Feb 6 06:38:23 prd-ubuntu1804-docker-4c-4g-5215 passwd[923]: password for 'ubuntu' changed by 'root' Feb 6 06:38:23 prd-ubuntu1804-docker-4c-4g-5215 systemd-logind[983]: Watching system buttons on /dev/input/event0 (Power Button) Feb 6 06:38:23 prd-ubuntu1804-docker-4c-4g-5215 systemd-logind[983]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 6 06:38:23 prd-ubuntu1804-docker-4c-4g-5215 systemd-logind[983]: New seat seat0. Feb 6 06:38:24 prd-ubuntu1804-docker-4c-4g-5215 sshd[1185]: Server listening on 0.0.0.0 port 22. Feb 6 06:38:24 prd-ubuntu1804-docker-4c-4g-5215 sshd[1185]: Server listening on :: port 22. Feb 6 06:38:25 prd-ubuntu1804-docker-4c-4g-5215 sshd[1295]: Did not receive identification string from 10.32.4.5 port 54508 Feb 6 06:38:31 prd-ubuntu1804-docker-4c-4g-5215 sshd[1447]: Invalid user jenkins from 10.32.4.5 port 54510 Feb 6 06:38:31 prd-ubuntu1804-docker-4c-4g-5215 sshd[1447]: Received disconnect from 10.32.4.5 port 54510:11: Closed due to user request. [preauth] Feb 6 06:38:31 prd-ubuntu1804-docker-4c-4g-5215 sshd[1447]: Disconnected from invalid user jenkins 10.32.4.5 port 54510 [preauth] Feb 6 06:38:33 prd-ubuntu1804-docker-4c-4g-5215 sshd[1451]: Invalid user jenkins from 10.32.4.5 port 54512 Feb 6 06:38:33 prd-ubuntu1804-docker-4c-4g-5215 sshd[1451]: Received disconnect from 10.32.4.5 port 54512:11: Closed due to user request. [preauth] Feb 6 06:38:33 prd-ubuntu1804-docker-4c-4g-5215 sshd[1451]: Disconnected from invalid user jenkins 10.32.4.5 port 54512 [preauth] Feb 6 06:38:36 prd-ubuntu1804-docker-4c-4g-5215 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 54516 Feb 6 06:38:36 prd-ubuntu1804-docker-4c-4g-5215 sshd[1453]: Received disconnect from 10.32.4.5 port 54516:11: Closed due to user request. [preauth] Feb 6 06:38:36 prd-ubuntu1804-docker-4c-4g-5215 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 54516 [preauth] Feb 6 06:38:38 prd-ubuntu1804-docker-4c-4g-5215 sshd[1455]: Invalid user jenkins from 10.32.4.5 port 54518 Feb 6 06:38:38 prd-ubuntu1804-docker-4c-4g-5215 sshd[1455]: Received disconnect from 10.32.4.5 port 54518:11: Closed due to user request. [preauth] Feb 6 06:38:38 prd-ubuntu1804-docker-4c-4g-5215 sshd[1455]: Disconnected from invalid user jenkins 10.32.4.5 port 54518 [preauth] Feb 6 06:38:40 prd-ubuntu1804-docker-4c-4g-5215 sshd[1457]: Invalid user jenkins from 10.32.4.5 port 54520 Feb 6 06:38:40 prd-ubuntu1804-docker-4c-4g-5215 sshd[1457]: Received disconnect from 10.32.4.5 port 54520:11: Closed due to user request. [preauth] Feb 6 06:38:40 prd-ubuntu1804-docker-4c-4g-5215 sshd[1457]: Disconnected from invalid user jenkins 10.32.4.5 port 54520 [preauth] Feb 6 06:38:42 prd-ubuntu1804-docker-4c-4g-5215 sshd[1459]: Invalid user jenkins from 10.32.4.5 port 54522 Feb 6 06:38:42 prd-ubuntu1804-docker-4c-4g-5215 sshd[1459]: Received disconnect from 10.32.4.5 port 54522:11: Closed due to user request. [preauth] Feb 6 06:38:42 prd-ubuntu1804-docker-4c-4g-5215 sshd[1459]: Disconnected from invalid user jenkins 10.32.4.5 port 54522 [preauth] Feb 6 06:38:44 prd-ubuntu1804-docker-4c-4g-5215 sshd[1461]: Invalid user jenkins from 10.32.4.5 port 54524 Feb 6 06:38:44 prd-ubuntu1804-docker-4c-4g-5215 sshd[1461]: Received disconnect from 10.32.4.5 port 54524:11: Closed due to user request. [preauth] Feb 6 06:38:44 prd-ubuntu1804-docker-4c-4g-5215 sshd[1461]: Disconnected from invalid user jenkins 10.32.4.5 port 54524 [preauth] Feb 6 06:38:47 prd-ubuntu1804-docker-4c-4g-5215 sshd[1588]: Invalid user jenkins from 10.32.4.5 port 54526 Feb 6 06:38:47 prd-ubuntu1804-docker-4c-4g-5215 sshd[1588]: Received disconnect from 10.32.4.5 port 54526:11: Closed due to user request. [preauth] Feb 6 06:38:47 prd-ubuntu1804-docker-4c-4g-5215 sshd[1588]: Disconnected from invalid user jenkins 10.32.4.5 port 54526 [preauth] Feb 6 06:38:49 prd-ubuntu1804-docker-4c-4g-5215 sshd[1698]: Invalid user jenkins from 10.32.4.5 port 54528 Feb 6 06:38:49 prd-ubuntu1804-docker-4c-4g-5215 