Jan 5 12:38:47 prd-ubuntu1804-docker-4c-4g-2527 passwd[938]: password for 'ubuntu' changed by 'root' Jan 5 12:38:47 prd-ubuntu1804-docker-4c-4g-2527 systemd-logind[1003]: Watching system buttons on /dev/input/event0 (Power Button) Jan 5 12:38:47 prd-ubuntu1804-docker-4c-4g-2527 systemd-logind[1003]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 5 12:38:47 prd-ubuntu1804-docker-4c-4g-2527 systemd-logind[1003]: New seat seat0. Jan 5 12:38:47 prd-ubuntu1804-docker-4c-4g-2527 sshd[1131]: Server listening on 0.0.0.0 port 22. Jan 5 12:38:47 prd-ubuntu1804-docker-4c-4g-2527 sshd[1131]: Server listening on :: port 22. Jan 5 12:38:50 prd-ubuntu1804-docker-4c-4g-2527 sshd[1457]: Did not receive identification string from 10.32.4.5 port 42022 Jan 5 12:38:52 prd-ubuntu1804-docker-4c-4g-2527 sshd[1478]: Invalid user jenkins from 10.32.4.5 port 42024 Jan 5 12:38:52 prd-ubuntu1804-docker-4c-4g-2527 sshd[1478]: Received disconnect from 10.32.4.5 port 42024:11: Closed due to user request. [preauth] Jan 5 12:38:52 prd-ubuntu1804-docker-4c-4g-2527 sshd[1478]: Disconnected from invalid user jenkins 10.32.4.5 port 42024 [preauth] Jan 5 12:38:54 prd-ubuntu1804-docker-4c-4g-2527 sshd[1501]: Invalid user jenkins from 10.32.4.5 port 42028 Jan 5 12:38:54 prd-ubuntu1804-docker-4c-4g-2527 sshd[1501]: Received disconnect from 10.32.4.5 port 42028:11: Closed due to user request. [preauth] Jan 5 12:38:54 prd-ubuntu1804-docker-4c-4g-2527 sshd[1501]: Disconnected from invalid user jenkins 10.32.4.5 port 42028 [preauth] Jan 5 12:38:56 prd-ubuntu1804-docker-4c-4g-2527 sshd[1518]: Invalid user jenkins from 10.32.4.5 port 42030 Jan 5 12:38:56 prd-ubuntu1804-docker-4c-4g-2527 sshd[1518]: Received disconnect from 10.32.4.5 port 42030:11: Closed due to user request. [preauth] Jan 5 12:38:56 prd-ubuntu1804-docker-4c-4g-2527 sshd[1518]: Disconnected from invalid user jenkins 10.32.4.5 port 42030 [preauth] Jan 5 12:38:58 prd-ubuntu1804-docker-4c-4g-2527 sshd[1520]: Invalid user jenkins from 10.32.4.5 port 42032 Jan 5 12:38:58 prd-ubuntu1804-docker-4c-4g-2527 sshd[1520]: Received disconnect from 10.32.4.5 port 42032:11: Closed due to user request. [preauth] Jan 5 12:38:58 prd-ubuntu1804-docker-4c-4g-2527 sshd[1520]: Disconnected from invalid user jenkins 10.32.4.5 port 42032 [preauth] Jan 5 12:39:00 prd-ubuntu1804-docker-4c-4g-2527 sshd[1522]: Invalid user jenkins from 10.32.4.5 port 42040 Jan 5 12:39:00 prd-ubuntu1804-docker-4c-4g-2527 sshd[1522]: Received disconnect from 10.32.4.5 port 42040:11: Closed due to user request. [preauth] Jan 5 12:39:00 prd-ubuntu1804-docker-4c-4g-2527 sshd[1522]: Disconnected from invalid user jenkins 10.32.4.5 port 42040 [preauth] Jan 5 12:39:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[1524]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 12:39:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[1524]: pam_unix(cron:session): session closed for user root Jan 5 12:39:02 prd-ubuntu1804-docker-4c-4g-2527 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 42042 Jan 5 12:39:02 prd-ubuntu1804-docker-4c-4g-2527 sshd[1532]: Received disconnect from 10.32.4.5 port 42042:11: Closed due to user request. [preauth] Jan 5 12:39:02 prd-ubuntu1804-docker-4c-4g-2527 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 42042 [preauth] Jan 5 12:39:05 prd-ubuntu1804-docker-4c-4g-2527 sshd[1534]: Invalid user jenkins from 10.32.4.5 port 42044 Jan 5 12:39:05 prd-ubuntu1804-docker-4c-4g-2527 sshd[1534]: Received disconnect from 10.32.4.5 port 42044:11: Closed due to user request. [preauth] Jan 5 12:39:05 prd-ubuntu1804-docker-4c-4g-2527 sshd[1534]: Disconnected from invalid user jenkins 10.32.4.5 port 42044 [preauth] Jan 5 12:39:07 prd-ubuntu1804-docker-4c-4g-2527 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 42046 Jan 5 12:39:07 prd-ubuntu1804-docker-4c-4g-2527 sshd[1536]: Received disconnect from 10.32.4.5 port 42046:11: Closed due to user request. [preauth] Jan 5 12:39:07 prd-ubuntu1804-docker-4c-4g-2527 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 42046 [preauth] Jan 5 12:39:09 prd-ubuntu1804-docker-4c-4g-2527 sshd[1547]: Invalid