Oct 22 20:47:00 prd-ubuntu1804-docker-8c-8g-4273 passwd[1023]: password for 'ubuntu' changed by 'root' Oct 22 20:47:00 prd-ubuntu1804-docker-8c-8g-4273 systemd-logind[1067]: Watching system buttons on /dev/input/event0 (Power Button) Oct 22 20:47:00 prd-ubuntu1804-docker-8c-8g-4273 systemd-logind[1067]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 22 20:47:00 prd-ubuntu1804-docker-8c-8g-4273 systemd-logind[1067]: New seat seat0. Oct 22 20:47:00 prd-ubuntu1804-docker-8c-8g-4273 sshd[1312]: Server listening on 0.0.0.0 port 22. Oct 22 20:47:00 prd-ubuntu1804-docker-8c-8g-4273 sshd[1312]: Server listening on :: port 22. Oct 22 20:47:02 prd-ubuntu1804-docker-8c-8g-4273 CRON[1551]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 20:47:02 prd-ubuntu1804-docker-8c-8g-4273 CRON[1551]: pam_unix(cron:session): session closed for user root Oct 22 20:47:04 prd-ubuntu1804-docker-8c-8g-4273 sshd[1571]: Did not receive identification string from 10.30.104.4 port 40804 Oct 22 20:47:10 prd-ubuntu1804-docker-8c-8g-4273 sshd[1598]: Invalid user jenkins from 10.30.104.4 port 40858 Oct 22 20:47:10 prd-ubuntu1804-docker-8c-8g-4273 sshd[1598]: Received disconnect from 10.30.104.4 port 40858:11: Closed due to user request. [preauth] Oct 22 20:47:10 prd-ubuntu1804-docker-8c-8g-4273 sshd[1598]: Disconnected from invalid user jenkins 10.30.104.4 port 40858 [preauth] Oct 22 20:47:12 prd-ubuntu1804-docker-8c-8g-4273 sshd[1602]: Invalid user jenkins from 10.30.104.4 port 40880 Oct 22 20:47:12 prd-ubuntu1804-docker-8c-8g-4273 sshd[1602]: Received disconnect from 10.30.104.4 port 40880:11: Closed due to user request. [preauth] Oct 22 20:47:12 prd-ubuntu1804-docker-8c-8g-4273 sshd[1602]: Disconnected from invalid user jenkins 10.30.104.4 port 40880 [preauth] Oct 22 20:47:14 prd-ubuntu1804-docker-8c-8g-4273 sshd[1604]: Invalid user jenkins from 10.30.104.4 port 40894 Oct 22 20:47:14 prd-ubuntu1804-docker-8c-8g-4273 sshd[1604]: Received disconnect from 10.30.104.4 port 40894:11: Closed due to user request. [preauth] Oct 22 20:47:14 prd-ubuntu1804-docker-8c-8g-4273 sshd[1604]: Disconnected from invalid user jenkins 10.30.104.4 port 40894 [preauth] Oct 22 20:47:16 prd-ubuntu1804-docker-8c-8g-4273 sshd[1606]: Invalid user jenkins from 10.30.104.4 port 40906 Oct 22 20:47:16 prd-ubuntu1804-docker-8c-8g-4273 sshd[1606]: Received disconnect from 10.30.104.4 port 40906:11: Closed due to user request. [preauth] Oct 22 20:47:16 prd-ubuntu1804-docker-8c-8g-4273 sshd[1606]: Disconnected from invalid user jenkins 10.30.104.4 port 40906 [preauth] Oct 22 20:47:18 prd-ubuntu1804-docker-8c-8g-4273 sshd[1615]: Invalid user jenkins from 10.30.104.4 port 40916 Oct 22 20:47:18 prd-ubuntu1804-docker-8c-8g-4273 sshd[1615]: Received disconnect from 10.30.104.4 port 40916:11: Closed due to user request. [preauth] Oct 22 20:47:18 prd-ubuntu1804-docker-8c-8g-4273 sshd[1615]: Disconnected from invalid user jenkins 10.30.104.4 port 40916 [preauth] Oct 22 20:47:21 prd-ubuntu1804-docker-8c-8g-4273 sshd[1617]: Invalid user jenkins from 10.30.104.4 port 40934 Oct 22 20:47:22 prd-ubuntu1804-docker-8c-8g-4273 sshd[1617]: Received disconnect from 10.30.104.4 port 40934:11: Closed due to user request. [preauth] Oct 22 20:47:22 prd-ubuntu1804-docker-8c-8g-4273 sshd[1617]: Disconnected from invalid user jenkins 10.30.104.4 port 40934 [preauth] Oct 22 20:47:24 prd-ubuntu1804-docker-8c-8g-4273 sshd[1628]: Invalid user jenkins from 10.30.104.4 port 40954 Oct 22 20:47:24 prd-ubuntu1804-docker-8c-8g-4273 sshd[1628]: Received disconnect from 10.30.104.4 port 40954:11: Closed due to user request. [preauth] Oct 22 20:47:24 prd-ubuntu1804-docker-8c-8g-4273 sshd[1628]: Disconnected from invalid user jenkins 10.30.104.4 port 40954 [preauth] Oct 22 20:47:26 prd-ubuntu1804-docker-8c-8g-4273 sshd[1630]: Invalid user jenkins from 10.30.104.4 port 40976 Oct 22 20:47:26 prd-ubuntu1804-docker-8c-8g-4273 sshd[1630]: Received disconnect