Aug 7 13:53:41 prd-ubuntu1804-docker-4c-4g-376 passwd[928]: password for 'ubuntu' changed by 'root' Aug 7 13:53:41 prd-ubuntu1804-docker-4c-4g-376 systemd-logind[1019]: Watching system buttons on /dev/input/event0 (Power Button) Aug 7 13:53:41 prd-ubuntu1804-docker-4c-4g-376 systemd-logind[1019]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 7 13:53:41 prd-ubuntu1804-docker-4c-4g-376 systemd-logind[1019]: New seat seat0. Aug 7 13:53:41 prd-ubuntu1804-docker-4c-4g-376 sshd[1191]: Server listening on 0.0.0.0 port 22. Aug 7 13:53:41 prd-ubuntu1804-docker-4c-4g-376 sshd[1191]: Server listening on :: port 22. Aug 7 13:53:44 prd-ubuntu1804-docker-4c-4g-376 sshd[1395]: Did not receive identification string from 10.32.4.5 port 58976 Aug 7 13:53:46 prd-ubuntu1804-docker-4c-4g-376 sshd[1434]: Invalid user jenkins from 10.32.4.5 port 58980 Aug 7 13:53:46 prd-ubuntu1804-docker-4c-4g-376 sshd[1434]: Received disconnect from 10.32.4.5 port 58980:11: Closed due to user request. [preauth] Aug 7 13:53:46 prd-ubuntu1804-docker-4c-4g-376 sshd[1434]: Disconnected from invalid user jenkins 10.32.4.5 port 58980 [preauth] Aug 7 13:53:48 prd-ubuntu1804-docker-4c-4g-376 sshd[1441]: Invalid user jenkins from 10.32.4.5 port 58990 Aug 7 13:53:48 prd-ubuntu1804-docker-4c-4g-376 sshd[1441]: Received disconnect from 10.32.4.5 port 58990:11: Closed due to user request. [preauth] Aug 7 13:53:48 prd-ubuntu1804-docker-4c-4g-376 sshd[1441]: Disconnected from invalid user jenkins 10.32.4.5 port 58990 [preauth] Aug 7 13:53:50 prd-ubuntu1804-docker-4c-4g-376 sshd[1459]: Invalid user jenkins from 10.32.4.5 port 58996 Aug 7 13:53:50 prd-ubuntu1804-docker-4c-4g-376 sshd[1459]: Received disconnect from 10.32.4.5 port 58996:11: Closed due to user request. [preauth] Aug 7 13:53:50 prd-ubuntu1804-docker-4c-4g-376 sshd[1459]: Disconnected from invalid user jenkins 10.32.4.5 port 58996 [preauth] Aug 7 13:53:52 prd-ubuntu1804-docker-4c-4g-376 sshd[1461]: Invalid user jenkins from 10.32.4.5 port 59002 Aug 7 13:53:52 prd-ubuntu1804-docker-4c-4g-376 sshd[1461]: Received disconnect from 10.32.4.5 port 59002:11: Closed due to user request. [preauth] Aug 7 13:53:52 prd-ubuntu1804-docker-4c-4g-376 sshd[1461]: Disconnected from invalid user jenkins 10.32.4.5 port 59002 [preauth] Aug 7 13:53:54 prd-ubuntu1804-docker-4c-4g-376 sshd[1463]: Invalid user jenkins from 10.32.4.5 port 59008 Aug 7 13:53:54 prd-ubuntu1804-docker-4c-4g-376 sshd[1463]: Received disconnect from 10.32.4.5 port 59008:11: Closed due to user request. [preauth] Aug 7 13:53:54 prd-ubuntu1804-docker-4c-4g-376 sshd[1463]: Disconnected from invalid user jenkins 10.32.4.5 port 59008 [preauth] Aug 7 13:53:56 prd-ubuntu1804-docker-4c-4g-376 sshd[1465]: Invalid user jenkins from 10.32.4.5 port 59012 Aug 7 13:53:57 prd-ubuntu1804-docker-4c-4g-376 sshd[1465]: Received disconnect from 10.32.4.5 port 59012:11: Closed due to user request. [preauth] Aug 7 13:53:57 prd-ubuntu1804-docker-4c-4g-376 sshd[1465]: Disconnected from invalid user jenkins 10.32.4.5 port 59012 [preauth] Aug 7 13:53:59 prd-ubuntu1804-docker-4c-4g-376 sshd[1467]: Invalid user jenkins from 10.32.4.5 port 59018 Aug 7 13:53:59 prd-ubuntu1804-docker-4c-4g-376 sshd[1467]: Received disconnect from 10.32.4.5 port 59018:11: Closed due to user request. [preauth] Aug 7 13:53:59 prd-ubuntu1804-docker-4c-4g-376 sshd[1467]: Disconnected from invalid user jenkins 10.32.4.5 port 59018 [preauth] Aug 7 13:54:01 prd-ubuntu1804-docker-4c-4g-376 sshd[1469]: Invalid user jenkins from 10.32.4.5 port 59030 Aug 7 13:54:01 prd-ubuntu1804-docker-4c-4g-376 sshd[1469]: Received disconnect from 10.32.4.5 port 59030:11: Closed due to user request. [preauth] Aug 7 13:54:01 prd-ubuntu1804-docker-4c-4g-376 sshd[1469]: Disconnected from invalid user jenkins 10.32.4.5 port 59030 [preauth] Aug 7 13:54:01 prd-ubuntu1804-docker-4c-4g-376 