Aug 19 15:30:54 prd-ubuntu1804-docker-4c-4g-1399 passwd[931]: password for 'ubuntu' changed by 'root' Aug 19 15:30:54 prd-ubuntu1804-docker-4c-4g-1399 systemd-logind[1037]: Watching system buttons on /dev/input/event0 (Power Button) Aug 19 15:30:54 prd-ubuntu1804-docker-4c-4g-1399 systemd-logind[1037]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 19 15:30:54 prd-ubuntu1804-docker-4c-4g-1399 systemd-logind[1037]: New seat seat0. Aug 19 15:30:55 prd-ubuntu1804-docker-4c-4g-1399 sshd[1180]: Server listening on 0.0.0.0 port 22. Aug 19 15:30:55 prd-ubuntu1804-docker-4c-4g-1399 sshd[1180]: Server listening on :: port 22. Aug 19 15:30:55 prd-ubuntu1804-docker-4c-4g-1399 sshd[1185]: Did not receive identification string from 10.32.4.5 port 40934 Aug 19 15:30:56 prd-ubuntu1804-docker-4c-4g-1399 sshd[1245]: Invalid user jenkins from 10.32.4.5 port 40936 Aug 19 15:30:56 prd-ubuntu1804-docker-4c-4g-1399 sshd[1245]: Received disconnect from 10.32.4.5 port 40936:11: Closed due to user request. [preauth] Aug 19 15:30:56 prd-ubuntu1804-docker-4c-4g-1399 sshd[1245]: Disconnected from invalid user jenkins 10.32.4.5 port 40936 [preauth] Aug 19 15:30:58 prd-ubuntu1804-docker-4c-4g-1399 sshd[1407]: Invalid user jenkins from 10.32.4.5 port 40938 Aug 19 15:30:58 prd-ubuntu1804-docker-4c-4g-1399 sshd[1407]: Received disconnect from 10.32.4.5 port 40938:11: Closed due to user request. [preauth] Aug 19 15:30:58 prd-ubuntu1804-docker-4c-4g-1399 sshd[1407]: Disconnected from invalid user jenkins 10.32.4.5 port 40938 [preauth] Aug 19 15:31:00 prd-ubuntu1804-docker-4c-4g-1399 sshd[1463]: Invalid user jenkins from 10.32.4.5 port 40946 Aug 19 15:31:00 prd-ubuntu1804-docker-4c-4g-1399 sshd[1463]: Received disconnect from 10.32.4.5 port 40946:11: Closed due to user request. [preauth] Aug 19 15:31:00 prd-ubuntu1804-docker-4c-4g-1399 sshd[1463]: Disconnected from invalid user jenkins 10.32.4.5 port 40946 [preauth] Aug 19 15:31:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[1466]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 15:31:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[1466]: pam_unix(cron:session): session closed for user root Aug 19 15:31:02 prd-ubuntu1804-docker-4c-4g-1399 sshd[1483]: Invalid user jenkins from 10.32.4.5 port 40948 Aug 19 15:31:02 prd-ubuntu1804-docker-4c-4g-1399 sshd[1483]: Received disconnect from 10.32.4.5 port 40948:11: Closed due to user request. [preauth] Aug 19 15:31:02 prd-ubuntu1804-docker-4c-4g-1399 sshd[1483]: Disconnected from invalid user jenkins 10.32.4.5 port 40948 [preauth] Aug 19 15:31:04 prd-ubuntu1804-docker-4c-4g-1399 sshd[1490]: Invalid user jenkins from 10.32.4.5 port 40950 Aug 19 15:31:05 prd-ubuntu1804-docker-4c-4g-1399 sshd[1490]: Received disconnect from 10.32.4.5 port 40950:11: Closed due to user request. [preauth] Aug 19 15:31:05 prd-ubuntu1804-docker-4c-4g-1399 sshd[1490]: Disconnected from invalid user jenkins 10.32.4.5 port 40950 [preauth] Aug 19 15:31:07 prd-ubuntu1804-docker-4c-4g-1399 sshd[1492]: Invalid user jenkins from 10.32.4.5 port 40952 Aug 19 15:31:07 prd-ubuntu1804-docker-4c-4g-1399 sshd[1492]: Received disconnect from 10.32.4.5 port 40952:11: Closed due to user request. [preauth] Aug 19 15:31:07 prd-ubuntu1804-docker-4c-4g-1399 sshd[1492]: Disconnected from invalid user jenkins 10.32.4.5 port 40952 [preauth] Aug 19 15:31:09 prd-ubuntu1804-docker-4c-4g-1399 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 40956 Aug 19 15:31:09 prd-ubuntu1804-docker-4c-4g-1399 sshd[1494]: Received disconnect from 10.32.4.5 port 40956:11: Closed due to user request. [preauth] Aug 19 15:31:09 prd-ubuntu1804-docker-4c-4g-1399 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 40956 [preauth] Aug 19 15:31:11 prd-ubuntu1804-docker-4c-4g-1399 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 40958 Aug 19 15:31:11 prd-ubuntu1804-docker-4c-4g-1399 sshd[1496]: Received disconnect from 10.32.4.5 port 40958:11: Closed due to user request. [preauth] Aug 19 15:31:11 prd-ubuntu1804-docker-4c-4g-1399 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 40958 [preauth] Aug 19 15:31:13 prd-ubuntu1804-docker-4c-4g-1399 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 40962 Aug 19 15:31:13 prd-ubuntu1804-docker-4c-4g-1399 sshd[1498]: Received disconnect from 10.32.4.5 port 40962:11: Closed due to user request. [preauth] Aug 19 15:31:13 prd-ubuntu1804-docker-4c-4g-1399 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 40962 [preauth] Aug 19 15:31:15 prd-ubuntu1804-docker-4c-4g-1399 sshd[1507]: Invalid user jenkins from 10.32.4.5 port 40964 Aug 19 15:31:15 