Mar 3 13:58:46 prd-ubuntu1804-docker-4c-4g-8013 passwd[922]: password for 'ubuntu' changed by 'root' Mar 3 13:58:46 prd-ubuntu1804-docker-4c-4g-8013 systemd-logind[1002]: Watching system buttons on /dev/input/event0 (Power Button) Mar 3 13:58:46 prd-ubuntu1804-docker-4c-4g-8013 systemd-logind[1002]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 3 13:58:46 prd-ubuntu1804-docker-4c-4g-8013 systemd-logind[1002]: New seat seat0. Mar 3 13:58:46 prd-ubuntu1804-docker-4c-4g-8013 sshd[1092]: Server listening on 0.0.0.0 port 22. Mar 3 13:58:46 prd-ubuntu1804-docker-4c-4g-8013 sshd[1092]: Server listening on :: port 22. Mar 3 13:58:47 prd-ubuntu1804-docker-4c-4g-8013 sshd[1225]: Did not receive identification string from 10.32.4.5 port 40972 Mar 3 13:58:51 prd-ubuntu1804-docker-4c-4g-8013 sshd[1450]: Invalid user jenkins from 10.32.4.5 port 40982 Mar 3 13:58:51 prd-ubuntu1804-docker-4c-4g-8013 sshd[1450]: Received disconnect from 10.32.4.5 port 40982:11: Closed due to user request. [preauth] Mar 3 13:58:51 prd-ubuntu1804-docker-4c-4g-8013 sshd[1450]: Disconnected from invalid user jenkins 10.32.4.5 port 40982 [preauth] Mar 3 13:58:53 prd-ubuntu1804-docker-4c-4g-8013 sshd[1479]: Invalid user jenkins from 10.32.4.5 port 40984 Mar 3 13:58:53 prd-ubuntu1804-docker-4c-4g-8013 sshd[1479]: Received disconnect from 10.32.4.5 port 40984:11: Closed due to user request. [preauth] Mar 3 13:58:53 prd-ubuntu1804-docker-4c-4g-8013 sshd[1479]: Disconnected from invalid user jenkins 10.32.4.5 port 40984 [preauth] Mar 3 13:58:55 prd-ubuntu1804-docker-4c-4g-8013 sshd[1487]: Invalid user jenkins from 10.32.4.5 port 40988 Mar 3 13:58:55 prd-ubuntu1804-docker-4c-4g-8013 sshd[1487]: Received disconnect from 10.32.4.5 port 40988:11: Closed due to user request. [preauth] Mar 3 13:58:55 prd-ubuntu1804-docker-4c-4g-8013 sshd[1487]: Disconnected from invalid user jenkins 10.32.4.5 port 40988 [preauth] Mar 3 13:58:57 prd-ubuntu1804-docker-4c-4g-8013 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 40990 Mar 3 13:58:57 prd-ubuntu1804-docker-4c-4g-8013 sshd[1489]: Received disconnect from 10.32.4.5 port 40990:11: Closed due to user request. [preauth] Mar 3 13:58:57 prd-ubuntu1804-docker-4c-4g-8013 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 40990 [preauth] Mar 3 13:59:00 prd-ubuntu1804-docker-4c-4g-8013 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 40992 Mar 3 13:59:00 prd-ubuntu1804-docker-4c-4g-8013 sshd[1491]: Received disconnect from 10.32.4.5 port 40992:11: Closed due to user request. [preauth] Mar 3 13:59:00 prd-ubuntu1804-docker-4c-4g-8013 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 40992 [preauth] Mar 3 13:59:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[1493]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 13:59:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[1493]: pam_unix(cron:session): session closed for user root Mar 3 13:59:02 prd-ubuntu1804-docker-4c-4g-8013 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 40994 Mar 3 13:59:02 prd-ubuntu1804-docker-4c-4g-8013 sshd[1502]: Received disconnect from 10.32.4.5 port 40994:11: Closed due to user request. [preauth] Mar 3 13:59:02 prd-ubuntu1804-docker-4c-4g-8013 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 40994 [preauth] Mar 3 13:59:04 prd-ubuntu1804-docker-4c-4g-8013 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 40996 Mar 3 13:59:04 prd-ubuntu1804-docker-4c-4g-8013 sshd[1504]: Received disconnect from 10.32.4.5 port 40996:11: Closed due to user request. [preauth] Mar 3 13:59:04 prd-ubuntu1804-docker-4c-4g-8013 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 40996 [preauth] Mar 3 13:59:06 prd-ubuntu1804-docker-4c-4g-8013 sshd[1506]: Invalid user jenkins from 10.32.4.5 port 41000 Mar 3 13:59:06 prd-ubuntu1804-docker-4c-4g-8013 sshd[1506]: Received disconnect from 10.32.4.5 port 41000:11: Closed due to user request. [preauth] Mar 3 13:59:06 prd-ubuntu1804-docker-4c-4g-8013 sshd[1506]: Disconnected from invalid user jenkins 10.32.4.5 port 41000 [preauth] Mar 3 13:59:08 prd-ubuntu1804-docker-4c-4g-8013 sshd[1528]: Invalid user jenkins from 10.32.4.5 port 41002 Mar 3 13:59:08 