Aug 21 16:37:47 prd-ubuntu1804-docker-8c-8g-14196 passwd[997]: password for 'ubuntu' changed by 'root' Aug 21 16:37:47 prd-ubuntu1804-docker-8c-8g-14196 systemd-logind[1158]: Watching system buttons on /dev/input/event0 (Power Button) Aug 21 16:37:47 prd-ubuntu1804-docker-8c-8g-14196 systemd-logind[1158]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 21 16:37:47 prd-ubuntu1804-docker-8c-8g-14196 systemd-logind[1158]: New seat seat0. Aug 21 16:37:47 prd-ubuntu1804-docker-8c-8g-14196 sshd[1200]: Server listening on 0.0.0.0 port 22. Aug 21 16:37:47 prd-ubuntu1804-docker-8c-8g-14196 sshd[1200]: Server listening on :: port 22. Aug 21 16:37:49 prd-ubuntu1804-docker-8c-8g-14196 sshd[1444]: Did not receive identification string from 10.30.104.4 port 53804 Aug 21 16:37:53 prd-ubuntu1804-docker-8c-8g-14196 sshd[1464]: Invalid user jenkins from 10.30.104.4 port 53808 Aug 21 16:37:53 prd-ubuntu1804-docker-8c-8g-14196 sshd[1464]: Received disconnect from 10.30.104.4 port 53808:11: Closed due to user request. [preauth] Aug 21 16:37:53 prd-ubuntu1804-docker-8c-8g-14196 sshd[1464]: Disconnected from invalid user jenkins 10.30.104.4 port 53808 [preauth] Aug 21 16:37:55 prd-ubuntu1804-docker-8c-8g-14196 sshd[1476]: Invalid user jenkins from 10.30.104.4 port 53810 Aug 21 16:37:55 prd-ubuntu1804-docker-8c-8g-14196 sshd[1476]: Received disconnect from 10.30.104.4 port 53810:11: Closed due to user request. [preauth] Aug 21 16:37:55 prd-ubuntu1804-docker-8c-8g-14196 sshd[1476]: Disconnected from invalid user jenkins 10.30.104.4 port 53810 [preauth] Aug 21 16:37:57 prd-ubuntu1804-docker-8c-8g-14196 sshd[1478]: Invalid user jenkins from 10.30.104.4 port 53812 Aug 21 16:37:57 prd-ubuntu1804-docker-8c-8g-14196 sshd[1478]: Received disconnect from 10.30.104.4 port 53812:11: Closed due to user request. [preauth] Aug 21 16:37:57 prd-ubuntu1804-docker-8c-8g-14196 sshd[1478]: Disconnected from invalid user jenkins 10.30.104.4 port 53812 [preauth] Aug 21 16:37:59 prd-ubuntu1804-docker-8c-8g-14196 sshd[1480]: Invalid user jenkins from 10.30.104.4 port 53814 Aug 21 16:37:59 prd-ubuntu1804-docker-8c-8g-14196 sshd[1480]: Received disconnect from 10.30.104.4 port 53814:11: Closed due to user request. [preauth] Aug 21 16:37:59 prd-ubuntu1804-docker-8c-8g-14196 sshd[1480]: Disconnected from invalid user jenkins 10.30.104.4 port 53814 [preauth] Aug 21 16:38:01 prd-ubuntu1804-docker-8c-8g-14196 sshd[1516]: Invalid user jenkins from 10.30.104.4 port 53816 Aug 21 16:38:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[1518]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 21 16:38:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[1518]: pam_unix(cron:session): session closed for user root Aug 21 16:38:01 prd-ubuntu1804-docker-8c-8g-14196 sshd[1516]: Received disconnect from 10.30.104.4 port 53816:11: Closed due to user request. [preauth] Aug 21 16:38:01 prd-ubuntu1804-docker-8c-8g-14196 sshd[1516]: Disconnected from invalid user jenkins 10.30.104.4 port 53816 [preauth] Aug 21 16:38:03 prd-ubuntu1804-docker-8c-8g-14196 sshd[1534]: Invalid user jenkins from 10.30.104.4 port 53820 Aug 21 16:38:03 prd-ubuntu1804-docker-8c-8g-14196 sshd[1534]: Received disconnect from 10.30.104.4 port 53820:11: Closed due to user request. [preauth] Aug 21 16:38:03 prd-ubuntu1804-docker-8c-8g-14196 sshd[1534]: Disconnected from invalid user jenkins 10.30.104.4 port 53820 [preauth] Aug 21 16:38:06 prd-ubuntu1804-docker-8c-8g-14196 sshd[1536]: Invalid user jenkins from 10.30.104.4 port 53822 Aug 21 16:38:06 prd-ubuntu1804-docker-8c-8g-14196 sshd[1536]: Received disconnect from 10.30.104.4 port 53822:11: Closed due to user request. [preauth] Aug 21 16:38:06 prd-ubuntu1804-docker-8c-8g-14196 sshd[1536]: Disconnected from invalid user jenkins 10.30.104.4 port 53822 [preauth] Aug 21 16:38:08 prd-ubuntu1804-docker-8c-8g-14196 sshd[1538]: Invalid user jenkins from 10.30.104.4 port 53824 Aug 21 16:38:08 prd-ubuntu1804-docker-8c-8g-14196 sshd[1538]: Received disconnect from 10.30.104.4 port 53824:11: Closed due to user request. [preauth] Aug 21 16:38:08 prd-ubuntu1804-docker-8c-8g-14196 sshd[1538]: Disconnected from invalid user jenkins 10.30.104.4 port 53824 [preauth] Aug 21 16:38:10 prd-ubuntu1804-docker-8c-8g-14196 sshd[1541]: Invalid user jenkins from 10.30.104.4 port 53826 Aug 21 16:38:10 prd-ubuntu1804-docker-8c-8g-14196 sshd[1541]: Received disconnect from 10.30.104.4 port 53826:11: Closed due to user request. [preauth] Aug 21 16:38:10 prd-ubuntu1804-docker-8c-8g-14196 sshd[1541]: Disconnected from invalid user jenkins 10.30.104.4 port 53826 [preauth] Aug 21 16:38:12 prd-ubuntu1804-docker-8c-8g-14196 sshd[1552]: Invalid user jenkins from 10.30.104.4 port 53828 Aug 21 16:38:12 prd-ubuntu1804-docker-8c-8g-14196 sshd[1552]: Received disconnect from 10.30.104.4 port 53828:11: Closed due to user request. [preauth] Aug 21 16:38:12 prd-ubuntu1804-docker-8c-8g-14196 sshd[1552]: Disconnected from invalid user jenkins 10.30.104.4 port 53828 [preauth] Aug 21 16:38:14 prd-ubuntu1804-docker-8c-8g-14196 sshd[1557]: Invalid user jenkins from 10.30.104.4 port 53830 Aug 21 16:38:14 prd-ubuntu1804-docker-8c-8g-14196 sshd[1557]: Received disconnect from 10.30.104.4 port 53830:11: Closed due to user request. [preauth] Aug 21 16:38:14 prd-ubuntu1804-docker-8c-8g-14196 sshd[1557]: Disconnected from invalid user jenkins 10.30.104.4 port 53830 [preauth] Aug 21 16:38:16 prd-ubuntu1804-docker-8c-8g-14196 sshd[1559]: Invalid user jenkins from 10.30.104.4 port 53832 Aug 21 16:38:16 prd-ubuntu1804-docker-8c-8g-14196 sshd[1559]: Received disconnect from 10.30.104.4 port 53832:11: Closed due to user request. [preauth] Aug 21 16:38:16 prd-ubuntu1804-docker-8c-8g-14196 sshd[1559]: Disconnected from invalid user jenkins 10.30.104.4 port 53832 [preauth] Aug 21 16:38:18 prd-ubuntu1804-docker-8c-8g-14196 sshd[1660]: Invalid user jenkins from 10.30.104.4 port 53836 Aug 21 16:38:18 prd-ubuntu1804-docker-8c-8g-14196 sshd[1660]: Received disconnect from 10.30.104.4 port 53836:11: Closed due to user request. [preauth] Aug 21 16:38:18 prd-ubuntu1804-docker-8c-8g-14196 sshd[1660]: Disconnected from invalid user jenkins 10.30.104.4 port 53836 [preauth] Aug 21 16:38:20 prd-ubuntu1804-docker-8c-8g-14196 sshd[1827]: Invalid user jenkins from 10.30.104.4 port 53842 Aug 21 16:38:20 prd-ubuntu1804-docker-8c-8g-14196 sshd[1827]: Received disconnect from 10.30.104.4 port 53842:11: Closed due to user request. [preauth] Aug 21 16:38:20 prd-ubuntu1804-docker-8c-8g-14196 sshd[1827]: Disconnected from invalid user jenkins 10.30.104.4 port 53842 [preauth] Aug 21 16:38:22 prd-ubuntu1804-docker-8c-8g-14196 sshd[1849]: Invalid user jenkins from 10.30.104.4 port 53844 Aug 21 16:38:23 prd-ubuntu1804-docker-8c-8g-14196 sshd[1849]: Received disconnect from 10.30.104.4 port 53844:11: Closed due to user request. [preauth] Aug 21 16:38:23 prd-ubuntu1804-docker-8c-8g-14196 sshd[1849]: Disconnected from invalid user jenkins 10.30.104.4 port 53844 [preauth] Aug 21 16:38:25 prd-ubuntu1804-docker-8c-8g-14196 sshd[1851]: Invalid user jenkins from 10.30.104.4 port 53846 Aug 21 16:38:25 prd-ubuntu1804-docker-8c-8g-14196 sshd[1851]: Received disconnect from 10.30.104.4 port 53846:11: Closed due to user request. [preauth] Aug 21 16:38:25 prd-ubuntu1804-docker-8c-8g-14196 sshd[1851]: Disconnected from invalid user jenkins 10.30.104.4 port 53846 [preauth] Aug 21 16:38:27 prd-ubuntu1804-docker-8c-8g-14196 sshd[1853]: Invalid user jenkins from 10.30.104.4 port 53848 Aug 21 16:38:27 prd-ubuntu1804-docker-8c-8g-14196 sshd[1853]: Received disconnect from 10.30.104.4 port 53848:11: Closed due to user request. [preauth] Aug 21 16:38:27 prd-ubuntu1804-docker-8c-8g-14196 sshd[1853]: Disconnected from invalid user jenkins 10.30.104.4 port 53848 [preauth] Aug 21 16:38:28 prd-ubuntu1804-docker-8c-8g-14196 useradd[1860]: new group: name=jenkins, GID=1001 Aug 21 16:38:28 prd-ubuntu1804-docker-8c-8g-14196 useradd[1860]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 21 16:38:28 prd-ubuntu1804-docker-8c-8g-14196 usermod[1867]: add 'jenkins' to group 'docker' Aug 21 16:38:28 prd-ubuntu1804-docker-8c-8g-14196 usermod[1867]: add 'jenkins' to shadow group 'docker' Aug 21 16:38:29 prd-ubuntu1804-docker-8c-8g-14196 sshd[1934]: Accepted publickey for jenkins from 10.30.104.4 port 53850 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Aug 21 16:38:29 prd-ubuntu1804-docker-8c-8g-14196 sshd[1934]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 21 16:38:29 prd-ubuntu1804-docker-8c-8g-14196 systemd-logind[1158]: New session 2 of user jenkins. Aug 21 16:38:29 prd-ubuntu1804-docker-8c-8g-14196 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 21 16:39:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[2463]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 21 16:39:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[2463]: pam_unix(cron:session): session closed for user root Aug 21 16:40:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[3367]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 21 16:40:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[3367]: pam_unix(cron:session): session closed for user root Aug 21 16:41:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[3561]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 21 16:41:01 prd-ubuntu1804-docker-8c-8g-14196 CRON[3561]: pam_unix(cron:session): session closed for user root Aug 21 16:41:47 prd-ubuntu1804-docker-8c-8g-14196 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-history-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 21 16:41:47 prd-ubuntu1804-docker-8c-8g-14196 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)