Sep 23 18:56:47 prd-ubuntu1804-docker-4c-4g-13379 passwd[944]: password for 'ubuntu' changed by 'root' Sep 23 18:56:47 prd-ubuntu1804-docker-4c-4g-13379 systemd-logind[1016]: Watching system buttons on /dev/input/event0 (Power Button) Sep 23 18:56:47 prd-ubuntu1804-docker-4c-4g-13379 systemd-logind[1016]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 23 18:56:47 prd-ubuntu1804-docker-4c-4g-13379 systemd-logind[1016]: New seat seat0. Sep 23 18:56:47 prd-ubuntu1804-docker-4c-4g-13379 sshd[1303]: Server listening on 0.0.0.0 port 22. Sep 23 18:56:47 prd-ubuntu1804-docker-4c-4g-13379 sshd[1303]: Server listening on :: port 22. Sep 23 18:56:50 prd-ubuntu1804-docker-4c-4g-13379 sshd[1529]: Did not receive identification string from 10.32.4.5 port 42104 Sep 23 18:56:52 prd-ubuntu1804-docker-4c-4g-13379 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 42106 Sep 23 18:56:52 prd-ubuntu1804-docker-4c-4g-13379 sshd[1559]: Received disconnect from 10.32.4.5 port 42106:11: Closed due to user request. [preauth] Sep 23 18:56:52 prd-ubuntu1804-docker-4c-4g-13379 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 42106 [preauth] Sep 23 18:56:54 prd-ubuntu1804-docker-4c-4g-13379 sshd[1579]: Invalid user jenkins from 10.32.4.5 port 42110 Sep 23 18:56:54 prd-ubuntu1804-docker-4c-4g-13379 sshd[1579]: Received disconnect from 10.32.4.5 port 42110:11: Closed due to user request. [preauth] Sep 23 18:56:54 prd-ubuntu1804-docker-4c-4g-13379 sshd[1579]: Disconnected from invalid user jenkins 10.32.4.5 port 42110 [preauth] Sep 23 18:56:57 prd-ubuntu1804-docker-4c-4g-13379 sshd[1581]: Invalid user jenkins from 10.32.4.5 port 42112 Sep 23 18:56:57 prd-ubuntu1804-docker-4c-4g-13379 sshd[1581]: Received disconnect from 10.32.4.5 port 42112:11: Closed due to user request. [preauth] Sep 23 18:56:57 prd-ubuntu1804-docker-4c-4g-13379 sshd[1581]: Disconnected from invalid user jenkins 10.32.4.5 port 42112 [preauth] Sep 23 18:56:59 prd-ubuntu1804-docker-4c-4g-13379 sshd[1583]: Invalid user jenkins from 10.32.4.5 port 42114 Sep 23 18:56:59 prd-ubuntu1804-docker-4c-4g-13379 sshd[1583]: Received disconnect from 10.32.4.5 port 42114:11: Closed due to user request. [preauth] Sep 23 18:56:59 prd-ubuntu1804-docker-4c-4g-13379 sshd[1583]: Disconnected from invalid user jenkins 10.32.4.5 port 42114 [preauth] Sep 23 18:57:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[1585]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 18:57:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[1585]: pam_unix(cron:session): session closed for user root Sep 23 18:57:01 prd-ubuntu1804-docker-4c-4g-13379 sshd[1594]: Invalid user jenkins from 10.32.4.5 port 42118 Sep 23 18:57:01 prd-ubuntu1804-docker-4c-4g-13379 sshd[1594]: Received disconnect from 10.32.4.5 port 42118:11: Closed due to user request. [preauth] Sep 23 18:57:01 prd-ubuntu1804-docker-4c-4g-13379 sshd[1594]: Disconnected from invalid user jenkins 10.32.4.5 port 42118 [preauth] Sep 23 18:57:03 prd-ubuntu1804-docker-4c-4g-13379 sshd[1596]: Invalid user jenkins from 10.32.4.5 port 42120 Sep 23 18:57:03 prd-ubuntu1804-docker-4c-4g-13379 sshd[1596]: Received disconnect from 10.32.4.5 port 42120:11: Closed due to user request. [preauth] Sep 23 18:57:03 prd-ubuntu1804-docker-4c-4g-13379 sshd[1596]: Disconnected from invalid user jenkins 10.32.4.5 port 42120 [preauth] Sep 23 18:57:05 prd-ubuntu1804-docker-4c-4g-13379 sshd[1598]: Invalid user jenkins from 10.32.4.5 port 42122 Sep 23 18:57:05 prd-ubuntu1804-docker-4c-4g-13379 sshd[1598]: Received disconnect from 10.32.4.5 port 42122:11: Closed due to user request. [preauth] Sep 23 18:57:05 prd-ubuntu1804-docker-4c-4g-13379 sshd[1598]: Disconnected from invalid user jenkins 10.32.4.5 port 42122 [preauth] Sep 23 18:57:07 prd-ubuntu1804-docker-4c-4g-13379 sshd[1600]: Invalid user jenkins from 10.32.4.5 port 42124 Sep 23 18:57:07 prd-ubuntu1804-docker-4c-4g-13379 sshd[1600]: Received disconnect from 10.32.4.5 port 42124:11: Closed due to user request. [preauth] Sep 23 18:57:07 prd-ubuntu1804-docker-4c-4g-13379 sshd[1600]: Disconnected from invalid user jenkins 10.32.4.5 port 42124 [preauth] Sep 23 18:57:10 prd-ubuntu1804-docker-4c-4g-13379 sshd[1800]: Invalid user jenkins from 10.32.4.5 port 42126 Sep 23 18:57:10 prd-ubuntu1804-docker-4c-4g-13379 sshd[1800]: Received disconnect from 10.32.4.5 port 42126:11: Closed due to user request. [preauth] Sep 23 18:57:10 prd-ubuntu1804-docker-4c-4g-13379 sshd[1800]: Disconnected from invalid user jenkins 10.32.4.5 port 42126 [preauth] Sep 23 18:57:12 prd-ubuntu1804-docker-4c-4g-13379 sshd[1870]: Invalid user jenkins from 10.32.4.5 port 42128 Sep 23 18:57:12 prd-ubuntu1804-docker-4c-4g-13379 sshd[1870]: Received disconnect from 10.32.4.5 port 42128:11: Closed due to user request. [preauth] Sep 23 18:57:12 prd-ubuntu1804-docker-4c-4g-13379 sshd[1870]: Disconnected from invalid user jenkins 10.32.4.5 port 42128 [preauth] Sep 23 18:57:14 prd-ubuntu1804-docker-4c-4g-13379 sshd[1874]: Invalid user jenkins from 10.32.4.5 port 42130 Sep 23 18:57:14 prd-ubuntu1804-docker-4c-4g-13379 sshd[1874]: Received disconnect from 10.32.4.5 port 42130:11: Closed due to user request. [preauth] Sep 23 18:57:14 prd-ubuntu1804-docker-4c-4g-13379 sshd[1874]: Disconnected from invalid user jenkins 10.32.4.5 port 42130 [preauth] Sep 23 18:57:15 prd-ubuntu1804-docker-4c-4g-13379 useradd[1881]: new group: name=jenkins, GID=1001 Sep 23 18:57:15 prd-ubuntu1804-docker-4c-4g-13379 useradd[1881]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 23 18:57:15 prd-ubuntu1804-docker-4c-4g-13379 usermod[1888]: add 'jenkins' to group 'docker' Sep 23 18:57:15 prd-ubuntu1804-docker-4c-4g-13379 usermod[1888]: add 'jenkins' to shadow group 'docker' Sep 23 18:57:16 prd-ubuntu1804-docker-4c-4g-13379 sshd[1922]: Accepted publickey for jenkins from 10.32.4.5 port 42134 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 23 18:57:16 prd-ubuntu1804-docker-4c-4g-13379 sshd[1922]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 23 18:57:16 prd-ubuntu1804-docker-4c-4g-13379 systemd-logind[1016]: New session 2 of user jenkins. Sep 23 18:57:16 prd-ubuntu1804-docker-4c-4g-13379 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 23 18:58:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[2474]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 18:58:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[2474]: pam_unix(cron:session): session closed for user root Sep 23 18:59:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[3043]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 18:59:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[3043]: pam_unix(cron:session): session closed for user root Sep 23 19:00:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[8497]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 19:00:01 prd-ubuntu1804-docker-4c-4g-13379 CRON[8497]: pam_unix(cron:session): session closed for user root Sep 23 19:00:28 prd-ubuntu1804-docker-4c-4g-13379 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/o-du-l2-cu-stub-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Sep 23 19:00:28 prd-ubuntu1804-docker-4c-4g-13379 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)