Mar 6 01:19:46 prd-ubuntu1804-docker-4c-4g-8201 passwd[926]: password for 'ubuntu' changed by 'root' Mar 6 01:19:47 prd-ubuntu1804-docker-4c-4g-8201 systemd-logind[1104]: Watching system buttons on /dev/input/event0 (Power Button) Mar 6 01:19:47 prd-ubuntu1804-docker-4c-4g-8201 systemd-logind[1104]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 6 01:19:47 prd-ubuntu1804-docker-4c-4g-8201 systemd-logind[1104]: New seat seat0. Mar 6 01:19:47 prd-ubuntu1804-docker-4c-4g-8201 sshd[1260]: Server listening on 0.0.0.0 port 22. Mar 6 01:19:47 prd-ubuntu1804-docker-4c-4g-8201 sshd[1260]: Server listening on :: port 22. Mar 6 01:19:49 prd-ubuntu1804-docker-4c-4g-8201 sshd[1418]: Did not receive identification string from 10.32.4.5 port 39592 Mar 6 01:19:52 prd-ubuntu1804-docker-4c-4g-8201 sshd[1488]: Invalid user jenkins from 10.32.4.5 port 39600 Mar 6 01:19:52 prd-ubuntu1804-docker-4c-4g-8201 sshd[1488]: Received disconnect from 10.32.4.5 port 39600:11: Closed due to user request. [preauth] Mar 6 01:19:52 prd-ubuntu1804-docker-4c-4g-8201 sshd[1488]: Disconnected from invalid user jenkins 10.32.4.5 port 39600 [preauth] Mar 6 01:19:54 prd-ubuntu1804-docker-4c-4g-8201 sshd[1515]: Invalid user jenkins from 10.32.4.5 port 39602 Mar 6 01:19:54 prd-ubuntu1804-docker-4c-4g-8201 sshd[1515]: Received disconnect from 10.32.4.5 port 39602:11: Closed due to user request. [preauth] Mar 6 01:19:54 prd-ubuntu1804-docker-4c-4g-8201 sshd[1515]: Disconnected from invalid user jenkins 10.32.4.5 port 39602 [preauth] Mar 6 01:19:56 prd-ubuntu1804-docker-4c-4g-8201 sshd[1523]: Invalid user jenkins from 10.32.4.5 port 39606 Mar 6 01:19:56 prd-ubuntu1804-docker-4c-4g-8201 sshd[1523]: Received disconnect from 10.32.4.5 port 39606:11: Closed due to user request. [preauth] Mar 6 01:19:56 prd-ubuntu1804-docker-4c-4g-8201 sshd[1523]: Disconnected from invalid user jenkins 10.32.4.5 port 39606 [preauth] Mar 6 01:19:58 prd-ubuntu1804-docker-4c-4g-8201 sshd[1525]: Invalid user jenkins from 10.32.4.5 port 39608 Mar 6 01:19:58 prd-ubuntu1804-docker-4c-4g-8201 sshd[1525]: Received disconnect from 10.32.4.5 port 39608:11: Closed due to user request. [preauth] Mar 6 01:19:58 prd-ubuntu1804-docker-4c-4g-8201 sshd[1525]: Disconnected from invalid user jenkins 10.32.4.5 port 39608 [preauth] Mar 6 01:20:00 prd-ubuntu1804-docker-4c-4g-8201 sshd[1527]: Invalid user jenkins from 10.32.4.5 port 39632 Mar 6 01:20:00 prd-ubuntu1804-docker-4c-4g-8201 sshd[1527]: Received disconnect from 10.32.4.5 port 39632:11: Closed due to user request. [preauth] Mar 6 01:20:00 prd-ubuntu1804-docker-4c-4g-8201 sshd[1527]: Disconnected from invalid user jenkins 10.32.4.5 port 39632 [preauth] Mar 6 01:20:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[1529]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:20:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[1529]: pam_unix(cron:session): session closed for user root Mar 6 01:20:02 prd-ubuntu1804-docker-4c-4g-8201 sshd[1538]: Invalid user jenkins from 10.32.4.5 port 39640 Mar 6 01:20:02 prd-ubuntu1804-docker-4c-4g-8201 sshd[1538]: Received disconnect from 10.32.4.5 port 39640:11: Closed due to user request. [preauth] Mar 6 01:20:02 prd-ubuntu1804-docker-4c-4g-8201 sshd[1538]: Disconnected from invalid user jenkins 10.32.4.5 port 39640 [preauth] Mar 6 01:20:04 prd-ubuntu1804-docker-4c-4g-8201 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 39642 Mar 6 01:20:04 prd-ubuntu1804-docker-4c-4g-8201 sshd[1540]: Received disconnect from 10.32.4.5 port 39642:11: Closed due to user request. [preauth] Mar 6 01:20:04 prd-ubuntu1804-docker-4c-4g-8201 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 39642 [preauth] Mar 6 01:20:06 prd-ubuntu1804-docker-4c-4g-8201 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 39644 Mar 6 01:20:06 prd-ubuntu1804-docker-4c-4g-8201 sshd[1542]: Received disconnect from 10.32.4.5 port 39644:11: Closed due to user request. [preauth] Mar 6 01:20:06 prd-ubuntu1804-docker-4c-4g-8201 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 39644 [preauth] Mar 6 01:20:08 prd-ubuntu1804-docker-4c-4g-8201 sshd[1554]: Invalid user jenkins from 10.32.4.5 port 39646 Mar 6 01:20:09 prd-ubuntu1804-docker-4c-4g-8201 sshd[1554]: Received disconnect from 10.32.4.5 port 39646:11: Closed due to user request. [preauth] Mar 6 01:20:09 prd-ubuntu1804-docker-4c-4g-8201 sshd[1554]: Disconnected from invalid user jenkins 10.32.4.5 port 39646 [preauth] Mar 6 01:20:11 prd-ubuntu1804-docker-4c-4g-8201 sshd[1770]: Invalid user jenkins from 10.32.4.5 port 39648 Mar 6 01:20:11 prd-ubuntu1804-docker-4c-4g-8201 sshd[1770]: Received disconnect from 10.32.4.5 port 39648:11: Closed due to user request. [preauth] Mar 6 01:20:11 prd-ubuntu1804-docker-4c-4g-8201 sshd[1770]: Disconnected from invalid user jenkins 10.32.4.5 port 39648 [preauth] Mar 6 01:20:13 prd-ubuntu1804-docker-4c-4g-8201 sshd[1809]: Invalid user jenkins from 10.32.4.5 port 39652 Mar 6 01:20:13 prd-ubuntu1804-docker-4c-4g-8201 sshd[1809]: Received disconnect from 10.32.4.5 port 39652:11: Closed due to user request. [preauth] Mar 6 01:20:13 prd-ubuntu1804-docker-4c-4g-8201 sshd[1809]: Disconnected from invalid user jenkins 10.32.4.5 port 39652 [preauth] Mar 6 01:20:15 prd-ubuntu1804-docker-4c-4g-8201 sshd[1827]: Invalid user jenkins from 10.32.4.5 port 39654 Mar 6 01:20:15 prd-ubuntu1804-docker-4c-4g-8201 sshd[1827]: Received disconnect from 10.32.4.5 port 39654:11: Closed due to user request. [preauth] Mar 6 01:20:15 prd-ubuntu1804-docker-4c-4g-8201 sshd[1827]: Disconnected from invalid user jenkins 10.32.4.5 port 39654 [preauth] Mar 6 01:20:18 prd-ubuntu1804-docker-4c-4g-8201 sshd[1841]: Invalid user jenkins from 10.32.4.5 port 39658 Mar 6 01:20:18 prd-ubuntu1804-docker-4c-4g-8201 sshd[1841]: Received disconnect from 10.32.4.5 port 39658:11: Closed due to user request. [preauth] Mar 6 01:20:18 prd-ubuntu1804-docker-4c-4g-8201 sshd[1841]: Disconnected from invalid user jenkins 10.32.4.5 port 39658 [preauth] Mar 6 01:20:18 prd-ubuntu1804-docker-4c-4g-8201 useradd[1845]: new group: name=jenkins, GID=1001 Mar 6 01:20:18 prd-ubuntu1804-docker-4c-4g-8201 useradd[1845]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 6 01:20:18 prd-ubuntu1804-docker-4c-4g-8201 usermod[1852]: add 'jenkins' to group 'docker' Mar 6 01:20:18 prd-ubuntu1804-docker-4c-4g-8201 usermod[1852]: add 'jenkins' to shadow group 'docker' Mar 6 01:20:20 prd-ubuntu1804-docker-4c-4g-8201 sshd[1907]: Accepted publickey for jenkins from 10.32.4.5 port 39660 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 6 01:20:20 prd-ubuntu1804-docker-4c-4g-8201 sshd[1907]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 6 01:20:20 prd-ubuntu1804-docker-4c-4g-8201 systemd-logind[1104]: New session 2 of user jenkins. Mar 6 01:20:20 prd-ubuntu1804-docker-4c-4g-8201 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 6 01:21:02 prd-ubuntu1804-docker-4c-4g-8201 CRON[2424]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:21:02 prd-ubuntu1804-docker-4c-4g-8201 CRON[2424]: pam_unix(cron:session): session closed for user root Mar 6 01:22:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[2462]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:22:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[2462]: pam_unix(cron:session): session closed for user root Mar 6 01:23:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[3124]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:23:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[3124]: pam_unix(cron:session): session closed for user root Mar 6 01:24:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[11046]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:24:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[11046]: pam_unix(cron:session): session closed for user root Mar 6 01:25:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[14886]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:25:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[14886]: pam_unix(cron:session): session closed for user root Mar 6 01:26:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[15935]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:26:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[15935]: pam_unix(cron:session): session closed for user root Mar 6 01:27:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[19644]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:27:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[19644]: pam_unix(cron:session): session closed for user root Mar 6 01:28:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[23837]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:28:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[23837]: pam_unix(cron:session): session closed for user root Mar 6 01:29:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[25937]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:29:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[25937]: pam_unix(cron:session): session closed for user root Mar 6 01:30:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[26305]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 6 01:30:01 prd-ubuntu1804-docker-4c-4g-8201 CRON[26305]: pam_unix(cron:session): session closed for user root Mar 6 01:30:11 prd-ubuntu1804-docker-4c-4g-8201 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-o1-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 6 01:30:11 prd-ubuntu1804-docker-4c-4g-8201 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)