Jun 28 05:44:32 prd-ubuntu1804-docker-4c-4g-5029 passwd[932]: password for 'ubuntu' changed by 'root' Jun 28 05:44:32 prd-ubuntu1804-docker-4c-4g-5029 systemd-logind[973]: Watching system buttons on /dev/input/event0 (Power Button) Jun 28 05:44:32 prd-ubuntu1804-docker-4c-4g-5029 systemd-logind[973]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 28 05:44:32 prd-ubuntu1804-docker-4c-4g-5029 systemd-logind[973]: New seat seat0. Jun 28 05:44:32 prd-ubuntu1804-docker-4c-4g-5029 sshd[1163]: Server listening on 0.0.0.0 port 22. Jun 28 05:44:32 prd-ubuntu1804-docker-4c-4g-5029 sshd[1163]: Server listening on :: port 22. Jun 28 05:44:37 prd-ubuntu1804-docker-4c-4g-5029 sshd[1387]: Did not receive identification string from 10.32.4.5 port 38486 Jun 28 05:44:40 prd-ubuntu1804-docker-4c-4g-5029 sshd[1429]: Invalid user jenkins from 10.32.4.5 port 38488 Jun 28 05:44:41 prd-ubuntu1804-docker-4c-4g-5029 sshd[1429]: Received disconnect from 10.32.4.5 port 38488:11: Closed due to user request. [preauth] Jun 28 05:44:41 prd-ubuntu1804-docker-4c-4g-5029 sshd[1429]: Disconnected from invalid user jenkins 10.32.4.5 port 38488 [preauth] Jun 28 05:44:43 prd-ubuntu1804-docker-4c-4g-5029 sshd[1433]: Invalid user jenkins from 10.32.4.5 port 38490 Jun 28 05:44:43 prd-ubuntu1804-docker-4c-4g-5029 sshd[1433]: Received disconnect from 10.32.4.5 port 38490:11: Closed due to user request. [preauth] Jun 28 05:44:43 prd-ubuntu1804-docker-4c-4g-5029 sshd[1433]: Disconnected from invalid user jenkins 10.32.4.5 port 38490 [preauth] Jun 28 05:44:45 prd-ubuntu1804-docker-4c-4g-5029 sshd[1435]: Invalid user jenkins from 10.32.4.5 port 38494 Jun 28 05:44:45 prd-ubuntu1804-docker-4c-4g-5029 sshd[1435]: Received disconnect from 10.32.4.5 port 38494:11: Closed due to user request. [preauth] Jun 28 05:44:45 prd-ubuntu1804-docker-4c-4g-5029 sshd[1435]: Disconnected from invalid user jenkins 10.32.4.5 port 38494 [preauth] Jun 28 05:44:47 prd-ubuntu1804-docker-4c-4g-5029 sshd[1437]: Invalid user jenkins from 10.32.4.5 port 38496 Jun 28 05:44:47 prd-ubuntu1804-docker-4c-4g-5029 sshd[1437]: Received disconnect from 10.32.4.5 port 38496:11: Closed due to user request. [preauth] Jun 28 05:44:47 prd-ubuntu1804-docker-4c-4g-5029 sshd[1437]: Disconnected from invalid user jenkins 10.32.4.5 port 38496 [preauth] Jun 28 05:44:49 prd-ubuntu1804-docker-4c-4g-5029 sshd[1439]: Invalid user jenkins from 10.32.4.5 port 38498 Jun 28 05:44:49 prd-ubuntu1804-docker-4c-4g-5029 sshd[1439]: Received disconnect from 10.32.4.5 port 38498:11: Closed due to user request. [preauth] Jun 28 05:44:49 prd-ubuntu1804-docker-4c-4g-5029 sshd[1439]: Disconnected from invalid user jenkins 10.32.4.5 port 38498 [preauth] Jun 28 05:44:51 prd-ubuntu1804-docker-4c-4g-5029 sshd[1441]: Invalid user jenkins from 10.32.4.5 port 38506 Jun 28 05:44:51 prd-ubuntu1804-docker-4c-4g-5029 sshd[1441]: Received disconnect from 10.32.4.5 port 38506:11: Closed due to user request. [preauth] Jun 28 05:44:51 prd-ubuntu1804-docker-4c-4g-5029 sshd[1441]: Disconnected from invalid user jenkins 10.32.4.5 port 38506 [preauth] Jun 28 05:44:53 prd-ubuntu1804-docker-4c-4g-5029 