Feb 3 01:35:50 prd-ubuntu1804-docker-4c-4g-3494 passwd[937]: password for 'ubuntu' changed by 'root' Feb 3 01:35:50 prd-ubuntu1804-docker-4c-4g-3494 systemd-logind[1019]: Watching system buttons on /dev/input/event0 (Power Button) Feb 3 01:35:50 prd-ubuntu1804-docker-4c-4g-3494 systemd-logind[1019]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 3 01:35:50 prd-ubuntu1804-docker-4c-4g-3494 systemd-logind[1019]: New seat seat0. Feb 3 01:35:51 prd-ubuntu1804-docker-4c-4g-3494 sshd[1256]: Server listening on 0.0.0.0 port 22. Feb 3 01:35:51 prd-ubuntu1804-docker-4c-4g-3494 sshd[1256]: Server listening on :: port 22. Feb 3 01:35:54 prd-ubuntu1804-docker-4c-4g-3494 sshd[1458]: Did not receive identification string from 10.32.4.5 port 33808 Feb 3 01:35:58 prd-ubuntu1804-docker-4c-4g-3494 sshd[1517]: Invalid user jenkins from 10.32.4.5 port 33810 Feb 3 01:35:58 prd-ubuntu1804-docker-4c-4g-3494 sshd[1517]: Received disconnect from 10.32.4.5 port 33810:11: Closed due to user request. [preauth] Feb 3 01:35:58 prd-ubuntu1804-docker-4c-4g-3494 sshd[1517]: Disconnected from invalid user jenkins 10.32.4.5 port 33810 [preauth] Feb 3 01:36:00 prd-ubuntu1804-docker-4c-4g-3494 sshd[1521]: Invalid user jenkins from 10.32.4.5 port 33814 Feb 3 01:36:00 prd-ubuntu1804-docker-4c-4g-3494 sshd[1521]: Received disconnect from 10.32.4.5 port 33814:11: Closed due to user request. [preauth] Feb 3 01:36:00 prd-ubuntu1804-docker-4c-4g-3494 sshd[1521]: Disconnected from invalid user jenkins 10.32.4.5 port 33814 [preauth] Feb 3 01:36:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[1523]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 01:36:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[1523]: pam_unix(cron:session): session closed for user root Feb 3 01:36:02 prd-ubuntu1804-docker-4c-4g-3494 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 33816 Feb 3 01:36:02 prd-ubuntu1804-docker-4c-4g-3494 sshd[1532]: Received disconnect from 10.32.4.5 port 33816:11: Closed due to user request. [preauth] Feb 3 01:36:02 prd-ubuntu1804-docker-4c-4g-3494 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 33816 [preauth] Feb 3 01:36:04 prd-ubuntu1804-docker-4c-4g-3494 sshd[1534]: Invalid user jenkins from 10.32.4.5 port 33818 Feb 3 01:36:04 prd-ubuntu1804-docker-4c-4g-3494 sshd[1534]: Received disconnect from 10.32.4.5 port 33818:11: Closed due to user request. [preauth] Feb 3 01:36:04 prd-ubuntu1804-docker-4c-4g-3494 sshd[1534]: Disconnected from invalid user jenkins 10.32.4.5 port 33818 [preauth] Feb 3 01:36:06 prd-ubuntu1804-docker-4c-4g-3494 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 33820 Feb 3 01:36:06 prd-ubuntu1804-docker-4c-4g-3494 sshd[1536]: Received disconnect from 10.32.4.5 port 33820:11: Closed due to user request. [preauth] Feb 3 01:36:06 prd-ubuntu1804-docker-4c-4g-3494 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 33820 [preauth] Feb 3 01:36:08 prd-ubuntu1804-docker-4c-4g-3494 sshd[1538]: Invalid user jenkins from 10.32.4.5 port 33822 Feb 3 01:36:08 prd-ubuntu1804-docker-4c-4g-3494 sshd[1538]: Received disconnect from 10.32.4.5 port 33822:11: Closed due to user request. [preauth] Feb 3 01:36:08 prd-ubuntu1804-docker-4c-4g-3494 sshd[1538]: Disconnected from invalid user jenkins 10.32.4.5 port 33822 [preauth] Feb 3 01:36:10 prd-ubuntu1804-docker-4c-4g-3494 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 33824 Feb 3 01:36:10 prd-ubuntu1804-docker-4c-4g-3494 sshd[1540]: Received disconnect from 10.32.4.5 port 33824:11: Closed due to user request. [preauth] Feb 3 01:36:10 prd-ubuntu1804-docker-4c-4g-3494 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 33824 [preauth] Feb 3 01:36:13 prd-ubuntu1804-docker-4c-4g-3494 sshd[1566]: Invalid