Feb 3 20:25:46 prd-ubuntu1804-docker-4c-4g-4842 passwd[936]: password for 'ubuntu' changed by 'root' Feb 3 20:25:46 prd-ubuntu1804-docker-4c-4g-4842 systemd-logind[991]: Watching system buttons on /dev/input/event0 (Power Button) Feb 3 20:25:46 prd-ubuntu1804-docker-4c-4g-4842 systemd-logind[991]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 3 20:25:46 prd-ubuntu1804-docker-4c-4g-4842 systemd-logind[991]: New seat seat0. Feb 3 20:25:46 prd-ubuntu1804-docker-4c-4g-4842 sshd[1056]: Server listening on 0.0.0.0 port 22. Feb 3 20:25:46 prd-ubuntu1804-docker-4c-4g-4842 sshd[1056]: Server listening on :: port 22. Feb 3 20:25:47 prd-ubuntu1804-docker-4c-4g-4842 sshd[1223]: Did not receive identification string from 10.32.4.5 port 51396 Feb 3 20:25:52 prd-ubuntu1804-docker-4c-4g-4842 sshd[1451]: Invalid user jenkins from 10.32.4.5 port 51400 Feb 3 20:25:52 prd-ubuntu1804-docker-4c-4g-4842 sshd[1451]: Received disconnect from 10.32.4.5 port 51400:11: Closed due to user request. [preauth] Feb 3 20:25:52 prd-ubuntu1804-docker-4c-4g-4842 sshd[1451]: Disconnected from invalid user jenkins 10.32.4.5 port 51400 [preauth] Feb 3 20:25:54 prd-ubuntu1804-docker-4c-4g-4842 sshd[1470]: Invalid user jenkins from 10.32.4.5 port 51402 Feb 3 20:25:54 prd-ubuntu1804-docker-4c-4g-4842 sshd[1470]: Received disconnect from 10.32.4.5 port 51402:11: Closed due to user request. [preauth] Feb 3 20:25:54 prd-ubuntu1804-docker-4c-4g-4842 sshd[1470]: Disconnected from invalid user jenkins 10.32.4.5 port 51402 [preauth] Feb 3 20:25:56 prd-ubuntu1804-docker-4c-4g-4842 sshd[1472]: Invalid user jenkins from 10.32.4.5 port 51405 Feb 3 20:25:56 prd-ubuntu1804-docker-4c-4g-4842 sshd[1472]: Received disconnect from 10.32.4.5 port 51405:11: Closed due to user request. [preauth] Feb 3 20:25:56 prd-ubuntu1804-docker-4c-4g-4842 sshd[1472]: Disconnected from invalid user jenkins 10.32.4.5 port 51405 [preauth] Feb 3 20:25:58 prd-ubuntu1804-docker-4c-4g-4842 sshd[1474]: Invalid user jenkins from 10.32.4.5 port 51406 Feb 3 20:25:58 prd-ubuntu1804-docker-4c-4g-4842 sshd[1474]: Received disconnect from 10.32.4.5 port 51406:11: Closed due to user request. [preauth] Feb 3 20:25:58 prd-ubuntu1804-docker-4c-4g-4842 sshd[1474]: Disconnected from invalid user jenkins 10.32.4.5 port 51406 [preauth] Feb 3 20:26:00 prd-ubuntu1804-docker-4c-4g-4842 sshd[1476]: Invalid user jenkins from 10.32.4.5 port 51408 Feb 3 20:26:00 prd-ubuntu1804-docker-4c-4g-4842 sshd[1476]: Received disconnect from 10.32.4.5 port 51408:11: Closed due to user request. [preauth] Feb 3 20:26:00 prd-ubuntu1804-docker-4c-4g-4842 sshd[1476]: Disconnected from invalid user jenkins 10.32.4.5 port 51408 [preauth] Feb 3 20:26:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[1479]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:26:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[1479]: pam_unix(cron:session): session closed for user root Feb 3 20:26:02 prd-ubuntu1804-docker-4c-4g-4842 sshd[1487]: Invalid user jenkins from 10.32.4.5 port 51410 Feb 3 20:26:02 prd-ubuntu1804-docker-4c-4g-4842 sshd[1487]: Received disconnect from 10.32.4.5 port 51410:11: Closed due to user request. [preauth] Feb 3 20:26:02 prd-ubuntu1804-docker-4c-4g-4842 sshd[1487]: Disconnected from invalid user jenkins 10.32.4.5 port 51410 [preauth] Feb 3 20:26:04 prd-ubuntu1804-docker-4c-4g-4842 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 51416 Feb 3 20:26:04 prd-ubuntu1804-docker-4c-4g-4842 sshd[1489]: Received disconnect from 10.32.4.5 port 51416:11: Closed due to user request. [preauth] Feb 3 20:26:04 prd-ubuntu1804-docker-4c-4g-4842 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 51416 [preauth] Feb 3 20:26:06 prd-ubuntu1804-docker-4c-4g-4842 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 51418 Feb 3 20:26:07 prd-ubuntu1804-docker-4c-4g-4842 sshd[1491]: Received disconnect from 10.32.4.5 port 51418:11: Closed due to user request. [preauth] Feb 3 20:26:07 prd-ubuntu1804-docker-4c-4g-4842 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 51418 [preauth] Feb 3 20:26:09 prd-ubuntu1804-docker-4c-4g-4842 sshd[1620]: Invalid user jenkins from 10.32.4.5 port 51420 Feb 3 20:26:09 prd-ubuntu1804-docker-4c-4g-4842 sshd[1620]: Received disconnect from 10.32.4.5 port 51420:11: Closed due to user request. [preauth] Feb 3 20:26:09 