Jun 20 10:09:18 prd-ubuntu1804-docker-4c-4g-3288 passwd[947]: password for 'ubuntu' changed by 'root' Jun 20 10:09:18 prd-ubuntu1804-docker-4c-4g-3288 systemd-logind[994]: Watching system buttons on /dev/input/event0 (Power Button) Jun 20 10:09:18 prd-ubuntu1804-docker-4c-4g-3288 systemd-logind[994]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 20 10:09:18 prd-ubuntu1804-docker-4c-4g-3288 systemd-logind[994]: New seat seat0. Jun 20 10:09:18 prd-ubuntu1804-docker-4c-4g-3288 sshd[1271]: Server listening on 0.0.0.0 port 22. Jun 20 10:09:18 prd-ubuntu1804-docker-4c-4g-3288 sshd[1271]: Server listening on :: port 22. Jun 20 10:09:20 prd-ubuntu1804-docker-4c-4g-3288 sshd[1466]: Did not receive identification string from 10.32.4.5 port 53596 Jun 20 10:09:25 prd-ubuntu1804-docker-4c-4g-3288 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 53604 Jun 20 10:09:25 prd-ubuntu1804-docker-4c-4g-3288 sshd[1532]: Received disconnect from 10.32.4.5 port 53604:11: Closed due to user request. [preauth] Jun 20 10:09:25 prd-ubuntu1804-docker-4c-4g-3288 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 53604 [preauth] Jun 20 10:09:27 prd-ubuntu1804-docker-4c-4g-3288 sshd[1550]: Invalid user jenkins from 10.32.4.5 port 53610 Jun 20 10:09:27 prd-ubuntu1804-docker-4c-4g-3288 sshd[1550]: Received disconnect from 10.32.4.5 port 53610:11: Closed due to user request. [preauth] Jun 20 10:09:27 prd-ubuntu1804-docker-4c-4g-3288 sshd[1550]: Disconnected from invalid user jenkins 10.32.4.5 port 53610 [preauth] Jun 20 10:09:29 prd-ubuntu1804-docker-4c-4g-3288 sshd[1552]: Invalid user jenkins from 10.32.4.5 port 53616 Jun 20 10:09:29 prd-ubuntu1804-docker-4c-4g-3288 sshd[1552]: Received disconnect from 10.32.4.5 port 53616:11: Closed due to user request. [preauth] Jun 20 10:09:29 prd-ubuntu1804-docker-4c-4g-3288 sshd[1552]: Disconnected from invalid user jenkins 10.32.4.5 port 53616 [preauth] Jun 20 10:09:31 prd-ubuntu1804-docker-4c-4g-3288 sshd[1554]: Invalid user jenkins from 10.32.4.5 port 53624 Jun 20 10:09:31 prd-ubuntu1804-docker-4c-4g-3288 sshd[1554]: Received disconnect from 10.32.4.5 port 53624:11: Closed due to user request. [preauth] Jun 20 10:09:31 prd-ubuntu1804-docker-4c-4g-3288 sshd[1554]: Disconnected from invalid user jenkins 10.32.4.5 port 53624 [preauth] Jun 20 10:09:33 prd-ubuntu1804-docker-4c-4g-3288 sshd[1556]: Invalid user jenkins from 10.32.4.5 port 53628 Jun 20 10:09:33 prd-ubuntu1804-docker-4c-4g-3288 sshd[1556]: Received disconnect from 10.32.4.5 port 53628:11: Closed due to user request. [preauth] Jun 20 10:09:33 prd-ubuntu1804-docker-4c-4g-3288 sshd[1556]: Disconnected from invalid user jenkins 10.32.4.5 port 53628 [preauth] Jun 20 10:09:35 prd-ubuntu1804-docker-4c-4g-3288 sshd[1558]: Invalid user jenkins from 10.32.4.5 port 53630 Jun 20 10:09:35 prd-ubuntu1804-docker-4c-4g-3288 sshd[1558]: Received disconnect from 10.32.4.5 port 53630:11: Closed due to user request. [preauth] Jun 20 10:09:35 prd-ubuntu1804-docker-4c-4g-3288 sshd[1558]: Disconnected from invalid user jenkins 10.32.4.5 port 53630 [preauth] Jun 20 10:09:37 prd-ubuntu1804-docker-4c-4g-3288 sshd[1560]: Invalid user jenkins from 10.32.4.5 port 53636 Jun 20 10:09:37 prd-ubuntu1804-docker-4c-4g-3288 sshd[1560]: Received disconnect from 10.32.4.5 port 53636:11: Closed due to user request. [preauth] Jun 20 10:09:37 prd-ubuntu1804-docker-4c-4g-3288 sshd[1560]: Disconnected from invalid user jenkins 10.32.4.5 port 53636 [preauth] Jun 20 10:09:39 prd-ubuntu1804-docker-4c-4g-3288 sshd[1578]: Invalid user jenkins from 10.32.4.5 port 53638 Jun 20 10:09:39 prd-ubuntu1804-docker-4c-4g-3288 sshd[1578]: Received disconnect from 10.32.4.5 port 53638:11: Closed due to user request. [preauth] Jun 20 10:09:39 prd-ubuntu1804-docker-4c-4g-3288 sshd[1578]: Disconnected from invalid user jenkins 10.32.4.5 port 53638 [preauth] Jun 20 10:09:42 prd-ubuntu1804-docker-4c-4g-3288 sshd[1796]: Invalid user jenkins from 10.32.4.5 port 53646 Jun 20 10:09:43 prd-ubuntu1804-docker-4c-4g-3288 sshd[1796]: Received disconnect from 10.32.4.5 port 53646:11: Closed due to user request. [preauth] Jun 20 10:09:43 prd-ubuntu1804-docker-4c-4g-3288 sshd[1796]: Disconnected from invalid user jenkins 10.32.4.5 port 53646 [preauth] Jun 20 10:09:45 prd-ubuntu1804-docker-4c-4g-3288 sshd[1832]: Invalid user jenkins from 10.32.4.5 port 53652 Jun 20 10:09:45 prd-ubuntu1804-docker-4c-4g-3288 sshd[1832]: Received disconnect from 10.32.4.5 port 53652:11: Closed due to user request. [preauth] Jun 20 10:09:45 prd-ubuntu1804-docker-4c-4g-3288 sshd[1832]: Disconnected from invalid user jenkins 10.32.4.5 port 53652 [preauth] Jun 20 10:09:47 prd-ubuntu1804-docker-4c-4g-3288 sshd[1840]: Invalid user jenkins from 10.32.4.5 port 53654 Jun 20 10:09:47 prd-ubuntu1804-docker-4c-4g-3288 sshd[1840]: Received disconnect from 10.32.4.5 port 53654:11: Closed due to user request. [preauth] Jun 20 10:09:47 prd-ubuntu1804-docker-4c-4g-3288 sshd[1840]: Disconnected from invalid user jenkins 10.32.4.5 port 53654 [preauth] Jun 20 10:09:49 prd-ubuntu1804-docker-4c-4g-3288 sshd[1855]: Invalid user jenkins from 10.32.4.5 port 53658 Jun 20 10:09:49 prd-ubuntu1804-docker-4c-4g-3288 useradd[1858]: new group: name=jenkins, GID=1001 Jun 20 10:09:49 prd-ubuntu1804-docker-4c-4g-3288 useradd[1858]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 20 10:09:49 prd-ubuntu1804-docker-4c-4g-3288 sshd[1855]: Received disconnect from 10.32.4.5 port 53658:11: Closed due to user request. [preauth] Jun 20 10:09:49 prd-ubuntu1804-docker-4c-4g-3288 sshd[1855]: Disconnected from