Nov 18 11:39:48 prd-ubuntu1804-docker-4c-4g-9531 passwd[939]: password for 'ubuntu' changed by 'root' Nov 18 11:39:49 prd-ubuntu1804-docker-4c-4g-9531 systemd-logind[1073]: Watching system buttons on /dev/input/event0 (Power Button) Nov 18 11:39:49 prd-ubuntu1804-docker-4c-4g-9531 systemd-logind[1073]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 18 11:39:49 prd-ubuntu1804-docker-4c-4g-9531 systemd-logind[1073]: New seat seat0. Nov 18 11:39:49 prd-ubuntu1804-docker-4c-4g-9531 sshd[1237]: Server listening on 0.0.0.0 port 22. Nov 18 11:39:49 prd-ubuntu1804-docker-4c-4g-9531 sshd[1237]: Server listening on :: port 22. Nov 18 11:39:51 prd-ubuntu1804-docker-4c-4g-9531 sshd[1400]: Did not receive identification string from 10.32.4.5 port 45018 Nov 18 11:39:56 prd-ubuntu1804-docker-4c-4g-9531 sshd[1497]: Invalid user jenkins from 10.32.4.5 port 45024 Nov 18 11:39:56 prd-ubuntu1804-docker-4c-4g-9531 sshd[1497]: Received disconnect from 10.32.4.5 port 45024:11: Closed due to user request. [preauth] Nov 18 11:39:56 prd-ubuntu1804-docker-4c-4g-9531 sshd[1497]: Disconnected from invalid user jenkins 10.32.4.5 port 45024 [preauth] Nov 18 11:39:58 prd-ubuntu1804-docker-4c-4g-9531 sshd[1507]: Invalid user jenkins from 10.32.4.5 port 45026 Nov 18 11:39:58 prd-ubuntu1804-docker-4c-4g-9531 sshd[1507]: Received disconnect from 10.32.4.5 port 45026:11: Closed due to user request. [preauth] Nov 18 11:39:58 prd-ubuntu1804-docker-4c-4g-9531 sshd[1507]: Disconnected from invalid user jenkins 10.32.4.5 port 45026 [preauth] Nov 18 11:40:00 prd-ubuntu1804-docker-4c-4g-9531 sshd[1509]: Invalid user jenkins from 10.32.4.5 port 45034 Nov 18 11:40:00 prd-ubuntu1804-docker-4c-4g-9531 sshd[1509]: Received disconnect from 10.32.4.5 port 45034:11: Closed due to user request. [preauth] Nov 18 11:40:00 prd-ubuntu1804-docker-4c-4g-9531 sshd[1509]: Disconnected from invalid user jenkins 10.32.4.5 port 45034 [preauth] Nov 18 11:40:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[1512]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 18 11:40:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[1512]: pam_unix(cron:session): session closed for user root Nov 18 11:40:02 prd-ubuntu1804-docker-4c-4g-9531 sshd[1519]: Invalid user jenkins from 10.32.4.5 port 45044 Nov 18 11:40:03 prd-ubuntu1804-docker-4c-4g-9531 sshd[1519]: Received disconnect from 10.32.4.5 port 45044:11: Closed due to user request. [preauth] Nov 18 11:40:03 prd-ubuntu1804-docker-4c-4g-9531 sshd[1519]: Disconnected from invalid user jenkins 10.32.4.5 port 45044 [preauth] Nov 18 11:40:05 prd-ubuntu1804-docker-4c-4g-9531 sshd[1521]: Invalid user jenkins from 10.32.4.5 port 45048 Nov 18 11:40:05 prd-ubuntu1804-docker-4c-4g-9531 sshd[1521]: Received disconnect from 10.32.4.5 port 45048:11: Closed due to user request. [preauth] Nov 18 11:40:05 prd-ubuntu1804-docker-4c-4g-9531 sshd[1521]: Disconnected from invalid user jenkins 10.32.4.5 port 45048 [preauth] Nov 18 11:40:07 prd-ubuntu1804-docker-4c-4g-9531 sshd[1523]: Invalid user jenkins from 10.32.4.5 port 45062 Nov 18 11:40:07 prd-ubuntu1804-docker-4c-4g-9531 sshd[1523]: Received disconnect from 10.32.4.5 port 45062:11: Closed due to user request. [preauth] Nov 18 11:40:07 prd-ubuntu1804-docker-4c-4g-9531 sshd[1523]: Disconnected from invalid user jenkins 10.32.4.5 port 45062 [preauth] Nov 18 11:40:09 prd-ubuntu1804-docker-4c-4g-9531 sshd[1525]: Invalid user jenkins from 10.32.4.5 port 45072 Nov 18 11:40:09 prd-ubuntu1804-docker-4c-4g-9531 sshd[1525]: Received disconnect from 10.32.4.5 port 45072:11: Closed due to user request. [preauth] Nov 18 11:40:09 prd-ubuntu1804-docker-4c-4g-9531 sshd[1525]: Disconnected from invalid user jenkins 10.32.4.5 port 45072 [preauth] Nov 18 11:40:11 prd-ubuntu1804-docker-4c-4g-9531 sshd[1549]: Invalid user jenkins from 10.32.4.5 port 45078 Nov 18 11:40:11 prd-ubuntu1804-docker-4c-4g-9531 sshd[1549]: Received disconnect from 10.32.4.5 port 45078:11: Closed due to user request. [preauth] Nov 18 11:40:11 prd-ubuntu1804-docker-4c-4g-9531 