Jul 25 10:32:35 prd-ubuntu1804-docker-4c-4g-1252 passwd[917]: password for 'ubuntu' changed by 'root' Jul 25 10:32:36 prd-ubuntu1804-docker-4c-4g-1252 systemd-logind[1065]: Watching system buttons on /dev/input/event0 (Power Button) Jul 25 10:32:36 prd-ubuntu1804-docker-4c-4g-1252 systemd-logind[1065]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 25 10:32:36 prd-ubuntu1804-docker-4c-4g-1252 systemd-logind[1065]: New seat seat0. Jul 25 10:32:36 prd-ubuntu1804-docker-4c-4g-1252 sshd[1210]: Server listening on 0.0.0.0 port 22. Jul 25 10:32:36 prd-ubuntu1804-docker-4c-4g-1252 sshd[1210]: Server listening on :: port 22. Jul 25 10:32:36 prd-ubuntu1804-docker-4c-4g-1252 sshd[1226]: Did not receive identification string from 10.32.4.5 port 44722 Jul 25 10:32:43 prd-ubuntu1804-docker-4c-4g-1252 sshd[1450]: Invalid user jenkins from 10.32.4.5 port 44726 Jul 25 10:32:43 prd-ubuntu1804-docker-4c-4g-1252 sshd[1450]: Received disconnect from 10.32.4.5 port 44726:11: Closed due to user request. [preauth] Jul 25 10:32:43 prd-ubuntu1804-docker-4c-4g-1252 sshd[1450]: Disconnected from invalid user jenkins 10.32.4.5 port 44726 [preauth] Jul 25 10:32:45 prd-ubuntu1804-docker-4c-4g-1252 sshd[1460]: Invalid user jenkins from 10.32.4.5 port 44736 Jul 25 10:32:45 prd-ubuntu1804-docker-4c-4g-1252 sshd[1460]: Received disconnect from 10.32.4.5 port 44736:11: Closed due to user request. [preauth] Jul 25 10:32:45 prd-ubuntu1804-docker-4c-4g-1252 sshd[1460]: Disconnected from invalid user jenkins 10.32.4.5 port 44736 [preauth] Jul 25 10:32:47 prd-ubuntu1804-docker-4c-4g-1252 sshd[1462]: Invalid user jenkins from 10.32.4.5 port 44742 Jul 25 10:32:47 prd-ubuntu1804-docker-4c-4g-1252 sshd[1462]: Received disconnect from 10.32.4.5 port 44742:11: Closed due to user request. [preauth] Jul 25 10:32:47 prd-ubuntu1804-docker-4c-4g-1252 sshd[1462]: Disconnected from invalid user jenkins 10.32.4.5 port 44742 [preauth] Jul 25 10:32:50 prd-ubuntu1804-docker-4c-4g-1252 sshd[1464]: Invalid user jenkins from 10.32.4.5 port 44746 Jul 25 10:32:50 prd-ubuntu1804-docker-4c-4g-1252 sshd[1464]: Received disconnect from 10.32.4.5 port 44746:11: Closed due to user request. [preauth] Jul 25 10:32:50 prd-ubuntu1804-docker-4c-4g-1252 sshd[1464]: Disconnected from invalid user jenkins 10.32.4.5 port 44746 [preauth] Jul 25 10:32:52 prd-ubuntu1804-docker-4c-4g-1252 sshd[1466]: Invalid user jenkins from 10.32.4.5 port 44754 Jul 25 10:32:52 prd-ubuntu1804-docker-4c-4g-1252 sshd[1466]: Received disconnect from 10.32.4.5 port 44754:11: Closed due to user request. [preauth] Jul 25 10:32:52 prd-ubuntu1804-docker-4c-4g-1252 sshd[1466]: Disconnected from invalid user jenkins 10.32.4.5 port 44754 [preauth] Jul 25 10:32:54 prd-ubuntu1804-docker-4c-4g-1252 sshd[1468]: Invalid user jenkins from 10.32.4.5 port 44760 Jul 25 10:32:54 prd-ubuntu1804-docker-4c-4g-1252 sshd[1468]: Received disconnect from 10.32.4.5 port 44760:11: Closed due to user request. [preauth] Jul 25 10:32:54 prd-ubuntu1804-docker-4c-4g-1252 sshd[1468]: Disconnected from invalid user jenkins 10.32.4.5 port 44760 [preauth] Jul 25 10:32:56 prd-ubuntu1804-docker-4c-4g-1252 sshd[1470]: Invalid user jenkins from 10.32.4.5 port 44764 Jul 25 10:32:56 prd-ubuntu1804-docker-4c-4g-1252 sshd[1470]: Received disconnect from 10.32.4.5 port 44764:11: Closed due to user request. [preauth] Jul 25 10:32:56 prd-ubuntu1804-docker-4c-4g-1252 sshd[1470]: Disconnected from invalid