Jun 6 07:26:12 prd-ubuntu1804-docker-8c-8g-7926 passwd[1016]: password for 'ubuntu' changed by 'root' Jun 6 07:26:12 prd-ubuntu1804-docker-8c-8g-7926 systemd-logind[1178]: Watching system buttons on /dev/input/event0 (Power Button) Jun 6 07:26:12 prd-ubuntu1804-docker-8c-8g-7926 systemd-logind[1178]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 6 07:26:12 prd-ubuntu1804-docker-8c-8g-7926 systemd-logind[1178]: New seat seat0. Jun 6 07:26:12 prd-ubuntu1804-docker-8c-8g-7926 sshd[1332]: Server listening on 0.0.0.0 port 22. Jun 6 07:26:12 prd-ubuntu1804-docker-8c-8g-7926 sshd[1332]: Server listening on :: port 22. Jun 6 07:26:18 prd-ubuntu1804-docker-8c-8g-7926 sshd[1590]: Did not receive identification string from 10.30.104.4 port 37900 Jun 6 07:26:26 prd-ubuntu1804-docker-8c-8g-7926 sshd[1603]: Invalid user jenkins from 10.30.104.4 port 38006 Jun 6 07:26:26 prd-ubuntu1804-docker-8c-8g-7926 sshd[1603]: Received disconnect from 10.30.104.4 port 38006:11: Closed due to user request. [preauth] Jun 6 07:26:26 prd-ubuntu1804-docker-8c-8g-7926 sshd[1603]: Disconnected from invalid user jenkins 10.30.104.4 port 38006 [preauth] Jun 6 07:26:28 prd-ubuntu1804-docker-8c-8g-7926 sshd[1614]: Invalid user jenkins from 10.30.104.4 port 38050 Jun 6 07:26:28 prd-ubuntu1804-docker-8c-8g-7926 sshd[1614]: Received disconnect from 10.30.104.4 port 38050:11: Closed due to user request. [preauth] Jun 6 07:26:28 prd-ubuntu1804-docker-8c-8g-7926 sshd[1614]: Disconnected from invalid user jenkins 10.30.104.4 port 38050 [preauth] Jun 6 07:26:30 prd-ubuntu1804-docker-8c-8g-7926 sshd[1616]: Invalid user jenkins from 10.30.104.4 port 38080 Jun 6 07:26:30 prd-ubuntu1804-docker-8c-8g-7926 sshd[1616]: Received disconnect from 10.30.104.4 port 38080:11: Closed due to user request. [preauth] Jun 6 07:26:30 prd-ubuntu1804-docker-8c-8g-7926 sshd[1616]: Disconnected from invalid user jenkins 10.30.104.4 port 38080 [preauth] Jun 6 07:26:33 prd-ubuntu1804-docker-8c-8g-7926 sshd[1626]: Invalid user jenkins from 10.30.104.4 port 38110 Jun 6 07:26:33 prd-ubuntu1804-docker-8c-8g-7926 sshd[1626]: Received disconnect from 10.30.104.4 port 38110:11: Closed due to user request. [preauth] Jun 6 07:26:33 prd-ubuntu1804-docker-8c-8g-7926 sshd[1626]: Disconnected from invalid user jenkins 10.30.104.4 port 38110 [preauth] Jun 6 07:26:35 prd-ubuntu1804-docker-8c-8g-7926 sshd[1818]: Invalid user jenkins from 10.30.104.4 port 38148 Jun 6 07:26:35 prd-ubuntu1804-docker-8c-8g-7926 sshd[1818]: Received disconnect from 10.30.104.4 port 38148:11: Closed due to user request. [preauth] Jun 6 07:26:35 prd-ubuntu1804-docker-8c-8g-7926 sshd[1818]: Disconnected from invalid user jenkins 10.30.104.4 port 38148 [preauth] Jun 6 07:26:37 prd-ubuntu1804-docker-8c-8g-7926 sshd[1876]: Invalid user jenkins from 10.30.104.4 port 38176 Jun 6 07:26:37 prd-ubuntu1804-docker-8c-8g-7926 sshd[1876]: Received disconnect from 10.30.104.4 port 38176:11: Closed due to user request. [preauth] Jun 6 07:26:37 prd-ubuntu1804-docker-8c-8g-7926 sshd[1876]: Disconnected from invalid user jenkins 10.30.104.4 port 38176 [preauth] Jun 6 07:26:39 prd-ubuntu1804-docker-8c-8g-7926 sshd[1885]: Invalid user jenkins from 10.30.104.4 port 38204 Jun 6 07:26:40 prd-ubuntu1804-docker-8c-8g-7926 sshd[1885]: Received