user jenkins from 10.32.4.5 port 33826 Feb 3 01:36:13 prd-ubuntu1804-docker-4c-4g-3494 sshd[1566]: Received disconnect from 10.32.4.5 port 33826:11: Closed due to user request. [preauth] Feb 3 01:36:13 prd-ubuntu1804-docker-4c-4g-3494 sshd[1566]: Disconnected from invalid user jenkins 10.32.4.5 port 33826 [preauth] Feb 3 01:36:15 prd-ubuntu1804-docker-4c-4g-3494 sshd[1783]: Invalid user jenkins from 10.32.4.5 port 33830 Feb 3 01:36:15 prd-ubuntu1804-docker-4c-4g-3494 sshd[1783]: Received disconnect from 10.32.4.5 port 33830:11: Closed due to user request. [preauth] Feb 3 01:36:15 prd-ubuntu1804-docker-4c-4g-3494 sshd[1783]: Disconnected from invalid user jenkins 10.32.4.5 port 33830 [preauth] Feb 3 01:36:17 prd-ubuntu1804-docker-4c-4g-3494 sshd[1822]: Invalid user jenkins from 10.32.4.5 port 33832 Feb 3 01:36:17 prd-ubuntu1804-docker-4c-4g-3494 sshd[1822]: Received disconnect from 10.32.4.5 port 33832:11: Closed due to user request. [preauth] Feb 3 01:36:17 prd-ubuntu1804-docker-4c-4g-3494 sshd[1822]: Disconnected from invalid user jenkins 10.32.4.5 port 33832 [preauth] Feb 3 01:36:19 prd-ubuntu1804-docker-4c-4g-3494 useradd[1840]: new group: name=jenkins, GID=1001 Feb 3 01:36:19 prd-ubuntu1804-docker-4c-4g-3494 useradd[1840]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 3 01:36:19 prd-ubuntu1804-docker-4c-4g-3494 usermod[1849]: add 'jenkins' to group 'docker' Feb 3 01:36:19 prd-ubuntu1804-docker-4c-4g-3494 usermod[1849]: add 'jenkins' to shadow group 'docker' Feb 3 01:36:19 prd-ubuntu1804-docker-4c-4g-3494 sshd[1841]: Received disconnect from 10.32.4.5 port 33834:11: Closed due to user request. [preauth] Feb 3 01:36:19 prd-ubuntu1804-docker-4c-4g-3494 sshd[1841]: Disconnected from authenticating user jenkins 10.32.4.5 port 33834 [preauth] Feb 3 01:36:21 prd-ubuntu1804-docker-4c-4g-3494 sshd[1883]: Accepted publickey for jenkins from 10.32.4.5 port 33842 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 3 01:36:21 prd-ubuntu1804-docker-4c-4g-3494 sshd[1883]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 3 01:36:21 prd-ubuntu1804-docker-4c-4g-3494 systemd-logind[1019]: New session 2 of user jenkins. Feb 3 01:36:21 prd-ubuntu1804-docker-4c-4g-3494 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 3 01:37:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[2429]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 01:37:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[2429]: pam_unix(cron:session): session closed for user root Feb 3 01:38:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[2872]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 01:38:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[2872]: pam_unix(cron:session): session closed for user root Feb 3 01:39:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[9303]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 01:39:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[9303]: pam_unix(cron:session): session closed for user root Feb 3 01:40:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[14552]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 01:40:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[14552]: pam_unix(cron:session): session closed for user root Feb 3 01:41:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[15797]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 01:41:01 prd-ubuntu1804-docker-4c-4g-3494 CRON[15797]: pam_unix(cron:session): session closed for user root Feb 3 01:41:45 prd-ubuntu1804-docker-4c-4g-3494 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-alarm-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 3 01:41:45 prd-ubuntu1804-docker-4c-4g-3494 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)