prd-ubuntu1804-docker-4c-4g-1399 sshd[1507]: Received disconnect from 10.32.4.5 port 40964:11: Closed due to user request. [preauth] Aug 19 15:31:15 prd-ubuntu1804-docker-4c-4g-1399 sshd[1507]: Disconnected from invalid user jenkins 10.32.4.5 port 40964 [preauth] Aug 19 15:31:17 prd-ubuntu1804-docker-4c-4g-1399 sshd[1654]: Invalid user jenkins from 10.32.4.5 port 40966 Aug 19 15:31:17 prd-ubuntu1804-docker-4c-4g-1399 sshd[1654]: Received disconnect from 10.32.4.5 port 40966:11: Closed due to user request. [preauth] Aug 19 15:31:17 prd-ubuntu1804-docker-4c-4g-1399 sshd[1654]: Disconnected from invalid user jenkins 10.32.4.5 port 40966 [preauth] Aug 19 15:31:20 prd-ubuntu1804-docker-4c-4g-1399 sshd[1742]: Invalid user jenkins from 10.32.4.5 port 40968 Aug 19 15:31:20 prd-ubuntu1804-docker-4c-4g-1399 sshd[1742]: Received disconnect from 10.32.4.5 port 40968:11: Closed due to user request. [preauth] Aug 19 15:31:20 prd-ubuntu1804-docker-4c-4g-1399 sshd[1742]: Disconnected from invalid user jenkins 10.32.4.5 port 40968 [preauth] Aug 19 15:31:22 prd-ubuntu1804-docker-4c-4g-1399 sshd[1781]: Invalid user jenkins from 10.32.4.5 port 40970 Aug 19 15:31:22 prd-ubuntu1804-docker-4c-4g-1399 sshd[1781]: Received disconnect from 10.32.4.5 port 40970:11: Closed due to user request. [preauth] Aug 19 15:31:22 prd-ubuntu1804-docker-4c-4g-1399 sshd[1781]: Disconnected from invalid user jenkins 10.32.4.5 port 40970 [preauth] Aug 19 15:31:24 prd-ubuntu1804-docker-4c-4g-1399 sshd[1785]: Invalid user jenkins from 10.32.4.5 port 40974 Aug 19 15:31:24 prd-ubuntu1804-docker-4c-4g-1399 sshd[1785]: Received disconnect from 10.32.4.5 port 40974:11: Closed due to user request. [preauth] Aug 19 15:31:24 prd-ubuntu1804-docker-4c-4g-1399 sshd[1785]: Disconnected from invalid user jenkins 10.32.4.5 port 40974 [preauth] Aug 19 15:31:26 prd-ubuntu1804-docker-4c-4g-1399 sshd[1809]: Invalid user jenkins from 10.32.4.5 port 40976 Aug 19 15:31:26 prd-ubuntu1804-docker-4c-4g-1399 sshd[1809]: Received disconnect from 10.32.4.5 port 40976:11: Closed due to user request. [preauth] Aug 19 15:31:26 prd-ubuntu1804-docker-4c-4g-1399 sshd[1809]: Disconnected from invalid user jenkins 10.32.4.5 port 40976 [preauth] Aug 19 15:31:26 prd-ubuntu1804-docker-4c-4g-1399 useradd[1813]: new group: name=jenkins, GID=1001 Aug 19 15:31:26 prd-ubuntu1804-docker-4c-4g-1399 useradd[1813]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 19 15:31:26 prd-ubuntu1804-docker-4c-4g-1399 usermod[1820]: add 'jenkins' to group 'docker' Aug 19 15:31:26 prd-ubuntu1804-docker-4c-4g-1399 usermod[1820]: add 'jenkins' to shadow group 'docker' Aug 19 15:31:28 prd-ubuntu1804-docker-4c-4g-1399 sshd[1868]: Accepted publickey for jenkins from 10.32.4.5 port 40978 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 19 15:31:28 prd-ubuntu1804-docker-4c-4g-1399 sshd[1868]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 19 15:31:28 prd-ubuntu1804-docker-4c-4g-1399 systemd-logind[1037]: New session 2 of user jenkins. Aug 19 15:31:28 prd-ubuntu1804-docker-4c-4g-1399 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 19 15:32:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[2367]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 15:32:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[2367]: pam_unix(cron:session): session closed for user root Aug 19 15:33:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[2425]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 15:33:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[2425]: pam_unix(cron:session): session closed for user root Aug 19 15:34:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[2853]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 15:34:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[2853]: pam_unix(cron:session): session closed for user root Aug 19 15:35:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[7788]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 15:35:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[7788]: pam_unix(cron:session): session closed for user root Aug 19 15:36:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[8463]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 15:36:01 prd-ubuntu1804-docker-4c-4g-1399 CRON[8463]: pam_unix(cron:session): session closed for user root Aug 19 15:36:05 prd-ubuntu1804-docker-4c-4g-1399 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/o-du-l2-cu-stub-docker-merge-sch_slice_based ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 19 15:36:05 prd-ubuntu1804-docker-4c-4g-1399 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)