Jun 17 20:21:45 prd-ubuntu1804-docker-4c-4g-3634 passwd[954]: password for 'ubuntu' changed by 'root' Jun 17 20:21:45 prd-ubuntu1804-docker-4c-4g-3634 systemd-logind[1004]: Watching system buttons on /dev/input/event0 (Power Button) Jun 17 20:21:45 prd-ubuntu1804-docker-4c-4g-3634 systemd-logind[1004]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 17 20:21:45 prd-ubuntu1804-docker-4c-4g-3634 systemd-logind[1004]: New seat seat0. Jun 17 20:21:46 prd-ubuntu1804-docker-4c-4g-3634 sshd[1322]: Server listening on 0.0.0.0 port 22. Jun 17 20:21:46 prd-ubuntu1804-docker-4c-4g-3634 sshd[1322]: Server listening on :: port 22. Jun 17 20:21:48 prd-ubuntu1804-docker-4c-4g-3634 sshd[1537]: Did not receive identification string from 10.32.4.5 port 34274 Jun 17 20:21:52 prd-ubuntu1804-docker-4c-4g-3634 sshd[1593]: Invalid user jenkins from 10.32.4.5 port 34276 Jun 17 20:21:52 prd-ubuntu1804-docker-4c-4g-3634 sshd[1593]: Received disconnect from 10.32.4.5 port 34276:11: Closed due to user request. [preauth] Jun 17 20:21:52 prd-ubuntu1804-docker-4c-4g-3634 sshd[1593]: Disconnected from invalid user jenkins 10.32.4.5 port 34276 [preauth] Jun 17 20:21:54 prd-ubuntu1804-docker-4c-4g-3634 sshd[1612]: Invalid user jenkins from 10.32.4.5 port 34278 Jun 17 20:21:54 prd-ubuntu1804-docker-4c-4g-3634 sshd[1612]: Received disconnect from 10.32.4.5 port 34278:11: Closed due to user request. [preauth] Jun 17 20:21:54 prd-ubuntu1804-docker-4c-4g-3634 sshd[1612]: Disconnected from invalid user jenkins 10.32.4.5 port 34278 [preauth] Jun 17 20:21:56 prd-ubuntu1804-docker-4c-4g-3634 sshd[1614]: Invalid user jenkins from 10.32.4.5 port 34280 Jun 17 20:21:56 prd-ubuntu1804-docker-4c-4g-3634 sshd[1614]: Received disconnect from 10.32.4.5 port 34280:11: Closed due to user request. [preauth] Jun 17 20:21:56 prd-ubuntu1804-docker-4c-4g-3634 sshd[1614]: Disconnected from invalid user jenkins 10.32.4.5 port 34280 [preauth] Jun 17 20:21:59 prd-ubuntu1804-docker-4c-4g-3634 sshd[1616]: Invalid user jenkins from 10.32.4.5 port 34282 Jun 17 20:21:59 prd-ubuntu1804-docker-4c-4g-3634 sshd[1616]: Received disconnect from 10.32.4.5 port 34282:11: Closed due to user request. [preauth] Jun 17 20:21:59 prd-ubuntu1804-docker-4c-4g-3634 sshd[1616]: Disconnected from invalid user jenkins 10.32.4.5 port 34282 [preauth] Jun 17 20:22:01 prd-ubuntu1804-docker-4c-4g-3634 sshd[1618]: Invalid user jenkins from 10.32.4.5 port 34286 Jun 17 20:22:01 prd-ubuntu1804-docker-4c-4g-3634 sshd[1618]: Received disconnect from 10.32.4.5 port 34286:11: Closed due to user request. [preauth] Jun 17 20:22:01 prd-ubuntu1804-docker-4c-4g-3634 sshd[1618]: Disconnected from invalid user jenkins 10.32.4.5 port 34286 [preauth] Jun 17 20:22:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[1620]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:22:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[1620]: pam_unix(cron:session): session closed for user root Jun 17 20:22:03 prd-ubuntu1804-docker-4c-4g-3634 sshd[1629]: Invalid user jenkins from 10.32.4.5 port 34288 Jun 17 20:22:03 prd-ubuntu1804-docker-4c-4g-3634 sshd[1629]: Received disconnect from 10.32.4.5 port 34288:11: Closed due to user request. [preauth] Jun 17 20:22:03 prd-ubuntu1804-docker-4c-4g-3634 sshd[1629]: Disconnected from invalid user jenkins 10.32.4.5 port 34288 [preauth] Jun 17 20:22:05 prd-ubuntu1804-docker-4c-4g-3634 sshd[1631]: Invalid user jenkins from 10.32.4.5 port 34290 Jun 17 20:22:05 prd-ubuntu1804-docker-4c-4g-3634 sshd[1631]: Received disconnect from 10.32.4.5 port 34290:11: Closed due to user request. [preauth] Jun 17 20:22:05 prd-ubuntu1804-docker-4c-4g-3634 sshd[1631]: Disconnected from invalid user jenkins 10.32.4.5 port 34290 [preauth] Jun 17 20:22:07 prd-ubuntu1804-docker-4c-4g-3634 sshd[1633]: Invalid user jenkins from 10.32.4.5 port 34292 Jun 17 20:22:07 prd-ubuntu1804-docker-4c-4g-3634 sshd[1633]: Received disconnect from 10.32.4.5 port 34292:11: Closed due to user request. [preauth] Jun 17 20:22:07 prd-ubuntu1804-docker-4c-4g-3634 sshd[1633]: Disconnected from invalid user jenkins 10.32.4.5 port 34292 [preauth] Jun 17 20:22:10 prd-ubuntu1804-docker-4c-4g-3634 sshd[1839]: Invalid user jenkins from 