19 prd-ubuntu1804-docker-4c-4g-10978 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 5 07:31:02 prd-ubuntu1804-docker-4c-4g-10978 CRON[2411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 07:31:02 prd-ubuntu1804-docker-4c-4g-10978 CRON[2411]: pam_unix(cron:session): session closed for user root Dec 5 07:32:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[2444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 07:32:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[2444]: pam_unix(cron:session): session closed for user root Dec 5 07:33:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[3384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 07:33:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[3384]: pam_unix(cron:session): session closed for user root Dec 5 07:34:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[3969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 07:34:01 prd-ubuntu1804-docker-4c-4g-10978 CRON[3969]: pam_unix(cron:session): session closed for user root Dec 5 07:34:10 prd-ubuntu1804-docker-4c-4g-10978 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-sme-servicemanager-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Dec 5 07:34:10 prd-ubuntu1804-docker-4c-4g-10978 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)