Jan 27 20:25:41 prd-ubuntu1804-docker-4c-4g-4271 passwd[952]: password for 'ubuntu' changed by 'root' Jan 27 20:25:41 prd-ubuntu1804-docker-4c-4g-4271 systemd-logind[984]: Watching system buttons on /dev/input/event0 (Power Button) Jan 27 20:25:41 prd-ubuntu1804-docker-4c-4g-4271 systemd-logind[984]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 27 20:25:41 prd-ubuntu1804-docker-4c-4g-4271 systemd-logind[984]: New seat seat0. Jan 27 20:25:41 prd-ubuntu1804-docker-4c-4g-4271 sshd[1307]: Server listening on 0.0.0.0 port 22. Jan 27 20:25:41 prd-ubuntu1804-docker-4c-4g-4271 sshd[1307]: Server listening on :: port 22. Jan 27 20:25:41 prd-ubuntu1804-docker-4c-4g-4271 sshd[1323]: Did not receive identification string from 10.32.4.5 port 57294 Jan 27 20:25:42 prd-ubuntu1804-docker-4c-4g-4271 sshd[1416]: Invalid user jenkins from 10.32.4.5 port 57296 Jan 27 20:25:42 prd-ubuntu1804-docker-4c-4g-4271 sshd[1416]: Received disconnect from 10.32.4.5 port 57296:11: Closed due to user request. [preauth] Jan 27 20:25:42 prd-ubuntu1804-docker-4c-4g-4271 sshd[1416]: Disconnected from invalid user jenkins 10.32.4.5 port 57296 [preauth] Jan 27 20:25:44 prd-ubuntu1804-docker-4c-4g-4271 sshd[1562]: Invalid user jenkins from 10.32.4.5 port 57298 Jan 27 20:25:44 prd-ubuntu1804-docker-4c-4g-4271 sshd[1562]: Received disconnect from 10.32.4.5 port 57298:11: Closed due to user request. [preauth] Jan 27 20:25:44 prd-ubuntu1804-docker-4c-4g-4271 sshd[1562]: Disconnected from invalid user jenkins 10.32.4.5 port 57298 [preauth] Jan 27 20:25:46 prd-ubuntu1804-docker-4c-4g-4271 sshd[1589]: Invalid user jenkins from 10.32.4.5 port 57300 Jan 27 20:25:46 prd-ubuntu1804-docker-4c-4g-4271 sshd[1589]: Received disconnect from 10.32.4.5 port 57300:11: Closed due to user request. [preauth] Jan 27 20:25:46 prd-ubuntu1804-docker-4c-4g-4271 sshd[1589]: Disconnected from invalid user jenkins 10.32.4.5 port 57300 [preauth] Jan 27 20:25:49 prd-ubuntu1804-docker-4c-4g-4271 sshd[1606]: Invalid user jenkins from 10.32.4.5 port 57302 Jan 27 20:25:49 prd-ubuntu1804-docker-4c-4g-4271 sshd[1606]: Received disconnect from 10.32.4.5 port 57302:11: Closed due to user request. [preauth] Jan 27 20:25:49 prd-ubuntu1804-docker-4c-4g-4271 sshd[1606]: Disconnected from invalid user jenkins 10.32.4.5 port 57302 [preauth] Jan 27 20:25:51 prd-ubuntu1804-docker-4c-4g-4271 sshd[1608]: Invalid user jenkins from 10.32.4.5 port 57304 Jan 27 20:25:51 prd-ubuntu1804-docker-4c-4g-4271 sshd[1608]: Received disconnect from 10.32.4.5 port 57304:11: Closed due to user request. [preauth] Jan 27 20:25:51 prd-ubuntu1804-docker-4c-4g-4271 sshd[1608]: Disconnected from invalid user jenkins 10.32.4.5 port 57304 [preauth] Jan 27 20:25:53 prd-ubuntu1804-docker-4c-4g-4271 sshd[1610]: Invalid user jenkins from 10.32.4.5 port 57308 Jan 27 20:25:53 prd-ubuntu1804-docker-4c-4g-4271 sshd[1610]: Received disconnect from 10.32.4.5 port 57308:11: Closed due to user request. [preauth] Jan 27 20:25:53 prd-ubuntu1804-docker-4c-4g-4271 sshd[1610]: Disconnected from invalid user jenkins 10.32.4.5 port 57308 [preauth] Jan 27 20:25:55 prd-ubuntu1804-docker-4c-4g-4271 sshd[1612]: Invalid user jenkins from 10.32.4.5 port 57310 Jan 27 20:25:55 prd-ubuntu1804-docker-4c-4g-4271 sshd[1612]: Received disconnect from 10.32.4.5 port 57310:11: Closed due to user request. [preauth] Jan 27 20:25:55 prd-ubuntu1804-docker-4c-4g-4271 sshd[1612]: Disconnected from invalid user jenkins 10.32.4.5 port 57310 [preauth] Jan 27 20:25:57 prd-ubuntu1804-docker-4c-4g-4271 sshd[1614]: Invalid user jenkins from 10.32.4.5 port 57312 Jan 27 20:25:57 prd-ubuntu1804-docker-4c-4g-4271 sshd[1614]: Received disconnect from 10.32.4.5 port 57312:11: Closed due to user request. [preauth] Jan 27 20:25:57 prd-ubuntu1804-docker-4c-4g-4271 sshd[1614]: Disconnected from invalid user jenkins 10.32.4.5 port 57312 [preauth] Jan 27 20:25:59 prd-ubuntu1804-docker-4c-4g-4271 sshd[1616]: Invalid user jenkins from 10.32.4.5 port 57314 Jan 27 20:25:59 prd-ubuntu1804-docker-4c-4g-4271 sshd[1616]: Received disconnect from 10.32.4.5 port 57314:11: Closed due to user request. [preauth] Jan 27 20:25:59 prd-ubuntu1804-docker-4c-4g-4271 sshd[1616]: Disconnected from invalid user jenkins 10.32.4.5 port 57314 [preauth] Jan 27 20:26:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[1618]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:26:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[1618]: pam_unix(cron:session): session closed for user root Jan 27 20:26:01 prd-ubuntu1804-docker-4c-4g-4271 sshd[1620]: Invalid user jenkins from 10.32.4.5 port 57322 Jan 27 20:26:01 prd-ubuntu1804-docker-4c-4g-4271 sshd[1620]: Received disconnect from 10.32.4.5 port 57322:11: Closed due to user request. [preauth] Jan 27 20:26:01 prd-ubuntu1804-docker-4c-4g-4271 sshd[1620]: Disconnected from