Feb 7 17:53:44 prd-ubuntu1804-docker-4c-4g-3844 passwd[904]: password for 'ubuntu' changed by 'root' Feb 7 17:53:44 prd-ubuntu1804-docker-4c-4g-3844 systemd-logind[951]: Watching system buttons on /dev/input/event0 (Power Button) Feb 7 17:53:44 prd-ubuntu1804-docker-4c-4g-3844 systemd-logind[951]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 7 17:53:44 prd-ubuntu1804-docker-4c-4g-3844 systemd-logind[951]: New seat seat0. Feb 7 17:53:44 prd-ubuntu1804-docker-4c-4g-3844 sshd[1029]: Server listening on 0.0.0.0 port 22. Feb 7 17:53:44 prd-ubuntu1804-docker-4c-4g-3844 sshd[1029]: Server listening on :: port 22. Feb 7 17:53:49 prd-ubuntu1804-docker-4c-4g-3844 sshd[1398]: Did not receive identification string from 10.32.4.5 port 38028 Feb 7 17:53:58 prd-ubuntu1804-docker-4c-4g-3844 sshd[1441]: Invalid user jenkins from 10.32.4.5 port 38036 Feb 7 17:53:58 prd-ubuntu1804-docker-4c-4g-3844 sshd[1441]: Received disconnect from 10.32.4.5 port 38036:11: Closed due to user request. [preauth] Feb 7 17:53:58 prd-ubuntu1804-docker-4c-4g-3844 sshd[1441]: Disconnected from invalid user jenkins 10.32.4.5 port 38036 [preauth] Feb 7 17:54:00 prd-ubuntu1804-docker-4c-4g-3844 sshd[1445]: Invalid user jenkins from 10.32.4.5 port 38040 Feb 7 17:54:00 prd-ubuntu1804-docker-4c-4g-3844 sshd[1445]: Received disconnect from 10.32.4.5 port 38040:11: Closed due to user request. [preauth] Feb 7 17:54:00 prd-ubuntu1804-docker-4c-4g-3844 sshd[1445]: Disconnected from invalid user jenkins 10.32.4.5 port 38040 [preauth] Feb 7 17:54:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[1448]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 17:54:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[1448]: pam_unix(cron:session): session closed for user root Feb 7 17:54:02 prd-ubuntu1804-docker-4c-4g-3844 sshd[1455]: Invalid user jenkins from 10.32.4.5 port 38042 Feb 7 17:54:02 prd-ubuntu1804-docker-4c-4g-3844 sshd[1455]: Received disconnect from 10.32.4.5 port 38042:11: Closed due to user request. [preauth] Feb 7 17:54:02 prd-ubuntu1804-docker-4c-4g-3844 sshd[1455]: Disconnected from invalid user jenkins 10.32.4.5 port 38042 [preauth] Feb 7 17:54:04 prd-ubuntu1804-docker-4c-4g-3844 sshd[1457]: Invalid user jenkins from 10.32.4.5 port 38044 Feb 7 17:54:04 prd-ubuntu1804-docker-4c-4g-3844 sshd[1457]: Received disconnect from 10.32.4.5 port 38044:11: Closed due to user request. [preauth] Feb 7 17:54:04 prd-ubuntu1804-docker-4c-4g-3844 sshd[1457]: Disconnected from invalid user jenkins 10.32.4.5 port 38044 [preauth] Feb 7 17:54:06 prd-ubuntu1804-docker-4c-4g-3844 sshd[1469]: Invalid user jenkins from 10.32.4.5 port 38046 Feb 7 17:54:06 prd-ubuntu1804-docker-4c-4g-3844 sshd[1469]: Received disconnect from 10.32.4.5 port 38046:11: Closed due to user request. [preauth] Feb 7 17:54:06 prd-ubuntu1804-docker-4c-4g-3844 sshd[1469]: Disconnected from invalid user jenkins 10.32.4.5 port 38046 [preauth] Feb 7 17:54:09 prd-ubuntu1804-docker-4c-4g-3844 sshd[1694]: Invalid user jenkins from 10.32.4.5 port 38048 Feb 7 17:54:09 prd-ubuntu1804-docker-4c-4g-3844 sshd[1694]: Received disconnect from 10.32.4.5 port 38048:11: Closed due to user request. [preauth] Feb 7 17:54:09 prd-ubuntu1804-docker-4c-4g-3844 sshd[1694]: Disconnected from invalid user jenkins 10.32.4.5 port 38048 [preauth] Feb 7 17:54:11 prd-ubuntu1804-docker-4c-4g-3844 