Oct 23 17:53:42 prd-ubuntu1804-docker-4c-4g-942 passwd[898]: password for 'ubuntu' changed by 'root' Oct 23 17:53:42 prd-ubuntu1804-docker-4c-4g-942 systemd-logind[992]: Watching system buttons on /dev/input/event0 (Power Button) Oct 23 17:53:42 prd-ubuntu1804-docker-4c-4g-942 systemd-logind[992]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 23 17:53:42 prd-ubuntu1804-docker-4c-4g-942 systemd-logind[992]: New seat seat0. Oct 23 17:53:42 prd-ubuntu1804-docker-4c-4g-942 sshd[1173]: Server listening on 0.0.0.0 port 22. Oct 23 17:53:42 prd-ubuntu1804-docker-4c-4g-942 sshd[1173]: Server listening on :: port 22. Oct 23 17:53:45 prd-ubuntu1804-docker-4c-4g-942 sshd[1402]: Did not receive identification string from 10.32.4.5 port 56656 Oct 23 17:53:51 prd-ubuntu1804-docker-4c-4g-942 sshd[1457]: Invalid user jenkins from 10.32.4.5 port 56662 Oct 23 17:53:51 prd-ubuntu1804-docker-4c-4g-942 sshd[1457]: Received disconnect from 10.32.4.5 port 56662:11: Closed due to user request. [preauth] Oct 23 17:53:51 prd-ubuntu1804-docker-4c-4g-942 sshd[1457]: Disconnected from invalid user jenkins 10.32.4.5 port 56662 [preauth] Oct 23 17:53:54 prd-ubuntu1804-docker-4c-4g-942 sshd[1461]: Invalid user jenkins from 10.32.4.5 port 56664 Oct 23 17:53:54 prd-ubuntu1804-docker-4c-4g-942 sshd[1461]: Received disconnect from 10.32.4.5 port 56664:11: Closed due to user request. [preauth] Oct 23 17:53:54 prd-ubuntu1804-docker-4c-4g-942 sshd[1461]: Disconnected from invalid user jenkins 10.32.4.5 port 56664 [preauth] Oct 23 17:53:56 prd-ubuntu1804-docker-4c-4g-942 sshd[1463]: Invalid user jenkins from 10.32.4.5 port 56666 Oct 23 17:53:56 prd-ubuntu1804-docker-4c-4g-942 sshd[1463]: Received disconnect from 10.32.4.5 port 56666:11: Closed due to user request. [preauth] Oct 23 17:53:56 prd-ubuntu1804-docker-4c-4g-942 sshd[1463]: Disconnected from invalid user jenkins 10.32.4.5 port 56666 [preauth] Oct 23 17:53:58 prd-ubuntu1804-docker-4c-4g-942 sshd[1465]: Invalid user jenkins from 10.32.4.5 port 56668 Oct 23 17:53:58 prd-ubuntu1804-docker-4c-4g-942 sshd[1465]: Received disconnect from 10.32.4.5 port 56668:11: Closed due to user request. [preauth] Oct 23 17:53:58 prd-ubuntu1804-docker-4c-4g-942 sshd[1465]: Disconnected from invalid user jenkins 10.32.4.5 port 56668 [preauth] Oct 23 17:54:00 prd-ubuntu1804-docker-4c-4g-942 sshd[1467]: Invalid user jenkins from 10.32.4.5 port 56672 Oct 23 17:54:00 prd-ubuntu1804-docker-4c-4g-942 sshd[1467]: Received disconnect from 10.32.4.5 port 56672:11: Closed due to user request. [preauth] Oct 23 17:54:00 prd-ubuntu1804-docker-4c-4g-942 sshd[1467]: Disconnected from invalid user jenkins 10.32.4.5 port 56672 [preauth] Oct 23 17:54:01 prd-ubuntu1804-docker-4c-4g-942 CRON[1470]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 23 17:54:01 prd-ubuntu1804-docker-4c-4g-942 CRON[1470]: pam_unix(cron:session): session closed for user root Oct 23 17:54:02 prd-ubuntu1804-docker-4c-4g-942 sshd[1477]: Invalid user jenkins from 10.32.4.5 port 56674 Oct 23 17:54:02 prd-ubuntu1804-docker-4c-4g-942 sshd[1477]: Received disconnect from 10.32.4.5 port 56674:11: Closed due to user request. [preauth] Oct 23 17:54:02 prd-ubuntu1804-docker-4c-4g-942 sshd[1477]: Disconnected from invalid user jenkins 10.32.4.5 port 56674 [preauth] Oct 23 17:54:04 prd-ubuntu1804-docker-4c-4g-942 sshd[1599]: Invalid user jenkins from 10.32.4.5 port 56678 Oct 23 17:54:04 prd-ubuntu1804-docker-4c-4g-942 sshd[1599]: Received disconnect from 