Apr 19 09:42:00 prd-ubuntu1804-docker-4c-4g-511 passwd[927]: password for 'ubuntu' changed by 'root' Apr 19 09:42:00 prd-ubuntu1804-docker-4c-4g-511 systemd-logind[985]: Watching system buttons on /dev/input/event0 (Power Button) Apr 19 09:42:00 prd-ubuntu1804-docker-4c-4g-511 systemd-logind[985]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 19 09:42:00 prd-ubuntu1804-docker-4c-4g-511 systemd-logind[985]: New seat seat0. Apr 19 09:42:01 prd-ubuntu1804-docker-4c-4g-511 sshd[1078]: Server listening on 0.0.0.0 port 22. Apr 19 09:42:01 prd-ubuntu1804-docker-4c-4g-511 sshd[1078]: Server listening on :: port 22. Apr 19 09:42:04 prd-ubuntu1804-docker-4c-4g-511 sshd[1425]: Did not receive identification string from 10.32.4.5 port 54958 Apr 19 09:42:04 prd-ubuntu1804-docker-4c-4g-511 sshd[1429]: Invalid user jenkins from 10.32.4.5 port 54962 Apr 19 09:42:04 prd-ubuntu1804-docker-4c-4g-511 sshd[1429]: Received disconnect from 10.32.4.5 port 54962:11: Closed due to user request. [preauth] Apr 19 09:42:04 prd-ubuntu1804-docker-4c-4g-511 sshd[1429]: Disconnected from invalid user jenkins 10.32.4.5 port 54962 [preauth] Apr 19 09:42:06 prd-ubuntu1804-docker-4c-4g-511 sshd[1474]: Invalid user jenkins from 10.32.4.5 port 54972 Apr 19 09:42:06 prd-ubuntu1804-docker-4c-4g-511 sshd[1474]: Received disconnect from 10.32.4.5 port 54972:11: Closed due to user request. [preauth] Apr 19 09:42:06 prd-ubuntu1804-docker-4c-4g-511 sshd[1474]: Disconnected from invalid user jenkins 10.32.4.5 port 54972 [preauth] Apr 19 09:42:08 prd-ubuntu1804-docker-4c-4g-511 sshd[1492]: Invalid user jenkins from 10.32.4.5 port 54978 Apr 19 09:42:08 prd-ubuntu1804-docker-4c-4g-511 sshd[1492]: Received disconnect from 10.32.4.5 port 54978:11: Closed due to user request. [preauth] Apr 19 09:42:08 prd-ubuntu1804-docker-4c-4g-511 sshd[1492]: Disconnected from invalid user jenkins 10.32.4.5 port 54978 [preauth] Apr 19 09:42:11 prd-ubuntu1804-docker-4c-4g-511 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 54988 Apr 19 09:42:11 prd-ubuntu1804-docker-4c-4g-511 sshd[1494]: Received disconnect from 10.32.4.5 port 54988:11: Closed due to user request. [preauth] Apr 19 09:42:11 prd-ubuntu1804-docker-4c-4g-511 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 54988 [preauth] Apr 19 09:42:13 prd-ubuntu1804-docker-4c-4g-511 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 54994 Apr 19 09:42:13 prd-ubuntu1804-docker-4c-4g-511 sshd[1496]: Received disconnect from 10.32.4.5 port 54994:11: Closed due to user request. [preauth] Apr 19 09:42:13 prd-ubuntu1804-docker-4c-4g-511 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 54994 [preauth] Apr 19 09:42:15 prd-ubuntu1804-docker-4c-4g-511 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 55000 Apr 19 09:42:15 prd-ubuntu1804-docker-4c-4g-511 sshd[1498]: Received disconnect from 10.32.4.5 port 55000:11: Closed due to user request. [preauth] Apr 19 09:42:15 prd-ubuntu1804-docker-4c-4g-511 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 55000 [preauth] Apr 19 09:42:17 prd-ubuntu1804-docker-4c-4g-511 sshd[1500]: Invalid user jenkins from 10.32.4.5 port 55008 Apr 19 09:42:17 prd-ubuntu1804-docker-4c-4g-511 sshd[1500]: Received disconnect from 10.32.4.5 port 55008:11: Closed due to user request. [preauth] Apr 19 09:42:17 prd-ubuntu1804-docker-4c-4g-511 sshd[1500]: Disconnected from invalid user jenkins 10.32.4.5 port 55008 [preauth] Apr 19 09:42:19 prd-ubuntu1804-docker-4c-4g-511 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 55014 Apr 19 09:42:19 prd-ubuntu1804-docker-4c-4g-511 sshd[1502]: Received