Aug 3 11:29:10 prd-ubuntu1804-docker-8c-8g-2233 passwd[985]: password for 'ubuntu' changed by 'root' Aug 3 11:29:10 prd-ubuntu1804-docker-8c-8g-2233 systemd-logind[1022]: Watching system buttons on /dev/input/event0 (Power Button) Aug 3 11:29:10 prd-ubuntu1804-docker-8c-8g-2233 systemd-logind[1022]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 3 11:29:10 prd-ubuntu1804-docker-8c-8g-2233 systemd-logind[1022]: New seat seat0. Aug 3 11:29:10 prd-ubuntu1804-docker-8c-8g-2233 sshd[1146]: Server listening on 0.0.0.0 port 22. Aug 3 11:29:10 prd-ubuntu1804-docker-8c-8g-2233 sshd[1146]: Server listening on :: port 22. Aug 3 11:29:12 prd-ubuntu1804-docker-8c-8g-2233 sshd[1497]: Did not receive identification string from 10.30.104.4 port 33242 Aug 3 11:29:13 prd-ubuntu1804-docker-8c-8g-2233 sshd[1508]: Invalid user jenkins from 10.30.104.4 port 33286 Aug 3 11:29:13 prd-ubuntu1804-docker-8c-8g-2233 sshd[1508]: Received disconnect from 10.30.104.4 port 33286:11: Closed due to user request. [preauth] Aug 3 11:29:13 prd-ubuntu1804-docker-8c-8g-2233 sshd[1508]: Disconnected from invalid user jenkins 10.30.104.4 port 33286 [preauth] Aug 3 11:29:15 prd-ubuntu1804-docker-8c-8g-2233 sshd[1512]: Invalid user jenkins from 10.30.104.4 port 33452 Aug 3 11:29:15 prd-ubuntu1804-docker-8c-8g-2233 sshd[1512]: Received disconnect from 10.30.104.4 port 33452:11: Closed due to user request. [preauth] Aug 3 11:29:15 prd-ubuntu1804-docker-8c-8g-2233 sshd[1512]: Disconnected from invalid user jenkins 10.30.104.4 port 33452 [preauth] Aug 3 11:29:17 prd-ubuntu1804-docker-8c-8g-2233 sshd[1537]: Invalid user jenkins from 10.30.104.4 port 33512 Aug 3 11:29:17 prd-ubuntu1804-docker-8c-8g-2233 sshd[1537]: Received disconnect from 10.30.104.4 port 33512:11: Closed due to user request. [preauth] Aug 3 11:29:17 prd-ubuntu1804-docker-8c-8g-2233 sshd[1537]: Disconnected from invalid user jenkins 10.30.104.4 port 33512 [preauth] Aug 3 11:29:19 prd-ubuntu1804-docker-8c-8g-2233 sshd[1539]: Invalid user jenkins from 10.30.104.4 port 33564 Aug 3 11:29:19 prd-ubuntu1804-docker-8c-8g-2233 sshd[1539]: Received disconnect from 10.30.104.4 port 33564:11: Closed due to user request. [preauth] Aug 3 11:29:19 prd-ubuntu1804-docker-8c-8g-2233 sshd[1539]: Disconnected from invalid user jenkins 10.30.104.4 port 33564 [preauth] Aug 3 11:29:21 prd-ubuntu1804-docker-8c-8g-2233 sshd[1541]: Invalid user jenkins from 10.30.104.4 port 33626 Aug 3 11:29:21 prd-ubuntu1804-docker-8c-8g-2233 sshd[1541]: Received disconnect from 10.30.104.4 port 33626:11: Closed due to user request. [preauth] Aug 3 11:29:21 prd-ubuntu1804-docker-8c-8g-2233 sshd[1541]: Disconnected from invalid user jenkins 10.30.104.4 port 33626 [preauth] Aug 3 11:29:23 prd-ubuntu1804-docker-8c-8g-2233 sshd[1543]: Invalid user jenkins from 10.30.104.4 port 33700 Aug 3 11:29:23 prd-ubuntu1804-docker-8c-8g-2233 sshd[1543]: Received disconnect from 10.30.104.4 port 33700:11: Closed due to user request. [preauth] Aug 3 11:29:23 prd-ubuntu1804-docker-8c-8g-2233 sshd[1543]: Disconnected from invalid user jenkins 10.30.104.4 port 33700 [preauth] Aug 3 11:29:25 prd-ubuntu1804-docker-8c-8g-2233 sshd[1545]: Invalid user jenkins from 10.30.104.4 port 33850 Aug 3 11:29:25 prd-ubuntu1804-docker-8c-8g-2233 sshd[1545]: Received disconnect from 10.30.104.4 port 33850:11: Closed due to user request. [preauth] Aug 3 11:29:25 prd-ubuntu1804-docker-8c-8g-2233 