sshd[1734]: Invalid user jenkins from 10.32.4.5 port 38050 Feb 7 17:54:11 prd-ubuntu1804-docker-4c-4g-3844 sshd[1734]: Received disconnect from 10.32.4.5 port 38050:11: Closed due to user request. [preauth] Feb 7 17:54:11 prd-ubuntu1804-docker-4c-4g-3844 sshd[1734]: Disconnected from invalid user jenkins 10.32.4.5 port 38050 [preauth] Feb 7 17:54:13 prd-ubuntu1804-docker-4c-4g-3844 sshd[1744]: Invalid user jenkins from 10.32.4.5 port 38054 Feb 7 17:54:13 prd-ubuntu1804-docker-4c-4g-3844 sshd[1744]: Received disconnect from 10.32.4.5 port 38054:11: Closed due to user request. [preauth] Feb 7 17:54:13 prd-ubuntu1804-docker-4c-4g-3844 sshd[1744]: Disconnected from invalid user jenkins 10.32.4.5 port 38054 [preauth] Feb 7 17:54:13 prd-ubuntu1804-docker-4c-4g-3844 useradd[1754]: new group: name=jenkins, GID=1001 Feb 7 17:54:13 prd-ubuntu1804-docker-4c-4g-3844 useradd[1754]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 7 17:54:13 prd-ubuntu1804-docker-4c-4g-3844 usermod[1761]: add 'jenkins' to group 'docker' Feb 7 17:54:13 prd-ubuntu1804-docker-4c-4g-3844 usermod[1761]: add 'jenkins' to shadow group 'docker' Feb 7 17:54:15 prd-ubuntu1804-docker-4c-4g-3844 sshd[1795]: Accepted publickey for jenkins from 10.32.4.5 port 38058 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 7 17:54:15 prd-ubuntu1804-docker-4c-4g-3844 sshd[1795]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 7 17:54:15 prd-ubuntu1804-docker-4c-4g-3844 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 7 17:54:15 prd-ubuntu1804-docker-4c-4g-3844 systemd-logind[951]: New session 2 of user jenkins. Feb 7 17:55:02 prd-ubuntu1804-docker-4c-4g-3844 CRON[2340]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 17:55:02 prd-ubuntu1804-docker-4c-4g-3844 CRON[2340]: pam_unix(cron:session): session closed for user root Feb 7 17:56:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[2855]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 17:56:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[2855]: pam_unix(cron:session): session closed for user root Feb 7 17:57:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[15986]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 17:57:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[15986]: pam_unix(cron:session): session closed for user root Feb 7 17:58:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[19219]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 17:58:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[19219]: pam_unix(cron:session): session closed for user root Feb 7 17:59:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[26540]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 17:59:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[26540]: pam_unix(cron:session): session closed for user root Feb 7 18:00:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[2132]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 18:00:01 prd-ubuntu1804-docker-4c-4g-3844 CRON[2132]: pam_unix(cron:session): session closed for user root Feb 7 18:00:50 prd-ubuntu1804-docker-4c-4g-3844 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/o-du-l2-docker-merge-sch_slice_based ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 7 18:00:50 prd-ubuntu1804-docker-4c-4g-3844 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)