Oct 2 12:31:32 prd-ubuntu1804-docker-8c-8g-2319 passwd[1001]: password for 'ubuntu' changed by 'root' Oct 2 12:31:32 prd-ubuntu1804-docker-8c-8g-2319 systemd-logind[1067]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 12:31:32 prd-ubuntu1804-docker-8c-8g-2319 systemd-logind[1067]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 2 12:31:32 prd-ubuntu1804-docker-8c-8g-2319 systemd-logind[1067]: New seat seat0. Oct 2 12:31:32 prd-ubuntu1804-docker-8c-8g-2319 sshd[1273]: Server listening on 0.0.0.0 port 22. Oct 2 12:31:32 prd-ubuntu1804-docker-8c-8g-2319 sshd[1273]: Server listening on :: port 22. Oct 2 12:31:37 prd-ubuntu1804-docker-8c-8g-2319 sshd[1533]: Did not receive identification string from 10.30.104.4 port 38056 Oct 2 12:31:39 prd-ubuntu1804-docker-8c-8g-2319 sshd[1542]: Invalid user jenkins from 10.30.104.4 port 38060 Oct 2 12:31:39 prd-ubuntu1804-docker-8c-8g-2319 sshd[1542]: Received disconnect from 10.30.104.4 port 38060:11: Closed due to user request. [preauth] Oct 2 12:31:39 prd-ubuntu1804-docker-8c-8g-2319 sshd[1542]: Disconnected from invalid user jenkins 10.30.104.4 port 38060 [preauth] Oct 2 12:31:41 prd-ubuntu1804-docker-8c-8g-2319 sshd[1558]: Invalid user jenkins from 10.30.104.4 port 38070 Oct 2 12:31:41 prd-ubuntu1804-docker-8c-8g-2319 sshd[1558]: Received disconnect from 10.30.104.4 port 38070:11: Closed due to user request. [preauth] Oct 2 12:31:41 prd-ubuntu1804-docker-8c-8g-2319 sshd[1558]: Disconnected from invalid user jenkins 10.30.104.4 port 38070 [preauth] Oct 2 12:31:43 prd-ubuntu1804-docker-8c-8g-2319 sshd[1566]: Invalid user jenkins from 10.30.104.4 port 38076 Oct 2 12:31:43 prd-ubuntu1804-docker-8c-8g-2319 sshd[1566]: Received disconnect from 10.30.104.4 port 38076:11: Closed due to user request. [preauth] Oct 2 12:31:43 prd-ubuntu1804-docker-8c-8g-2319 sshd[1566]: Disconnected from invalid user jenkins 10.30.104.4 port 38076 [preauth] Oct 2 12:31:45 prd-ubuntu1804-docker-8c-8g-2319 sshd[1568]: Invalid user jenkins from 10.30.104.4 port 38080 Oct 2 12:31:45 prd-ubuntu1804-docker-8c-8g-2319 sshd[1568]: Received disconnect from 10.30.104.4 port 38080:11: Closed due to user request. [preauth] Oct 2 12:31:45 prd-ubuntu1804-docker-8c-8g-2319 sshd[1568]: Disconnected from invalid user jenkins 10.30.104.4 port 38080 [preauth] Oct 2 12:31:47 prd-ubuntu1804-docker-8c-8g-2319 sshd[1570]: Invalid user jenkins from 10.30.104.4 port 38094 Oct 2 12:31:47 prd-ubuntu1804-docker-8c-8g-2319 sshd[1570]: Received disconnect from 10.30.104.4 port 38094:11: Closed due to user request. [preauth] Oct 2 12:31:47 prd-ubuntu1804-docker-8c-8g-2319 sshd[1570]: Disconnected from invalid user jenkins 10.30.104.4 port 38094 [preauth] Oct 2 12:31:49 prd-ubuntu1804-docker-8c-8g-2319 sshd[1572]: Invalid user jenkins from 10.30.104.4 port 38096 Oct 2 12:31:49 prd-ubuntu1804-docker-8c-8g-2319 sshd[1572]: Received disconnect from 10.30.104.4 port 38096:11: Closed due to user request. [preauth] Oct 2 12:31:49 prd-ubuntu1804-docker-8c-8g-2319 sshd[1572]: Disconnected from invalid user jenkins 10.30.104.4 port 38096 [preauth] Oct 2 12:31:51 prd-ubuntu1804-docker-8c-8g-2319 sshd[1574]: Invalid user jenkins from 10.30.104.4 port 38104 Oct 2 12:31:51 prd-ubuntu1804-docker-8c-8g-2319 sshd[1574]: Received disconnect from 10.30.104.4 port 38104:11: Closed due to user request. [preauth] Oct 2 12:31:51 prd-ubuntu1804-docker-8c-8g-2319 sshd[1574]: Disconnected from invalid user jenkins 10.30.104.4 port 38104 [preauth] Oct 2 12:31:53 prd-ubuntu1804-docker-8c-8g-2319 sshd[1576]: Invalid user jenkins from 10.30.104.4 port 38106 Oct 2 12:31:53 prd-ubuntu1804-docker-8c-8g-2319 sshd[1576]: Received disconnect from 10.30.104.4 port 38106:11: Closed due to user request. [preauth] Oct 2 12:31:53 prd-ubuntu1804-docker-8c-8g-2319 sshd[1576]: Disconnected from invalid user jenkins 10.30.104.4 port 38106 [preauth] Oct 2 12:31:56 prd-ubuntu1804-docker-8c-8g-2319 sshd[1654]: Invalid