May 18 11:31:48 prd-ubuntu1804-docker-4c-4g-1170 passwd[951]: password for 'ubuntu' changed by 'root' May 18 11:31:48 prd-ubuntu1804-docker-4c-4g-1170 systemd-logind[1052]: Watching system buttons on /dev/input/event0 (Power Button) May 18 11:31:48 prd-ubuntu1804-docker-4c-4g-1170 systemd-logind[1052]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 18 11:31:48 prd-ubuntu1804-docker-4c-4g-1170 systemd-logind[1052]: New seat seat0. May 18 11:31:48 prd-ubuntu1804-docker-4c-4g-1170 sshd[1114]: Server listening on 0.0.0.0 port 22. May 18 11:31:48 prd-ubuntu1804-docker-4c-4g-1170 sshd[1114]: Server listening on :: port 22. May 18 11:31:49 prd-ubuntu1804-docker-4c-4g-1170 sshd[1343]: Did not receive identification string from 10.32.4.5 port 39036 May 18 11:31:52 prd-ubuntu1804-docker-4c-4g-1170 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 39038 May 18 11:31:52 prd-ubuntu1804-docker-4c-4g-1170 sshd[1504]: Received disconnect from 10.32.4.5 port 39038:11: Closed due to user request. [preauth] May 18 11:31:52 prd-ubuntu1804-docker-4c-4g-1170 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 39038 [preauth] May 18 11:31:54 prd-ubuntu1804-docker-4c-4g-1170 sshd[1533]: Invalid user jenkins from 10.32.4.5 port 39040 May 18 11:31:54 prd-ubuntu1804-docker-4c-4g-1170 sshd[1533]: Received disconnect from 10.32.4.5 port 39040:11: Closed due to user request. [preauth] May 18 11:31:54 prd-ubuntu1804-docker-4c-4g-1170 sshd[1533]: Disconnected from invalid user jenkins 10.32.4.5 port 39040 [preauth] May 18 11:31:56 prd-ubuntu1804-docker-4c-4g-1170 sshd[1549]: Invalid user jenkins from 10.32.4.5 port 39044 May 18 11:31:56 prd-ubuntu1804-docker-4c-4g-1170 sshd[1549]: Received disconnect from 10.32.4.5 port 39044:11: Closed due to user request. [preauth] May 18 11:31:56 prd-ubuntu1804-docker-4c-4g-1170 sshd[1549]: Disconnected from invalid user jenkins 10.32.4.5 port 39044 [preauth] May 18 11:31:58 prd-ubuntu1804-docker-4c-4g-1170 sshd[1551]: Invalid user jenkins from 10.32.4.5 port 39046 May 18 11:31:59 prd-ubuntu1804-docker-4c-4g-1170 sshd[1551]: Received disconnect from 10.32.4.5 port 39046:11: Closed due to user request. [preauth] May 18 11:31:59 prd-ubuntu1804-docker-4c-4g-1170 sshd[1551]: Disconnected from invalid user jenkins 10.32.4.5 port 39046 [preauth] May 18 11:32:01 prd-ubuntu1804-docker-4c-4g-1170 sshd[1553]: Invalid user jenkins from 10.32.4.5 port 39050 May 18 11:32:01 prd-ubuntu1804-docker-4c-4g-1170 sshd[1553]: Received disconnect from 10.32.4.5 port 39050:11: Closed due to user request. [preauth] May 18 11:32:01 prd-ubuntu1804-docker-4c-4g-1170 sshd[1553]: Disconnected from invalid user jenkins 10.32.4.5 port 39050 [preauth] May 18 11:32:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[1556]: pam_unix(cron:session): session opened for user root by (uid=0) May 18 11:32:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[1556]: pam_unix(cron:session): session closed for user root May 18 11:32:03 prd-ubuntu1804-docker-4c-4g-1170 sshd[1564]: Invalid user jenkins from 10.32.4.5 port 39052 May 18 11:32:03 prd-ubuntu1804-docker-4c-4g-1170 sshd[1564]: Received disconnect from 10.32.4.5 port 39052:11: Closed due to user request. [preauth] May 18 11:32:03 prd-ubuntu1804-docker-4c-4g-1170 sshd[1564]: Disconnected from invalid user jenkins 10.32.4.5 port 39052 [preauth] May 18 11:32:05 prd-ubuntu1804-docker-4c-4g-1170 sshd[1566]: Invalid user jenkins from 10.32.4.5 port 39054 May 18 11:32:05 prd-ubuntu1804-docker-4c-4g-1170 sshd[1566]: Received disconnect from 10.32.4.5 port 39054:11: Closed due to user request. [preauth] May 18 11:32:05 prd-ubuntu1804-docker-4c-4g-1170 sshd[1566]: Disconnected from invalid user jenkins 10.32.4.5 port 39054 [preauth] May 18 11:32:07 prd-ubuntu1804-docker-4c-4g-1170 sshd[1568]: Invalid user jenkins from 10.32.4.5 port 39056 May 18 11:32:07 prd-ubuntu1804-docker-4c-4g-1170 sshd[1568]: Received disconnect from 10.32.4.5 port 39056:11: Closed due to user request. [preauth] May 18 11:32:07 prd-ubuntu1804-docker-4c-4g-1170 sshd[1568]: Disconnected from invalid user jenkins 10.32.4.5 port 39056 [preauth] May 18 11:32:09 prd-ubuntu1804-docker-4c-4g-1170 sshd[1578]: Invalid user jenkins from 10.32.4.5 port 39064 May 18 11:32:09 