Mar 10 05:53:45 prd-ubuntu1804-docker-4c-4g-8528 passwd[907]: password for 'ubuntu' changed by 'root' Mar 10 05:53:45 prd-ubuntu1804-docker-4c-4g-8528 systemd-logind[943]: Watching system buttons on /dev/input/event0 (Power Button) Mar 10 05:53:45 prd-ubuntu1804-docker-4c-4g-8528 systemd-logind[943]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 10 05:53:45 prd-ubuntu1804-docker-4c-4g-8528 systemd-logind[943]: New seat seat0. Mar 10 05:53:45 prd-ubuntu1804-docker-4c-4g-8528 sshd[1064]: Server listening on 0.0.0.0 port 22. Mar 10 05:53:45 prd-ubuntu1804-docker-4c-4g-8528 sshd[1064]: Server listening on :: port 22. Mar 10 05:53:48 prd-ubuntu1804-docker-4c-4g-8528 sshd[1398]: Did not receive identification string from 10.32.4.5 port 46232 Mar 10 05:53:52 prd-ubuntu1804-docker-4c-4g-8528 sshd[1456]: Invalid user jenkins from 10.32.4.5 port 46234 Mar 10 05:53:52 prd-ubuntu1804-docker-4c-4g-8528 sshd[1456]: Received disconnect from 10.32.4.5 port 46234:11: Closed due to user request. [preauth] Mar 10 05:53:52 prd-ubuntu1804-docker-4c-4g-8528 sshd[1456]: Disconnected from invalid user jenkins 10.32.4.5 port 46234 [preauth] Mar 10 05:53:54 prd-ubuntu1804-docker-4c-4g-8528 sshd[1476]: Invalid user jenkins from 10.32.4.5 port 46236 Mar 10 05:53:54 prd-ubuntu1804-docker-4c-4g-8528 sshd[1476]: Received disconnect from 10.32.4.5 port 46236:11: Closed due to user request. [preauth] Mar 10 05:53:54 prd-ubuntu1804-docker-4c-4g-8528 sshd[1476]: Disconnected from invalid user jenkins 10.32.4.5 port 46236 [preauth] Mar 10 05:53:56 prd-ubuntu1804-docker-4c-4g-8528 sshd[1478]: Invalid user jenkins from 10.32.4.5 port 46240 Mar 10 05:53:56 prd-ubuntu1804-docker-4c-4g-8528 sshd[1478]: Received disconnect from 10.32.4.5 port 46240:11: Closed due to user request. [preauth] Mar 10 05:53:56 prd-ubuntu1804-docker-4c-4g-8528 sshd[1478]: Disconnected from invalid user jenkins 10.32.4.5 port 46240 [preauth] Mar 10 05:53:58 prd-ubuntu1804-docker-4c-4g-8528 sshd[1480]: Invalid user jenkins from 10.32.4.5 port 46242 Mar 10 05:53:58 prd-ubuntu1804-docker-4c-4g-8528 sshd[1480]: Received disconnect from 10.32.4.5 port 46242:11: Closed due to user request. [preauth] Mar 10 05:53:58 prd-ubuntu1804-docker-4c-4g-8528 sshd[1480]: Disconnected from invalid user jenkins 10.32.4.5 port 46242 [preauth] Mar 10 05:54:00 prd-ubuntu1804-docker-4c-4g-8528 sshd[1482]: Invalid user jenkins from 10.32.4.5 port 46266 Mar 10 05:54:00 prd-ubuntu1804-docker-4c-4g-8528 sshd[1482]: Received disconnect from 10.32.4.5 port 46266:11: Closed due to user request. [preauth] Mar 10 05:54:00 prd-ubuntu1804-docker-4c-4g-8528 sshd[1482]: Disconnected from invalid user jenkins 10.32.4.5 port 46266 [preauth] Mar 10 05:54:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[1485]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 05:54:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[1485]: pam_unix(cron:session): session closed for user root Mar 10 05:54:03 prd-ubuntu1804-docker-4c-4g-8528 sshd[1493]: Invalid user jenkins from 10.32.4.5 port 46268 Mar 10 05:54:03 prd-ubuntu1804-docker-4c-4g-8528 sshd[1493]: Received disconnect from 10.32.4.5 port 46268:11: Closed due to user request. [preauth] Mar 10 05:54:03 prd-ubuntu1804-docker-4c-4g-8528 sshd[1493]: Disconnected from invalid user jenkins 10.32.4.5 port 46268 [preauth] Mar 10 05:54:05 prd-ubuntu1804-docker-4c-4g-8528 sshd[1495]: Invalid user jenkins from 10.32.4.5 port 46270 Mar 10 05:54:05 prd-ubuntu1804-docker-4c-4g-8528 sshd[1495]: Received disconnect from 10.32.4.5 port 46270:11: Closed due to user request. [preauth] Mar 10 05:54:05 prd-ubuntu1804-docker-4c-4g-8528 sshd[1495]: Disconnected from invalid user jenkins 10.32.4.5 port 46270 [preauth] Mar 10 05:54:07 prd-ubuntu1804-docker-4c-4g-8528 sshd[1505]: Invalid user