CRON[1472]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 13:54:01 prd-ubuntu1804-docker-4c-4g-376 CRON[1472]: pam_unix(cron:session): session closed for user root Aug 7 13:54:03 prd-ubuntu1804-docker-4c-4g-376 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 59034 Aug 7 13:54:03 prd-ubuntu1804-docker-4c-4g-376 sshd[1496]: Received disconnect from 10.32.4.5 port 59034:11: Closed due to user request. [preauth] Aug 7 13:54:03 prd-ubuntu1804-docker-4c-4g-376 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 59034 [preauth] Aug 7 13:54:05 prd-ubuntu1804-docker-4c-4g-376 sshd[1712]: Invalid user jenkins from 10.32.4.5 port 59040 Aug 7 13:54:06 prd-ubuntu1804-docker-4c-4g-376 sshd[1712]: Received disconnect from 10.32.4.5 port 59040:11: Closed due to user request. [preauth] Aug 7 13:54:06 prd-ubuntu1804-docker-4c-4g-376 sshd[1712]: Disconnected from invalid user jenkins 10.32.4.5 port 59040 [preauth] Aug 7 13:54:08 prd-ubuntu1804-docker-4c-4g-376 sshd[1750]: Invalid user jenkins from 10.32.4.5 port 59048 Aug 7 13:54:08 prd-ubuntu1804-docker-4c-4g-376 sshd[1750]: Received disconnect from 10.32.4.5 port 59048:11: Closed due to user request. [preauth] Aug 7 13:54:08 prd-ubuntu1804-docker-4c-4g-376 sshd[1750]: Disconnected from invalid user jenkins 10.32.4.5 port 59048 [preauth] Aug 7 13:54:10 prd-ubuntu1804-docker-4c-4g-376 sshd[1758]: Invalid user jenkins from 10.32.4.5 port 59056 Aug 7 13:54:10 prd-ubuntu1804-docker-4c-4g-376 sshd[1758]: Received disconnect from 10.32.4.5 port 59056:11: Closed due to user request. [preauth] Aug 7 13:54:10 prd-ubuntu1804-docker-4c-4g-376 sshd[1758]: Disconnected from invalid user jenkins 10.32.4.5 port 59056 [preauth] Aug 7 13:54:12 prd-ubuntu1804-docker-4c-4g-376 sshd[1767]: Invalid user jenkins from 10.32.4.5 port 59060 Aug 7 13:54:12 prd-ubuntu1804-docker-4c-4g-376 sshd[1767]: Received disconnect from 10.32.4.5 port 59060:11: Closed due to user request. [preauth] Aug 7 13:54:12 prd-ubuntu1804-docker-4c-4g-376 sshd[1767]: Disconnected from invalid user jenkins 10.32.4.5 port 59060 [preauth] Aug 7 13:54:12 prd-ubuntu1804-docker-4c-4g-376 useradd[1789]: new group: name=jenkins, GID=1001 Aug 7 13:54:12 prd-ubuntu1804-docker-4c-4g-376 useradd[1789]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 7 13:54:12 prd-ubuntu1804-docker-4c-4g-376 usermod[1796]: add 'jenkins' to group 'docker' Aug 7 13:54:12 prd-ubuntu1804-docker-4c-4g-376 usermod[1796]: add 'jenkins' to shadow group 'docker' Aug 7 13:54:14 prd-ubuntu1804-docker-4c-4g-376 sshd[1840]: Accepted publickey for jenkins from 10.32.4.5 port 59062 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 7 13:54:14 prd-ubuntu1804-docker-4c-4g-376 sshd[1840]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 7 13:54:14 prd-ubuntu1804-docker-4c-4g-376 systemd-logind[1019]: New session 2 of user jenkins. Aug 7 13:54:14 prd-ubuntu1804-docker-4c-4g-376 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 7 13:55:02 prd-ubuntu1804-docker-4c-4g-376 CRON[2399]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 13:55:02 prd-ubuntu1804-docker-4c-4g-376 CRON[2399]: pam_unix(cron:session): session closed for user root Aug 7 13:56:01 prd-ubuntu1804-docker-4c-4g-376 CRON[2436]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 13:56:01 prd-ubuntu1804-docker-4c-4g-376 CRON[2436]: pam_unix(cron:session): session closed for user root Aug 7 13:57:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5901]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 13:57:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5901]: pam_unix(cron:session): session closed for user root Aug 7 13:58:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5905]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 13:58:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5905]: pam_unix(cron:session): session closed