Jul 2 13:47:28 prd-ubuntu1804-docker-8c-8g-4623 passwd[1013]: password for 'ubuntu' changed by 'root' Jul 2 13:47:28 prd-ubuntu1804-docker-8c-8g-4623 systemd-logind[1061]: Watching system buttons on /dev/input/event0 (Power Button) Jul 2 13:47:28 prd-ubuntu1804-docker-8c-8g-4623 systemd-logind[1061]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 2 13:47:28 prd-ubuntu1804-docker-8c-8g-4623 systemd-logind[1061]: New seat seat0. Jul 2 13:47:28 prd-ubuntu1804-docker-8c-8g-4623 sshd[1146]: Server listening on 0.0.0.0 port 22. Jul 2 13:47:28 prd-ubuntu1804-docker-8c-8g-4623 sshd[1146]: Server listening on :: port 22. Jul 2 13:47:32 prd-ubuntu1804-docker-8c-8g-4623 sshd[1423]: Did not receive identification string from 10.30.104.4 port 48032 Jul 2 13:47:33 prd-ubuntu1804-docker-8c-8g-4623 sshd[1429]: Invalid user jenkins from 10.30.104.4 port 48038 Jul 2 13:47:33 prd-ubuntu1804-docker-8c-8g-4623 sshd[1429]: Received disconnect from 10.30.104.4 port 48038:11: Closed due to user request. [preauth] Jul 2 13:47:33 prd-ubuntu1804-docker-8c-8g-4623 sshd[1429]: Disconnected from invalid user jenkins 10.30.104.4 port 48038 [preauth] Jul 2 13:47:35 prd-ubuntu1804-docker-8c-8g-4623 sshd[1453]: Invalid user jenkins from 10.30.104.4 port 48052 Jul 2 13:47:35 prd-ubuntu1804-docker-8c-8g-4623 sshd[1453]: Received disconnect from 10.30.104.4 port 48052:11: Closed due to user request. [preauth] Jul 2 13:47:35 prd-ubuntu1804-docker-8c-8g-4623 sshd[1453]: Disconnected from invalid user jenkins 10.30.104.4 port 48052 [preauth] Jul 2 13:47:37 prd-ubuntu1804-docker-8c-8g-4623 sshd[1455]: Invalid user jenkins from 10.30.104.4 port 48064 Jul 2 13:47:37 prd-ubuntu1804-docker-8c-8g-4623 sshd[1455]: Received disconnect from 10.30.104.4 port 48064:11: Closed due to user request. [preauth] Jul 2 13:47:37 prd-ubuntu1804-docker-8c-8g-4623 sshd[1455]: Disconnected from invalid user jenkins 10.30.104.4 port 48064 [preauth] Jul 2 13:47:39 prd-ubuntu1804-docker-8c-8g-4623 sshd[1457]: Invalid user jenkins from 10.30.104.4 port 48076 Jul 2 13:47:39 prd-ubuntu1804-docker-8c-8g-4623 sshd[1457]: Received disconnect from 10.30.104.4 port 48076:11: Closed due to user request. [preauth] Jul 2 13:47:39 prd-ubuntu1804-docker-8c-8g-4623 sshd[1457]: Disconnected from invalid user jenkins 10.30.104.4 port 48076 [preauth] Jul 2 13:47:41 prd-ubuntu1804-docker-8c-8g-4623 sshd[1459]: Invalid user jenkins from 10.30.104.4 port 48086 Jul 2 13:47:41 prd-ubuntu1804-docker-8c-8g-4623 sshd[1459]: Received disconnect from 10.30.104.4 port 48086:11: Closed due to user request. [preauth] Jul 2 13:47:41 prd-ubuntu1804-docker-8c-8g-4623 sshd[1459]: Disconnected from invalid user jenkins 10.30.104.4 port 48086 [preauth] Jul 2 13:47:43 prd-ubuntu1804-docker-8c-8g-4623 sshd[1461]: Invalid user jenkins from 10.30.104.4 port 48100 Jul 2 13:47:43 prd-ubuntu1804-docker-8c-8g-4623 sshd[1461]: Received disconnect from 10.30.104.4 port 48100:11: Closed due to user request. [preauth] Jul 2 13:47:43 prd-ubuntu1804-docker-8c-8g-4623 sshd[1461]: Disconnected from invalid user jenkins 10.30.104.4 port 48100 [preauth] Jul 2 13:47:45 prd-ubuntu1804-docker-8c-8g-4623 sshd[1471]: Invalid user jenkins from 10.30.104.4 port 48122 Jul 2 13:47:45 prd-ubuntu1804-docker-8c-8g-4623 sshd[1471]: Received disconnect from 10.30.104.4 port 48122:11: Closed due to user request. [preauth] Jul 2 13:47:45 prd-ubuntu1804-docker-8c-8g-4623 sshd[1471]: Disconnected from