Mar 17 16:23:05 prd-ubuntu1804-docker-8c-8g-2601 passwd[995]: password for 'ubuntu' changed by 'root' Mar 17 16:23:05 prd-ubuntu1804-docker-8c-8g-2601 systemd-logind[1061]: Watching system buttons on /dev/input/event0 (Power Button) Mar 17 16:23:05 prd-ubuntu1804-docker-8c-8g-2601 systemd-logind[1061]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 17 16:23:05 prd-ubuntu1804-docker-8c-8g-2601 systemd-logind[1061]: New seat seat0. Mar 17 16:23:05 prd-ubuntu1804-docker-8c-8g-2601 sshd[1146]: Server listening on 0.0.0.0 port 22. Mar 17 16:23:05 prd-ubuntu1804-docker-8c-8g-2601 sshd[1146]: Server listening on :: port 22. Mar 17 16:23:07 prd-ubuntu1804-docker-8c-8g-2601 sshd[1431]: Did not receive identification string from 10.30.104.4 port 46106 Mar 17 16:23:11 prd-ubuntu1804-docker-8c-8g-2601 sshd[1461]: Invalid user jenkins from 10.30.104.4 port 46122 Mar 17 16:23:11 prd-ubuntu1804-docker-8c-8g-2601 sshd[1461]: Received disconnect from 10.30.104.4 port 46122:11: Closed due to user request. [preauth] Mar 17 16:23:11 prd-ubuntu1804-docker-8c-8g-2601 sshd[1461]: Disconnected from invalid user jenkins 10.30.104.4 port 46122 [preauth] Mar 17 16:23:13 prd-ubuntu1804-docker-8c-8g-2601 sshd[1465]: Invalid user jenkins from 10.30.104.4 port 46138 Mar 17 16:23:13 prd-ubuntu1804-docker-8c-8g-2601 sshd[1465]: Received disconnect from 10.30.104.4 port 46138:11: Closed due to user request. [preauth] Mar 17 16:23:13 prd-ubuntu1804-docker-8c-8g-2601 sshd[1465]: Disconnected from invalid user jenkins 10.30.104.4 port 46138 [preauth] Mar 17 16:23:15 prd-ubuntu1804-docker-8c-8g-2601 sshd[1467]: Invalid user jenkins from 10.30.104.4 port 46146 Mar 17 16:23:15 prd-ubuntu1804-docker-8c-8g-2601 sshd[1467]: Received disconnect from 10.30.104.4 port 46146:11: Closed due to user request. [preauth] Mar 17 16:23:15 prd-ubuntu1804-docker-8c-8g-2601 sshd[1467]: Disconnected from invalid user jenkins 10.30.104.4 port 46146 [preauth] Mar 17 16:23:17 prd-ubuntu1804-docker-8c-8g-2601 sshd[1469]: Invalid user jenkins from 10.30.104.4 port 46156 Mar 17 16:23:17 prd-ubuntu1804-docker-8c-8g-2601 sshd[1469]: Received disconnect from 10.30.104.4 port 46156:11: Closed due to user request. [preauth] Mar 17 16:23:17 prd-ubuntu1804-docker-8c-8g-2601 sshd[1469]: Disconnected from invalid user jenkins 10.30.104.4 port 46156 [preauth] Mar 17 16:23:19 prd-ubuntu1804-docker-8c-8g-2601 sshd[1471]: Invalid user jenkins from 10.30.104.4 port 46166 Mar 17 16:23:19 prd-ubuntu1804-docker-8c-8g-2601 sshd[1471]: Received disconnect from 10.30.104.4 port 46166:11: Closed due to user request. [preauth] Mar 17 16:23:19 prd-ubuntu1804-docker-8c-8g-2601 sshd[1471]: Disconnected from invalid user jenkins 10.30.104.4 port 46166 [preauth] Mar 17 16:23:22 prd-ubuntu1804-docker-8c-8g-2601 sshd[1473]: Invalid user jenkins from 10.30.104.4 port 46182 Mar 17 16:23:22 prd-ubuntu1804-docker-8c-8g-2601 sshd[1473]: Received disconnect from 10.30.104.4 port 46182:11: Closed due to user