disconnect from 10.32.4.5 port 55014:11: Closed due to user request. [preauth] Apr 19 09:42:19 prd-ubuntu1804-docker-4c-4g-511 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 55014 [preauth] Apr 19 09:42:21 prd-ubuntu1804-docker-4c-4g-511 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 55016 Apr 19 09:42:21 prd-ubuntu1804-docker-4c-4g-511 sshd[1504]: Received disconnect from 10.32.4.5 port 55016:11: Closed due to user request. [preauth] Apr 19 09:42:21 prd-ubuntu1804-docker-4c-4g-511 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 55016 [preauth] Apr 19 09:42:24 prd-ubuntu1804-docker-4c-4g-511 sshd[1629]: Invalid user jenkins from 10.32.4.5 port 55018 Apr 19 09:42:24 prd-ubuntu1804-docker-4c-4g-511 sshd[1629]: Received disconnect from 10.32.4.5 port 55018:11: Closed due to user request. [preauth] Apr 19 09:42:24 prd-ubuntu1804-docker-4c-4g-511 sshd[1629]: Disconnected from invalid user jenkins 10.32.4.5 port 55018 [preauth] Apr 19 09:42:26 prd-ubuntu1804-docker-4c-4g-511 sshd[1763]: Invalid user jenkins from 10.32.4.5 port 55024 Apr 19 09:42:26 prd-ubuntu1804-docker-4c-4g-511 sshd[1763]: Received disconnect from 10.32.4.5 port 55024:11: Closed due to user request. [preauth] Apr 19 09:42:26 prd-ubuntu1804-docker-4c-4g-511 sshd[1763]: Disconnected from invalid user jenkins 10.32.4.5 port 55024 [preauth] Apr 19 09:42:28 prd-ubuntu1804-docker-4c-4g-511 sshd[1782]: Invalid user jenkins from 10.32.4.5 port 55026 Apr 19 09:42:28 prd-ubuntu1804-docker-4c-4g-511 sshd[1782]: Received disconnect from 10.32.4.5 port 55026:11: Closed due to user request. [preauth] Apr 19 09:42:28 prd-ubuntu1804-docker-4c-4g-511 sshd[1782]: Disconnected from invalid user jenkins 10.32.4.5 port 55026 [preauth] Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 useradd[1800]: new group: name=jenkins, GID=1001 Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 useradd[1800]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 usermod[1807]: add 'jenkins' to group 'docker' Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 usermod[1807]: add 'jenkins' to shadow group 'docker' Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 sshd[1841]: Accepted publickey for jenkins from 10.32.4.5 port 55028 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 sshd[1841]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 systemd-logind[985]: New session 1 of user jenkins. Apr 19 09:42:30 prd-ubuntu1804-docker-4c-4g-511 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 19 09:43:02 prd-ubuntu1804-docker-4c-4g-511 CRON[2412]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 19 09:43:02 prd-ubuntu1804-docker-4c-4g-511 CRON[2412]: pam_unix(cron:session): session closed for user root Apr 19 09:44:01 prd-ubuntu1804-docker-4c-4g-511 CRON[3206]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 19 09:44:01 prd-ubuntu1804-docker-4c-4g-511 CRON[3206]: pam_unix(cron:session): session closed for user root Apr 19 09:45:01 prd-ubuntu1804-docker-4c-4g-511 CRON[6215]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 19 09:45:01 prd-ubuntu1804-docker-4c-4g-511 CRON[6215]: pam_unix(cron:session): session closed for user root Apr 19 09:46:01 prd-ubuntu1804-docker-4c-4g-511 CRON[7359]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 19 09:46:01 prd-ubuntu1804-docker-4c-4g-511 CRON[7359]: pam_unix(cron:session): session closed for user root Apr 19 09:46:07 prd-ubuntu1804-docker-4c-4g-511 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 19 09:46:07 prd-ubuntu1804-docker-4c-4g-511 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)