Jul 11 04:36:18 prd-ubuntu1804-docker-4c-4g-5491 passwd[930]: password for 'ubuntu' changed by 'root' Jul 11 04:36:18 prd-ubuntu1804-docker-4c-4g-5491 systemd-logind[997]: Watching system buttons on /dev/input/event0 (Power Button) Jul 11 04:36:18 prd-ubuntu1804-docker-4c-4g-5491 systemd-logind[997]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 11 04:36:18 prd-ubuntu1804-docker-4c-4g-5491 systemd-logind[997]: New seat seat0. Jul 11 04:36:18 prd-ubuntu1804-docker-4c-4g-5491 sshd[1084]: Server listening on 0.0.0.0 port 22. Jul 11 04:36:18 prd-ubuntu1804-docker-4c-4g-5491 sshd[1084]: Server listening on :: port 22. Jul 11 04:36:18 prd-ubuntu1804-docker-4c-4g-5491 sshd[1165]: Did not receive identification string from 10.32.4.5 port 33112 Jul 11 04:36:22 prd-ubuntu1804-docker-4c-4g-5491 sshd[1431]: Invalid user jenkins from 10.32.4.5 port 33120 Jul 11 04:36:22 prd-ubuntu1804-docker-4c-4g-5491 sshd[1431]: Received disconnect from 10.32.4.5 port 33120:11: Closed due to user request. [preauth] Jul 11 04:36:22 prd-ubuntu1804-docker-4c-4g-5491 sshd[1431]: Disconnected from invalid user jenkins 10.32.4.5 port 33120 [preauth] Jul 11 04:36:24 prd-ubuntu1804-docker-4c-4g-5491 sshd[1459]: Invalid user jenkins from 10.32.4.5 port 33128 Jul 11 04:36:24 prd-ubuntu1804-docker-4c-4g-5491 sshd[1459]: Received disconnect from 10.32.4.5 port 33128:11: Closed due to user request. [preauth] Jul 11 04:36:24 prd-ubuntu1804-docker-4c-4g-5491 sshd[1459]: Disconnected from invalid user jenkins 10.32.4.5 port 33128 [preauth] Jul 11 04:36:26 prd-ubuntu1804-docker-4c-4g-5491 sshd[1472]: Invalid user jenkins from 10.32.4.5 port 33134 Jul 11 04:36:26 prd-ubuntu1804-docker-4c-4g-5491 sshd[1472]: Received disconnect from 10.32.4.5 port 33134:11: Closed due to user request. [preauth] Jul 11 04:36:26 prd-ubuntu1804-docker-4c-4g-5491 sshd[1472]: Disconnected from invalid user jenkins 10.32.4.5 port 33134 [preauth] Jul 11 04:36:28 prd-ubuntu1804-docker-4c-4g-5491 sshd[1477]: Invalid user jenkins from 10.32.4.5 port 33136 Jul 11 04:36:28 prd-ubuntu1804-docker-4c-4g-5491 sshd[1477]: Received disconnect from 10.32.4.5 port 33136:11: Closed due to user request. [preauth] Jul 11 04:36:28 prd-ubuntu1804-docker-4c-4g-5491 sshd[1477]: Disconnected from invalid user jenkins 10.32.4.5 port 33136 [preauth] Jul 11 04:36:30 prd-ubuntu1804-docker-4c-4g-5491 sshd[1479]: Invalid user jenkins from 10.32.4.5 port 33140 Jul 11 04:36:31 prd-ubuntu1804-docker-4c-4g-5491 sshd[1479]: Received disconnect from 10.32.4.5 port 33140:11: Closed due to user request. [preauth] Jul 11 04:36:31 prd-ubuntu1804-docker-4c-4g-5491 sshd[1479]: Disconnected from invalid user jenkins 10.32.4.5 port 33140 [preauth] Jul 11 04:36:33 prd-ubuntu1804-docker-4c-4g-5491 sshd[1481]: Invalid user jenkins from 10.32.4.5 port 33146 Jul 11 04:36:33 prd-ubuntu1804-docker-4c-4g-5491 sshd[1481]: Received disconnect from 10.32.4.5 port 33146:11: Closed due to user request. [preauth] Jul 11 04:36:33 prd-ubuntu1804-docker-4c-4g-5491 sshd[1481]: Disconnected from invalid user jenkins 10.32.4.5 port 33146 [preauth] Jul 11 04:36:35 prd-ubuntu1804-docker-4c-4g-5491 sshd[1483]: Invalid user jenkins from 10.32.4.5 port 33148 Jul 11 04:36:35 prd-ubuntu1804-docker-4c-4g-5491 sshd[1483]: Received disconnect from 10.32.4.5 port 33148:11: Closed due to user request. [preauth] Jul 11 04:36:35 prd-ubuntu1804-docker-4c-4g-5491 sshd[1483]: Disconnected from invalid user jenkins 10.32.4.5 port 33148 [preauth] Jul 11 04:36:37 prd-ubuntu1804-docker-4c-4g-5491 sshd[1485]: Invalid user jenkins from 10.32.4.5 port 33150 Jul 11 04:36:37 prd-ubuntu1804-docker-4c-4g-5491 sshd[1485]: Received disconnect from 10.32.4.5 port 33150:11: Closed due to user request. [preauth] Jul 11 04:36:37 prd-ubuntu1804-docker-4c-4g-5491 sshd[1485]: Disconnected from invalid user jenkins 10.32.4.5 port 33150 [preauth] Jul 11 04:36:39 prd-ubuntu1804-docker-4c-4g-5491 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 33156 Jul 11 04:36:39 prd-ubuntu1804-docker-4c-4g-5491 sshd[1494]: Received disconnect from 10.32.4.5 port 33156:11: Closed due to user request. [preauth] Jul 11 04:36:39 prd-ubuntu1804-docker-4c-4g-5491 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 