Aug 7 10:16:18 prd-ubuntu1804-docker-4c-4g-361 passwd[943]: password for 'ubuntu' changed by 'root' Aug 7 10:16:18 prd-ubuntu1804-docker-4c-4g-361 systemd-logind[1074]: Watching system buttons on /dev/input/event0 (Power Button) Aug 7 10:16:18 prd-ubuntu1804-docker-4c-4g-361 systemd-logind[1074]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 7 10:16:18 prd-ubuntu1804-docker-4c-4g-361 systemd-logind[1074]: New seat seat0. Aug 7 10:16:19 prd-ubuntu1804-docker-4c-4g-361 sshd[1219]: Server listening on 0.0.0.0 port 22. Aug 7 10:16:19 prd-ubuntu1804-docker-4c-4g-361 sshd[1219]: Server listening on :: port 22. Aug 7 10:16:20 prd-ubuntu1804-docker-4c-4g-361 sshd[1282]: Did not receive identification string from 10.32.4.5 port 34462 Aug 7 10:16:26 prd-ubuntu1804-docker-4c-4g-361 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 34468 Aug 7 10:16:26 prd-ubuntu1804-docker-4c-4g-361 sshd[1496]: Received disconnect from 10.32.4.5 port 34468:11: Closed due to user request. [preauth] Aug 7 10:16:26 prd-ubuntu1804-docker-4c-4g-361 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 34468 [preauth] Aug 7 10:16:28 prd-ubuntu1804-docker-4c-4g-361 sshd[1505]: Invalid user jenkins from 10.32.4.5 port 34478 Aug 7 10:16:28 prd-ubuntu1804-docker-4c-4g-361 sshd[1505]: Received disconnect from 10.32.4.5 port 34478:11: Closed due to user request. [preauth] Aug 7 10:16:28 prd-ubuntu1804-docker-4c-4g-361 sshd[1505]: Disconnected from invalid user jenkins 10.32.4.5 port 34478 [preauth] Aug 7 10:16:30 prd-ubuntu1804-docker-4c-4g-361 sshd[1507]: Invalid user jenkins from 10.32.4.5 port 34490 Aug 7 10:16:30 prd-ubuntu1804-docker-4c-4g-361 sshd[1507]: Received disconnect from 10.32.4.5 port 34490:11: Closed due to user request. [preauth] Aug 7 10:16:30 prd-ubuntu1804-docker-4c-4g-361 sshd[1507]: Disconnected from invalid user jenkins 10.32.4.5 port 34490 [preauth] Aug 7 10:16:32 prd-ubuntu1804-docker-4c-4g-361 sshd[1526]: Invalid user jenkins from 10.32.4.5 port 34494 Aug 7 10:16:32 prd-ubuntu1804-docker-4c-4g-361 sshd[1526]: Received disconnect from 10.32.4.5 port 34494:11: Closed due to user request. [preauth] Aug 7 10:16:32 prd-ubuntu1804-docker-4c-4g-361 sshd[1526]: Disconnected from invalid user jenkins 10.32.4.5 port 34494 [preauth] Aug 7 10:16:34 prd-ubuntu1804-docker-4c-4g-361 sshd[1528]: Invalid user jenkins from 10.32.4.5 port 34500 Aug 7 10:16:34 prd-ubuntu1804-docker-4c-4g-361 sshd[1528]: Received disconnect from 10.32.4.5 port 34500:11: Closed due to user request. [preauth] Aug 7 10:16:34 prd-ubuntu1804-docker-4c-4g-361 sshd[1528]: Disconnected from invalid user jenkins 10.32.4.5 port 34500 [preauth] Aug 7 10:16:37 prd-ubuntu1804-docker-4c-4g-361 sshd[1530]: Invalid user jenkins from 10.32.4.5 port 34504 Aug 7 10:16:37 prd-ubuntu1804-docker-4c-4g-361 sshd[1530]: Received disconnect from 10.32.4.5 port 34504:11: Closed due to user request. [preauth] Aug 7 10:16:37 prd-ubuntu1804-docker-4c-4g-361 sshd[1530]: Disconnected from invalid user jenkins 10.32.4.5 port 34504 [preauth] Aug 7 10:16:39 prd-ubuntu1804-docker-4c-4g-361 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 34514 Aug 7 10:16:39 prd-ubuntu1804-docker-4c-4g-361 sshd[1532]: Received disconnect from 10.32.4.5 port 34514:11: Closed due to user request. [preauth] Aug 7 10:16:39 prd-ubuntu1804-docker-4c-4g-361 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 34514 [preauth] Aug 7 10:16:41 prd-ubuntu1804-docker-4c-4g-361 sshd[1570]: Invalid user jenkins from 10.32.4.5 port 34524 Aug 7 10:16:41 prd-ubuntu1804-docker-4c-4g-361 sshd[1570]: Received disconnect from 10.32.4.5 port 34524:11: Closed due to user request. [preauth] Aug 7 10:16:41 prd-ubuntu1804-docker-4c-4g-361 sshd[1570]: Disconnected from invalid user jenkins 10.32.4.5 port 34524 [preauth] Aug 7 10:16:43 prd-ubuntu1804-docker-4c-4g-361 sshd[1776]: Invalid user jenkins from 10.32.4.5 port 34526 Aug 7 10:16:43 prd-ubuntu1804-docker-4c-4g-361 sshd[1776]: Received disconnect from 10.32.4.5 port 34526:11: Closed due to user request. [preauth] Aug 7 10:16:43 prd-ubuntu1804-docker-4c-4g-361 sshd[1776]: Disconnected from invalid user jenkins 10.32.4.5 port 34526 [preauth] Aug 7 10:16:45 prd-ubuntu1804-docker-4c-4g-361 sshd[1816]: Invalid user jenkins from 10.32.4.5 port 34528 Aug 7 10:16:45 prd-ubuntu1804-docker-4c-4g-361 sshd[1816]: Received disconnect from 10.32.4.5 port 34528:11: Closed due to user request. [preauth] Aug 7 10:16:45 prd-ubuntu1804-docker-4c-4g-361 sshd[1816]: Disconnected from invalid user jenkins 10.32.4.5 port 34528 [preauth] Aug 7 10:16:47 prd-ubuntu1804-docker-4c-4g-361 sshd[1820]: Invalid user jenkins from 10.32.4.5 port 34534 Aug 7 10:16:48 prd-ubuntu1804-docker-4c-4g-361 sshd[1820]: Received disconnect from 10.32.4.5 port 34534:11: Closed due to user request. [preauth] Aug 7 10:16:48 prd-ubuntu1804-docker-4c-4g-361 sshd[1820]: Disconnected from invalid user jenkins 10.32.4.5 port 34534 [preauth] Aug 7 10:16:50 prd-ubuntu1804-docker-4c-4g-361 useradd[1846]: new group: name=jenkins, GID=1001 Aug 7 10:16:50 prd-ubuntu1804-docker-4c-4g-361 useradd[1846]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 7 10:16:50 prd-ubuntu1804-docker-4c-4g-361 usermod[1855]: add 'jenkins' to group 'docker' Aug 7 10:16:50 prd-ubuntu1804-docker-4c-4g-361 usermod[1855]: add 'jenkins' to shadow group 'docker' Aug 7 10:16:50 prd-ubuntu1804-docker-4c-4g-361 sshd[1847]: Received disconnect from 10.32.4.5 port 34536:11: Closed due to user request. [preauth] Aug 7 10:16:50 prd-ubuntu1804-docker-4c-4g-361 