Mar 11 19:26:12 prd-ubuntu1804-docker-4c-4g-8650 passwd[940]: password for 'ubuntu' changed by 'root' Mar 11 19:26:12 prd-ubuntu1804-docker-4c-4g-8650 systemd-logind[989]: Watching system buttons on /dev/input/event0 (Power Button) Mar 11 19:26:12 prd-ubuntu1804-docker-4c-4g-8650 systemd-logind[989]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 11 19:26:12 prd-ubuntu1804-docker-4c-4g-8650 systemd-logind[989]: New seat seat0. Mar 11 19:26:13 prd-ubuntu1804-docker-4c-4g-8650 sshd[1249]: Server listening on 0.0.0.0 port 22. Mar 11 19:26:13 prd-ubuntu1804-docker-4c-4g-8650 sshd[1249]: Server listening on :: port 22. Mar 11 19:26:16 prd-ubuntu1804-docker-4c-4g-8650 sshd[1472]: Did not receive identification string from 10.32.4.5 port 36750 Mar 11 19:26:21 prd-ubuntu1804-docker-4c-4g-8650 sshd[1527]: Invalid user jenkins from 10.32.4.5 port 36752 Mar 11 19:26:21 prd-ubuntu1804-docker-4c-4g-8650 sshd[1527]: Received disconnect from 10.32.4.5 port 36752:11: Closed due to user request. [preauth] Mar 11 19:26:21 prd-ubuntu1804-docker-4c-4g-8650 sshd[1527]: Disconnected from invalid user jenkins 10.32.4.5 port 36752 [preauth] Mar 11 19:26:23 prd-ubuntu1804-docker-4c-4g-8650 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 36754 Mar 11 19:26:23 prd-ubuntu1804-docker-4c-4g-8650 sshd[1531]: Received disconnect from 10.32.4.5 port 36754:11: Closed due to user request. [preauth] Mar 11 19:26:23 prd-ubuntu1804-docker-4c-4g-8650 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 36754 [preauth] Mar 11 19:26:25 prd-ubuntu1804-docker-4c-4g-8650 sshd[1533]: Invalid user jenkins from 10.32.4.5 port 36758 Mar 11 19:26:25 prd-ubuntu1804-docker-4c-4g-8650 sshd[1533]: Received disconnect from 10.32.4.5 port 36758:11: Closed due to user request. [preauth] Mar 11 19:26:25 prd-ubuntu1804-docker-4c-4g-8650 sshd[1533]: Disconnected from invalid user jenkins 10.32.4.5 port 36758 [preauth] Mar 11 19:26:27 prd-ubuntu1804-docker-4c-4g-8650 sshd[1535]: Invalid user jenkins from 10.32.4.5 port 36760 Mar 11 19:26:27 prd-ubuntu1804-docker-4c-4g-8650 sshd[1535]: Received disconnect from 10.32.4.5 port 36760:11: Closed due to user request. [preauth] Mar 11 19:26:27 prd-ubuntu1804-docker-4c-4g-8650 sshd[1535]: Disconnected from invalid user jenkins 10.32.4.5 port 36760 [preauth] Mar 11 19:26:29 prd-ubuntu1804-docker-4c-4g-8650 sshd[1537]: Invalid user jenkins from 10.32.4.5 port 36762 Mar 11 19:26:29 prd-ubuntu1804-docker-4c-4g-8650 sshd[1537]: Received disconnect from 10.32.4.5 port 36762:11: Closed due to user request. [preauth] Mar 11 19:26:29 prd-ubuntu1804-docker-4c-4g-8650 sshd[1537]: Disconnected from invalid user jenkins 10.32.4.5 port 36762 [preauth] Mar 11 19:26:31 prd-ubuntu1804-docker-4c-4g-8650 sshd[1539]: Invalid user jenkins from 10.32.4.5 port 36764 Mar 11 19:26:31 prd-ubuntu1804-docker-4c-4g-8650 sshd[1539]: Received disconnect from 10.32.4.5 port 36764:11: Closed due to user request. [preauth] Mar 11 19:26:31 prd-ubuntu1804-docker-4c-4g-8650 sshd[1539]: Disconnected from invalid user jenkins 10.32.4.5 port 36764 [preauth] Mar 11 19:26:33 prd-ubuntu1804-docker-4c-4g-8650 sshd[1541]: Invalid user jenkins from 10.32.4.5 port 36766 Mar 11 19:26:34 prd-ubuntu1804-docker-4c-4g-8650 sshd[1541]: Received disconnect from 10.32.4.5 port 36766:11: Closed due to user request. [preauth] Mar 11 19:26:34 prd-ubuntu1804-docker-4c-4g-8650 sshd[1541]: Disconnected from invalid user jenkins 10.32.4.5 port 36766 [preauth] Mar 11 19:26:37 prd-ubuntu1804-docker-4c-4g-8650 sshd[1744]: Invalid user jenkins from 10.32.4.5 port 36768 Mar 11 19:26:37 prd-ubuntu1804-docker-4c-4g-8650 sshd[1744]: Received disconnect from 10.32.4.5 port 36768:11: Closed due to user request. [preauth] Mar 11 19:26:37 prd-ubuntu1804-docker-4c-4g-8650 sshd[1744]: Disconnected from invalid user jenkins 10.32.4.5 port 36768 [preauth] Mar 11 19:26:39 prd-ubuntu1804-docker-4c-4g-8650 sshd[1778]: Invalid user jenkins from 10.32.4.5 port 36770 Mar 11 19:26:39 prd-ubuntu1804-docker-4c-4g-8650 sshd[1778]: Received disconnect from 10.32.4.5 port 36770:11: Closed due to user request. [preauth] Mar 11 19:26:39 prd-ubuntu1804-docker-4c-4g-8650 sshd[1778]: Disconnected from invalid user jenkins 10.32.4.5 port 36770 [preauth] Mar 11 19:26:41 prd-ubuntu1804-docker-4c-4g-8650 sshd[1798]: Invalid user jenkins from 10.32.4.5 port 36772 Mar 11 19:26:41 prd-ubuntu1804-docker-4c-4g-8650 sshd[1798]: Received disconnect from 10.32.4.5 port 36772:11: Closed due to user request. [preauth] Mar 11 19:26:41 prd-ubuntu1804-docker-4c-4g-8650 sshd[1798]: Disconnected from invalid user jenkins 10.32.4.5 port 36772 [preauth] Mar 11 19:26:43 prd-ubuntu1804-docker-4c-4g-8650 sshd[1817]: Invalid user jenkins from 10.32.4.5 