user jenkins from 10.32.4.5 port 42050 Jan 5 12:39:09 prd-ubuntu1804-docker-4c-4g-2527 sshd[1547]: Received disconnect from 10.32.4.5 port 42050:11: Closed due to user request. [preauth] Jan 5 12:39:09 prd-ubuntu1804-docker-4c-4g-2527 sshd[1547]: Disconnected from invalid user jenkins 10.32.4.5 port 42050 [preauth] Jan 5 12:39:11 prd-ubuntu1804-docker-4c-4g-2527 sshd[1758]: Invalid user jenkins from 10.32.4.5 port 42052 Jan 5 12:39:11 prd-ubuntu1804-docker-4c-4g-2527 sshd[1758]: Received disconnect from 10.32.4.5 port 42052:11: Closed due to user request. [preauth] Jan 5 12:39:11 prd-ubuntu1804-docker-4c-4g-2527 sshd[1758]: Disconnected from invalid user jenkins 10.32.4.5 port 42052 [preauth] Jan 5 12:39:13 prd-ubuntu1804-docker-4c-4g-2527 sshd[1807]: Invalid user jenkins from 10.32.4.5 port 42054 Jan 5 12:39:13 prd-ubuntu1804-docker-4c-4g-2527 sshd[1807]: Received disconnect from 10.32.4.5 port 42054:11: Closed due to user request. [preauth] Jan 5 12:39:13 prd-ubuntu1804-docker-4c-4g-2527 sshd[1807]: Disconnected from invalid user jenkins 10.32.4.5 port 42054 [preauth] Jan 5 12:39:15 prd-ubuntu1804-docker-4c-4g-2527 sshd[1815]: Invalid user jenkins from 10.32.4.5 port 42056 Jan 5 12:39:15 prd-ubuntu1804-docker-4c-4g-2527 sshd[1815]: Received disconnect from 10.32.4.5 port 42056:11: Closed due to user request. [preauth] Jan 5 12:39:15 prd-ubuntu1804-docker-4c-4g-2527 sshd[1815]: Disconnected from invalid user jenkins 10.32.4.5 port 42056 [preauth] Jan 5 12:39:17 prd-ubuntu1804-docker-4c-4g-2527 useradd[1831]: new group: name=jenkins, GID=1001 Jan 5 12:39:17 prd-ubuntu1804-docker-4c-4g-2527 useradd[1831]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 5 12:39:17 prd-ubuntu1804-docker-4c-4g-2527 usermod[1838]: add 'jenkins' to group 'docker' Jan 5 12:39:17 prd-ubuntu1804-docker-4c-4g-2527 usermod[1838]: add 'jenkins' to shadow group 'docker' Jan 5 12:39:17 prd-ubuntu1804-docker-4c-4g-2527 sshd[1839]: Received disconnect from 10.32.4.5 port 42058:11: Closed due to user request. [preauth] Jan 5 12:39:17 prd-ubuntu1804-docker-4c-4g-2527 sshd[1839]: Disconnected from authenticating user jenkins 10.32.4.5 port 42058 [preauth] Jan 5 12:39:20 prd-ubuntu1804-docker-4c-4g-2527 sshd[1902]: Accepted publickey for jenkins from 10.32.4.5 port 42060 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 5 12:39:20 prd-ubuntu1804-docker-4c-4g-2527 sshd[1902]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 5 12:39:20 prd-ubuntu1804-docker-4c-4g-2527 systemd-logind[1003]: New session 2 of user jenkins. Jan 5 12:39:20 prd-ubuntu1804-docker-4c-4g-2527 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 5 12:40:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[2448]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 12:40:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[2448]: pam_unix(cron:session): session closed for user root Jan 5 12:41:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[2557]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 12:41:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[2557]: pam_unix(cron:session): session closed for user root Jan 5 12:42:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[8070]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 12:42:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[8070]: pam_unix(cron:session): session closed for user root Jan 5 12:43:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[14200]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 12:43:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[14200]: pam_unix(cron:session): session closed for user root Jan 5 12:44:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[18085]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 12:44:01 prd-ubuntu1804-docker-4c-4g-2527 CRON[18085]: pam_unix(cron:session): session closed for user root Jan 5 12:44:49 prd-ubuntu1804-docker-4c-4g-2527 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-appmgr-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 5 12:44:49 prd-ubuntu1804-docker-4c-4g-2527 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)