prd-ubuntu1804-docker-4c-4g-4842 sshd[1620]: Disconnected from invalid user jenkins 10.32.4.5 port 51420 [preauth] Feb 3 20:26:11 prd-ubuntu1804-docker-4c-4g-4842 sshd[1730]: Invalid user jenkins from 10.32.4.5 port 51424 Feb 3 20:26:11 prd-ubuntu1804-docker-4c-4g-4842 sshd[1730]: Received disconnect from 10.32.4.5 port 51424:11: Closed due to user request. [preauth] Feb 3 20:26:11 prd-ubuntu1804-docker-4c-4g-4842 sshd[1730]: Disconnected from invalid user jenkins 10.32.4.5 port 51424 [preauth] Feb 3 20:26:13 prd-ubuntu1804-docker-4c-4g-4842 sshd[1770]: Invalid user jenkins from 10.32.4.5 port 51426 Feb 3 20:26:13 prd-ubuntu1804-docker-4c-4g-4842 sshd[1770]: Received disconnect from 10.32.4.5 port 51426:11: Closed due to user request. [preauth] Feb 3 20:26:13 prd-ubuntu1804-docker-4c-4g-4842 sshd[1770]: Disconnected from invalid user jenkins 10.32.4.5 port 51426 [preauth] Feb 3 20:26:15 prd-ubuntu1804-docker-4c-4g-4842 sshd[1774]: Invalid user jenkins from 10.32.4.5 port 51428 Feb 3 20:26:15 prd-ubuntu1804-docker-4c-4g-4842 sshd[1774]: Received disconnect from 10.32.4.5 port 51428:11: Closed due to user request. [preauth] Feb 3 20:26:15 prd-ubuntu1804-docker-4c-4g-4842 sshd[1774]: Disconnected from invalid user jenkins 10.32.4.5 port 51428 [preauth] Feb 3 20:26:17 prd-ubuntu1804-docker-4c-4g-4842 useradd[1802]: new group: name=jenkins, GID=1001 Feb 3 20:26:17 prd-ubuntu1804-docker-4c-4g-4842 useradd[1802]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 3 20:26:18 prd-ubuntu1804-docker-4c-4g-4842 usermod[1812]: add 'jenkins' to group 'docker' Feb 3 20:26:18 prd-ubuntu1804-docker-4c-4g-4842 usermod[1812]: add 'jenkins' to shadow group 'docker' Feb 3 20:26:18 prd-ubuntu1804-docker-4c-4g-4842 sshd[1804]: Received disconnect from 10.32.4.5 port 51430:11: Closed due to user request. [preauth] Feb 3 20:26:18 prd-ubuntu1804-docker-4c-4g-4842 sshd[1804]: Disconnected from authenticating user jenkins 10.32.4.5 port 51430 [preauth] Feb 3 20:26:20 prd-ubuntu1804-docker-4c-4g-4842 sshd[1856]: Accepted publickey for jenkins from 10.32.4.5 port 51434 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 3 20:26:20 prd-ubuntu1804-docker-4c-4g-4842 sshd[1856]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 3 20:26:20 prd-ubuntu1804-docker-4c-4g-4842 systemd-logind[991]: New session 2 of user jenkins. Feb 3 20:26:20 prd-ubuntu1804-docker-4c-4g-4842 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 3 20:27:02 prd-ubuntu1804-docker-4c-4g-4842 CRON[2374]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:27:02 prd-ubuntu1804-docker-4c-4g-4842 CRON[2374]: pam_unix(cron:session): session closed for user root Feb 3 20:28:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[2684]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:28:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[2684]: pam_unix(cron:session): session closed for user root Feb 3 20:29:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3264]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:29:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3264]: pam_unix(cron:session): session closed for user root Feb 3 20:30:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3377]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:30:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3377]: pam_unix(cron:session): session closed for user root Feb 3 20:31:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3384]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:31:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3384]: pam_unix(cron:session): session closed for user root Feb 3 20:32:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3389]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:32:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3389]: pam_unix(cron:session): session closed for user root Feb 3 20:33:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3881]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 3 20:33:01 prd-ubuntu1804-docker-4c-4g-4842 CRON[3881]: pam_unix(cron:session): session closed for user root Feb 3 20:33:18 prd-ubuntu1804-docker-4c-4g-4842 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-frontend-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 3 20:33:18 prd-ubuntu1804-docker-4c-4g-4842 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)