Apr 10 09:22:10 prd-ubuntu1804-docker-4c-4g-180 passwd[934]: password for 'ubuntu' changed by 'root' Apr 10 09:22:10 prd-ubuntu1804-docker-4c-4g-180 systemd-logind[1057]: Watching system buttons on /dev/input/event0 (Power Button) Apr 10 09:22:10 prd-ubuntu1804-docker-4c-4g-180 systemd-logind[1057]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 10 09:22:10 prd-ubuntu1804-docker-4c-4g-180 systemd-logind[1057]: New seat seat0. Apr 10 09:22:10 prd-ubuntu1804-docker-4c-4g-180 sshd[1086]: Server listening on 0.0.0.0 port 22. Apr 10 09:22:10 prd-ubuntu1804-docker-4c-4g-180 sshd[1086]: Server listening on :: port 22. Apr 10 09:22:12 prd-ubuntu1804-docker-4c-4g-180 sshd[1445]: Did not receive identification string from 10.32.4.5 port 57630 Apr 10 09:22:16 prd-ubuntu1804-docker-4c-4g-180 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 57632 Apr 10 09:22:16 prd-ubuntu1804-docker-4c-4g-180 sshd[1494]: Received disconnect from 10.32.4.5 port 57632:11: Closed due to user request. [preauth] Apr 10 09:22:16 prd-ubuntu1804-docker-4c-4g-180 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 57632 [preauth] Apr 10 09:22:18 prd-ubuntu1804-docker-4c-4g-180 sshd[1512]: Invalid user jenkins from 10.32.4.5 port 57634 Apr 10 09:22:18 prd-ubuntu1804-docker-4c-4g-180 sshd[1512]: Received disconnect from 10.32.4.5 port 57634:11: Closed due to user request. [preauth] Apr 10 09:22:18 prd-ubuntu1804-docker-4c-4g-180 sshd[1512]: Disconnected from invalid user jenkins 10.32.4.5 port 57634 [preauth] Apr 10 09:22:20 prd-ubuntu1804-docker-4c-4g-180 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 57636 Apr 10 09:22:21 prd-ubuntu1804-docker-4c-4g-180 sshd[1514]: Received disconnect from 10.32.4.5 port 57636:11: Closed due to user request. [preauth] Apr 10 09:22:21 prd-ubuntu1804-docker-4c-4g-180 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 57636 [preauth] Apr 10 09:22:23 prd-ubuntu1804-docker-4c-4g-180 sshd[1516]: Invalid user jenkins from 10.32.4.5 port 57638 Apr 10 09:22:23 prd-ubuntu1804-docker-4c-4g-180 sshd[1516]: Received disconnect from 10.32.4.5 port 57638:11: Closed due to user request. [preauth] Apr 10 09:22:23 prd-ubuntu1804-docker-4c-4g-180 sshd[1516]: Disconnected from invalid user jenkins 10.32.4.5 port 57638 [preauth] Apr 10 09:22:25 prd-ubuntu1804-docker-4c-4g-180 sshd[1518]: Invalid user jenkins from 10.32.4.5 port 57640 Apr 10 09:22:25 prd-ubuntu1804-docker-4c-4g-180 sshd[1518]: Received disconnect from 10.32.4.5 port 57640:11: Closed due to user request. [preauth] Apr 10 09:22:25 prd-ubuntu1804-docker-4c-4g-180 sshd[1518]: Disconnected from invalid user jenkins 10.32.4.5 port 57640 [preauth] Apr 10 09:22:27 prd-ubuntu1804-docker-4c-4g-180 sshd[1520]: Invalid user jenkins from 10.32.4.5 port 57644 Apr 10 09:22:27 prd-ubuntu1804-docker-4c-4g-180 sshd[1520]: Received disconnect from 10.32.4.5 port 57644:11: Closed due to user request. [preauth] Apr 10 09:22:27 prd-ubuntu1804-docker-4c-4g-180 sshd[1520]: Disconnected from invalid user jenkins 10.32.4.5 port 57644 [preauth] Apr 10 09:22:29 prd-ubuntu1804-docker-4c-4g-180 sshd[1522]: Invalid user jenkins from 10.32.4.5 port 57646 Apr 10 09:22:29 prd-ubuntu1804-docker-4c-4g-180 sshd[1522]: Received disconnect from 10.32.4.5 port 57646:11: Closed due to user request. [preauth] Apr 10 09:22:29 prd-ubuntu1804-docker-4c-4g-180 sshd[1522]: Disconnected from invalid user jenkins 10.32.4.5 port 57646 [preauth] Apr 10 09:22:31 prd-ubuntu1804-docker-4c-4g-180 sshd[1534]: Invalid user jenkins from 10.32.4.5 port 57648 Apr 10 09:22:31 prd-ubuntu1804-docker-4c-4g-180 sshd[1534]: Received disconnect from 10.32.4.5 port 57648:11: Closed due to user request. [preauth] Apr 10 09:22:31 prd-ubuntu1804-docker-4c-4g-180 sshd[1534]: Disconnected from invalid user jenkins 10.32.4.5 port 57648 [preauth] Apr 10 09:22:34 prd-ubuntu1804-docker-4c-4g-180 sshd[1760]: Invalid user jenkins from 10.32.4.5 port 57650 Apr 10 09:22:34 prd-ubuntu1804-docker-4c-4g-180 sshd[1760]: Received disconnect from 10.32.4.5 port 57650:11: Closed due to user request. [preauth] Apr 10 09:22:34 prd-ubuntu1804-docker-4c-4g-180 sshd[1760]: Disconnected from invalid user jenkins 10.32.4.5 port 57650 [preauth] Apr 10 09:22:36 prd-ubuntu1804-docker-4c-4g-180 sshd[1800]: Invalid user jenkins from 10.32.4.5 port 57674 Apr 10 09:22:36 prd-ubuntu1804-docker-4c-4g-180 sshd[1800]: Received disconnect from 10.32.4.5 port 57674:11: Closed due to user request. [preauth] Apr 10 09:22:36 prd-ubuntu1804-docker-4c-4g-180 sshd[1800]: Disconnected from invalid user jenkins 10.32.4.5 port 57674 [preauth] Apr 10 09:22:38 prd-ubuntu1804-docker-4c-4g-180 sshd[1804]: Invalid user jenkins from 10.32.4.5 port 57676 Apr 10 09:22:38 prd-ubuntu1804-docker-4c-4g-180 sshd[1804]: Received disconnect from 10.32.4.5 port 57676:11: Closed due to user request. [preauth] Apr 10 09:22:38 prd-ubuntu1804-docker-4c-4g-180 sshd[1804]: Disconnected from invalid user jenkins 10.32.4.5 port 57676 [preauth] Apr 10 09:22:40 prd-ubuntu1804-docker-4c-4g-180 useradd[1811]: new group: name=jenkins, GID=1001 Apr 10 09:22:40 prd-ubuntu1804-docker-4c-4g-180 useradd[1811]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 10 09:22:40 prd-ubuntu1804-docker-4c-4g-180 usermod[1818]: add 'jenkins' to group 'docker' Apr 10 09:22:40 prd-ubuntu1804-docker-4c-4g-180 usermod[1818]: add 'jenkins' to shadow group 'docker' Apr 10 09:22:41 prd-ubuntu1804-docker-4c-4g-180 sshd[1852]: Accepted publickey for jenkins from 10.32.4.5 port 57678 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 10 09:22:41 prd-ubuntu1804-docker-4c-4g-180 sshd[1852]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 10 09:22:41 prd-ubuntu1804-docker-4c-4g-180 systemd-logind[1057]: New session 1 of user jenkins. Apr 10 09:22:41 prd-ubuntu1804-docker-4c-4g-180 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 10 09:23:02 prd-ubuntu1804-docker-4c-4g-180 CRON[2377]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:23:02 prd-ubuntu1804-docker-4c-4g-180 CRON[2377]: pam_unix(cron:session): session closed for user root Apr 10 09:24:01 prd-ubuntu1804-docker-4c-4g-180 CRON[2441]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:24:01 prd-ubuntu1804-docker-4c-4g-180 CRON[2441]: pam_unix(cron:session): session closed for user root Apr 10 09:25:01 prd-ubuntu1804-docker-4c-4g-180 CRON[6034]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:25:01 prd-ubuntu1804-docker-4c-4g-180 CRON[6034]: pam_unix(cron:session): session closed for user root Apr 10 09:26:01 prd-ubuntu1804-docker-4c-4g-180 CRON[6819]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:26:01 prd-ubuntu1804-docker-4c-4g-180 CRON[6819]: pam_unix(cron:session): session closed for user root Apr 10 09:27:01 prd-ubuntu1804-docker-4c-4g-180 CRON[8200]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:27:01 prd-ubuntu1804-docker-4c-4g-180 CRON[8200]: pam_unix(cron:session): session closed for user root Apr 10 09:28:01 prd-ubuntu1804-docker-4c-4g-180 CRON[9936]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:28:01 prd-ubuntu1804-docker-4c-4g-180 CRON[9936]: pam_unix(cron:session): session closed for user root Apr 10 09:29:01 prd-ubuntu1804-docker-4c-4g-180 CRON[10598]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:29:01 prd-ubuntu1804-docker-4c-4g-180 CRON[10598]: pam_unix(cron:session): session closed for user root Apr 10 09:30:01 prd-ubuntu1804-docker-4c-4g-180 CRON[10673]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:30:01 prd-ubuntu1804-docker-4c-4g-180 CRON[10673]: pam_unix(cron:session): session closed for user root Apr 10 09:31:02 prd-ubuntu1804-docker-4c-4g-180 CRON[11111]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 10 09:31:02 prd-ubuntu1804-docker-4c-4g-180 CRON[11111]: pam_unix(cron:session): session closed for user root Apr 10 09:31:39 prd-ubuntu1804-docker-4c-4g-180 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-e2-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 10 09:31:39 prd-ubuntu1804-docker-4c-4g-180 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)