Jan 21 10:02:47 prd-ubuntu1804-docker-4c-4g-3764 passwd[956]: password for 'ubuntu' changed by 'root' Jan 21 10:02:47 prd-ubuntu1804-docker-4c-4g-3764 systemd-logind[998]: Watching system buttons on /dev/input/event0 (Power Button) Jan 21 10:02:47 prd-ubuntu1804-docker-4c-4g-3764 systemd-logind[998]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 21 10:02:47 prd-ubuntu1804-docker-4c-4g-3764 systemd-logind[998]: New seat seat0. Jan 21 10:02:47 prd-ubuntu1804-docker-4c-4g-3764 sshd[1269]: Server listening on 0.0.0.0 port 22. Jan 21 10:02:47 prd-ubuntu1804-docker-4c-4g-3764 sshd[1269]: Server listening on :: port 22. Jan 21 10:02:48 prd-ubuntu1804-docker-4c-4g-3764 sshd[1296]: Did not receive identification string from 10.32.4.5 port 46642 Jan 21 10:02:51 prd-ubuntu1804-docker-4c-4g-3764 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 46644 Jan 21 10:02:52 prd-ubuntu1804-docker-4c-4g-3764 sshd[1498]: Received disconnect from 10.32.4.5 port 46644:11: Closed due to user request. [preauth] Jan 21 10:02:52 prd-ubuntu1804-docker-4c-4g-3764 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 46644 [preauth] Jan 21 10:02:54 prd-ubuntu1804-docker-4c-4g-3764 sshd[1523]: Invalid user jenkins from 10.32.4.5 port 46648 Jan 21 10:02:54 prd-ubuntu1804-docker-4c-4g-3764 sshd[1523]: Received disconnect from 10.32.4.5 port 46648:11: Closed due to user request. [preauth] Jan 21 10:02:54 prd-ubuntu1804-docker-4c-4g-3764 sshd[1523]: Disconnected from invalid user jenkins 10.32.4.5 port 46648 [preauth] Jan 21 10:02:56 prd-ubuntu1804-docker-4c-4g-3764 sshd[1541]: Invalid user jenkins from 10.32.4.5 port 46650 Jan 21 10:02:56 prd-ubuntu1804-docker-4c-4g-3764 sshd[1541]: Received disconnect from 10.32.4.5 port 46650:11: Closed due to user request. [preauth] Jan 21 10:02:56 prd-ubuntu1804-docker-4c-4g-3764 sshd[1541]: Disconnected from invalid user jenkins 10.32.4.5 port 46650 [preauth] Jan 21 10:02:58 prd-ubuntu1804-docker-4c-4g-3764 sshd[1543]: Invalid user jenkins from 10.32.4.5 port 46652 Jan 21 10:02:58 prd-ubuntu1804-docker-4c-4g-3764 sshd[1543]: Received disconnect from 10.32.4.5 port 46652:11: Closed due to user request. [preauth] Jan 21 10:02:58 prd-ubuntu1804-docker-4c-4g-3764 sshd[1543]: Disconnected from invalid user jenkins 10.32.4.5 port 46652 [preauth] Jan 21 10:03:00 prd-ubuntu1804-docker-4c-4g-3764 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 46660 Jan 21 10:03:00 prd-ubuntu1804-docker-4c-4g-3764 sshd[1545]: Received disconnect from 10.32.4.5 port 46660:11: Closed due to user request. [preauth] Jan 21 10:03:00 prd-ubuntu1804-docker-4c-4g-3764 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 46660 [preauth] Jan 21 10:03:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[1548]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 21 10:03:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[1548]: pam_unix(cron:session): session closed for user root Jan 21 10:03:02 prd-ubuntu1804-docker-4c-4g-3764 sshd[1555]: Invalid user jenkins from 10.32.4.5 port 46668 Jan 21 10:03:02 prd-ubuntu1804-docker-4c-4g-3764 sshd[1555]: Received disconnect from 10.32.4.5 port 46668:11: Closed due to user request. [preauth] Jan 21 10:03:02 prd-ubuntu1804-docker-4c-4g-3764 sshd[1555]: Disconnected from invalid user jenkins 10.32.4.5 port 46668 [preauth] Jan 21 10:03:04 prd-ubuntu1804-docker-4c-4g-3764 sshd[1557]: Invalid user jenkins from 10.32.4.5 port 46684 Jan 21 10:03:04 prd-ubuntu1804-docker-4c-4g-3764 sshd[1557]: Received disconnect from 10.32.4.5 port 46684:11: Closed due to user request. [preauth] Jan 21 10:03:04 prd-ubuntu1804-docker-4c-4g-3764 sshd[1557]: Disconnected from invalid user jenkins 10.32.4.5 port 46684 [preauth] Jan 21 10:03:06 prd-ubuntu1804-docker-4c-4g-3764 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 46694 Jan 21 10:03:06 prd-ubuntu1804-docker-4c-4g-3764 sshd[1559]: Received disconnect from 10.32.4.5 port 46694:11: Closed due to user request. [preauth] Jan 21 10:03:06 prd-ubuntu1804-docker-4c-4g-3764 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 46694 [preauth] Jan 21 10:03:08 prd-ubuntu1804-docker-4c-4g-3764 sshd[1570]: Invalid user jenkins from 10.32.4.5 port 46702 Jan 