Oct 1 10:44:22 prd-ubuntu1804-docker-8c-8g-1594 passwd[1026]: password for 'ubuntu' changed by 'root' Oct 1 10:44:22 prd-ubuntu1804-docker-8c-8g-1594 systemd-logind[1062]: Watching system buttons on /dev/input/event0 (Power Button) Oct 1 10:44:22 prd-ubuntu1804-docker-8c-8g-1594 systemd-logind[1062]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 1 10:44:22 prd-ubuntu1804-docker-8c-8g-1594 systemd-logind[1062]: New seat seat0. Oct 1 10:44:22 prd-ubuntu1804-docker-8c-8g-1594 sshd[1264]: Server listening on 0.0.0.0 port 22. Oct 1 10:44:22 prd-ubuntu1804-docker-8c-8g-1594 sshd[1264]: Server listening on :: port 22. Oct 1 10:44:23 prd-ubuntu1804-docker-8c-8g-1594 sshd[1417]: Did not receive identification string from 10.30.104.4 port 55262 Oct 1 10:44:28 prd-ubuntu1804-docker-8c-8g-1594 sshd[1604]: Invalid user jenkins from 10.30.104.4 port 55268 Oct 1 10:44:28 prd-ubuntu1804-docker-8c-8g-1594 sshd[1604]: Received disconnect from 10.30.104.4 port 55268:11: Closed due to user request. [preauth] Oct 1 10:44:28 prd-ubuntu1804-docker-8c-8g-1594 sshd[1604]: Disconnected from invalid user jenkins 10.30.104.4 port 55268 [preauth] Oct 1 10:44:30 prd-ubuntu1804-docker-8c-8g-1594 sshd[1621]: Invalid user jenkins from 10.30.104.4 port 55282 Oct 1 10:44:30 prd-ubuntu1804-docker-8c-8g-1594 sshd[1621]: Received disconnect from 10.30.104.4 port 55282:11: Closed due to user request. [preauth] Oct 1 10:44:30 prd-ubuntu1804-docker-8c-8g-1594 sshd[1621]: Disconnected from invalid user jenkins 10.30.104.4 port 55282 [preauth] Oct 1 10:44:32 prd-ubuntu1804-docker-8c-8g-1594 sshd[1623]: Invalid user jenkins from 10.30.104.4 port 55288 Oct 1 10:44:32 prd-ubuntu1804-docker-8c-8g-1594 sshd[1623]: Received disconnect from 10.30.104.4 port 55288:11: Closed due to user request. [preauth] Oct 1 10:44:32 prd-ubuntu1804-docker-8c-8g-1594 sshd[1623]: Disconnected from invalid user jenkins 10.30.104.4 port 55288 [preauth] Oct 1 10:44:34 prd-ubuntu1804-docker-8c-8g-1594 sshd[1625]: Invalid user jenkins from 10.30.104.4 port 55294 Oct 1 10:44:34 prd-ubuntu1804-docker-8c-8g-1594 sshd[1625]: Received disconnect from 10.30.104.4 port 55294:11: Closed due to user request. [preauth] Oct 1 10:44:34 prd-ubuntu1804-docker-8c-8g-1594 sshd[1625]: Disconnected from invalid user jenkins 10.30.104.4 port 55294 [preauth] Oct 1 10:44:36 prd-ubuntu1804-docker-8c-8g-1594 sshd[1627]: Invalid user jenkins from 10.30.104.4 port 55304 Oct 1 10:44:36 prd-ubuntu1804-docker-8c-8g-1594 sshd[1627]: Received disconnect from 10.30.104.4 port 55304:11: Closed due to user request. [preauth] Oct 1 10:44:36 prd-ubuntu1804-docker-8c-8g-1594 sshd[1627]: Disconnected from invalid user jenkins 10.30.104.4 port 55304 [preauth] Oct 1 10:44:38 prd-ubuntu1804-docker-8c-8g-1594 sshd[1629]: Invalid user jenkins from 10.30.104.4 port 55306 Oct 1 10:44:38 prd-ubuntu1804-docker-8c-8g-1594 sshd[1629]: Received disconnect from 10.30.104.4 port 55306:11: Closed due to user request. [preauth] Oct 1 10:44:38 prd-ubuntu1804-docker-8c-8g-1594 sshd[1629]: Disconnected from invalid user jenkins 10.30.104.4 port 55306 [preauth] Oct 1 10:44:40 prd-ubuntu1804-docker-8c-8g-1594 sshd[1637]: Invalid user jenkins from 10.30.104.4 port 55308 Oct 1 10:44:40 prd-ubuntu1804-docker-8c-8g-1594 sshd[1637]: Received disconnect from 10.30.104.4 port 55308:11: Closed due to user request. [preauth] Oct 1 10:44:40 prd-ubuntu1804-docker-8c-8g-1594 sshd[1637]: Disconnected from invalid user jenkins 10.30.104.4 port 55308 [preauth] Oct 1 10:44:43 prd-ubuntu1804-docker-8c-8g-1594 sshd[1716]: Invalid user jenkins from 10.30.104.4 port 55316 Oct 1 10:44:43 prd-ubuntu1804-docker-8c-8g-1594 sshd[1716]: Received disconnect from 10.30.104.4 port 55316:11: Closed due to user request. [preauth] Oct 1 10:44:43 prd-ubuntu1804-docker-8c-8g-1594 sshd[1716]: Disconnected from invalid user jenkins 10.30.104.4 port 55316 [preauth] Oct 1 10:44:45 prd-ubuntu1804-docker-8c-8g-1594 sshd[1843]: Invalid user jenkins from 10.30.104.4 port 55318 Oct 1 10:44:46 prd-ubuntu1804-docker-8c-8g-1594 sshd[1843]: Received disconnect from 10.30.104.4 port 55318:11: Closed due to user request. [preauth] Oct 1 10:44:46 prd-ubuntu1804-docker-8c-8g-1594 sshd[1843]: Disconnected from invalid user jenkins 10.30.104.4 port 55318 [preauth] Oct 1 10:44:48 prd-ubuntu1804-docker-8c-8g-1594 sshd[1875]: Invalid user jenkins from 10.30.104.4 port 55320 Oct 1 10:44:48 prd-ubuntu1804-docker-8c-8g-1594 sshd[1875]: Received disconnect from 10.30.104.4 port 55320:11: Closed due to user request. [preauth] Oct 1 10:44:48 prd-ubuntu1804-docker-8c-8g-1594 sshd[1875]: Disconnected from invalid user jenkins 10.30.104.4 port 55320 [preauth] Oct 1 10:44:50 prd-ubuntu1804-docker-8c-8g-1594 sshd[1906]: Invalid user jenkins from 10.30.104.4 port 55326 Oct 1 10:44:50 prd-ubuntu1804-docker-8c-8g-1594 sshd[1906]: Received disconnect from 10.30.104.4 port 55326:11: Closed due to user request. [preauth] Oct 1 10:44:50 prd-ubuntu1804-docker-8c-8g-1594 sshd[1906]: Disconnected from invalid user jenkins 10.30.104.4 port 55326 [preauth] Oct 1 10:44:52 prd-ubuntu1804-docker-8c-8g-1594 sshd[1916]: Invalid user jenkins from 10.30.104.4 port 55328 Oct 1 10:44:52 prd-ubuntu1804-docker-8c-8g-1594 sshd[1916]: Received disconnect from 10.30.104.4 port 55328:11: Closed due to user request. [preauth] Oct 1 10:44:52 prd-ubuntu1804-docker-8c-8g-1594 sshd[1916]: Disconnected from invalid user jenkins 10.30.104.4 port 55328 [preauth] Oct 1 10:44:54 prd-ubuntu1804-docker-8c-8g-1594 sshd[1939]: Invalid user jenkins from 10.30.104.4 port 55330 Oct 1 10:44:54 prd-ubuntu1804-docker-8c-8g-1594 sshd[1939]: Received disconnect from 10.30.104.4 port 55330:11: Closed due to user request. [preauth] Oct 1 10:44:54 prd-ubuntu1804-docker-8c-8g-1594 sshd[1939]: Disconnected from invalid user jenkins 10.30.104.4 port 55330 [preauth] Oct 1 10:44:56 prd-ubuntu1804-docker-8c-8g-1594 sshd[1941]: Invalid user jenkins from 10.30.104.4 port 55334 Oct 1 10:44:56 prd-ubuntu1804-docker-8c-8g-1594 sshd[1941]: Received disconnect from 10.30.104.4 port 55334:11: Closed due to user request. [preauth] Oct 1 10:44:56 prd-ubuntu1804-docker-8c-8g-1594 sshd[1941]: Disconnected from invalid user jenkins 10.30.104.4 port 55334 [preauth] Oct 1 10:44:58 prd-ubuntu1804-docker-8c-8g-1594 sshd[1943]: Invalid user jenkins from 10.30.104.4 port 55340 Oct 1 10:44:58 prd-ubuntu1804-docker-8c-8g-1594 sshd[1943]: Received disconnect from 10.30.104.4 port 55340:11: Closed due to user request. [preauth] Oct 1 10:44:58 prd-ubuntu1804-docker-8c-8g-1594 sshd[1943]: Disconnected from invalid user jenkins 10.30.104.4 port 55340 [preauth] Oct 1 10:45:00 prd-ubuntu1804-docker-8c-8g-1594 sshd[1945]: Invalid user jenkins from 10.30.104.4 port 55342 Oct 1 10:45:01 prd-ubuntu1804-docker-8c-8g-1594 sshd[1945]: Received disconnect from 10.30.104.4 port 55342:11: Closed due to user request. [preauth] Oct 1 10:45:01 prd-ubuntu1804-docker-8c-8g-1594 sshd[1945]: Disconnected from invalid user jenkins 10.30.104.4 port 55342 [preauth] Oct 1 10:45:02 prd-ubuntu1804-docker-8c-8g-1594 CRON[1947]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 1 10:45:02 prd-ubuntu1804-docker-8c-8g-1594 CRON[1947]: pam_unix(cron:session): session closed for user root Oct 1 10:45:03 prd-ubuntu1804-docker-8c-8g-1594 sshd[1955]: Invalid user jenkins from 10.30.104.4 port 55368 Oct 1 10:45:03 prd-ubuntu1804-docker-8c-8g-1594 sshd[1955]: Received disconnect from 10.30.104.4 port 55368:11: Closed due to user request. [preauth] Oct 1 10:45:03 prd-ubuntu1804-docker-8c-8g-1594 sshd[1955]: Disconnected from invalid user jenkins 10.30.104.4 port 55368 [preauth] Oct 1 10:45:05 prd-ubuntu1804-docker-8c-8g-1594 sshd[1974]: Invalid user jenkins from 10.30.104.4 port 55370 Oct 1 10:45:05 prd-ubuntu1804-docker-8c-8g-1594 sshd[1974]: Received disconnect from 10.30.104.4 port 55370:11: Closed due to user request. [preauth] Oct 1 10:45:05 prd-ubuntu1804-docker-8c-8g-1594 sshd[1974]: Disconnected from invalid user jenkins 10.30.104.4 port 55370 [preauth] Oct 1 10:45:05 prd-ubuntu1804-docker-8c-8g-1594 useradd[1977]: new group: name=jenkins, GID=1001 Oct 1 10:45:05 prd-ubuntu1804-docker-8c-8g-1594 useradd[1977]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 1 10:45:07 prd-ubuntu1804-docker-8c-8g-1594 sshd[1978]: Received disconnect from 10.30.104.4 port 55372:11: Closed due to user request. [preauth] Oct 1 10:45:07 prd-ubuntu1804-docker-8c-8g-1594 sshd[1978]: Disconnected from authenticating user jenkins 10.30.104.4 port 55372 [preauth] Oct 1 10:45:07 prd-ubuntu1804-docker-8c-8g-1594 usermod[1986]: add 'jenkins' to group 'docker' Oct 1 10:45:07 prd-ubuntu1804-docker-8c-8g-1594 usermod[1986]: add 'jenkins' to shadow group 'docker' Oct 1 10:45:09 prd-ubuntu1804-docker-8c-8g-1594 sshd[2047]: Accepted publickey for jenkins from 10.30.104.4 port 55378 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Oct 1 10:45:09 prd-ubuntu1804-docker-8c-8g-1594 sshd[2047]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 1 10:45:09 prd-ubuntu1804-docker-8c-8g-1594 systemd-logind[1062]: New session 2 of user jenkins. Oct 1 10:45:09 prd-ubuntu1804-docker-8c-8g-1594 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 1 10:46:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[2655]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 1 10:46:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[2655]: pam_unix(cron:session): session closed for user root Oct 1 10:47:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[3063]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 1 10:47:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[3063]: pam_unix(cron:session): session closed for user root Oct 1 10:48:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[3529]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 1 10:48:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[3529]: pam_unix(cron:session): session closed for user root Oct 1 10:49:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[3637]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 1 10:49:01 prd-ubuntu1804-docker-8c-8g-1594 CRON[3637]: pam_unix(cron:session): session closed for user root Oct 1 10:49:51 prd-ubuntu1804-docker-8c-8g-1594 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-bff-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 1 10:49:51 prd-ubuntu1804-docker-8c-8g-1594 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)