user jenkins 10.32.4.5 port 44764 [preauth] Jul 25 10:32:58 prd-ubuntu1804-docker-4c-4g-1252 sshd[1577]: Invalid user jenkins from 10.32.4.5 port 44774 Jul 25 10:32:58 prd-ubuntu1804-docker-4c-4g-1252 sshd[1577]: Received disconnect from 10.32.4.5 port 44774:11: Closed due to user request. [preauth] Jul 25 10:32:58 prd-ubuntu1804-docker-4c-4g-1252 sshd[1577]: Disconnected from invalid user jenkins 10.32.4.5 port 44774 [preauth] Jul 25 10:33:00 prd-ubuntu1804-docker-4c-4g-1252 sshd[1711]: Invalid user jenkins from 10.32.4.5 port 44782 Jul 25 10:33:00 prd-ubuntu1804-docker-4c-4g-1252 sshd[1711]: Received disconnect from 10.32.4.5 port 44782:11: Closed due to user request. [preauth] Jul 25 10:33:00 prd-ubuntu1804-docker-4c-4g-1252 sshd[1711]: Disconnected from invalid user jenkins 10.32.4.5 port 44782 [preauth] Jul 25 10:33:01 prd-ubuntu1804-docker-4c-4g-1252 CRON[1721]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 25 10:33:01 prd-ubuntu1804-docker-4c-4g-1252 CRON[1721]: pam_unix(cron:session): session closed for user root Jul 25 10:33:03 prd-ubuntu1804-docker-4c-4g-1252 sshd[1757]: Invalid user jenkins from 10.32.4.5 port 44784 Jul 25 10:33:03 prd-ubuntu1804-docker-4c-4g-1252 sshd[1757]: Received disconnect from 10.32.4.5 port 44784:11: Closed due to user request. [preauth] Jul 25 10:33:03 prd-ubuntu1804-docker-4c-4g-1252 sshd[1757]: Disconnected from invalid user jenkins 10.32.4.5 port 44784 [preauth] Jul 25 10:33:05 prd-ubuntu1804-docker-4c-4g-1252 sshd[1762]: Invalid user jenkins from 10.32.4.5 port 44790 Jul 25 10:33:05 prd-ubuntu1804-docker-4c-4g-1252 sshd[1762]: Received disconnect from 10.32.4.5 port 44790:11: Closed due to user request. [preauth] Jul 25 10:33:05 prd-ubuntu1804-docker-4c-4g-1252 sshd[1762]: Disconnected from invalid user jenkins 10.32.4.5 port 44790 [preauth] Jul 25 10:33:06 prd-ubuntu1804-docker-4c-4g-1252 useradd[1780]: new group: name=jenkins, GID=1001 Jul 25 10:33:06 prd-ubuntu1804-docker-4c-4g-1252 useradd[1780]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 25 10:33:06 prd-ubuntu1804-docker-4c-4g-1252 usermod[1787]: add 'jenkins' to group 'docker' Jul 25 10:33:06 prd-ubuntu1804-docker-4c-4g-1252 usermod[1787]: add 'jenkins' to shadow group 'docker' Jul 25 10:33:07 prd-ubuntu1804-docker-4c-4g-1252 sshd[1834]: Accepted publickey for jenkins from 10.32.4.5 port 44794 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jul 25 10:33:07 prd-ubuntu1804-docker-4c-4g-1252 sshd[1834]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 25 10:33:07 prd-ubuntu1804-docker-4c-4g-1252 systemd-logind[1065]: New session 2 of user jenkins. Jul 25 10:33:07 prd-ubuntu1804-docker-4c-4g-1252 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 25 10:34:01 prd-ubuntu1804-docker-4c-4g-1252 CRON[2577]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 25 10:34:01 prd-ubuntu1804-docker-4c-4g-1252 CRON[2577]: pam_unix(cron:session): session closed for user root Jul 25 10:35:01 prd-ubuntu1804-docker-4c-4g-1252 CRON[2800]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 25 10:35:01 prd-ubuntu1804-docker-4c-4g-1252 CRON[2800]: pam_unix(cron:session): session closed for user root Jul 25 10:35:34 prd-ubuntu1804-docker-4c-4g-1252 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/pti-o2-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jul 25 10:35:34 prd-ubuntu1804-docker-4c-4g-1252 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)