sshd[1847]: Disconnected from authenticating user jenkins 10.32.4.5 port 34536 [preauth] Aug 7 10:16:52 prd-ubuntu1804-docker-4c-4g-361 sshd[1903]: Accepted publickey for jenkins from 10.32.4.5 port 34538 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 7 10:16:52 prd-ubuntu1804-docker-4c-4g-361 sshd[1903]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 7 10:16:52 prd-ubuntu1804-docker-4c-4g-361 systemd-logind[1074]: New session 1 of user jenkins. Aug 7 10:16:52 prd-ubuntu1804-docker-4c-4g-361 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 7 10:17:01 prd-ubuntu1804-docker-4c-4g-361 CRON[2117]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:17:01 prd-ubuntu1804-docker-4c-4g-361 CRON[2116]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:17:01 prd-ubuntu1804-docker-4c-4g-361 CRON[2117]: pam_unix(cron:session): session closed for user root Aug 7 10:17:01 prd-ubuntu1804-docker-4c-4g-361 CRON[2116]: pam_unix(cron:session): session closed for user root Aug 7 10:18:01 prd-ubuntu1804-docker-4c-4g-361 CRON[2468]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:18:01 prd-ubuntu1804-docker-4c-4g-361 CRON[2468]: pam_unix(cron:session): session closed for user root Aug 7 10:19:01 prd-ubuntu1804-docker-4c-4g-361 CRON[3148]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:19:01 prd-ubuntu1804-docker-4c-4g-361 CRON[3148]: pam_unix(cron:session): session closed for user root Aug 7 10:20:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5966]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:20:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5966]: pam_unix(cron:session): session closed for user root Aug 7 10:21:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5970]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:21:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5970]: pam_unix(cron:session): session closed for user root Aug 7 10:22:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5976]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:22:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5976]: pam_unix(cron:session): session closed for user root Aug 7 10:23:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5981]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:23:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5981]: pam_unix(cron:session): session closed for user root Aug 7 10:24:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5985]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:24:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5985]: pam_unix(cron:session): session closed for user root Aug 7 10:25:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5989]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:25:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5989]: pam_unix(cron:session): session closed for user root Aug 7 10:26:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5992]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:26:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5992]: pam_unix(cron:session): session closed for user root Aug 7 10:27:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5997]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:27:01 prd-ubuntu1804-docker-4c-4g-361 CRON[5997]: pam_unix(cron:session): session closed for user root Aug 7 10:28:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6001]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:28:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6001]: pam_unix(cron:session): session closed for user root Aug 7 10:29:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6006]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:29:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6006]: pam_unix(cron:session): session closed for user root Aug 7 10:30:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6009]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:30:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6009]: pam_unix(cron:session): session closed for user root Aug 7 10:31:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6013]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:31:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6013]: pam_unix(cron:session): session closed for user root Aug 7 10:32:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6039]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:32:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6039]: pam_unix(cron:session): session closed for user root Aug 7 10:33:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6047]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:33:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6047]: pam_unix(cron:session): session closed for user root Aug 7 10:34:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6052]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:34:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6052]: pam_unix(cron:session): session closed for user root Aug 7 10:35:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6432]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 10:35:01 prd-ubuntu1804-docker-4c-4g-361 CRON[6432]: pam_unix(cron:session): session closed for user root Aug 7 10:35:08 prd-ubuntu1804-docker-4c-4g-361 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-helm-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 7 10:35:08 prd-ubuntu1804-docker-4c-4g-361 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)