sshd[1545]: Disconnected from invalid user jenkins 10.30.104.4 port 33850 [preauth] Aug 3 11:29:28 prd-ubuntu1804-docker-8c-8g-2233 sshd[1645]: Invalid user jenkins from 10.30.104.4 port 33922 Aug 3 11:29:28 prd-ubuntu1804-docker-8c-8g-2233 sshd[1645]: Received disconnect from 10.30.104.4 port 33922:11: Closed due to user request. [preauth] Aug 3 11:29:28 prd-ubuntu1804-docker-8c-8g-2233 sshd[1645]: Disconnected from invalid user jenkins 10.30.104.4 port 33922 [preauth] Aug 3 11:29:30 prd-ubuntu1804-docker-8c-8g-2233 sshd[1786]: Invalid user jenkins from 10.30.104.4 port 33986 Aug 3 11:29:30 prd-ubuntu1804-docker-8c-8g-2233 sshd[1786]: Received disconnect from 10.30.104.4 port 33986:11: Closed due to user request. [preauth] Aug 3 11:29:30 prd-ubuntu1804-docker-8c-8g-2233 sshd[1786]: Disconnected from invalid user jenkins 10.30.104.4 port 33986 [preauth] Aug 3 11:29:32 prd-ubuntu1804-docker-8c-8g-2233 sshd[1808]: Invalid user jenkins from 10.30.104.4 port 34038 Aug 3 11:29:32 prd-ubuntu1804-docker-8c-8g-2233 sshd[1808]: Received disconnect from 10.30.104.4 port 34038:11: Closed due to user request. [preauth] Aug 3 11:29:32 prd-ubuntu1804-docker-8c-8g-2233 sshd[1808]: Disconnected from invalid user jenkins 10.30.104.4 port 34038 [preauth] Aug 3 11:29:33 prd-ubuntu1804-docker-8c-8g-2233 useradd[1815]: new group: name=jenkins, GID=1001 Aug 3 11:29:33 prd-ubuntu1804-docker-8c-8g-2233 useradd[1815]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 3 11:29:34 prd-ubuntu1804-docker-8c-8g-2233 usermod[1822]: add 'jenkins' to group 'docker' Aug 3 11:29:34 prd-ubuntu1804-docker-8c-8g-2233 usermod[1822]: add 'jenkins' to shadow group 'docker' Aug 3 11:29:34 prd-ubuntu1804-docker-8c-8g-2233 sshd[1853]: Accepted publickey for jenkins from 10.30.104.4 port 34132 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Aug 3 11:29:34 prd-ubuntu1804-docker-8c-8g-2233 sshd[1853]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 3 11:29:34 prd-ubuntu1804-docker-8c-8g-2233 systemd-logind[1022]: New session 1 of user jenkins. Aug 3 11:29:34 prd-ubuntu1804-docker-8c-8g-2233 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 3 11:30:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[2440]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 3 11:30:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[2440]: pam_unix(cron:session): session closed for user root Aug 3 11:31:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[3145]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 3 11:31:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[3145]: pam_unix(cron:session): session closed for user root Aug 3 11:32:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[3521]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 3 11:32:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[3521]: pam_unix(cron:session): session closed for user root Aug 3 11:33:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[4353]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 3 11:33:01 prd-ubuntu1804-docker-8c-8g-2233 CRON[4353]: pam_unix(cron:session): session closed for user root Aug 3 11:33:08 prd-ubuntu1804-docker-8c-8g-2233 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-history-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 3 11:33:08 prd-ubuntu1804-docker-8c-8g-2233 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)