Apr 28 10:27:38 prd-ubuntu1804-docker-4c-4g-1631 passwd[936]: password for 'ubuntu' changed by 'root' Apr 28 10:27:38 prd-ubuntu1804-docker-4c-4g-1631 systemd-logind[1028]: Watching system buttons on /dev/input/event0 (Power Button) Apr 28 10:27:38 prd-ubuntu1804-docker-4c-4g-1631 systemd-logind[1028]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 28 10:27:38 prd-ubuntu1804-docker-4c-4g-1631 systemd-logind[1028]: New seat seat0. Apr 28 10:27:38 prd-ubuntu1804-docker-4c-4g-1631 sshd[1090]: Server listening on 0.0.0.0 port 22. Apr 28 10:27:38 prd-ubuntu1804-docker-4c-4g-1631 sshd[1090]: Server listening on :: port 22. Apr 28 10:27:42 prd-ubuntu1804-docker-4c-4g-1631 sshd[1478]: Did not receive identification string from 10.32.4.5 port 60062 Apr 28 10:27:48 prd-ubuntu1804-docker-4c-4g-1631 sshd[1501]: Invalid user jenkins from 10.32.4.5 port 60136 Apr 28 10:27:48 prd-ubuntu1804-docker-4c-4g-1631 sshd[1501]: Received disconnect from 10.32.4.5 port 60136:11: Closed due to user request. [preauth] Apr 28 10:27:48 prd-ubuntu1804-docker-4c-4g-1631 sshd[1501]: Disconnected from invalid user jenkins 10.32.4.5 port 60136 [preauth] Apr 28 10:27:50 prd-ubuntu1804-docker-4c-4g-1631 sshd[1505]: Invalid user jenkins from 10.32.4.5 port 60154 Apr 28 10:27:50 prd-ubuntu1804-docker-4c-4g-1631 sshd[1505]: Received disconnect from 10.32.4.5 port 60154:11: Closed due to user request. [preauth] Apr 28 10:27:50 prd-ubuntu1804-docker-4c-4g-1631 sshd[1505]: Disconnected from invalid user jenkins 10.32.4.5 port 60154 [preauth] Apr 28 10:27:52 prd-ubuntu1804-docker-4c-4g-1631 sshd[1507]: Invalid user jenkins from 10.32.4.5 port 60176 Apr 28 10:27:52 prd-ubuntu1804-docker-4c-4g-1631 sshd[1507]: Received disconnect from 10.32.4.5 port 60176:11: Closed due to user request. [preauth] Apr 28 10:27:52 prd-ubuntu1804-docker-4c-4g-1631 sshd[1507]: Disconnected from invalid user jenkins 10.32.4.5 port 60176 [preauth] Apr 28 10:27:54 prd-ubuntu1804-docker-4c-4g-1631 sshd[1509]: Invalid user jenkins from 10.32.4.5 port 60194 Apr 28 10:27:54 prd-ubuntu1804-docker-4c-4g-1631 sshd[1509]: Received disconnect from 10.32.4.5 port 60194:11: Closed due to user request. [preauth] Apr 28 10:27:54 prd-ubuntu1804-docker-4c-4g-1631 sshd[1509]: Disconnected from invalid user jenkins 10.32.4.5 port 60194 [preauth] Apr 28 10:27:57 prd-ubuntu1804-docker-4c-4g-1631 sshd[1511]: Invalid user jenkins from 10.32.4.5 port 60212 Apr 28 10:27:57 prd-ubuntu1804-docker-4c-4g-1631 sshd[1511]: Received disconnect from 10.32.4.5 port 60212:11: Closed due to user request. [preauth] Apr 28 10:27:57 prd-ubuntu1804-docker-4c-4g-1631 sshd[1511]: Disconnected from invalid user jenkins 10.32.4.5 port 60212 [preauth] Apr 28 10:27:59 prd-ubuntu1804-docker-4c-4g-1631 sshd[1521]: Invalid user jenkins from 10.32.4.5 port 60236 Apr 28 10:27:59 prd-ubuntu1804-docker-4c-4g-1631 sshd[1521]: Received disconnect from 10.32.4.5 port 60236:11: Closed due to user request. [preauth] Apr 28 10:27:59 prd-ubuntu1804-docker-4c-4g-1631 sshd[1521]: Disconnected from invalid user jenkins 10.32.4.5 port 60236 [preauth] Apr 28 10:28:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[1678]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 28 10:28:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[1678]: pam_unix(cron:session): session closed for user root Apr 28 10:28:02 prd-ubuntu1804-docker-4c-4g-1631 sshd[1688]: Invalid user jenkins from 10.32.4.5 port 60256 Apr 28 10:28:02 prd-ubuntu1804-docker-4c-4g-1631 sshd[1688]: Received disconnect from 10.32.4.5 port 60256:11: Closed due to user request. [preauth] Apr 28 10:28:02 prd-ubuntu1804-docker-4c-4g-1631 sshd[1688]: Disconnected from invalid user jenkins 10.32.4.5 