sshd[1443]: Invalid user jenkins from 10.32.4.5 port 38508 Jun 28 05:44:53 prd-ubuntu1804-docker-4c-4g-5029 sshd[1443]: Received disconnect from 10.32.4.5 port 38508:11: Closed due to user request. [preauth] Jun 28 05:44:53 prd-ubuntu1804-docker-4c-4g-5029 sshd[1443]: Disconnected from invalid user jenkins 10.32.4.5 port 38508 [preauth] Jun 28 05:44:56 prd-ubuntu1804-docker-4c-4g-5029 sshd[1650]: Invalid user jenkins from 10.32.4.5 port 38510 Jun 28 05:44:56 prd-ubuntu1804-docker-4c-4g-5029 sshd[1650]: Received disconnect from 10.32.4.5 port 38510:11: Closed due to user request. [preauth] Jun 28 05:44:56 prd-ubuntu1804-docker-4c-4g-5029 sshd[1650]: Disconnected from invalid user jenkins 10.32.4.5 port 38510 [preauth] Jun 28 05:44:58 prd-ubuntu1804-docker-4c-4g-5029 sshd[1703]: Invalid user jenkins from 10.32.4.5 port 38512 Jun 28 05:44:58 prd-ubuntu1804-docker-4c-4g-5029 sshd[1703]: Received disconnect from 10.32.4.5 port 38512:11: Closed due to user request. [preauth] Jun 28 05:44:58 prd-ubuntu1804-docker-4c-4g-5029 sshd[1703]: Disconnected from invalid user jenkins 10.32.4.5 port 38512 [preauth] Jun 28 05:45:00 prd-ubuntu1804-docker-4c-4g-5029 sshd[1723]: Invalid user jenkins from 10.32.4.5 port 38516 Jun 28 05:45:00 prd-ubuntu1804-docker-4c-4g-5029 sshd[1723]: Received disconnect from 10.32.4.5 port 38516:11: Closed due to user request. [preauth] Jun 28 05:45:00 prd-ubuntu1804-docker-4c-4g-5029 sshd[1723]: Disconnected from invalid user jenkins 10.32.4.5 port 38516 [preauth] Jun 28 05:45:01 prd-ubuntu1804-docker-4c-4g-5029 useradd[1739]: new group: name=jenkins, GID=1001 Jun 28 05:45:01 prd-ubuntu1804-docker-4c-4g-5029 useradd[1739]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 28 05:45:01 prd-ubuntu1804-docker-4c-4g-5029 usermod[1746]: add 'jenkins' to group 'docker' Jun 28 05:45:01 prd-ubuntu1804-docker-4c-4g-5029 usermod[1746]: add 'jenkins' to shadow group 'docker' Jun 28 05:45:01 prd-ubuntu1804-docker-4c-4g-5029 CRON[1780]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 28 05:45:01 prd-ubuntu1804-docker-4c-4g-5029 CRON[1780]: pam_unix(cron:session): session closed for user root Jun 28 05:45:02 prd-ubuntu1804-docker-4c-4g-5029 sshd[1788]: Accepted publickey for jenkins from 10.32.4.5 port 38544 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 28 05:45:02 prd-ubuntu1804-docker-4c-4g-5029 sshd[1788]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 28 05:45:02 prd-ubuntu1804-docker-4c-4g-5029 systemd-logind[973]: New session 2 of user jenkins. Jun 28 05:45:02 prd-ubuntu1804-docker-4c-4g-5029 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 28 05:46:01 prd-ubuntu1804-docker-4c-4g-5029 CRON[2557]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 28 05:46:01 prd-ubuntu1804-docker-4c-4g-5029 CRON[2557]: pam_unix(cron:session): session closed for user root Jun 28 05:47:01 prd-ubuntu1804-docker-4c-4g-5029 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-rapp-ransliceassurance-icsversion-docker-merge-g-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 28 05:47:01 prd-ubuntu1804-docker-4c-4g-5029 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)