request. [preauth] Mar 17 16:23:22 prd-ubuntu1804-docker-8c-8g-2601 sshd[1473]: Disconnected from invalid user jenkins 10.30.104.4 port 46182 [preauth] Mar 17 16:23:24 prd-ubuntu1804-docker-8c-8g-2601 sshd[1475]: Invalid user jenkins from 10.30.104.4 port 46204 Mar 17 16:23:24 prd-ubuntu1804-docker-8c-8g-2601 sshd[1475]: Received disconnect from 10.30.104.4 port 46204:11: Closed due to user request. [preauth] Mar 17 16:23:24 prd-ubuntu1804-docker-8c-8g-2601 sshd[1475]: Disconnected from invalid user jenkins 10.30.104.4 port 46204 [preauth] Mar 17 16:23:26 prd-ubuntu1804-docker-8c-8g-2601 sshd[1501]: Invalid user jenkins from 10.30.104.4 port 46222 Mar 17 16:23:26 prd-ubuntu1804-docker-8c-8g-2601 sshd[1501]: Received disconnect from 10.30.104.4 port 46222:11: Closed due to user request. [preauth] Mar 17 16:23:26 prd-ubuntu1804-docker-8c-8g-2601 sshd[1501]: Disconnected from invalid user jenkins 10.30.104.4 port 46222 [preauth] Mar 17 16:23:28 prd-ubuntu1804-docker-8c-8g-2601 sshd[1520]: Invalid user jenkins from 10.30.104.4 port 46236 Mar 17 16:23:28 prd-ubuntu1804-docker-8c-8g-2601 sshd[1520]: Received disconnect from 10.30.104.4 port 46236:11: Closed due to user request. [preauth] Mar 17 16:23:28 prd-ubuntu1804-docker-8c-8g-2601 sshd[1520]: Disconnected from invalid user jenkins 10.30.104.4 port 46236 [preauth] Mar 17 16:23:30 prd-ubuntu1804-docker-8c-8g-2601 sshd[1532]: Invalid user jenkins from 10.30.104.4 port 46256 Mar 17 16:23:30 prd-ubuntu1804-docker-8c-8g-2601 sshd[1532]: Received disconnect from 10.30.104.4 port 46256:11: Closed due to user request. [preauth] Mar 17 16:23:30 prd-ubuntu1804-docker-8c-8g-2601 sshd[1532]: Disconnected from invalid user jenkins 10.30.104.4 port 46256 [preauth] Mar 17 16:23:41 prd-ubuntu1804-docker-8c-8g-2601 sshd[1534]: Invalid user jenkins from 10.30.104.4 port 46266 Mar 17 16:23:41 prd-ubuntu1804-docker-8c-8g-2601 sshd[1534]: Received disconnect from 10.30.104.4 port 46266:11: Closed due to user request. [preauth] Mar 17 16:23:41 prd-ubuntu1804-docker-8c-8g-2601 sshd[1534]: Disconnected from invalid user jenkins 10.30.104.4 port 46266 [preauth] Mar 17 16:23:43 prd-ubuntu1804-docker-8c-8g-2601 sshd[1564]: Invalid user jenkins from 10.30.104.4 port 46344 Mar 17 16:23:43 prd-ubuntu1804-docker-8c-8g-2601 sshd[1564]: Received disconnect from 10.30.104.4 port 46344:11: Closed due to user request. [preauth] Mar 17 16:23:43 prd-ubuntu1804-docker-8c-8g-2601 sshd[1564]: Disconnected from invalid user jenkins 10.30.104.4 port 46344 [preauth] Mar 17 16:23:45 prd-ubuntu1804-docker-8c-8g-2601 sshd[1683]: Invalid user jenkins from 10.30.104.4 port 46362 Mar 17 16:23:45 prd-ubuntu1804-docker-8c-8g-2601 sshd[1683]: Received disconnect from 10.30.104.4 port 46362:11: Closed due to user request. [preauth] Mar 17 16:23:45 prd-ubuntu1804-docker-8c-8g-2601 sshd[1683]: Disconnected from invalid user jenkins 10.30.104.4 port 46362 [preauth] Mar 17 16:23:47 prd-ubuntu1804-docker-8c-8g-2601 