10.32.4.5 port 34294 Jun 17 20:22:10 prd-ubuntu1804-docker-4c-4g-3634 sshd[1839]: Received disconnect from 10.32.4.5 port 34294:11: Closed due to user request. [preauth] Jun 17 20:22:10 prd-ubuntu1804-docker-4c-4g-3634 sshd[1839]: Disconnected from invalid user jenkins 10.32.4.5 port 34294 [preauth] Jun 17 20:22:12 prd-ubuntu1804-docker-4c-4g-3634 sshd[1892]: Invalid user jenkins from 10.32.4.5 port 34296 Jun 17 20:22:12 prd-ubuntu1804-docker-4c-4g-3634 sshd[1892]: Received disconnect from 10.32.4.5 port 34296:11: Closed due to user request. [preauth] Jun 17 20:22:12 prd-ubuntu1804-docker-4c-4g-3634 sshd[1892]: Disconnected from invalid user jenkins 10.32.4.5 port 34296 [preauth] Jun 17 20:22:14 prd-ubuntu1804-docker-4c-4g-3634 sshd[1910]: Invalid user jenkins from 10.32.4.5 port 34298 Jun 17 20:22:14 prd-ubuntu1804-docker-4c-4g-3634 sshd[1910]: Received disconnect from 10.32.4.5 port 34298:11: Closed due to user request. [preauth] Jun 17 20:22:14 prd-ubuntu1804-docker-4c-4g-3634 sshd[1910]: Disconnected from invalid user jenkins 10.32.4.5 port 34298 [preauth] Jun 17 20:22:16 prd-ubuntu1804-docker-4c-4g-3634 useradd[1920]: new group: name=jenkins, GID=1001 Jun 17 20:22:16 prd-ubuntu1804-docker-4c-4g-3634 useradd[1920]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 17 20:22:16 prd-ubuntu1804-docker-4c-4g-3634 usermod[1929]: add 'jenkins' to group 'docker' Jun 17 20:22:16 prd-ubuntu1804-docker-4c-4g-3634 usermod[1929]: add 'jenkins' to shadow group 'docker' Jun 17 20:22:17 prd-ubuntu1804-docker-4c-4g-3634 sshd[1921]: Received disconnect from 10.32.4.5 port 34302:11: Closed due to user request. [preauth] Jun 17 20:22:17 prd-ubuntu1804-docker-4c-4g-3634 sshd[1921]: Disconnected from authenticating user jenkins 10.32.4.5 port 34302 [preauth] Jun 17 20:22:19 prd-ubuntu1804-docker-4c-4g-3634 sshd[1974]: Accepted publickey for jenkins from 10.32.4.5 port 34304 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 17 20:22:19 prd-ubuntu1804-docker-4c-4g-3634 sshd[1974]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 17 20:22:19 prd-ubuntu1804-docker-4c-4g-3634 systemd-logind[1004]: New session 2 of user jenkins. Jun 17 20:22:19 prd-ubuntu1804-docker-4c-4g-3634 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 17 20:23:02 prd-ubuntu1804-docker-4c-4g-3634 CRON[2513]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:23:02 prd-ubuntu1804-docker-4c-4g-3634 CRON[2513]: pam_unix(cron:session): session closed for user root Jun 17 20:24:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[2542]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:24:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[2542]: pam_unix(cron:session): session closed for user root Jun 17 20:25:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[8273]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:25:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[8273]: pam_unix(cron:session): session closed for user root Jun 17 20:26:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[15636]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:26:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[15636]: pam_unix(cron:session): session closed for user root Jun 17 20:27:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[19404]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:27:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[19404]: pam_unix(cron:session): session closed for user root Jun 17 20:28:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[22403]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:28:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[22403]: pam_unix(cron:session): session closed for user root Jun 17 20:29:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[26040]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 17 20:29:01 prd-ubuntu1804-docker-4c-4g-3634 CRON[26040]: pam_unix(cron:session): session closed for user root Jun 17 20:29:26 prd-ubuntu1804-docker-4c-4g-3634 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-ricdms-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 17 20:29:26 prd-ubuntu1804-docker-4c-4g-3634 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)