invalid user jenkins 10.32.4.5 port 53658 [preauth] Jun 20 10:09:49 prd-ubuntu1804-docker-4c-4g-3288 usermod[1865]: add 'jenkins' to group 'docker' Jun 20 10:09:49 prd-ubuntu1804-docker-4c-4g-3288 usermod[1865]: add 'jenkins' to shadow group 'docker' Jun 20 10:09:51 prd-ubuntu1804-docker-4c-4g-3288 sshd[1928]: Accepted publickey for jenkins from 10.32.4.5 port 53664 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 20 10:09:51 prd-ubuntu1804-docker-4c-4g-3288 sshd[1928]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 20 10:09:51 prd-ubuntu1804-docker-4c-4g-3288 systemd-logind[994]: New session 1 of user jenkins. Jun 20 10:09:51 prd-ubuntu1804-docker-4c-4g-3288 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 20 10:10:02 prd-ubuntu1804-docker-4c-4g-3288 CRON[2217]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:10:02 prd-ubuntu1804-docker-4c-4g-3288 CRON[2217]: pam_unix(cron:session): session closed for user root Jun 20 10:11:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[2516]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:11:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[2516]: pam_unix(cron:session): session closed for user root Jun 20 10:12:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[3377]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:12:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[3377]: pam_unix(cron:session): session closed for user root Jun 20 10:13:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6045]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:13:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6045]: pam_unix(cron:session): session closed for user root Jun 20 10:14:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6051]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:14:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6051]: pam_unix(cron:session): session closed for user root Jun 20 10:15:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6057]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:15:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6057]: pam_unix(cron:session): session closed for user root Jun 20 10:16:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6061]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:16:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6061]: pam_unix(cron:session): session closed for user root Jun 20 10:17:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6065]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:17:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6064]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:17:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6064]: pam_unix(cron:session): session closed for user root Jun 20 10:17:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6065]: pam_unix(cron:session): session closed for user root Jun 20 10:18:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6071]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:18:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6071]: pam_unix(cron:session): session closed for user root Jun 20 10:19:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6074]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:19:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6074]: pam_unix(cron:session): session closed for user root Jun 20 10:20:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6080]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:20:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6080]: pam_unix(cron:session): session closed for user root Jun 20 10:21:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6084]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:21:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6084]: pam_unix(cron:session): session closed for user root Jun 20 10:22:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6088]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:22:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6088]: pam_unix(cron:session): session closed for user root Jun 20 10:23:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6091]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:23:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6091]: pam_unix(cron:session): session closed for user root Jun 20 10:24:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6095]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:24:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6095]: pam_unix(cron:session): session closed for user root Jun 20 10:25:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6117]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:25:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6117]: pam_unix(cron:session): session closed for user root Jun 20 10:26:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6122]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:26:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6122]: pam_unix(cron:session): session closed for user root Jun 20 10:27:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6125]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 20 10:27:01 prd-ubuntu1804-docker-4c-4g-3288 CRON[6125]: pam_unix(cron:session): session closed for user root Jun 20 10:27:50 prd-ubuntu1804-docker-4c-4g-3288 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-nonrtric-helm-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 20 10:27:50 prd-ubuntu1804-docker-4c-4g-3288 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)