for user root Aug 7 13:59:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5911]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 13:59:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5911]: pam_unix(cron:session): session closed for user root Aug 7 14:00:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5916]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:00:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5916]: pam_unix(cron:session): session closed for user root Aug 7 14:01:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5919]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:01:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5919]: pam_unix(cron:session): session closed for user root Aug 7 14:02:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5923]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:02:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5923]: pam_unix(cron:session): session closed for user root Aug 7 14:03:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5932]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:03:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5932]: pam_unix(cron:session): session closed for user root Aug 7 14:04:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5936]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:04:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5936]: pam_unix(cron:session): session closed for user root Aug 7 14:05:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5946]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:05:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5946]: pam_unix(cron:session): session closed for user root Aug 7 14:06:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5950]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:06:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5950]: pam_unix(cron:session): session closed for user root Aug 7 14:07:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5953]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:07:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5953]: pam_unix(cron:session): session closed for user root Aug 7 14:08:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5957]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:08:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5957]: pam_unix(cron:session): session closed for user root Aug 7 14:09:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5961]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:09:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5962]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:09:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5962]: pam_unix(cron:session): session closed for user root Aug 7 14:09:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5961]: pam_unix(cron:session): session closed for user root Aug 7 14:10:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5985]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:10:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5985]: pam_unix(cron:session): session closed for user root Aug 7 14:11:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5989]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:11:01 prd-ubuntu1804-docker-4c-4g-376 CRON[5989]: pam_unix(cron:session): session closed for user root Aug 7 14:12:01 prd-ubuntu1804-docker-4c-4g-376 CRON[6202]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 7 14:12:01 prd-ubuntu1804-docker-4c-4g-376 CRON[6202]: pam_unix(cron:session): session closed for user root Aug 7 14:12:24 prd-ubuntu1804-docker-4c-4g-376 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-helm-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 7 14:12:24 prd-ubuntu1804-docker-4c-4g-376 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)