prd-ubuntu1804-docker-4c-4g-8013 sshd[1528]: Received disconnect from 10.32.4.5 port 41002:11: Closed due to user request. [preauth] Mar 3 13:59:08 prd-ubuntu1804-docker-4c-4g-8013 sshd[1528]: Disconnected from invalid user jenkins 10.32.4.5 port 41002 [preauth] Mar 3 13:59:11 prd-ubuntu1804-docker-4c-4g-8013 sshd[1749]: Invalid user jenkins from 10.32.4.5 port 41004 Mar 3 13:59:11 prd-ubuntu1804-docker-4c-4g-8013 sshd[1749]: Received disconnect from 10.32.4.5 port 41004:11: Closed due to user request. [preauth] Mar 3 13:59:11 prd-ubuntu1804-docker-4c-4g-8013 sshd[1749]: Disconnected from invalid user jenkins 10.32.4.5 port 41004 [preauth] Mar 3 13:59:13 prd-ubuntu1804-docker-4c-4g-8013 sshd[1784]: Invalid user jenkins from 10.32.4.5 port 41008 Mar 3 13:59:13 prd-ubuntu1804-docker-4c-4g-8013 sshd[1784]: Received disconnect from 10.32.4.5 port 41008:11: Closed due to user request. [preauth] Mar 3 13:59:13 prd-ubuntu1804-docker-4c-4g-8013 sshd[1784]: Disconnected from invalid user jenkins 10.32.4.5 port 41008 [preauth] Mar 3 13:59:15 prd-ubuntu1804-docker-4c-4g-8013 sshd[1793]: Invalid user jenkins from 10.32.4.5 port 41010 Mar 3 13:59:16 prd-ubuntu1804-docker-4c-4g-8013 sshd[1793]: Received disconnect from 10.32.4.5 port 41010:11: Closed due to user request. [preauth] Mar 3 13:59:16 prd-ubuntu1804-docker-4c-4g-8013 sshd[1793]: Disconnected from invalid user jenkins 10.32.4.5 port 41010 [preauth] Mar 3 13:59:18 prd-ubuntu1804-docker-4c-4g-8013 sshd[1806]: Invalid user jenkins from 10.32.4.5 port 41012 Mar 3 13:59:18 prd-ubuntu1804-docker-4c-4g-8013 sshd[1806]: Received disconnect from 10.32.4.5 port 41012:11: Closed due to user request. [preauth] Mar 3 13:59:18 prd-ubuntu1804-docker-4c-4g-8013 sshd[1806]: Disconnected from invalid user jenkins 10.32.4.5 port 41012 [preauth] Mar 3 13:59:18 prd-ubuntu1804-docker-4c-4g-8013 useradd[1811]: new group: name=jenkins, GID=1001 Mar 3 13:59:18 prd-ubuntu1804-docker-4c-4g-8013 useradd[1811]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 3 13:59:18 prd-ubuntu1804-docker-4c-4g-8013 usermod[1818]: add 'jenkins' to group 'docker' Mar 3 13:59:18 prd-ubuntu1804-docker-4c-4g-8013 usermod[1818]: add 'jenkins' to shadow group 'docker' Mar 3 13:59:20 prd-ubuntu1804-docker-4c-4g-8013 sshd[1877]: Accepted publickey for jenkins from 10.32.4.5 port 41014 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 3 13:59:20 prd-ubuntu1804-docker-4c-4g-8013 sshd[1877]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 3 13:59:20 prd-ubuntu1804-docker-4c-4g-8013 systemd-logind[1002]: New session 2 of user jenkins. Mar 3 13:59:20 prd-ubuntu1804-docker-4c-4g-8013 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 3 14:00:02 prd-ubuntu1804-docker-4c-4g-8013 CRON[2396]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 14:00:02 prd-ubuntu1804-docker-4c-4g-8013 CRON[2396]: pam_unix(cron:session): session closed for user root Mar 3 14:01:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[2428]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 14:01:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[2428]: pam_unix(cron:session): session closed for user root Mar 3 14:02:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[5835]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 14:02:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[5835]: pam_unix(cron:session): session closed for user root Mar 3 14:03:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[7609]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 14:03:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[7609]: pam_unix(cron:session): session closed for user root Mar 3 14:04:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[7807]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 14:04:01 prd-ubuntu1804-docker-4c-4g-8013 CRON[7807]: pam_unix(cron:session): session closed for user root Mar 3 14:04:25 prd-ubuntu1804-docker-4c-4g-8013 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/sim-o1-interface-ntsim-ng-tapi-topology-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 3 14:04:25 prd-ubuntu1804-docker-4c-4g-8013 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)