sshd[1821]: Invalid user jenkins from 10.30.104.4 port 46374 Mar 17 16:23:47 prd-ubuntu1804-docker-8c-8g-2601 sshd[1821]: Received disconnect from 10.30.104.4 port 46374:11: Closed due to user request. [preauth] Mar 17 16:23:47 prd-ubuntu1804-docker-8c-8g-2601 sshd[1821]: Disconnected from invalid user jenkins 10.30.104.4 port 46374 [preauth] Mar 17 16:23:49 prd-ubuntu1804-docker-8c-8g-2601 sshd[1825]: Invalid user jenkins from 10.30.104.4 port 46396 Mar 17 16:23:49 prd-ubuntu1804-docker-8c-8g-2601 sshd[1825]: Received disconnect from 10.30.104.4 port 46396:11: Closed due to user request. [preauth] Mar 17 16:23:49 prd-ubuntu1804-docker-8c-8g-2601 sshd[1825]: Disconnected from invalid user jenkins 10.30.104.4 port 46396 [preauth] Mar 17 16:23:51 prd-ubuntu1804-docker-8c-8g-2601 sshd[1827]: Invalid user jenkins from 10.30.104.4 port 46418 Mar 17 16:23:51 prd-ubuntu1804-docker-8c-8g-2601 sshd[1827]: Received disconnect from 10.30.104.4 port 46418:11: Closed due to user request. [preauth] Mar 17 16:23:51 prd-ubuntu1804-docker-8c-8g-2601 sshd[1827]: Disconnected from invalid user jenkins 10.30.104.4 port 46418 [preauth] Mar 17 16:23:52 prd-ubuntu1804-docker-8c-8g-2601 useradd[1834]: new group: name=jenkins, GID=1001 Mar 17 16:23:52 prd-ubuntu1804-docker-8c-8g-2601 useradd[1834]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 17 16:23:52 prd-ubuntu1804-docker-8c-8g-2601 usermod[1841]: add 'jenkins' to group 'docker' Mar 17 16:23:52 prd-ubuntu1804-docker-8c-8g-2601 usermod[1841]: add 'jenkins' to shadow group 'docker' Mar 17 16:23:53 prd-ubuntu1804-docker-8c-8g-2601 sshd[1909]: Accepted publickey for jenkins from 10.30.104.4 port 46442 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Mar 17 16:23:53 prd-ubuntu1804-docker-8c-8g-2601 sshd[1909]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 17 16:23:53 prd-ubuntu1804-docker-8c-8g-2601 systemd-logind[1061]: New session 1 of user jenkins. Mar 17 16:23:53 prd-ubuntu1804-docker-8c-8g-2601 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 17 16:24:01 prd-ubuntu1804-docker-8c-8g-2601 CRON[2154]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 16:24:01 prd-ubuntu1804-docker-8c-8g-2601 CRON[2154]: pam_unix(cron:session): session closed for user root Mar 17 16:25:01 prd-ubuntu1804-docker-8c-8g-2601 CRON[2679]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 16:25:01 prd-ubuntu1804-docker-8c-8g-2601 CRON[2679]: pam_unix(cron:session): session closed for user root Mar 17 16:26:01 prd-ubuntu1804-docker-8c-8g-2601 CRON[3958]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 16:26:01 prd-ubuntu1804-docker-8c-8g-2601 CRON[3958]: pam_unix(cron:session): session closed for user root Mar 17 16:26:19 prd-ubuntu1804-docker-8c-8g-2601 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dcaegen2-collectors-snmptrap-tox-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 17 16:26:19 prd-ubuntu1804-docker-8c-8g-2601 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)