Aug 1 14:52:48 prd-ubuntu1804-docker-4c-4g-1853 passwd[936]: password for 'ubuntu' changed by 'root' Aug 1 14:52:48 prd-ubuntu1804-docker-4c-4g-1853 systemd-logind[1075]: Watching system buttons on /dev/input/event0 (Power Button) Aug 1 14:52:48 prd-ubuntu1804-docker-4c-4g-1853 systemd-logind[1075]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 1 14:52:48 prd-ubuntu1804-docker-4c-4g-1853 systemd-logind[1075]: New seat seat0. Aug 1 14:52:48 prd-ubuntu1804-docker-4c-4g-1853 sshd[1174]: Server listening on 0.0.0.0 port 22. Aug 1 14:52:48 prd-ubuntu1804-docker-4c-4g-1853 sshd[1174]: Server listening on :: port 22. Aug 1 14:52:49 prd-ubuntu1804-docker-4c-4g-1853 sshd[1254]: Did not receive identification string from 10.32.4.5 port 46046 Aug 1 14:52:52 prd-ubuntu1804-docker-4c-4g-1853 sshd[1444]: Invalid user jenkins from 10.32.4.5 port 46050 Aug 1 14:52:53 prd-ubuntu1804-docker-4c-4g-1853 sshd[1444]: Received disconnect from 10.32.4.5 port 46050:11: Closed due to user request. [preauth] Aug 1 14:52:53 prd-ubuntu1804-docker-4c-4g-1853 sshd[1444]: Disconnected from invalid user jenkins 10.32.4.5 port 46050 [preauth] Aug 1 14:52:55 prd-ubuntu1804-docker-4c-4g-1853 sshd[1478]: Invalid user jenkins from 10.32.4.5 port 46052 Aug 1 14:52:55 prd-ubuntu1804-docker-4c-4g-1853 sshd[1478]: Received disconnect from 10.32.4.5 port 46052:11: Closed due to user request. [preauth] Aug 1 14:52:55 prd-ubuntu1804-docker-4c-4g-1853 sshd[1478]: Disconnected from invalid user jenkins 10.32.4.5 port 46052 [preauth] Aug 1 14:52:57 prd-ubuntu1804-docker-4c-4g-1853 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 46054 Aug 1 14:52:57 prd-ubuntu1804-docker-4c-4g-1853 sshd[1494]: Received disconnect from 10.32.4.5 port 46054:11: Closed due to user request. [preauth] Aug 1 14:52:57 prd-ubuntu1804-docker-4c-4g-1853 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 46054 [preauth] Aug 1 14:52:59 prd-ubuntu1804-docker-4c-4g-1853 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 46062 Aug 1 14:52:59 prd-ubuntu1804-docker-4c-4g-1853 sshd[1496]: Received disconnect from 10.32.4.5 port 46062:11: Closed due to user request. [preauth] Aug 1 14:52:59 prd-ubuntu1804-docker-4c-4g-1853 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 46062 [preauth] Aug 1 14:53:01 prd-ubuntu1804-docker-4c-4g-1853 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 46064 Aug 1 14:53:01 prd-ubuntu1804-docker-4c-4g-1853 CRON[1501]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 1 14:53:01 prd-ubuntu1804-docker-4c-4g-1853 CRON[1501]: pam_unix(cron:session): session closed for user root Aug 1 14:53:01 prd-ubuntu1804-docker-4c-4g-1853 sshd[1498]: Received disconnect from 10.32.4.5 port 46064:11: Closed due to user request. [preauth] Aug 1 14:53:01 prd-ubuntu1804-docker-4c-4g-1853 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 46064 [preauth] Aug 1 14:53:03 prd-ubuntu1804-docker-4c-4g-1853 sshd[1510]: Invalid user jenkins from 10.32.4.5 port 46066 Aug 1 14:53:03 prd-ubuntu1804-docker-4c-4g-1853 sshd[1510]: Received disconnect from 10.32.4.5 port 46066:11: Closed due to user request. [preauth] Aug 1 14:53:03 prd-ubuntu1804-docker-4c-4g-1853 sshd[1510]: Disconnected from invalid user jenkins 10.32.4.5 port 46066 [preauth] Aug 1 14:53:05 prd-ubuntu1804-docker-4c-4g-1853 sshd[1512]: Invalid user jenkins from 10.32.4.5 port 46068 Aug 1 14:53:05 prd-ubuntu1804-docker-4c-4g-1853 sshd[1512]: Received disconnect from 10.32.4.5 port 46068:11: Closed due to user request. [preauth] Aug 1 14:53:05 prd-ubuntu1804-docker-4c-4g-1853 sshd[1512]: Disconnected from invalid user jenkins 10.32.4.5 port 46068 [preauth] Aug 1 14:53:07 prd-ubuntu1804-docker-4c-4g-1853 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 46072 Aug 1 14:53:07 prd-ubuntu1804-docker-4c-4g-1853 sshd[1514]: Received disconnect from 10.32.4.5 port 46072:11: Closed due