port 60256 [preauth] Apr 28 10:28:04 prd-ubuntu1804-docker-4c-4g-1631 sshd[1765]: Invalid user jenkins from 10.32.4.5 port 60274 Apr 28 10:28:04 prd-ubuntu1804-docker-4c-4g-1631 sshd[1765]: Received disconnect from 10.32.4.5 port 60274:11: Closed due to user request. [preauth] Apr 28 10:28:04 prd-ubuntu1804-docker-4c-4g-1631 sshd[1765]: Disconnected from invalid user jenkins 10.32.4.5 port 60274 [preauth] Apr 28 10:28:06 prd-ubuntu1804-docker-4c-4g-1631 sshd[1802]: Invalid user jenkins from 10.32.4.5 port 60292 Apr 28 10:28:06 prd-ubuntu1804-docker-4c-4g-1631 sshd[1802]: Received disconnect from 10.32.4.5 port 60292:11: Closed due to user request. [preauth] Apr 28 10:28:06 prd-ubuntu1804-docker-4c-4g-1631 sshd[1802]: Disconnected from invalid user jenkins 10.32.4.5 port 60292 [preauth] Apr 28 10:28:08 prd-ubuntu1804-docker-4c-4g-1631 sshd[1806]: Invalid user jenkins from 10.32.4.5 port 60318 Apr 28 10:28:08 prd-ubuntu1804-docker-4c-4g-1631 sshd[1806]: Received disconnect from 10.32.4.5 port 60318:11: Closed due to user request. [preauth] Apr 28 10:28:08 prd-ubuntu1804-docker-4c-4g-1631 sshd[1806]: Disconnected from invalid user jenkins 10.32.4.5 port 60318 [preauth] Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 useradd[1822]: new group: name=jenkins, GID=1001 Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 useradd[1822]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 usermod[1829]: add 'jenkins' to group 'docker' Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 usermod[1829]: add 'jenkins' to shadow group 'docker' Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 sshd[1843]: Accepted publickey for jenkins from 10.32.4.5 port 60338 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 sshd[1843]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 systemd-logind[1028]: New session 2 of user jenkins. Apr 28 10:28:10 prd-ubuntu1804-docker-4c-4g-1631 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 28 10:29:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[2410]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 28 10:29:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[2410]: pam_unix(cron:session): session closed for user root Apr 28 10:30:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[2725]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 28 10:30:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[2725]: pam_unix(cron:session): session closed for user root Apr 28 10:31:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[2852]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 28 10:31:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[2852]: pam_unix(cron:session): session closed for user root Apr 28 10:32:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[4279]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 28 10:32:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[4279]: pam_unix(cron:session): session closed for user root Apr 28 10:33:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[8436]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 28 10:33:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[8436]: pam_unix(cron:session): session closed for user root Apr 28 10:34:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[9833]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 28 10:34:01 prd-ubuntu1804-docker-4c-4g-1631 CRON[9833]: pam_unix(cron:session): session closed for user root Apr 28 10:34:10 prd-ubuntu1804-docker-4c-4g-1631 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-xapp-frame-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 28 10:34:10 prd-ubuntu1804-docker-4c-4g-1631 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)