prd-ubuntu1804-docker-4c-4g-1170 sshd[1578]: Received disconnect from 10.32.4.5 port 39064:11: Closed due to user request. [preauth] May 18 11:32:09 prd-ubuntu1804-docker-4c-4g-1170 sshd[1578]: Disconnected from invalid user jenkins 10.32.4.5 port 39064 [preauth] May 18 11:32:12 prd-ubuntu1804-docker-4c-4g-1170 sshd[1776]: Invalid user jenkins from 10.32.4.5 port 39066 May 18 11:32:12 prd-ubuntu1804-docker-4c-4g-1170 sshd[1776]: Received disconnect from 10.32.4.5 port 39066:11: Closed due to user request. [preauth] May 18 11:32:12 prd-ubuntu1804-docker-4c-4g-1170 sshd[1776]: Disconnected from invalid user jenkins 10.32.4.5 port 39066 [preauth] May 18 11:32:14 prd-ubuntu1804-docker-4c-4g-1170 sshd[1828]: Invalid user jenkins from 10.32.4.5 port 39068 May 18 11:32:14 prd-ubuntu1804-docker-4c-4g-1170 sshd[1828]: Received disconnect from 10.32.4.5 port 39068:11: Closed due to user request. [preauth] May 18 11:32:14 prd-ubuntu1804-docker-4c-4g-1170 sshd[1828]: Disconnected from invalid user jenkins 10.32.4.5 port 39068 [preauth] May 18 11:32:16 prd-ubuntu1804-docker-4c-4g-1170 sshd[1847]: Invalid user jenkins from 10.32.4.5 port 39072 May 18 11:32:17 prd-ubuntu1804-docker-4c-4g-1170 sshd[1847]: Received disconnect from 10.32.4.5 port 39072:11: Closed due to user request. [preauth] May 18 11:32:17 prd-ubuntu1804-docker-4c-4g-1170 sshd[1847]: Disconnected from invalid user jenkins 10.32.4.5 port 39072 [preauth] May 18 11:32:19 prd-ubuntu1804-docker-4c-4g-1170 sshd[1851]: Invalid user jenkins from 10.32.4.5 port 39074 May 18 11:32:19 prd-ubuntu1804-docker-4c-4g-1170 sshd[1851]: Received disconnect from 10.32.4.5 port 39074:11: Closed due to user request. [preauth] May 18 11:32:19 prd-ubuntu1804-docker-4c-4g-1170 sshd[1851]: Disconnected from invalid user jenkins 10.32.4.5 port 39074 [preauth] May 18 11:32:19 prd-ubuntu1804-docker-4c-4g-1170 useradd[1858]: new group: name=jenkins, GID=1001 May 18 11:32:19 prd-ubuntu1804-docker-4c-4g-1170 useradd[1858]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 18 11:32:19 prd-ubuntu1804-docker-4c-4g-1170 usermod[1865]: add 'jenkins' to group 'docker' May 18 11:32:19 prd-ubuntu1804-docker-4c-4g-1170 usermod[1865]: add 'jenkins' to shadow group 'docker' May 18 11:32:21 prd-ubuntu1804-docker-4c-4g-1170 sshd[1921]: Accepted publickey for jenkins from 10.32.4.5 port 39076 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 18 11:32:21 prd-ubuntu1804-docker-4c-4g-1170 sshd[1921]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 18 11:32:21 prd-ubuntu1804-docker-4c-4g-1170 systemd-logind[1052]: New session 2 of user jenkins. May 18 11:32:21 prd-ubuntu1804-docker-4c-4g-1170 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 18 11:33:03 prd-ubuntu1804-docker-4c-4g-1170 CRON[2446]: pam_unix(cron:session): session opened for user root by (uid=0) May 18 11:33:03 prd-ubuntu1804-docker-4c-4g-1170 CRON[2446]: pam_unix(cron:session): session closed for user root May 18 11:34:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[2484]: pam_unix(cron:session): session opened for user root by (uid=0) May 18 11:34:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[2484]: pam_unix(cron:session): session closed for user root May 18 11:35:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[8316]: pam_unix(cron:session): session opened for user root by (uid=0) May 18 11:35:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[8316]: pam_unix(cron:session): session closed for user root May 18 11:36:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[15443]: pam_unix(cron:session): session opened for user root by (uid=0) May 18 11:36:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[15443]: pam_unix(cron:session): session closed for user root May 18 11:37:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[19359]: pam_unix(cron:session): session opened for user root by (uid=0) May 18 11:37:01 prd-ubuntu1804-docker-4c-4g-1170 CRON[19359]: pam_unix(cron:session): session closed for user root May 18 11:37:45 prd-ubuntu1804-docker-4c-4g-1170 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-a1-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 18 11:37:45 prd-ubuntu1804-docker-4c-4g-1170 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)