Jan 10 09:42:04 prd-ubuntu1804-docker-4c-4g-2905 passwd[929]: password for 'ubuntu' changed by 'root' Jan 10 09:42:05 prd-ubuntu1804-docker-4c-4g-2905 sshd[1070]: Server listening on 0.0.0.0 port 22. Jan 10 09:42:05 prd-ubuntu1804-docker-4c-4g-2905 sshd[1070]: Server listening on :: port 22. Jan 10 09:42:05 prd-ubuntu1804-docker-4c-4g-2905 systemd-logind[1052]: Watching system buttons on /dev/input/event0 (Power Button) Jan 10 09:42:05 prd-ubuntu1804-docker-4c-4g-2905 systemd-logind[1052]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 10 09:42:05 prd-ubuntu1804-docker-4c-4g-2905 systemd-logind[1052]: New seat seat0. Jan 10 09:42:06 prd-ubuntu1804-docker-4c-4g-2905 sshd[1313]: Did not receive identification string from 10.32.4.5 port 40332 Jan 10 09:42:12 prd-ubuntu1804-docker-4c-4g-2905 sshd[1428]: Invalid user jenkins from 10.32.4.5 port 40336 Jan 10 09:42:12 prd-ubuntu1804-docker-4c-4g-2905 sshd[1428]: Received disconnect from 10.32.4.5 port 40336:11: Closed due to user request. [preauth] Jan 10 09:42:12 prd-ubuntu1804-docker-4c-4g-2905 sshd[1428]: Disconnected from invalid user jenkins 10.32.4.5 port 40336 [preauth] Jan 10 09:42:14 prd-ubuntu1804-docker-4c-4g-2905 sshd[1438]: Invalid user jenkins from 10.32.4.5 port 40338 Jan 10 09:42:14 prd-ubuntu1804-docker-4c-4g-2905 sshd[1438]: Received disconnect from 10.32.4.5 port 40338:11: Closed due to user request. [preauth] Jan 10 09:42:14 prd-ubuntu1804-docker-4c-4g-2905 sshd[1438]: Disconnected from invalid user jenkins 10.32.4.5 port 40338 [preauth] Jan 10 09:42:16 prd-ubuntu1804-docker-4c-4g-2905 sshd[1440]: Invalid user jenkins from 10.32.4.5 port 40340 Jan 10 09:42:16 prd-ubuntu1804-docker-4c-4g-2905 sshd[1440]: Received disconnect from 10.32.4.5 port 40340:11: Closed due to user request. [preauth] Jan 10 09:42:16 prd-ubuntu1804-docker-4c-4g-2905 sshd[1440]: Disconnected from invalid user jenkins 10.32.4.5 port 40340 [preauth] Jan 10 09:42:18 prd-ubuntu1804-docker-4c-4g-2905 sshd[1442]: Invalid user jenkins from 10.32.4.5 port 40342 Jan 10 09:42:18 prd-ubuntu1804-docker-4c-4g-2905 sshd[1442]: Received disconnect from 10.32.4.5 port 40342:11: Closed due to user request. [preauth] Jan 10 09:42:18 prd-ubuntu1804-docker-4c-4g-2905 sshd[1442]: Disconnected from invalid user jenkins 10.32.4.5 port 40342 [preauth] Jan 10 09:42:20 prd-ubuntu1804-docker-4c-4g-2905 sshd[1444]: Invalid user jenkins from 10.32.4.5 port 40344 Jan 10 09:42:20 prd-ubuntu1804-docker-4c-4g-2905 sshd[1444]: Received disconnect from 10.32.4.5 port 40344:11: Closed due to user request. [preauth] Jan 10 09:42:20 prd-ubuntu1804-docker-4c-4g-2905 sshd[1444]: Disconnected from invalid user jenkins 10.32.4.5 port 40344 [preauth] Jan 10 09:42:22 prd-ubuntu1804-docker-4c-4g-2905 sshd[1446]: Invalid user jenkins from 10.32.4.5 port 40350 Jan 10 09:42:22 prd-ubuntu1804-docker-4c-4g-2905 sshd[1446]: Received disconnect from 10.32.4.5 port 40350:11: Closed due to user request. [preauth] Jan 10 09:42:22 prd-ubuntu1804-docker-4c-4g-2905 sshd[1446]: Disconnected from invalid user jenkins 10.32.4.5 port 40350 [preauth] Jan 10 09:42:24 prd-ubuntu1804-docker-4c-4g-2905 sshd[1448]: Invalid user jenkins from 10.32.4.5 port 40352 Jan 10 09:42:24 prd-ubuntu1804-docker-4c-4g-2905 sshd[1448]: Received disconnect from 10.32.4.5 port 40352:11: Closed due to user request. [preauth] Jan 10 09:42:24 prd-ubuntu1804-docker-4c-4g-2905 sshd[1448]: Disconnected from invalid user jenkins 10.32.4.5 port 40352 [preauth] Jan 10 09:42:26 prd-ubuntu1804-docker-4c-4g-2905 sshd[1460]: Invalid user jenkins from 10.32.4.5 port 40354 Jan 10 09:42:27 prd-ubuntu1804-docker-4c-4g-2905 sshd[1460]: Received disconnect from 10.32.4.5 port 40354:11: Closed due to user request. [preauth] Jan 10 09:42:27 prd-ubuntu1804-docker-4c-4g-2905 sshd[1460]: Disconnected from invalid user jenkins 10.32.4.5 port 40354 [preauth] Jan 10 09:42:29 prd-ubuntu1804-docker-4c-4g-2905 sshd[1678]: Invalid user jenkins from 10.32.4.5 port 40356 Jan 10 09:42:29 prd-ubuntu1804-docker-4c-4g-2905 sshd[1678]: Received disconnect from 10.32.4.5 port 40356:11: Closed due to user request. [preauth] Jan 10 09:42:29 prd-ubuntu1804-docker-4c-4g-2905 sshd[1678]: Disconnected from invalid user jenkins 10.32.4.5 port 40356 [preauth] Jan 10 09:42:31 prd-ubuntu1804-docker-4c-4g-2905 sshd[1724]: Invalid user jenkins from 10.32.4.5 port 40364 Jan 10 09:42:31 prd-ubuntu1804-docker-4c-4g-2905 sshd[1724]: Received disconnect from 10.32.4.5 port 40364:11: Closed due to user request. [preauth] Jan 10 09:42:31 prd-ubuntu1804-docker-4c-4g-2905 sshd[1724]: Disconnected from invalid user jenkins 10.32.4.5 port 40364 [preauth] Jan 10 09:42:33 prd-ubuntu1804-docker-4c-4g-2905 sshd[1730]: Invalid user jenkins from 10.32.4.5 port 40366 Jan 10 09:42:33 prd-ubuntu1804-docker-4c-4g-2905 sshd[1730]: Received disconnect from 10.32.4.5 port 40366:11: Closed due to user request. [preauth] Jan 10 09:42:33 prd-ubuntu1804-docker-4c-4g-2905 sshd[1730]: Disconnected from invalid user jenkins 10.32.4.5 port 40366 [preauth] Jan 10 09:42:35 prd-ubuntu1804-docker-4c-4g-2905 sshd[1745]: Invalid user jenkins from 10.32.4.5 port 40368 Jan 10 09:42:35 prd-ubuntu1804-docker-4c-4g-2905 sshd[1745]: Received disconnect from 10.32.4.5 port 40368:11: Closed due to user request. [preauth] Jan 10 09:42:35 prd-ubuntu1804-docker-4c-4g-2905 sshd[1745]: Disconnected from invalid user jenkins 10.32.4.5 port 40368 [preauth] Jan 10 09:42:36 prd-ubuntu1804-docker-4c-4g-2905 useradd[1750]: new group: name=jenkins, GID=1001 Jan 10 09:42:36 prd-ubuntu1804-docker-4c-4g-2905 useradd[1750]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 10 09:42:36 prd-ubuntu1804-docker-4c-4g-2905 usermod[1757]: add 'jenkins' to group 'docker' Jan 10 09:42:36 prd-ubuntu1804-docker-4c-4g-2905 usermod[1757]: add 'jenkins' to shadow group 'docker' Jan 10 09:42:38 prd-ubuntu1804-docker-4c-4g-2905 sshd[1824]: Accepted publickey for jenkins from 10.32.4.5 port 40372 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 10 09:42:38 prd-ubuntu1804-docker-4c-4g-2905 sshd[1824]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 10 09:42:38 prd-ubuntu1804-docker-4c-4g-2905 systemd-logind[1052]: New session 1 of user jenkins. Jan 10 09:42:38 prd-ubuntu1804-docker-4c-4g-2905 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 10 09:43:02 prd-ubuntu1804-docker-4c-4g-2905 CRON[2317]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 10 09:43:02 prd-ubuntu1804-docker-4c-4g-2905 CRON[2317]: pam_unix(cron:session): session closed for user root Jan 10 09:44:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[2384]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 10 09:44:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[2384]: pam_unix(cron:session): session closed for user root Jan 10 09:45:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[3316]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 10 09:45:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[3316]: pam_unix(cron:session): session closed for user root Jan 10 09:46:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[6573]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 10 09:46:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[6573]: pam_unix(cron:session): session closed for user root Jan 10 09:47:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[8353]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 10 09:47:01 prd-ubuntu1804-docker-4c-4g-2905 CRON[8353]: pam_unix(cron:session): session closed for user root Jan 10 09:47:32 prd-ubuntu1804-docker-4c-4g-2905 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 10 09:47:32 prd-ubuntu1804-docker-4c-4g-2905 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)