Aug 5 05:23:03 prd-ubuntu1804-docker-4c-4g-144 passwd[944]: password for 'ubuntu' changed by 'root' Aug 5 05:23:03 prd-ubuntu1804-docker-4c-4g-144 systemd-logind[1046]: Watching system buttons on /dev/input/event0 (Power Button) Aug 5 05:23:03 prd-ubuntu1804-docker-4c-4g-144 systemd-logind[1046]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 5 05:23:03 prd-ubuntu1804-docker-4c-4g-144 systemd-logind[1046]: New seat seat0. Aug 5 05:23:03 prd-ubuntu1804-docker-4c-4g-144 sshd[1134]: Server listening on 0.0.0.0 port 22. Aug 5 05:23:03 prd-ubuntu1804-docker-4c-4g-144 sshd[1134]: Server listening on :: port 22. Aug 5 05:23:06 prd-ubuntu1804-docker-4c-4g-144 sshd[1501]: Did not receive identification string from 10.32.4.5 port 52208 Aug 5 05:23:16 prd-ubuntu1804-docker-4c-4g-144 sshd[1568]: Invalid user jenkins from 10.32.4.5 port 52214 Aug 5 05:23:16 prd-ubuntu1804-docker-4c-4g-144 sshd[1568]: Received disconnect from 10.32.4.5 port 52214:11: Closed due to user request. [preauth] Aug 5 05:23:16 prd-ubuntu1804-docker-4c-4g-144 sshd[1568]: Disconnected from invalid user jenkins 10.32.4.5 port 52214 [preauth] Aug 5 05:23:18 prd-ubuntu1804-docker-4c-4g-144 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 52224 Aug 5 05:23:18 prd-ubuntu1804-docker-4c-4g-144 sshd[1572]: Received disconnect from 10.32.4.5 port 52224:11: Closed due to user request. [preauth] Aug 5 05:23:18 prd-ubuntu1804-docker-4c-4g-144 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 52224 [preauth] Aug 5 05:23:20 prd-ubuntu1804-docker-4c-4g-144 sshd[1574]: Invalid user jenkins from 10.32.4.5 port 52230 Aug 5 05:23:20 prd-ubuntu1804-docker-4c-4g-144 sshd[1574]: Received disconnect from 10.32.4.5 port 52230:11: Closed due to user request. [preauth] Aug 5 05:23:20 prd-ubuntu1804-docker-4c-4g-144 sshd[1574]: Disconnected from invalid user jenkins 10.32.4.5 port 52230 [preauth] Aug 5 05:23:22 prd-ubuntu1804-docker-4c-4g-144 sshd[1576]: Invalid user jenkins from 10.32.4.5 port 52236 Aug 5 05:23:22 prd-ubuntu1804-docker-4c-4g-144 sshd[1576]: Received disconnect from 10.32.4.5 port 52236:11: Closed due to user request. [preauth] Aug 5 05:23:22 prd-ubuntu1804-docker-4c-4g-144 sshd[1576]: Disconnected from invalid user jenkins 10.32.4.5 port 52236 [preauth] Aug 5 05:23:24 prd-ubuntu1804-docker-4c-4g-144 sshd[1578]: Invalid user jenkins from 10.32.4.5 port 52242 Aug 5 05:23:24 prd-ubuntu1804-docker-4c-4g-144 sshd[1578]: Received disconnect from 10.32.4.5 port 52242:11: Closed due to user request. [preauth] Aug 5 05:23:24 prd-ubuntu1804-docker-4c-4g-144 sshd[1578]: Disconnected from invalid user jenkins 10.32.4.5 port 52242 [preauth] Aug 5 05:23:27 prd-ubuntu1804-docker-4c-4g-144 sshd[1761]: Invalid user jenkins from 10.32.4.5 port 52248 Aug 5 05:23:27 prd-ubuntu1804-docker-4c-4g-144 sshd[1761]: Received disconnect from 10.32.4.5 port 52248:11: Closed due to user request. [preauth] Aug 5 05:23:27 prd-ubuntu1804-docker-4c-4g-144 sshd[1761]: Disconnected from invalid user jenkins 10.32.4.5 port 52248 [preauth] Aug 5 05:23:29 prd-ubuntu1804-docker-4c-4g-144 sshd[1824]: Invalid user jenkins from 10.32.4.5 port 52252 Aug 5 05:23:29 prd-ubuntu1804-docker-4c-4g-144 sshd[1824]: Received disconnect from 10.32.4.5 port 52252:11: Closed due to user request. [preauth] Aug 5 05:23:29 prd-ubuntu1804-docker-4c-4g-144 sshd[1824]: Disconnected from invalid user jenkins 10.32.4.5 port 52252 [preauth] Aug 5 05:23:31 prd-ubuntu1804-docker-4c-4g-144 sshd[1857]: Invalid user jenkins from 10.32.4.5 port 52268 Aug 5 05:23:31 prd-ubuntu1804-docker-4c-4g-144 sshd[1857]: Received disconnect from 10.32.4.5 port 52268:11: Closed due to user request. [preauth] Aug 5 05:23:31 prd-ubuntu1804-docker-4c-4g-144 sshd[1857]: Disconnected from invalid user jenkins 10.32.4.5 port 52268 [preauth] Aug 5 05:23:33 prd-ubuntu1804-docker-4c-4g-144 sshd[1861]: Invalid user jenkins from 10.32.4.5 port 52270 Aug 5 05:23:33 prd-ubuntu1804-docker-4c-4g-144 sshd[1861]: Received disconnect from 10.32.4.5 port 52270:11: Closed due to user request. [preauth] Aug 5 05:23:33 prd-ubuntu1804-docker-4c-4g-144 sshd[1861]: Disconnected from invalid user jenkins 10.32.4.5 port 52270 [preauth] Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 useradd[1886]: new group: name=jenkins, GID=1001 Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 useradd[1886]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 usermod[1893]: add 'jenkins' to group 'docker' Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 usermod[1893]: add 'jenkins' to shadow group 'docker' Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 sshd[1927]: Accepted publickey for jenkins from 10.32.4.5 port 52272 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 sshd[1927]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 systemd-logind[1046]: New session 1 of user jenkins. Aug 5 05:23:35 prd-ubuntu1804-docker-4c-4g-144 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 5 05:24:01 prd-ubuntu1804-docker-4c-4g-144 CRON[2457]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 05:24:01 prd-ubuntu1804-docker-4c-4g-144 CRON[2457]: pam_unix(cron:session): session closed for user root Aug 5 05:25:02 prd-ubuntu1804-docker-4c-4g-144 CRON[2542]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 05:25:02 prd-ubuntu1804-docker-4c-4g-144 CRON[2542]: pam_unix(cron:session): session closed for user root Aug 5 05:26:01 prd-ubuntu1804-docker-4c-4g-144 CRON[6266]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 05:26:01 prd-ubuntu1804-docker-4c-4g-144 CRON[6266]: pam_unix(cron:session): session closed for user root Aug 5 05:27:01 prd-ubuntu1804-docker-4c-4g-144 CRON[7009]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 05:27:01 prd-ubuntu1804-docker-4c-4g-144 CRON[7009]: pam_unix(cron:session): session closed for user root Aug 5 05:27:03 prd-ubuntu1804-docker-4c-4g-144 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-helm-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 5 05:27:03 prd-ubuntu1804-docker-4c-4g-144 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)