jenkins from 10.32.4.5 port 46272 Mar 10 05:54:07 prd-ubuntu1804-docker-4c-4g-8528 sshd[1505]: Received disconnect from 10.32.4.5 port 46272:11: Closed due to user request. [preauth] Mar 10 05:54:07 prd-ubuntu1804-docker-4c-4g-8528 sshd[1505]: Disconnected from invalid user jenkins 10.32.4.5 port 46272 [preauth] Mar 10 05:54:09 prd-ubuntu1804-docker-4c-4g-8528 sshd[1728]: Invalid user jenkins from 10.32.4.5 port 46274 Mar 10 05:54:09 prd-ubuntu1804-docker-4c-4g-8528 sshd[1728]: Received disconnect from 10.32.4.5 port 46274:11: Closed due to user request. [preauth] Mar 10 05:54:09 prd-ubuntu1804-docker-4c-4g-8528 sshd[1728]: Disconnected from invalid user jenkins 10.32.4.5 port 46274 [preauth] Mar 10 05:54:11 prd-ubuntu1804-docker-4c-4g-8528 sshd[1765]: Invalid user jenkins from 10.32.4.5 port 46276 Mar 10 05:54:11 prd-ubuntu1804-docker-4c-4g-8528 sshd[1765]: Received disconnect from 10.32.4.5 port 46276:11: Closed due to user request. [preauth] Mar 10 05:54:11 prd-ubuntu1804-docker-4c-4g-8528 sshd[1765]: Disconnected from invalid user jenkins 10.32.4.5 port 46276 [preauth] Mar 10 05:54:13 prd-ubuntu1804-docker-4c-4g-8528 sshd[1771]: Invalid user jenkins from 10.32.4.5 port 46280 Mar 10 05:54:13 prd-ubuntu1804-docker-4c-4g-8528 sshd[1771]: Received disconnect from 10.32.4.5 port 46280:11: Closed due to user request. [preauth] Mar 10 05:54:13 prd-ubuntu1804-docker-4c-4g-8528 sshd[1771]: Disconnected from invalid user jenkins 10.32.4.5 port 46280 [preauth] Mar 10 05:54:15 prd-ubuntu1804-docker-4c-4g-8528 sshd[1780]: Invalid user jenkins from 10.32.4.5 port 46282 Mar 10 05:54:15 prd-ubuntu1804-docker-4c-4g-8528 sshd[1780]: Received disconnect from 10.32.4.5 port 46282:11: Closed due to user request. [preauth] Mar 10 05:54:15 prd-ubuntu1804-docker-4c-4g-8528 sshd[1780]: Disconnected from invalid user jenkins 10.32.4.5 port 46282 [preauth] Mar 10 05:54:16 prd-ubuntu1804-docker-4c-4g-8528 useradd[1791]: new group: name=jenkins, GID=1001 Mar 10 05:54:16 prd-ubuntu1804-docker-4c-4g-8528 useradd[1791]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 10 05:54:16 prd-ubuntu1804-docker-4c-4g-8528 usermod[1798]: add 'jenkins' to group 'docker' Mar 10 05:54:16 prd-ubuntu1804-docker-4c-4g-8528 usermod[1798]: add 'jenkins' to shadow group 'docker' Mar 10 05:54:18 prd-ubuntu1804-docker-4c-4g-8528 sshd[1843]: Accepted publickey for jenkins from 10.32.4.5 port 46284 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 10 05:54:18 prd-ubuntu1804-docker-4c-4g-8528 sshd[1843]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 10 05:54:18 prd-ubuntu1804-docker-4c-4g-8528 systemd-logind[943]: New session 2 of user jenkins. Mar 10 05:54:18 prd-ubuntu1804-docker-4c-4g-8528 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 10 05:55:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[2373]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 05:55:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[2373]: pam_unix(cron:session): session closed for user root Mar 10 05:56:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[2427]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 05:56:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[2427]: pam_unix(cron:session): session closed for user root Mar 10 05:57:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[3433]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 10 05:57:01 prd-ubuntu1804-docker-4c-4g-8528 CRON[3433]: pam_unix(cron:session): session closed for user root Mar 10 05:57:23 prd-ubuntu1804-docker-4c-4g-8528 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-rapp-ransliceassurance-icsversion-docker-merge-f-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 10 05:57:23 prd-ubuntu1804-docker-4c-4g-8528 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)