Aug 5 04:16:50 prd-ubuntu1804-docker-4c-4g-1654 passwd[928]: password for 'ubuntu' changed by 'root' Aug 5 04:16:50 prd-ubuntu1804-docker-4c-4g-1654 systemd-logind[963]: Watching system buttons on /dev/input/event0 (Power Button) Aug 5 04:16:50 prd-ubuntu1804-docker-4c-4g-1654 systemd-logind[963]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 5 04:16:50 prd-ubuntu1804-docker-4c-4g-1654 systemd-logind[963]: New seat seat0. Aug 5 04:16:50 prd-ubuntu1804-docker-4c-4g-1654 sshd[1248]: Server listening on 0.0.0.0 port 22. Aug 5 04:16:50 prd-ubuntu1804-docker-4c-4g-1654 sshd[1248]: Server listening on :: port 22. Aug 5 04:16:53 prd-ubuntu1804-docker-4c-4g-1654 sshd[1471]: Did not receive identification string from 10.32.4.5 port 37350 Aug 5 04:17:01 prd-ubuntu1804-docker-4c-4g-1654 sshd[1541]: Invalid user jenkins from 10.32.4.5 port 37352 Aug 5 04:17:01 prd-ubuntu1804-docker-4c-4g-1654 sshd[1541]: Received disconnect from 10.32.4.5 port 37352:11: Closed due to user request. [preauth] Aug 5 04:17:01 prd-ubuntu1804-docker-4c-4g-1654 sshd[1541]: Disconnected from invalid user jenkins 10.32.4.5 port 37352 [preauth] Aug 5 04:17:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[1546]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:17:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[1545]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:17:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[1545]: pam_unix(cron:session): session closed for user root Aug 5 04:17:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[1546]: pam_unix(cron:session): session closed for user root Aug 5 04:17:03 prd-ubuntu1804-docker-4c-4g-1654 sshd[1557]: Invalid user jenkins from 10.32.4.5 port 37356 Aug 5 04:17:03 prd-ubuntu1804-docker-4c-4g-1654 sshd[1557]: Received disconnect from 10.32.4.5 port 37356:11: Closed due to user request. [preauth] Aug 5 04:17:03 prd-ubuntu1804-docker-4c-4g-1654 sshd[1557]: Disconnected from invalid user jenkins 10.32.4.5 port 37356 [preauth] Aug 5 04:17:05 prd-ubuntu1804-docker-4c-4g-1654 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 37358 Aug 5 04:17:05 prd-ubuntu1804-docker-4c-4g-1654 sshd[1559]: Received disconnect from 10.32.4.5 port 37358:11: Closed due to user request. [preauth] Aug 5 04:17:05 prd-ubuntu1804-docker-4c-4g-1654 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 37358 [preauth] Aug 5 04:17:07 prd-ubuntu1804-docker-4c-4g-1654 sshd[1561]: Invalid user jenkins from 10.32.4.5 port 37360 Aug 5 04:17:07 prd-ubuntu1804-docker-4c-4g-1654 sshd[1561]: Received disconnect from 10.32.4.5 port 37360:11: Closed due to user request. [preauth] Aug 5 04:17:07 prd-ubuntu1804-docker-4c-4g-1654 sshd[1561]: Disconnected from invalid user jenkins 10.32.4.5 port 37360 [preauth] Aug 5 04:17:09 prd-ubuntu1804-docker-4c-4g-1654 sshd[1563]: Invalid user jenkins from 10.32.4.5 port 37364 Aug 5 04:17:09 prd-ubuntu1804-docker-4c-4g-1654 sshd[1563]: Received disconnect from 10.32.4.5 port 37364:11: Closed due to user request. [preauth] Aug 5 04:17:09 prd-ubuntu1804-docker-4c-4g-1654 sshd[1563]: Disconnected from invalid user jenkins 10.32.4.5 port 37364 [preauth] Aug 5 04:17:11 prd-ubuntu1804-docker-4c-4g-1654 sshd[1576]: Invalid user jenkins from 10.32.4.5 port 37366 Aug 5 04:17:11 prd-ubuntu1804-docker-4c-4g-1654 sshd[1576]: Received disconnect from 10.32.4.5 port 37366:11: Closed due to user request. [preauth] Aug 5 04:17:11 prd-ubuntu1804-docker-4c-4g-1654 sshd[1576]: Disconnected from invalid user jenkins 10.32.4.5 port 37366 [preauth] Aug 5 04:17:13 prd-ubuntu1804-docker-4c-4g-1654 sshd[1798]: Invalid user jenkins from 10.32.4.5 port 37368 