disconnect from 10.30.104.4 port 38204:11: Closed due to user request. [preauth] Jun 6 07:26:40 prd-ubuntu1804-docker-8c-8g-7926 sshd[1885]: Disconnected from invalid user jenkins 10.30.104.4 port 38204 [preauth] Jun 6 07:26:42 prd-ubuntu1804-docker-8c-8g-7926 sshd[1887]: Invalid user jenkins from 10.30.104.4 port 38220 Jun 6 07:26:42 prd-ubuntu1804-docker-8c-8g-7926 sshd[1887]: Received disconnect from 10.30.104.4 port 38220:11: Closed due to user request. [preauth] Jun 6 07:26:42 prd-ubuntu1804-docker-8c-8g-7926 sshd[1887]: Disconnected from invalid user jenkins 10.30.104.4 port 38220 [preauth] Jun 6 07:26:44 prd-ubuntu1804-docker-8c-8g-7926 sshd[1899]: Invalid user jenkins from 10.30.104.4 port 38242 Jun 6 07:26:44 prd-ubuntu1804-docker-8c-8g-7926 sshd[1899]: Received disconnect from 10.30.104.4 port 38242:11: Closed due to user request. [preauth] Jun 6 07:26:44 prd-ubuntu1804-docker-8c-8g-7926 sshd[1899]: Disconnected from invalid user jenkins 10.30.104.4 port 38242 [preauth] Jun 6 07:26:46 prd-ubuntu1804-docker-8c-8g-7926 sshd[1913]: Invalid user jenkins from 10.30.104.4 port 38262 Jun 6 07:26:46 prd-ubuntu1804-docker-8c-8g-7926 sshd[1913]: Received disconnect from 10.30.104.4 port 38262:11: Closed due to user request. [preauth] Jun 6 07:26:46 prd-ubuntu1804-docker-8c-8g-7926 sshd[1913]: Disconnected from invalid user jenkins 10.30.104.4 port 38262 [preauth] Jun 6 07:26:48 prd-ubuntu1804-docker-8c-8g-7926 sshd[1915]: Invalid user jenkins from 10.30.104.4 port 38280 Jun 6 07:26:49 prd-ubuntu1804-docker-8c-8g-7926 sshd[1915]: Received disconnect from 10.30.104.4 port 38280:11: Closed due to user request. [preauth] Jun 6 07:26:49 prd-ubuntu1804-docker-8c-8g-7926 sshd[1915]: Disconnected from invalid user jenkins 10.30.104.4 port 38280 [preauth] Jun 6 07:26:51 prd-ubuntu1804-docker-8c-8g-7926 sshd[1917]: Invalid user jenkins from 10.30.104.4 port 38312 Jun 6 07:26:51 prd-ubuntu1804-docker-8c-8g-7926 sshd[1917]: Received disconnect from 10.30.104.4 port 38312:11: Closed due to user request. [preauth] Jun 6 07:26:51 prd-ubuntu1804-docker-8c-8g-7926 sshd[1917]: Disconnected from invalid user jenkins 10.30.104.4 port 38312 [preauth] Jun 6 07:26:53 prd-ubuntu1804-docker-8c-8g-7926 sshd[1919]: Invalid user jenkins from 10.30.104.4 port 38322 Jun 6 07:26:53 prd-ubuntu1804-docker-8c-8g-7926 sshd[1919]: Received disconnect from 10.30.104.4 port 38322:11: Closed due to user request. [preauth] Jun 6 07:26:53 prd-ubuntu1804-docker-8c-8g-7926 sshd[1919]: Disconnected from invalid user jenkins 10.30.104.4 port 38322 [preauth] Jun 6 07:26:55 prd-ubuntu1804-docker-8c-8g-7926 sshd[1921]: Invalid user jenkins from 10.30.104.4 port 38336 Jun 6 07:26:55 prd-ubuntu1804-docker-8c-8g-7926 sshd[1921]: Received disconnect from 10.30.104.4 port 38336:11: Closed due to user request. [preauth] Jun 6 07:26:55 prd-ubuntu1804-docker-8c-8g-7926 sshd[1921]: Disconnected from invalid user jenkins 10.30.104.4 port 38336 [preauth] Jun 6 07:26:57 prd-ubuntu1804-docker-8c-8g-7926 sshd[1923]: Invalid user jenkins from 10.30.104.4 port 38366 Jun 6 07:26:57 prd-ubuntu1804-docker-8c-8g-7926 sshd[1923]: Received disconnect from 10.30.104.4 port 38366:11: Closed due to user request. [preauth] Jun 6 07:26:57 prd-ubuntu1804-docker-8c-8g-7926 sshd[1923]: Disconnected from invalid user jenkins 10.30.104.4 port 38366 [preauth] Jun 6 07:27:00 prd-ubuntu1804-docker-8c-8g-7926 sshd[1925]: Invalid user jenkins from 10.30.104.4 port 38386 Jun 6 07:27:00 prd-ubuntu1804-docker-8c-8g-7926 sshd[1925]: Received disconnect from 10.30.104.4 port 38386:11: Closed due to user request. [preauth] Jun 6 07:27:00 prd-ubuntu1804-docker-8c-8g-7926 sshd[1925]: Disconnected from invalid user jenkins 10.30.104.4 port 38386 [preauth] Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 useradd[1932]: new group: name=jenkins, GID=1001 Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 useradd[1932]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 CRON[1933]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 CRON[1933]: pam_unix(cron:session): session closed for user root Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 usermod[1949]: add 'jenkins' to group 'docker' Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 usermod[1949]: add 'jenkins' to shadow group 'docker' Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 sshd[1944]: Received disconnect from 10.30.104.4 port 38406:11: Closed due to user request. [preauth] Jun 6 07:27:02 prd-ubuntu1804-docker-8c-8g-7926 sshd[1944]: Disconnected from authenticating user jenkins 10.30.104.4 port 38406 [preauth] Jun 6 07:27:04 prd-ubuntu1804-docker-8c-8g-7926 sshd[2010]: Accepted publickey for jenkins from 10.30.104.4 port 38430 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jun 6 07:27:04 prd-ubuntu1804-docker-8c-8g-7926 sshd[2010]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 6 07:27:04 prd-ubuntu1804-docker-8c-8g-7926 systemd-logind[1178]: New session 2 of user jenkins. Jun 6 07:27:04 prd-ubuntu1804-docker-8c-8g-7926 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 6 07:28:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[2220]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 07:28:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[2220]: pam_unix(cron:session): session closed for user root Jun 6 07:29:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[2570]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 07:29:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[2570]: pam_unix(cron:session): session closed for user root Jun 6 07:30:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[3424]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 07:30:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[3424]: pam_unix(cron:session): session closed for user root Jun 6 07:31:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[3653]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 07:31:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[3653]: pam_unix(cron:session): session closed for user root Jun 6 07:32:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[4260]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 07:32:01 prd-ubuntu1804-docker-8c-8g-7926 CRON[4260]: pam_unix(cron:session): session closed for user root Jun 6 07:32:03 prd-ubuntu1804-docker-8c-8g-7926 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-history-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 6 07:32:03 prd-ubuntu1804-docker-8c-8g-7926 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)