invalid user jenkins 10.30.104.4 port 48122 [preauth] Jul 2 13:47:48 prd-ubuntu1804-docker-8c-8g-4623 sshd[1679]: Invalid user jenkins from 10.30.104.4 port 48136 Jul 2 13:47:48 prd-ubuntu1804-docker-8c-8g-4623 sshd[1679]: Received disconnect from 10.30.104.4 port 48136:11: Closed due to user request. [preauth] Jul 2 13:47:48 prd-ubuntu1804-docker-8c-8g-4623 sshd[1679]: Disconnected from invalid user jenkins 10.30.104.4 port 48136 [preauth] Jul 2 13:47:51 prd-ubuntu1804-docker-8c-8g-4623 sshd[1731]: Invalid user jenkins from 10.30.104.4 port 48150 Jul 2 13:47:51 prd-ubuntu1804-docker-8c-8g-4623 sshd[1731]: Received disconnect from 10.30.104.4 port 48150:11: Closed due to user request. [preauth] Jul 2 13:47:51 prd-ubuntu1804-docker-8c-8g-4623 sshd[1731]: Disconnected from invalid user jenkins 10.30.104.4 port 48150 [preauth] Jul 2 13:47:53 prd-ubuntu1804-docker-8c-8g-4623 sshd[1733]: Invalid user jenkins from 10.30.104.4 port 48170 Jul 2 13:47:53 prd-ubuntu1804-docker-8c-8g-4623 sshd[1733]: Received disconnect from 10.30.104.4 port 48170:11: Closed due to user request. [preauth] Jul 2 13:47:53 prd-ubuntu1804-docker-8c-8g-4623 sshd[1733]: Disconnected from invalid user jenkins 10.30.104.4 port 48170 [preauth] Jul 2 13:47:55 prd-ubuntu1804-docker-8c-8g-4623 sshd[1735]: Invalid user jenkins from 10.30.104.4 port 48196 Jul 2 13:47:55 prd-ubuntu1804-docker-8c-8g-4623 sshd[1735]: Received disconnect from 10.30.104.4 port 48196:11: Closed due to user request. [preauth] Jul 2 13:47:55 prd-ubuntu1804-docker-8c-8g-4623 sshd[1735]: Disconnected from invalid user jenkins 10.30.104.4 port 48196 [preauth] Jul 2 13:47:57 prd-ubuntu1804-docker-8c-8g-4623 sshd[1737]: Invalid user jenkins from 10.30.104.4 port 48208 Jul 2 13:47:57 prd-ubuntu1804-docker-8c-8g-4623 sshd[1737]: Received disconnect from 10.30.104.4 port 48208:11: Closed due to user request. [preauth] Jul 2 13:47:57 prd-ubuntu1804-docker-8c-8g-4623 sshd[1737]: Disconnected from invalid user jenkins 10.30.104.4 port 48208 [preauth] Jul 2 13:47:59 prd-ubuntu1804-docker-8c-8g-4623 sshd[1739]: Invalid user jenkins from 10.30.104.4 port 48224 Jul 2 13:47:59 prd-ubuntu1804-docker-8c-8g-4623 sshd[1739]: Received disconnect from 10.30.104.4 port 48224:11: Closed due to user request. [preauth] Jul 2 13:47:59 prd-ubuntu1804-docker-8c-8g-4623 sshd[1739]: Disconnected from invalid user jenkins 10.30.104.4 port 48224 [preauth] Jul 2 13:48:01 prd-ubuntu1804-docker-8c-8g-4623 sshd[1760]: Invalid user jenkins from 10.30.104.4 port 48240 Jul 2 13:48:01 prd-ubuntu1804-docker-8c-8g-4623 sshd[1760]: Received disconnect from 10.30.104.4 port 48240:11: Closed due to user request. [preauth] Jul 2 13:48:01 prd-ubuntu1804-docker-8c-8g-4623 sshd[1760]: Disconnected from invalid user jenkins 10.30.104.4 port 48240 [preauth] Jul 2 13:48:02 prd-ubuntu1804-docker-8c-8g-4623 CRON[1762]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 13:48:02 prd-ubuntu1804-docker-8c-8g-4623 CRON[1762]: pam_unix(cron:session): session closed for user root Jul 2 13:48:03 prd-ubuntu1804-docker-8c-8g-4623 sshd[1771]: Invalid user jenkins from 10.30.104.4 port 48256 Jul 2 13:48:03 prd-ubuntu1804-docker-8c-8g-4623 sshd[1771]: Received disconnect from 10.30.104.4 port 48256:11: Closed due to user request. [preauth] Jul 2 13:48:03 prd-ubuntu1804-docker-8c-8g-4623 sshd[1771]: Disconnected from invalid user jenkins 10.30.104.4 port 48256 [preauth] Jul 2 13:48:05 prd-ubuntu1804-docker-8c-8g-4623 