Aug 5 04:17:13 prd-ubuntu1804-docker-4c-4g-1654 sshd[1798]: Received disconnect from 10.32.4.5 port 37368:11: Closed due to user request. [preauth] Aug 5 04:17:13 prd-ubuntu1804-docker-4c-4g-1654 sshd[1798]: Disconnected from invalid user jenkins 10.32.4.5 port 37368 [preauth] Aug 5 04:17:15 prd-ubuntu1804-docker-4c-4g-1654 sshd[1848]: Invalid user jenkins from 10.32.4.5 port 37376 Aug 5 04:17:16 prd-ubuntu1804-docker-4c-4g-1654 sshd[1848]: Received disconnect from 10.32.4.5 port 37376:11: Closed due to user request. [preauth] Aug 5 04:17:16 prd-ubuntu1804-docker-4c-4g-1654 sshd[1848]: Disconnected from invalid user jenkins 10.32.4.5 port 37376 [preauth] Aug 5 04:17:18 prd-ubuntu1804-docker-4c-4g-1654 sshd[1856]: Invalid user jenkins from 10.32.4.5 port 37378 Aug 5 04:17:18 prd-ubuntu1804-docker-4c-4g-1654 sshd[1856]: Received disconnect from 10.32.4.5 port 37378:11: Closed due to user request. [preauth] Aug 5 04:17:18 prd-ubuntu1804-docker-4c-4g-1654 sshd[1856]: Disconnected from invalid user jenkins 10.32.4.5 port 37378 [preauth] Aug 5 04:17:18 prd-ubuntu1804-docker-4c-4g-1654 useradd[1872]: new group: name=jenkins, GID=1001 Aug 5 04:17:18 prd-ubuntu1804-docker-4c-4g-1654 useradd[1872]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 5 04:17:18 prd-ubuntu1804-docker-4c-4g-1654 usermod[1879]: add 'jenkins' to group 'docker' Aug 5 04:17:18 prd-ubuntu1804-docker-4c-4g-1654 usermod[1879]: add 'jenkins' to shadow group 'docker' Aug 5 04:17:20 prd-ubuntu1804-docker-4c-4g-1654 sshd[1913]: Accepted publickey for jenkins from 10.32.4.5 port 37380 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 5 04:17:20 prd-ubuntu1804-docker-4c-4g-1654 sshd[1913]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 5 04:17:20 prd-ubuntu1804-docker-4c-4g-1654 systemd-logind[963]: New session 3 of user jenkins. Aug 5 04:17:20 prd-ubuntu1804-docker-4c-4g-1654 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 5 04:18:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[2596]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:18:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[2596]: pam_unix(cron:session): session closed for user root Aug 5 04:19:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[3161]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:19:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[3161]: pam_unix(cron:session): session closed for user root Aug 5 04:20:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[16019]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:20:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[16019]: pam_unix(cron:session): session closed for user root Aug 5 04:21:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[20071]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:21:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[20071]: pam_unix(cron:session): session closed for user root Aug 5 04:22:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[27364]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:22:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[27364]: pam_unix(cron:session): session closed for user root Aug 5 04:23:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[3418]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 04:23:01 prd-ubuntu1804-docker-4c-4g-1654 CRON[3418]: pam_unix(cron:session): session closed for user root Aug 5 04:23:50 prd-ubuntu1804-docker-4c-4g-1654 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/o-du-l2-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 5 04:23:50 prd-ubuntu1804-docker-4c-4g-1654 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)