user jenkins from 10.30.104.4 port 38112 Oct 2 12:31:56 prd-ubuntu1804-docker-8c-8g-2319 sshd[1654]: Received disconnect from 10.30.104.4 port 38112:11: Closed due to user request. [preauth] Oct 2 12:31:56 prd-ubuntu1804-docker-8c-8g-2319 sshd[1654]: Disconnected from invalid user jenkins 10.30.104.4 port 38112 [preauth] Oct 2 12:31:58 prd-ubuntu1804-docker-8c-8g-2319 sshd[1736]: Invalid user jenkins from 10.30.104.4 port 38114 Oct 2 12:31:58 prd-ubuntu1804-docker-8c-8g-2319 sshd[1736]: Received disconnect from 10.30.104.4 port 38114:11: Closed due to user request. [preauth] Oct 2 12:31:58 prd-ubuntu1804-docker-8c-8g-2319 sshd[1736]: Disconnected from invalid user jenkins 10.30.104.4 port 38114 [preauth] Oct 2 12:32:00 prd-ubuntu1804-docker-8c-8g-2319 sshd[1808]: Invalid user jenkins from 10.30.104.4 port 38116 Oct 2 12:32:00 prd-ubuntu1804-docker-8c-8g-2319 sshd[1808]: Received disconnect from 10.30.104.4 port 38116:11: Closed due to user request. [preauth] Oct 2 12:32:00 prd-ubuntu1804-docker-8c-8g-2319 sshd[1808]: Disconnected from invalid user jenkins 10.30.104.4 port 38116 [preauth] Oct 2 12:32:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[1845]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:32:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[1845]: pam_unix(cron:session): session closed for user root Oct 2 12:32:02 prd-ubuntu1804-docker-8c-8g-2319 sshd[1867]: Invalid user jenkins from 10.30.104.4 port 38124 Oct 2 12:32:02 prd-ubuntu1804-docker-8c-8g-2319 sshd[1867]: Received disconnect from 10.30.104.4 port 38124:11: Closed due to user request. [preauth] Oct 2 12:32:02 prd-ubuntu1804-docker-8c-8g-2319 sshd[1867]: Disconnected from invalid user jenkins 10.30.104.4 port 38124 [preauth] Oct 2 12:32:04 prd-ubuntu1804-docker-8c-8g-2319 sshd[1880]: Invalid user jenkins from 10.30.104.4 port 38126 Oct 2 12:32:04 prd-ubuntu1804-docker-8c-8g-2319 sshd[1880]: Received disconnect from 10.30.104.4 port 38126:11: Closed due to user request. [preauth] Oct 2 12:32:04 prd-ubuntu1804-docker-8c-8g-2319 sshd[1880]: Disconnected from invalid user jenkins 10.30.104.4 port 38126 [preauth] Oct 2 12:32:06 prd-ubuntu1804-docker-8c-8g-2319 sshd[1882]: Invalid user jenkins from 10.30.104.4 port 38128 Oct 2 12:32:06 prd-ubuntu1804-docker-8c-8g-2319 sshd[1882]: Received disconnect from 10.30.104.4 port 38128:11: Closed due to user request. [preauth] Oct 2 12:32:06 prd-ubuntu1804-docker-8c-8g-2319 sshd[1882]: Disconnected from invalid user jenkins 10.30.104.4 port 38128 [preauth] Oct 2 12:32:08 prd-ubuntu1804-docker-8c-8g-2319 sshd[1884]: Invalid user jenkins from 10.30.104.4 port 38134 Oct 2 12:32:09 prd-ubuntu1804-docker-8c-8g-2319 sshd[1884]: Received disconnect from 10.30.104.4 port 38134:11: Closed due to user request. [preauth] Oct 2 12:32:09 prd-ubuntu1804-docker-8c-8g-2319 sshd[1884]: Disconnected from invalid user jenkins 10.30.104.4 port 38134 [preauth] Oct 2 12:32:11 prd-ubuntu1804-docker-8c-8g-2319 sshd[1886]: Invalid user jenkins from 10.30.104.4 port 38136 Oct 2 12:32:11 prd-ubuntu1804-docker-8c-8g-2319 sshd[1886]: Received disconnect from 10.30.104.4 port 38136:11: Closed due to user request. [preauth] Oct 2 12:32:11 prd-ubuntu1804-docker-8c-8g-2319 sshd[1886]: Disconnected from invalid user jenkins 10.30.104.4 port 38136 [preauth] Oct 2 12:32:13 prd-ubuntu1804-docker-8c-8g-2319 sshd[1888]: Invalid user jenkins from 10.30.104.4 port 38138 Oct 2 12:32:13 prd-ubuntu1804-docker-8c-8g-2319 sshd[1888]: Received disconnect from 10.30.104.4 port 38138:11: Closed due to user request. [preauth] Oct 2 12:32:13 prd-ubuntu1804-docker-8c-8g-2319 sshd[1888]: Disconnected from invalid user jenkins 10.30.104.4 port 38138 [preauth] Oct 2 12:32:15 prd-ubuntu1804-docker-8c-8g-2319 useradd[1908]: new group: name=jenkins, GID=1001 Oct 2 12:32:15 prd-ubuntu1804-docker-8c-8g-2319 useradd[1908]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 2 12:32:15 prd-ubuntu1804-docker-8c-8g-2319 sshd[1909]: Invalid user jenkins from 10.30.104.4 port 38144 Oct 2 12:32:15 prd-ubuntu1804-docker-8c-8g-2319 sshd[1909]: Received disconnect from 10.30.104.4 port 38144:11: Closed due to user request. [preauth] Oct 2 12:32:15 prd-ubuntu1804-docker-8c-8g-2319 sshd[1909]: Disconnected from invalid user jenkins 10.30.104.4 port 38144 [preauth] Oct 2 12:32:15 prd-ubuntu1804-docker-8c-8g-2319 usermod[1917]: add 'jenkins' to group 'docker' Oct 2 12:32:15 prd-ubuntu1804-docker-8c-8g-2319 usermod[1917]: add 'jenkins' to shadow group 'docker' Oct 2 12:32:17 prd-ubuntu1804-docker-8c-8g-2319 sshd[1978]: Accepted publickey for jenkins from 10.30.104.4 port 38148 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Oct 2 12:32:17 prd-ubuntu1804-docker-8c-8g-2319 sshd[1978]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 2 12:32:17 prd-ubuntu1804-docker-8c-8g-2319 systemd-logind[1067]: New session 2 of user jenkins. Oct 2 12:32:17 prd-ubuntu1804-docker-8c-8g-2319 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 2 12:33:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[2530]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:33:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[2530]: pam_unix(cron:session): session closed for user root Oct 2 12:34:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[2559]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:34:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[2559]: pam_unix(cron:session): session closed for user root Oct 2 12:35:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[2587]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:35:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[2587]: pam_unix(cron:session): session closed for user root Oct 2 12:36:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3394]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:36:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3394]: pam_unix(cron:session): session closed for user root Oct 2 12:37:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3399]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:37:02 prd-ubuntu1804-docker-8c-8g-2319 CRON[3399]: pam_unix(cron:session): session closed for user root Oct 2 12:38:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3403]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:38:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3403]: pam_unix(cron:session): session closed for user root Oct 2 12:39:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3406]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:39:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3406]: pam_unix(cron:session): session closed for user root Oct 2 12:40:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3412]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:40:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3412]: pam_unix(cron:session): session closed for user root Oct 2 12:41:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3418]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:41:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3418]: pam_unix(cron:session): session closed for user root Oct 2 12:42:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3422]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:42:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[3422]: pam_unix(cron:session): session closed for user root Oct 2 12:43:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[6582]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 2 12:43:01 prd-ubuntu1804-docker-8c-8g-2319 CRON[6582]: pam_unix(cron:session): session closed for user root Oct 2 12:43:47 prd-ubuntu1804-docker-8c-8g-2319 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-k8s-toolbox-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 2 12:43:47 prd-ubuntu1804-docker-8c-8g-2319 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)