21 10:03:08 prd-ubuntu1804-docker-4c-4g-3764 sshd[1570]: Received disconnect from 10.32.4.5 port 46702:11: Closed due to user request. [preauth] Jan 21 10:03:08 prd-ubuntu1804-docker-4c-4g-3764 sshd[1570]: Disconnected from invalid user jenkins 10.32.4.5 port 46702 [preauth] Jan 21 10:03:11 prd-ubuntu1804-docker-4c-4g-3764 sshd[1771]: Invalid user jenkins from 10.32.4.5 port 46712 Jan 21 10:03:11 prd-ubuntu1804-docker-4c-4g-3764 sshd[1771]: Received disconnect from 10.32.4.5 port 46712:11: Closed due to user request. [preauth] Jan 21 10:03:11 prd-ubuntu1804-docker-4c-4g-3764 sshd[1771]: Disconnected from invalid user jenkins 10.32.4.5 port 46712 [preauth] Jan 21 10:03:13 prd-ubuntu1804-docker-4c-4g-3764 sshd[1816]: Invalid user jenkins from 10.32.4.5 port 46720 Jan 21 10:03:13 prd-ubuntu1804-docker-4c-4g-3764 sshd[1816]: Received disconnect from 10.32.4.5 port 46720:11: Closed due to user request. [preauth] Jan 21 10:03:13 prd-ubuntu1804-docker-4c-4g-3764 sshd[1816]: Disconnected from invalid user jenkins 10.32.4.5 port 46720 [preauth] Jan 21 10:03:16 prd-ubuntu1804-docker-4c-4g-3764 sshd[1834]: Invalid user jenkins from 10.32.4.5 port 46728 Jan 21 10:03:16 prd-ubuntu1804-docker-4c-4g-3764 sshd[1834]: Received disconnect from 10.32.4.5 port 46728:11: Closed due to user request. [preauth] Jan 21 10:03:16 prd-ubuntu1804-docker-4c-4g-3764 sshd[1834]: Disconnected from invalid user jenkins 10.32.4.5 port 46728 [preauth] Jan 21 10:03:18 prd-ubuntu1804-docker-4c-4g-3764 sshd[1838]: Invalid user jenkins from 10.32.4.5 port 46738 Jan 21 10:03:18 prd-ubuntu1804-docker-4c-4g-3764 sshd[1838]: Received disconnect from 10.32.4.5 port 46738:11: Closed due to user request. [preauth] Jan 21 10:03:18 prd-ubuntu1804-docker-4c-4g-3764 sshd[1838]: Disconnected from invalid user jenkins 10.32.4.5 port 46738 [preauth] Jan 21 10:03:19 prd-ubuntu1804-docker-4c-4g-3764 useradd[1863]: new group: name=jenkins, GID=1001 Jan 21 10:03:19 prd-ubuntu1804-docker-4c-4g-3764 useradd[1863]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 21 10:03:19 prd-ubuntu1804-docker-4c-4g-3764 usermod[1870]: add 'jenkins' to group 'docker' Jan 21 10:03:19 prd-ubuntu1804-docker-4c-4g-3764 usermod[1870]: add 'jenkins' to shadow group 'docker' Jan 21 10:03:20 prd-ubuntu1804-docker-4c-4g-3764 sshd[1914]: Accepted publickey for jenkins from 10.32.4.5 port 46746 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 21 10:03:20 prd-ubuntu1804-docker-4c-4g-3764 sshd[1914]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 21 10:03:20 prd-ubuntu1804-docker-4c-4g-3764 systemd-logind[998]: New session 2 of user jenkins. Jan 21 10:03:20 prd-ubuntu1804-docker-4c-4g-3764 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 21 10:04:02 prd-ubuntu1804-docker-4c-4g-3764 CRON[2430]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 21 10:04:02 prd-ubuntu1804-docker-4c-4g-3764 CRON[2430]: pam_unix(cron:session): session closed for user root Jan 21 10:05:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[2472]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 21 10:05:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[2472]: pam_unix(cron:session): session closed for user root Jan 21 10:06:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[2874]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 21 10:06:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[2874]: pam_unix(cron:session): session closed for user root Jan 21 10:07:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[8412]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 21 10:07:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[8412]: pam_unix(cron:session): session closed for user root Jan 21 10:08:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[14299]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 21 10:08:01 prd-ubuntu1804-docker-4c-4g-3764 CRON[14299]: pam_unix(cron:session): session closed for user root Jan 21 10:09:00 prd-ubuntu1804-docker-4c-4g-3764 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-rtmgr-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 21 10:09:00 prd-ubuntu1804-docker-4c-4g-3764 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)