10.32.4.5 port 56678:11: Closed due to user request. [preauth] Oct 23 17:54:04 prd-ubuntu1804-docker-4c-4g-942 sshd[1599]: Disconnected from invalid user jenkins 10.32.4.5 port 56678 [preauth] Oct 23 17:54:06 prd-ubuntu1804-docker-4c-4g-942 sshd[1722]: Invalid user jenkins from 10.32.4.5 port 56680 Oct 23 17:54:06 prd-ubuntu1804-docker-4c-4g-942 sshd[1722]: Received disconnect from 10.32.4.5 port 56680:11: Closed due to user request. [preauth] Oct 23 17:54:06 prd-ubuntu1804-docker-4c-4g-942 sshd[1722]: Disconnected from invalid user jenkins 10.32.4.5 port 56680 [preauth] Oct 23 17:54:08 prd-ubuntu1804-docker-4c-4g-942 sshd[1754]: Invalid user jenkins from 10.32.4.5 port 56682 Oct 23 17:54:08 prd-ubuntu1804-docker-4c-4g-942 sshd[1754]: Received disconnect from 10.32.4.5 port 56682:11: Closed due to user request. [preauth] Oct 23 17:54:08 prd-ubuntu1804-docker-4c-4g-942 sshd[1754]: Disconnected from invalid user jenkins 10.32.4.5 port 56682 [preauth] Oct 23 17:54:09 prd-ubuntu1804-docker-4c-4g-942 useradd[1761]: new group: name=jenkins, GID=1001 Oct 23 17:54:09 prd-ubuntu1804-docker-4c-4g-942 useradd[1761]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 23 17:54:09 prd-ubuntu1804-docker-4c-4g-942 usermod[1768]: add 'jenkins' to group 'docker' Oct 23 17:54:09 prd-ubuntu1804-docker-4c-4g-942 usermod[1768]: add 'jenkins' to shadow group 'docker' Oct 23 17:54:11 prd-ubuntu1804-docker-4c-4g-942 sshd[1802]: Accepted publickey for jenkins from 10.32.4.5 port 56686 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 23 17:54:11 prd-ubuntu1804-docker-4c-4g-942 sshd[1802]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 23 17:54:11 prd-ubuntu1804-docker-4c-4g-942 systemd-logind[992]: New session 2 of user jenkins. Oct 23 17:54:11 prd-ubuntu1804-docker-4c-4g-942 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 23 17:55:01 prd-ubuntu1804-docker-4c-4g-942 CRON[2357]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 23 17:55:01 prd-ubuntu1804-docker-4c-4g-942 CRON[2357]: pam_unix(cron:session): session closed for user root Oct 23 17:56:01 prd-ubuntu1804-docker-4c-4g-942 CRON[2911]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 23 17:56:01 prd-ubuntu1804-docker-4c-4g-942 CRON[2911]: pam_unix(cron:session): session closed for user root Oct 23 17:57:01 prd-ubuntu1804-docker-4c-4g-942 CRON[13794]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 23 17:57:02 prd-ubuntu1804-docker-4c-4g-942 CRON[13794]: pam_unix(cron:session): session closed for user root Oct 23 17:58:01 prd-ubuntu1804-docker-4c-4g-942 CRON[16849]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 23 17:58:01 prd-ubuntu1804-docker-4c-4g-942 CRON[16849]: pam_unix(cron:session): session closed for user root Oct 23 17:59:01 prd-ubuntu1804-docker-4c-4g-942 CRON[16854]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 23 17:59:01 prd-ubuntu1804-docker-4c-4g-942 CRON[16854]: pam_unix(cron:session): session closed for user root Oct 23 18:00:01 prd-ubuntu1804-docker-4c-4g-942 CRON[16932]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 23 18:00:01 prd-ubuntu1804-docker-4c-4g-942 CRON[16932]: pam_unix(cron:session): session closed for user root Oct 23 18:00:54 prd-ubuntu1804-docker-4c-4g-942 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/o-du-l2-docker-merge-sch_slice_based ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 23 18:00:54 prd-ubuntu1804-docker-4c-4g-942 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)