sshd[1698]: Received disconnect from 10.32.4.5 port 54528:11: Closed due to user request. [preauth] Feb 6 06:38:49 prd-ubuntu1804-docker-4c-4g-5215 sshd[1698]: Disconnected from invalid user jenkins 10.32.4.5 port 54528 [preauth] Feb 6 06:38:51 prd-ubuntu1804-docker-4c-4g-5215 sshd[1738]: Invalid user jenkins from 10.32.4.5 port 54532 Feb 6 06:38:51 prd-ubuntu1804-docker-4c-4g-5215 sshd[1738]: Received disconnect from 10.32.4.5 port 54532:11: Closed due to user request. [preauth] Feb 6 06:38:51 prd-ubuntu1804-docker-4c-4g-5215 sshd[1738]: Disconnected from invalid user jenkins 10.32.4.5 port 54532 [preauth] Feb 6 06:38:53 prd-ubuntu1804-docker-4c-4g-5215 sshd[1740]: Invalid user jenkins from 10.32.4.5 port 54534 Feb 6 06:38:53 prd-ubuntu1804-docker-4c-4g-5215 sshd[1740]: Received disconnect from 10.32.4.5 port 54534:11: Closed due to user request. [preauth] Feb 6 06:38:53 prd-ubuntu1804-docker-4c-4g-5215 sshd[1740]: Disconnected from invalid user jenkins 10.32.4.5 port 54534 [preauth] Feb 6 06:38:55 prd-ubuntu1804-docker-4c-4g-5215 sshd[1765]: Invalid user jenkins from 10.32.4.5 port 54536 Feb 6 06:38:55 prd-ubuntu1804-docker-4c-4g-5215 sshd[1765]: Received disconnect from 10.32.4.5 port 54536:11: Closed due to user request. [preauth] Feb 6 06:38:55 prd-ubuntu1804-docker-4c-4g-5215 sshd[1765]: Disconnected from invalid user jenkins 10.32.4.5 port 54536 [preauth] Feb 6 06:38:56 prd-ubuntu1804-docker-4c-4g-5215 useradd[1769]: new group: name=jenkins, GID=1001 Feb 6 06:38:56 prd-ubuntu1804-docker-4c-4g-5215 useradd[1769]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 6 06:38:56 prd-ubuntu1804-docker-4c-4g-5215 usermod[1776]: add 'jenkins' to group 'docker' Feb 6 06:38:56 prd-ubuntu1804-docker-4c-4g-5215 usermod[1776]: add 'jenkins' to shadow group 'docker' Feb 6 06:38:58 prd-ubuntu1804-docker-4c-4g-5215 sshd[1830]: Accepted publickey for jenkins from 10.32.4.5 port 54538 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 6 06:38:58 prd-ubuntu1804-docker-4c-4g-5215 sshd[1830]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 6 06:38:58 prd-ubuntu1804-docker-4c-4g-5215 systemd-logind[983]: New session 1 of user jenkins. Feb 6 06:38:58 prd-ubuntu1804-docker-4c-4g-5215 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 6 06:39:02 prd-ubuntu1804-docker-4c-4g-5215 CRON[2029]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 06:39:02 prd-ubuntu1804-docker-4c-4g-5215 CRON[2029]: pam_unix(cron:session): session closed for user root Feb 6 06:40:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[2391]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 06:40:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[2391]: pam_unix(cron:session): session closed for user root Feb 6 06:41:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[2801]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 06:41:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[2801]: pam_unix(cron:session): session closed for user root Feb 6 06:42:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[6008]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 06:42:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[6008]: pam_unix(cron:session): session closed for user root Feb 6 06:43:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[13189]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 06:43:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[13189]: pam_unix(cron:session): session closed for user root Feb 6 06:44:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[14987]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 06:44:01 prd-ubuntu1804-docker-4c-4g-5215 CRON[14987]: pam_unix(cron:session): session closed for user root Feb 6 06:44:19 prd-ubuntu1804-docker-4c-4g-5215 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-e2mgr-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 6 06:44:19 prd-ubuntu1804-docker-4c-4g-5215 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)