sshd[1549]: Disconnected from invalid user jenkins 10.32.4.5 port 45078 [preauth] Nov 18 11:40:13 prd-ubuntu1804-docker-4c-4g-9531 sshd[1758]: Invalid user jenkins from 10.32.4.5 port 45084 Nov 18 11:40:13 prd-ubuntu1804-docker-4c-4g-9531 sshd[1758]: Received disconnect from 10.32.4.5 port 45084:11: Closed due to user request. [preauth] Nov 18 11:40:13 prd-ubuntu1804-docker-4c-4g-9531 sshd[1758]: Disconnected from invalid user jenkins 10.32.4.5 port 45084 [preauth] Nov 18 11:40:15 prd-ubuntu1804-docker-4c-4g-9531 sshd[1796]: Invalid user jenkins from 10.32.4.5 port 45088 Nov 18 11:40:15 prd-ubuntu1804-docker-4c-4g-9531 sshd[1796]: Received disconnect from 10.32.4.5 port 45088:11: Closed due to user request. [preauth] Nov 18 11:40:15 prd-ubuntu1804-docker-4c-4g-9531 sshd[1796]: Disconnected from invalid user jenkins 10.32.4.5 port 45088 [preauth] Nov 18 11:40:17 prd-ubuntu1804-docker-4c-4g-9531 sshd[1803]: Invalid user jenkins from 10.32.4.5 port 45094 Nov 18 11:40:17 prd-ubuntu1804-docker-4c-4g-9531 sshd[1803]: Received disconnect from 10.32.4.5 port 45094:11: Closed due to user request. [preauth] Nov 18 11:40:17 prd-ubuntu1804-docker-4c-4g-9531 sshd[1803]: Disconnected from invalid user jenkins 10.32.4.5 port 45094 [preauth] Nov 18 11:40:19 prd-ubuntu1804-docker-4c-4g-9531 sshd[1813]: Invalid user jenkins from 10.32.4.5 port 45102 Nov 18 11:40:20 prd-ubuntu1804-docker-4c-4g-9531 sshd[1813]: Received disconnect from 10.32.4.5 port 45102:11: Closed due to user request. [preauth] Nov 18 11:40:20 prd-ubuntu1804-docker-4c-4g-9531 sshd[1813]: Disconnected from invalid user jenkins 10.32.4.5 port 45102 [preauth] Nov 18 11:40:20 prd-ubuntu1804-docker-4c-4g-9531 useradd[1831]: new group: name=jenkins, GID=1001 Nov 18 11:40:20 prd-ubuntu1804-docker-4c-4g-9531 useradd[1831]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 18 11:40:20 prd-ubuntu1804-docker-4c-4g-9531 usermod[1838]: add 'jenkins' to group 'docker' Nov 18 11:40:20 prd-ubuntu1804-docker-4c-4g-9531 usermod[1838]: add 'jenkins' to shadow group 'docker' Nov 18 11:40:22 prd-ubuntu1804-docker-4c-4g-9531 sshd[1882]: Accepted publickey for jenkins from 10.32.4.5 port 45110 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Nov 18 11:40:22 prd-ubuntu1804-docker-4c-4g-9531 sshd[1882]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 18 11:40:22 prd-ubuntu1804-docker-4c-4g-9531 systemd-logind[1073]: New session 2 of user jenkins. Nov 18 11:40:22 prd-ubuntu1804-docker-4c-4g-9531 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 18 11:41:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[2409]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 18 11:41:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[2409]: pam_unix(cron:session): session closed for user root Nov 18 11:42:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[2452]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 18 11:42:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[2452]: pam_unix(cron:session): session closed for user root Nov 18 11:43:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[3274]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 18 11:43:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[3274]: pam_unix(cron:session): session closed for user root Nov 18 11:44:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[3530]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 18 11:44:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[3530]: pam_unix(cron:session): session closed for user root Nov 18 11:45:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[3916]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 18 11:45:01 prd-ubuntu1804-docker-4c-4g-9531 CRON[3916]: pam_unix(cron:session): session closed for user root Nov 18 11:45:11 prd-ubuntu1804-docker-4c-4g-9531 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/pti-o2-docker-merge-l-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Nov 18 11:45:11 prd-ubuntu1804-docker-4c-4g-9531 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)