port 36776 Mar 11 19:26:43 prd-ubuntu1804-docker-4c-4g-8650 sshd[1817]: Received disconnect from 10.32.4.5 port 36776:11: Closed due to user request. [preauth] Mar 11 19:26:43 prd-ubuntu1804-docker-4c-4g-8650 sshd[1817]: Disconnected from invalid user jenkins 10.32.4.5 port 36776 [preauth] Mar 11 19:26:45 prd-ubuntu1804-docker-4c-4g-8650 sshd[1832]: Invalid user jenkins from 10.32.4.5 port 36778 Mar 11 19:26:46 prd-ubuntu1804-docker-4c-4g-8650 sshd[1832]: Received disconnect from 10.32.4.5 port 36778:11: Closed due to user request. [preauth] Mar 11 19:26:46 prd-ubuntu1804-docker-4c-4g-8650 sshd[1832]: Disconnected from invalid user jenkins 10.32.4.5 port 36778 [preauth] Mar 11 19:26:47 prd-ubuntu1804-docker-4c-4g-8650 useradd[1860]: new group: name=jenkins, GID=1001 Mar 11 19:26:47 prd-ubuntu1804-docker-4c-4g-8650 useradd[1860]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 11 19:26:47 prd-ubuntu1804-docker-4c-4g-8650 usermod[1867]: add 'jenkins' to group 'docker' Mar 11 19:26:47 prd-ubuntu1804-docker-4c-4g-8650 usermod[1867]: add 'jenkins' to shadow group 'docker' Mar 11 19:26:48 prd-ubuntu1804-docker-4c-4g-8650 sshd[1901]: Accepted publickey for jenkins from 10.32.4.5 port 36782 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 11 19:26:48 prd-ubuntu1804-docker-4c-4g-8650 sshd[1901]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 11 19:26:48 prd-ubuntu1804-docker-4c-4g-8650 systemd-logind[989]: New session 1 of user jenkins. Mar 11 19:26:48 prd-ubuntu1804-docker-4c-4g-8650 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 11 19:27:02 prd-ubuntu1804-docker-4c-4g-8650 CRON[2390]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:27:02 prd-ubuntu1804-docker-4c-4g-8650 CRON[2390]: pam_unix(cron:session): session closed for user root Mar 11 19:28:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[2454]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:28:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[2454]: pam_unix(cron:session): session closed for user root Mar 11 19:29:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[3208]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:29:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[3208]: pam_unix(cron:session): session closed for user root Mar 11 19:30:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[5377]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:30:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[5377]: pam_unix(cron:session): session closed for user root Mar 11 19:31:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[6714]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:31:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[6714]: pam_unix(cron:session): session closed for user root Mar 11 19:32:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[9891]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:32:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[9891]: pam_unix(cron:session): session closed for user root Mar 11 19:33:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[11170]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:33:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[11170]: pam_unix(cron:session): session closed for user root Mar 11 19:34:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[15220]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:34:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[15220]: pam_unix(cron:session): session closed for user root Mar 11 19:35:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[17205]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:35:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[17205]: pam_unix(cron:session): session closed for user root Mar 11 19:36:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[18044]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:36:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[18044]: pam_unix(cron:session): session closed for user root Mar 11 19:37:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[18917]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:37:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[18917]: pam_unix(cron:session): session closed for user root Mar 11 19:38:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[19336]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 19:38:01 prd-ubuntu1804-docker-4c-4g-8650 CRON[19336]: pam_unix(cron:session): session closed for user root Mar 11 19:38:13 prd-ubuntu1804-docker-4c-4g-8650 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-app-mc-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 11 19:38:13 prd-ubuntu1804-docker-4c-4g-8650 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)