from 10.30.104.4 port 40976:11: Closed due to user request. [preauth] Oct 22 20:47:26 prd-ubuntu1804-docker-8c-8g-4273 sshd[1630]: Disconnected from invalid user jenkins 10.30.104.4 port 40976 [preauth] Oct 22 20:47:28 prd-ubuntu1804-docker-8c-8g-4273 sshd[1632]: Invalid user jenkins from 10.30.104.4 port 40996 Oct 22 20:47:28 prd-ubuntu1804-docker-8c-8g-4273 sshd[1632]: Received disconnect from 10.30.104.4 port 40996:11: Closed due to user request. [preauth] Oct 22 20:47:28 prd-ubuntu1804-docker-8c-8g-4273 sshd[1632]: Disconnected from invalid user jenkins 10.30.104.4 port 40996 [preauth] Oct 22 20:47:31 prd-ubuntu1804-docker-8c-8g-4273 sshd[1660]: Invalid user jenkins from 10.30.104.4 port 41014 Oct 22 20:47:31 prd-ubuntu1804-docker-8c-8g-4273 sshd[1660]: Received disconnect from 10.30.104.4 port 41014:11: Closed due to user request. [preauth] Oct 22 20:47:31 prd-ubuntu1804-docker-8c-8g-4273 sshd[1660]: Disconnected from invalid user jenkins 10.30.104.4 port 41014 [preauth] Oct 22 20:47:33 prd-ubuntu1804-docker-8c-8g-4273 sshd[1802]: Invalid user jenkins from 10.30.104.4 port 41034 Oct 22 20:47:33 prd-ubuntu1804-docker-8c-8g-4273 sshd[1802]: Received disconnect from 10.30.104.4 port 41034:11: Closed due to user request. [preauth] Oct 22 20:47:33 prd-ubuntu1804-docker-8c-8g-4273 sshd[1802]: Disconnected from invalid user jenkins 10.30.104.4 port 41034 [preauth] Oct 22 20:47:35 prd-ubuntu1804-docker-8c-8g-4273 sshd[1837]: Invalid user jenkins from 10.30.104.4 port 41046 Oct 22 20:47:35 prd-ubuntu1804-docker-8c-8g-4273 sshd[1837]: Received disconnect from 10.30.104.4 port 41046:11: Closed due to user request. [preauth] Oct 22 20:47:35 prd-ubuntu1804-docker-8c-8g-4273 sshd[1837]: Disconnected from invalid user jenkins 10.30.104.4 port 41046 [preauth] Oct 22 20:47:37 prd-ubuntu1804-docker-8c-8g-4273 sshd[1875]: Invalid user jenkins from 10.30.104.4 port 41054 Oct 22 20:47:37 prd-ubuntu1804-docker-8c-8g-4273 sshd[1875]: Received disconnect from 10.30.104.4 port 41054:11: Closed due to user request. [preauth] Oct 22 20:47:37 prd-ubuntu1804-docker-8c-8g-4273 sshd[1875]: Disconnected from invalid user jenkins 10.30.104.4 port 41054 [preauth] Oct 22 20:47:39 prd-ubuntu1804-docker-8c-8g-4273 sshd[1904]: Invalid user jenkins from 10.30.104.4 port 41074 Oct 22 20:47:39 prd-ubuntu1804-docker-8c-8g-4273 sshd[1904]: Received disconnect from 10.30.104.4 port 41074:11: Closed due to user request. [preauth] Oct 22 20:47:39 prd-ubuntu1804-docker-8c-8g-4273 sshd[1904]: Disconnected from invalid user jenkins 10.30.104.4 port 41074 [preauth] Oct 22 20:47:41 prd-ubuntu1804-docker-8c-8g-4273 sshd[1906]: Invalid user jenkins from 10.30.104.4 port 41090 Oct 22 20:47:41 prd-ubuntu1804-docker-8c-8g-4273 sshd[1906]: Received disconnect from 10.30.104.4 port 41090:11: Closed due to user request. [preauth] Oct 22 20:47:41 prd-ubuntu1804-docker-8c-8g-4273 sshd[1906]: Disconnected from invalid user jenkins 10.30.104.4 port 41090 [preauth] Oct 22 20:47:43 prd-ubuntu1804-docker-8c-8g-4273 sshd[1908]: Invalid user jenkins from 10.30.104.4 port 41100 Oct 22 20:47:43 prd-ubuntu1804-docker-8c-8g-4273 sshd[1908]: Received disconnect from 10.30.104.4 port 41100:11: Closed due to user request. [preauth] Oct 22 20:47:43 prd-ubuntu1804-docker-8c-8g-4273 sshd[1908]: Disconnected from invalid user jenkins 10.30.104.4 port 41100 [preauth] Oct 22 20:47:45 prd-ubuntu1804-docker-8c-8g-4273 sshd[1910]: Invalid user jenkins from 10.30.104.4 port 41112 Oct 22 20:47:46 prd-ubuntu1804-docker-8c-8g-4273 sshd[1910]: Received disconnect from 10.30.104.4 port 41112:11: Closed due to user request. [preauth] Oct 22 20:47:46 prd-ubuntu1804-docker-8c-8g-4273 sshd[1910]: Disconnected from invalid user jenkins 10.30.104.4 port 41112 [preauth] Oct 22 20:47:48 prd-ubuntu1804-docker-8c-8g-4273 sshd[1912]: Invalid user jenkins from 10.30.104.4 port 41122 Oct 22 20:47:48 prd-ubuntu1804-docker-8c-8g-4273 sshd[1912]: Received disconnect from 10.30.104.4 port 41122:11: Closed due to user request. [preauth] Oct 22 20:47:48 prd-ubuntu1804-docker-8c-8g-4273 sshd[1912]: Disconnected from invalid user jenkins 10.30.104.4 port 41122 [preauth] Oct 22 20:47:50 prd-ubuntu1804-docker-8c-8g-4273 sshd[1914]: Invalid user jenkins from 10.30.104.4 port 41128 Oct 22 20:47:50 prd-ubuntu1804-docker-8c-8g-4273 sshd[1914]: Received disconnect from 10.30.104.4 port 41128:11: Closed due to user request. [preauth] Oct 22 20:47:50 prd-ubuntu1804-docker-8c-8g-4273 sshd[1914]: Disconnected from invalid user jenkins 10.30.104.4 port 41128 [preauth] Oct 22 20:47:52 prd-ubuntu1804-docker-8c-8g-4273 sshd[1916]: Invalid user jenkins from 10.30.104.4 port 41138 Oct 22 20:47:52 prd-ubuntu1804-docker-8c-8g-4273 sshd[1916]: Received disconnect from 10.30.104.4 port 41138:11: Closed due to user request. [preauth] Oct 22 20:47:52 prd-ubuntu1804-docker-8c-8g-4273 sshd[1916]: Disconnected from invalid user jenkins 10.30.104.4 port 41138 [preauth] Oct 22 20:47:54 prd-ubuntu1804-docker-8c-8g-4273 sshd[1918]: Invalid user jenkins from 10.30.104.4 port 41148 Oct 22 20:47:54 prd-ubuntu1804-docker-8c-8g-4273 sshd[1918]: Received disconnect from 10.30.104.4 port 41148:11: Closed due to user request. [preauth] Oct 22 20:47:54 prd-ubuntu1804-docker-8c-8g-4273 sshd[1918]: Disconnected from invalid user jenkins 10.30.104.4 port 41148 [preauth] Oct 22 20:47:56 prd-ubuntu1804-docker-8c-8g-4273 sshd[1921]: Invalid user jenkins from 10.30.104.4 port 41160 Oct 22 20:47:56 prd-ubuntu1804-docker-8c-8g-4273 useradd[1927]: new group: name=jenkins, GID=1001 Oct 22 20:47:56 prd-ubuntu1804-docker-8c-8g-4273 useradd[1927]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 22 20:47:56 prd-ubuntu1804-docker-8c-8g-4273 sshd[1921]: Received disconnect from 10.30.104.4 port 41160:11: Closed due to user request. [preauth] Oct 22 20:47:56 prd-ubuntu1804-docker-8c-8g-4273 sshd[1921]: Disconnected from invalid user jenkins 10.30.104.4 port 41160 [preauth] Oct 22 20:47:57 prd-ubuntu1804-docker-8c-8g-4273 usermod[1934]: add 'jenkins' to group 'docker' Oct 22 20:47:57 prd-ubuntu1804-docker-8c-8g-4273 usermod[1934]: add 'jenkins' to shadow group 'docker' Oct 22 20:47:58 prd-ubuntu1804-docker-8c-8g-4273 sshd[1995]: Accepted publickey for jenkins from 10.30.104.4 port 41170 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Oct 22 20:47:58 prd-ubuntu1804-docker-8c-8g-4273 sshd[1995]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 22 20:47:58 prd-ubuntu1804-docker-8c-8g-4273 systemd-logind[1067]: New session 2 of user jenkins. Oct 22 20:47:58 prd-ubuntu1804-docker-8c-8g-4273 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 22 20:48:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[2185]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 20:48:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[2185]: pam_unix(cron:session): session closed for user root Oct 22 20:49:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[2556]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 20:49:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[2556]: pam_unix(cron:session): session closed for user root Oct 22 20:50:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[3670]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 20:50:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[3670]: pam_unix(cron:session): session closed for user root Oct 22 20:51:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[4136]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 20:51:01 prd-ubuntu1804-docker-8c-8g-4273 CRON[4136]: pam_unix(cron:session): session closed for user root Oct 22 20:51:47 prd-ubuntu1804-docker-8c-8g-4273 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-healthcheck-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 22 20:51:47 prd-ubuntu1804-docker-8c-8g-4273 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)