sshd[1773]: Invalid user jenkins from 10.30.104.4 port 48282 Jul 2 13:48:06 prd-ubuntu1804-docker-8c-8g-4623 sshd[1773]: Received disconnect from 10.30.104.4 port 48282:11: Closed due to user request. [preauth] Jul 2 13:48:06 prd-ubuntu1804-docker-8c-8g-4623 sshd[1773]: Disconnected from invalid user jenkins 10.30.104.4 port 48282 [preauth] Jul 2 13:48:08 prd-ubuntu1804-docker-8c-8g-4623 sshd[1775]: Invalid user jenkins from 10.30.104.4 port 48302 Jul 2 13:48:10 prd-ubuntu1804-docker-8c-8g-4623 sshd[1775]: Received disconnect from 10.30.104.4 port 48302:11: Closed due to user request. [preauth] Jul 2 13:48:10 prd-ubuntu1804-docker-8c-8g-4623 sshd[1775]: Disconnected from invalid user jenkins 10.30.104.4 port 48302 [preauth] Jul 2 13:48:12 prd-ubuntu1804-docker-8c-8g-4623 sshd[1777]: Invalid user jenkins from 10.30.104.4 port 48328 Jul 2 13:48:12 prd-ubuntu1804-docker-8c-8g-4623 sshd[1777]: Received disconnect from 10.30.104.4 port 48328:11: Closed due to user request. [preauth] Jul 2 13:48:12 prd-ubuntu1804-docker-8c-8g-4623 sshd[1777]: Disconnected from invalid user jenkins 10.30.104.4 port 48328 [preauth] Jul 2 13:48:13 prd-ubuntu1804-docker-8c-8g-4623 useradd[1784]: new group: name=jenkins, GID=1001 Jul 2 13:48:13 prd-ubuntu1804-docker-8c-8g-4623 useradd[1784]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 2 13:48:14 prd-ubuntu1804-docker-8c-8g-4623 sshd[1785]: Received disconnect from 10.30.104.4 port 48358:11: Closed due to user request. [preauth] Jul 2 13:48:14 prd-ubuntu1804-docker-8c-8g-4623 sshd[1785]: Disconnected from authenticating user jenkins 10.30.104.4 port 48358 [preauth] Jul 2 13:48:15 prd-ubuntu1804-docker-8c-8g-4623 usermod[1793]: add 'jenkins' to group 'docker' Jul 2 13:48:15 prd-ubuntu1804-docker-8c-8g-4623 usermod[1793]: add 'jenkins' to shadow group 'docker' Jul 2 13:48:16 prd-ubuntu1804-docker-8c-8g-4623 sshd[1854]: Accepted publickey for jenkins from 10.30.104.4 port 48384 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jul 2 13:48:16 prd-ubuntu1804-docker-8c-8g-4623 sshd[1854]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 2 13:48:16 prd-ubuntu1804-docker-8c-8g-4623 systemd-logind[1061]: New session 2 of user jenkins. Jul 2 13:48:16 prd-ubuntu1804-docker-8c-8g-4623 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 2 13:49:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[2402]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 13:49:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[2402]: pam_unix(cron:session): session closed for user root Jul 2 13:50:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[2967]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 13:50:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[2967]: pam_unix(cron:session): session closed for user root Jul 2 13:51:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[3410]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 13:51:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[3410]: pam_unix(cron:session): session closed for user root Jul 2 13:52:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[3519]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 13:52:01 prd-ubuntu1804-docker-8c-8g-4623 CRON[3519]: pam_unix(cron:session): session closed for user root Jul 2 13:52:41 prd-ubuntu1804-docker-8c-8g-4623 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-history-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp