Jan 28 15:30:43 prd-ubuntu1804-docker-4c-4g-2999 passwd[933]: password for 'ubuntu' changed by 'root' Jan 28 15:30:43 prd-ubuntu1804-docker-4c-4g-2999 systemd-logind[962]: Watching system buttons on /dev/input/event0 (Power Button) Jan 28 15:30:43 prd-ubuntu1804-docker-4c-4g-2999 systemd-logind[962]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 28 15:30:43 prd-ubuntu1804-docker-4c-4g-2999 systemd-logind[962]: New seat seat0. Jan 28 15:30:44 prd-ubuntu1804-docker-4c-4g-2999 sshd[1237]: Server listening on 0.0.0.0 port 22. Jan 28 15:30:44 prd-ubuntu1804-docker-4c-4g-2999 sshd[1237]: Server listening on :: port 22. Jan 28 15:30:47 prd-ubuntu1804-docker-4c-4g-2999 sshd[1433]: Did not receive identification string from 10.32.4.5 port 58554 Jan 28 15:30:48 prd-ubuntu1804-docker-4c-4g-2999 sshd[1441]: Invalid user jenkins from 10.32.4.5 port 58556 Jan 28 15:30:48 prd-ubuntu1804-docker-4c-4g-2999 sshd[1441]: Received disconnect from 10.32.4.5 port 58556:11: Closed due to user request. [preauth] Jan 28 15:30:48 prd-ubuntu1804-docker-4c-4g-2999 sshd[1441]: Disconnected from invalid user jenkins 10.32.4.5 port 58556 [preauth] Jan 28 15:30:50 prd-ubuntu1804-docker-4c-4g-2999 sshd[1474]: Invalid user jenkins from 10.32.4.5 port 58558 Jan 28 15:30:50 prd-ubuntu1804-docker-4c-4g-2999 sshd[1474]: Received disconnect from 10.32.4.5 port 58558:11: Closed due to user request. [preauth] Jan 28 15:30:50 prd-ubuntu1804-docker-4c-4g-2999 sshd[1474]: Disconnected from invalid user jenkins 10.32.4.5 port 58558 [preauth] Jan 28 15:30:52 prd-ubuntu1804-docker-4c-4g-2999 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 58566 Jan 28 15:30:52 prd-ubuntu1804-docker-4c-4g-2999 sshd[1494]: Received disconnect from 10.32.4.5 port 58566:11: Closed due to user request. [preauth] Jan 28 15:30:52 prd-ubuntu1804-docker-4c-4g-2999 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 58566 [preauth] Jan 28 15:30:54 prd-ubuntu1804-docker-4c-4g-2999 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 58568 Jan 28 15:30:54 prd-ubuntu1804-docker-4c-4g-2999 sshd[1496]: Received disconnect from 10.32.4.5 port 58568:11: Closed due to user request. [preauth] Jan 28 15:30:54 prd-ubuntu1804-docker-4c-4g-2999 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 58568 [preauth] Jan 28 15:30:56 prd-ubuntu1804-docker-4c-4g-2999 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 58572 Jan 28 15:30:56 prd-ubuntu1804-docker-4c-4g-2999 sshd[1498]: Received disconnect from 10.32.4.5 port 58572:11: Closed due to user request. [preauth] Jan 28 15:30:56 prd-ubuntu1804-docker-4c-4g-2999 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 58572 [preauth] Jan 28 15:30:58 prd-ubuntu1804-docker-4c-4g-2999 sshd[1500]: Invalid user jenkins from 10.32.4.5 port 58574 Jan 28 15:30:58 prd-ubuntu1804-docker-4c-4g-2999 sshd[1500]: Received disconnect from 10.32.4.5 port 58574:11: Closed due to user request. [preauth] Jan 28 15:30:58 prd-ubuntu1804-docker-4c-4g-2999 sshd[1500]: Disconnected from invalid user jenkins 10.32.4.5 port 58574 [preauth] Jan 28 15:31:01 prd-ubuntu1804-docker-4c-4g-2999 sshd[1520]: Invalid user jenkins from 10.32.4.5 port 58578 Jan 28 15:31:01 prd-ubuntu1804-docker-4c-4g-2999 sshd[1520]: Received disconnect from 10.32.4.5 port 58578:11: Closed due to user request. [preauth] Jan 28 15:31:01 prd-ubuntu1804-docker-4c-4g-2999 sshd[1520]: Disconnected from invalid user jenkins 10.32.4.5 port 58578 [preauth] Jan 28 15:31:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[1523]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 28 15:31:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[1523]: pam_unix(cron:session): session closed for user root Jan 28 15:31:03 prd-ubuntu1804-docker-4c-4g-2999 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 58580 Jan 28 15:31:03 prd-ubuntu1804-docker-4c-4g-2999 sshd[1531]: Received disconnect from 10.32.4.5 port 58580:11: Closed due to user request. [preauth] Jan 28 15:31:03 prd-ubuntu1804-docker-4c-4g-2999 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 58580 [preauth] Jan 28 15:31:05 prd-ubuntu1804-docker-4c-4g-2999 sshd[1533]: Invalid user jenkins from 10.32.4.5 port 58582 Jan 28 15:31:05 prd-ubuntu1804-docker-4c-4g-2999 sshd[1533]: Received disconnect from 10.32.4.5 port 58582:11: Closed due to user request. [preauth] Jan 28 15:31:05 prd-ubuntu1804-docker-4c-4g-2999 sshd[1533]: Disconnected from invalid user jenkins 10.32.4.5 port 58582 [preauth] Jan 28 15:31:07 prd-ubuntu1804-docker-4c-4g-2999 sshd[1767]: Invalid user jenkins from 10.32.4.5 port 58584 Jan 28 15:31:07 prd-ubuntu1804-docker-4c-4g-2999 sshd[1767]: Received disconnect from 10.32.4.5 port 58584:11: Closed due to user request. [preauth] Jan 28 15:31:07 prd-ubuntu1804-docker-4c-4g-2999 sshd[1767]: Disconnected from invalid user jenkins 10.32.4.5 port 58584 [preauth] Jan 28 15:31:09 prd-ubuntu1804-docker-4c-4g-2999 sshd[1810]: Invalid user jenkins from 10.32.4.5 port 58586 Jan 28 15:31:09 prd-ubuntu1804-docker-4c-4g-2999 sshd[1810]: Received disconnect from 10.32.4.5 port 58586:11: Closed due to user request. [preauth] Jan 28 15:31:09 prd-ubuntu1804-docker-4c-4g-2999 sshd[1810]: Disconnected from invalid user jenkins 10.32.4.5 port 58586 [preauth] Jan 28 15:31:11 prd-ubuntu1804-docker-4c-4g-2999 sshd[1819]: Invalid user jenkins from 10.32.4.5 port 58588 Jan 28 15:31:11 prd-ubuntu1804-docker-4c-4g-2999 sshd[1819]: Received disconnect from 10.32.4.5 port 58588:11: Closed due to user request. [preauth] Jan 28 15:31:11 prd-ubuntu1804-docker-4c-4g-2999 sshd[1819]: Disconnected from invalid user jenkins 10.32.4.5 port 58588 [preauth] Jan 28 15:31:12 prd-ubuntu1804-docker-4c-4g-2999 useradd[1830]: new group: name=jenkins, GID=1001 Jan 28 15:31:12 prd-ubuntu1804-docker-4c-4g-2999 useradd[1830]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 28 15:31:12 prd-ubuntu1804-docker-4c-4g-2999 usermod[1837]: add 'jenkins' to group 'docker' Jan 28 15:31:12 prd-ubuntu1804-docker-4c-4g-2999 usermod[1837]: add 'jenkins' to shadow group 'docker' Jan 28 15:31:13 prd-ubuntu1804-docker-4c-4g-2999 sshd[1871]: Accepted publickey for jenkins from 10.32.4.5 port 58590 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 28 15:31:13 prd-ubuntu1804-docker-4c-4g-2999 sshd[1871]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 28 15:31:13 prd-ubuntu1804-docker-4c-4g-2999 systemd-logind[962]: New session 2 of user jenkins. Jan 28 15:31:13 prd-ubuntu1804-docker-4c-4g-2999 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 28 15:32:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[2428]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 28 15:32:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[2428]: pam_unix(cron:session): session closed for user root Jan 28 15:33:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[2915]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 28 15:33:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[2915]: pam_unix(cron:session): session closed for user root Jan 28 15:34:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[8465]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 28 15:34:01 prd-ubuntu1804-docker-4c-4g-2999 CRON[8465]: pam_unix(cron:session): session closed for user root Jan 28 15:34:02 prd-ubuntu1804-docker-4c-4g-2999 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/o-du-l2-cu-stub-docker-merge-sch_slice_based ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 28 15:34:02 prd-ubuntu1804-docker-4c-4g-2999 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)