33156 [preauth] Jul 11 04:36:42 prd-ubuntu1804-docker-4c-4g-5491 sshd[1671]: Invalid user jenkins from 10.32.4.5 port 33158 Jul 11 04:36:42 prd-ubuntu1804-docker-4c-4g-5491 sshd[1671]: Received disconnect from 10.32.4.5 port 33158:11: Closed due to user request. [preauth] Jul 11 04:36:42 prd-ubuntu1804-docker-4c-4g-5491 sshd[1671]: Disconnected from invalid user jenkins 10.32.4.5 port 33158 [preauth] Jul 11 04:36:44 prd-ubuntu1804-docker-4c-4g-5491 sshd[1732]: Invalid user jenkins from 10.32.4.5 port 33160 Jul 11 04:36:44 prd-ubuntu1804-docker-4c-4g-5491 sshd[1732]: Received disconnect from 10.32.4.5 port 33160:11: Closed due to user request. [preauth] Jul 11 04:36:44 prd-ubuntu1804-docker-4c-4g-5491 sshd[1732]: Disconnected from invalid user jenkins 10.32.4.5 port 33160 [preauth] Jul 11 04:36:47 prd-ubuntu1804-docker-4c-4g-5491 sshd[1766]: Invalid user jenkins from 10.32.4.5 port 33168 Jul 11 04:36:47 prd-ubuntu1804-docker-4c-4g-5491 sshd[1766]: Received disconnect from 10.32.4.5 port 33168:11: Closed due to user request. [preauth] Jul 11 04:36:47 prd-ubuntu1804-docker-4c-4g-5491 sshd[1766]: Disconnected from invalid user jenkins 10.32.4.5 port 33168 [preauth] Jul 11 04:36:49 prd-ubuntu1804-docker-4c-4g-5491 sshd[1770]: Invalid user jenkins from 10.32.4.5 port 33170 Jul 11 04:36:49 prd-ubuntu1804-docker-4c-4g-5491 sshd[1770]: Received disconnect from 10.32.4.5 port 33170:11: Closed due to user request. [preauth] Jul 11 04:36:49 prd-ubuntu1804-docker-4c-4g-5491 sshd[1770]: Disconnected from invalid user jenkins 10.32.4.5 port 33170 [preauth] Jul 11 04:36:49 prd-ubuntu1804-docker-4c-4g-5491 useradd[1777]: new group: name=jenkins, GID=1001 Jul 11 04:36:49 prd-ubuntu1804-docker-4c-4g-5491 useradd[1777]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 11 04:36:49 prd-ubuntu1804-docker-4c-4g-5491 usermod[1784]: add 'jenkins' to group 'docker' Jul 11 04:36:49 prd-ubuntu1804-docker-4c-4g-5491 usermod[1784]: add 'jenkins' to shadow group 'docker' Jul 11 04:36:51 prd-ubuntu1804-docker-4c-4g-5491 sshd[1830]: Accepted publickey for jenkins from 10.32.4.5 port 33172 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jul 11 04:36:51 prd-ubuntu1804-docker-4c-4g-5491 sshd[1830]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 11 04:36:51 prd-ubuntu1804-docker-4c-4g-5491 systemd-logind[997]: New session 1 of user jenkins. Jul 11 04:36:51 prd-ubuntu1804-docker-4c-4g-5491 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 11 04:37:02 prd-ubuntu1804-docker-4c-4g-5491 CRON[2061]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 11 04:37:02 prd-ubuntu1804-docker-4c-4g-5491 CRON[2061]: pam_unix(cron:session): session closed for user root Jul 11 04:38:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[2402]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 11 04:38:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[2402]: pam_unix(cron:session): session closed for user root Jul 11 04:39:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[2811]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 11 04:39:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[2811]: pam_unix(cron:session): session closed for user root Jul 11 04:40:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[4150]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 11 04:40:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[4150]: pam_unix(cron:session): session closed for user root Jul 11 04:41:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[4187]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 11 04:41:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[4187]: pam_unix(cron:session): session closed for user root Jul 11 04:42:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[4561]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 11 04:42:01 prd-ubuntu1804-docker-4c-4g-5491 CRON[4561]: pam_unix(cron:session): session closed for user root Jul 11 04:42:02 prd-ubuntu1804-docker-4c-4g-5491 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-app-qp-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jul 11 04:42:02 prd-ubuntu1804-docker-4c-4g-5491 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)