to user request. [preauth] Aug 1 14:53:07 prd-ubuntu1804-docker-4c-4g-1853 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 46072 [preauth] Aug 1 14:53:10 prd-ubuntu1804-docker-4c-4g-1853 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 46074 Aug 1 14:53:10 prd-ubuntu1804-docker-4c-4g-1853 sshd[1531]: Received disconnect from 10.32.4.5 port 46074:11: Closed due to user request. [preauth] Aug 1 14:53:10 prd-ubuntu1804-docker-4c-4g-1853 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 46074 [preauth] Aug 1 14:53:12 prd-ubuntu1804-docker-4c-4g-1853 sshd[1709]: Invalid user jenkins from 10.32.4.5 port 46076 Aug 1 14:53:12 prd-ubuntu1804-docker-4c-4g-1853 sshd[1709]: Received disconnect from 10.32.4.5 port 46076:11: Closed due to user request. [preauth] Aug 1 14:53:12 prd-ubuntu1804-docker-4c-4g-1853 sshd[1709]: Disconnected from invalid user jenkins 10.32.4.5 port 46076 [preauth] Aug 1 14:53:15 prd-ubuntu1804-docker-4c-4g-1853 sshd[1758]: Invalid user jenkins from 10.32.4.5 port 46088 Aug 1 14:53:15 prd-ubuntu1804-docker-4c-4g-1853 sshd[1758]: Received disconnect from 10.32.4.5 port 46088:11: Closed due to user request. [preauth] Aug 1 14:53:15 prd-ubuntu1804-docker-4c-4g-1853 sshd[1758]: Disconnected from invalid user jenkins 10.32.4.5 port 46088 [preauth] Aug 1 14:53:17 prd-ubuntu1804-docker-4c-4g-1853 sshd[1792]: Invalid user jenkins from 10.32.4.5 port 46094 Aug 1 14:53:17 prd-ubuntu1804-docker-4c-4g-1853 sshd[1792]: Received disconnect from 10.32.4.5 port 46094:11: Closed due to user request. [preauth] Aug 1 14:53:17 prd-ubuntu1804-docker-4c-4g-1853 sshd[1792]: Disconnected from invalid user jenkins 10.32.4.5 port 46094 [preauth] Aug 1 14:53:19 prd-ubuntu1804-docker-4c-4g-1853 sshd[1796]: Invalid user jenkins from 10.32.4.5 port 46100 Aug 1 14:53:19 prd-ubuntu1804-docker-4c-4g-1853 sshd[1796]: Received disconnect from 10.32.4.5 port 46100:11: Closed due to user request. [preauth] Aug 1 14:53:19 prd-ubuntu1804-docker-4c-4g-1853 sshd[1796]: Disconnected from invalid user jenkins 10.32.4.5 port 46100 [preauth] Aug 1 14:53:20 prd-ubuntu1804-docker-4c-4g-1853 useradd[1824]: new group: name=jenkins, GID=1001 Aug 1 14:53:20 prd-ubuntu1804-docker-4c-4g-1853 useradd[1824]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 1 14:53:21 prd-ubuntu1804-docker-4c-4g-1853 usermod[1831]: add 'jenkins' to group 'docker' Aug 1 14:53:21 prd-ubuntu1804-docker-4c-4g-1853 usermod[1831]: add 'jenkins' to shadow group 'docker' Aug 1 14:53:21 prd-ubuntu1804-docker-4c-4g-1853 sshd[1880]: Accepted publickey for jenkins from 10.32.4.5 port 46104 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 1 14:53:21 prd-ubuntu1804-docker-4c-4g-1853 sshd[1880]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 1 14:53:21 prd-ubuntu1804-docker-4c-4g-1853 systemd-logind[1075]: New session 2 of user jenkins. Aug 1 14:53:21 prd-ubuntu1804-docker-4c-4g-1853 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 1 14:54:02 prd-ubuntu1804-docker-4c-4g-1853 CRON[2408]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 1 14:54:02 prd-ubuntu1804-docker-4c-4g-1853 CRON[2408]: pam_unix(cron:session): session closed for user root Aug 1 14:55:01 prd-ubuntu1804-docker-4c-4g-1853 CRON[2463]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 1 14:55:01 prd-ubuntu1804-docker-4c-4g-1853 CRON[2463]: pam_unix(cron:session): session closed for user root Aug 1 14:56:01 prd-ubuntu1804-docker-4c-4g-1853 CRON[6363]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 1 14:56:01 prd-ubuntu1804-docker-4c-4g-1853 CRON[6363]: pam_unix(cron:session): session closed for user root Aug 1 14:57:00 prd-ubuntu1804-docker-4c-4g-1853 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-helm-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 1 14:57:00 prd-ubuntu1804-docker-4c-4g-1853 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)