invalid user jenkins 10.32.4.5 port 57322 [preauth] Jan 27 20:26:03 prd-ubuntu1804-docker-4c-4g-4271 sshd[1793]: Invalid user jenkins from 10.32.4.5 port 57326 Jan 27 20:26:03 prd-ubuntu1804-docker-4c-4g-4271 sshd[1793]: Received disconnect from 10.32.4.5 port 57326:11: Closed due to user request. [preauth] Jan 27 20:26:03 prd-ubuntu1804-docker-4c-4g-4271 sshd[1793]: Disconnected from invalid user jenkins 10.32.4.5 port 57326 [preauth] Jan 27 20:26:05 prd-ubuntu1804-docker-4c-4g-4271 sshd[1867]: Invalid user jenkins from 10.32.4.5 port 57328 Jan 27 20:26:06 prd-ubuntu1804-docker-4c-4g-4271 sshd[1867]: Received disconnect from 10.32.4.5 port 57328:11: Closed due to user request. [preauth] Jan 27 20:26:06 prd-ubuntu1804-docker-4c-4g-4271 sshd[1867]: Disconnected from invalid user jenkins 10.32.4.5 port 57328 [preauth] Jan 27 20:26:08 prd-ubuntu1804-docker-4c-4g-4271 sshd[1887]: Invalid user jenkins from 10.32.4.5 port 57332 Jan 27 20:26:08 prd-ubuntu1804-docker-4c-4g-4271 sshd[1887]: Received disconnect from 10.32.4.5 port 57332:11: Closed due to user request. [preauth] Jan 27 20:26:08 prd-ubuntu1804-docker-4c-4g-4271 sshd[1887]: Disconnected from invalid user jenkins 10.32.4.5 port 57332 [preauth] Jan 27 20:26:10 prd-ubuntu1804-docker-4c-4g-4271 sshd[1906]: Invalid user jenkins from 10.32.4.5 port 57334 Jan 27 20:26:10 prd-ubuntu1804-docker-4c-4g-4271 sshd[1906]: Received disconnect from 10.32.4.5 port 57334:11: Closed due to user request. [preauth] Jan 27 20:26:10 prd-ubuntu1804-docker-4c-4g-4271 sshd[1906]: Disconnected from invalid user jenkins 10.32.4.5 port 57334 [preauth] Jan 27 20:26:12 prd-ubuntu1804-docker-4c-4g-4271 sshd[1920]: Invalid user jenkins from 10.32.4.5 port 57336 Jan 27 20:26:12 prd-ubuntu1804-docker-4c-4g-4271 sshd[1920]: Received disconnect from 10.32.4.5 port 57336:11: Closed due to user request. [preauth] Jan 27 20:26:12 prd-ubuntu1804-docker-4c-4g-4271 sshd[1920]: Disconnected from invalid user jenkins 10.32.4.5 port 57336 [preauth] Jan 27 20:26:13 prd-ubuntu1804-docker-4c-4g-4271 useradd[1946]: new group: name=jenkins, GID=1001 Jan 27 20:26:13 prd-ubuntu1804-docker-4c-4g-4271 useradd[1946]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 27 20:26:13 prd-ubuntu1804-docker-4c-4g-4271 usermod[1953]: add 'jenkins' to group 'docker' Jan 27 20:26:13 prd-ubuntu1804-docker-4c-4g-4271 usermod[1953]: add 'jenkins' to shadow group 'docker' Jan 27 20:26:14 prd-ubuntu1804-docker-4c-4g-4271 sshd[1987]: Accepted publickey for jenkins from 10.32.4.5 port 57338 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 27 20:26:14 prd-ubuntu1804-docker-4c-4g-4271 sshd[1987]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 27 20:26:14 prd-ubuntu1804-docker-4c-4g-4271 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 27 20:26:14 prd-ubuntu1804-docker-4c-4g-4271 systemd-logind[984]: New session 2 of user jenkins. Jan 27 20:27:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[2503]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:27:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[2503]: pam_unix(cron:session): session closed for user root Jan 27 20:28:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[2536]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:28:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[2536]: pam_unix(cron:session): session closed for user root Jan 27 20:29:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3338]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:29:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3338]: pam_unix(cron:session): session closed for user root Jan 27 20:30:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3507]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:30:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3507]: pam_unix(cron:session): session closed for user root Jan 27 20:31:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3514]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:31:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3514]: pam_unix(cron:session): session closed for user root Jan 27 20:32:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3519]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:32:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3519]: pam_unix(cron:session): session closed for user root Jan 27 20:33:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3847]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 27 20:33:01 prd-ubuntu1804-docker-4c-4g-4271 CRON[3847]: pam_unix(cron:session): session closed for user root Jan 27 20:33:42 prd-ubuntu1804-docker-4c-4g-4271 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-frontend-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 27 20:33:42 prd-ubuntu1804-docker-4c-4g-4271 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)