Feb 21 12:57:59 prd-ubuntu1804-docker-8c-8g-18911 passwd[997]: password for 'ubuntu' changed by 'root' Feb 21 12:57:59 prd-ubuntu1804-docker-8c-8g-18911 systemd-logind[1067]: Watching system buttons on /dev/input/event0 (Power Button) Feb 21 12:57:59 prd-ubuntu1804-docker-8c-8g-18911 systemd-logind[1067]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 21 12:57:59 prd-ubuntu1804-docker-8c-8g-18911 systemd-logind[1067]: New seat seat0. Feb 21 12:57:59 prd-ubuntu1804-docker-8c-8g-18911 sshd[1119]: Server listening on 0.0.0.0 port 22. Feb 21 12:57:59 prd-ubuntu1804-docker-8c-8g-18911 sshd[1119]: Server listening on :: port 22. Feb 21 12:58:01 prd-ubuntu1804-docker-8c-8g-18911 sshd[1421]: Did not receive identification string from 10.30.104.4 port 60772 Feb 21 12:58:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[1426]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 12:58:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[1426]: pam_unix(cron:session): session closed for user root Feb 21 12:58:01 prd-ubuntu1804-docker-8c-8g-18911 sshd[1435]: Invalid user jenkins from 10.30.104.4 port 60774 Feb 21 12:58:01 prd-ubuntu1804-docker-8c-8g-18911 sshd[1435]: Received disconnect from 10.30.104.4 port 60774:11: Closed due to user request. [preauth] Feb 21 12:58:01 prd-ubuntu1804-docker-8c-8g-18911 sshd[1435]: Disconnected from invalid user jenkins 10.30.104.4 port 60774 [preauth] Feb 21 12:58:03 prd-ubuntu1804-docker-8c-8g-18911 sshd[1445]: Invalid user jenkins from 10.30.104.4 port 60808 Feb 21 12:58:03 prd-ubuntu1804-docker-8c-8g-18911 sshd[1445]: Received disconnect from 10.30.104.4 port 60808:11: Closed due to user request. [preauth] Feb 21 12:58:03 prd-ubuntu1804-docker-8c-8g-18911 sshd[1445]: Disconnected from invalid user jenkins 10.30.104.4 port 60808 [preauth] Feb 21 12:58:05 prd-ubuntu1804-docker-8c-8g-18911 sshd[1465]: Invalid user jenkins from 10.30.104.4 port 60830 Feb 21 12:58:05 prd-ubuntu1804-docker-8c-8g-18911 sshd[1465]: Received disconnect from 10.30.104.4 port 60830:11: Closed due to user request. [preauth] Feb 21 12:58:05 prd-ubuntu1804-docker-8c-8g-18911 sshd[1465]: Disconnected from invalid user jenkins 10.30.104.4 port 60830 [preauth] Feb 21 12:58:08 prd-ubuntu1804-docker-8c-8g-18911 sshd[1467]: Invalid user jenkins from 10.30.104.4 port 60848 Feb 21 12:58:08 prd-ubuntu1804-docker-8c-8g-18911 sshd[1467]: Received disconnect from 10.30.104.4 port 60848:11: Closed due to user request. [preauth] Feb 21 12:58:08 prd-ubuntu1804-docker-8c-8g-18911 sshd[1467]: Disconnected from invalid user jenkins 10.30.104.4 port 60848 [preauth] Feb 21 12:58:10 prd-ubuntu1804-docker-8c-8g-18911 sshd[1469]: Invalid user jenkins from 10.30.104.4 port 60864 Feb 21 12:58:10 prd-ubuntu1804-docker-8c-8g-18911 sshd[1469]: Received disconnect from 10.30.104.4 port 60864:11: Closed due to user request. [preauth] Feb 21 12:58:10 prd-ubuntu1804-docker-8c-8g-18911 sshd[1469]: Disconnected from invalid user jenkins 10.30.104.4 port 60864 [preauth] Feb 21 12:58:12 prd-ubuntu1804-docker-8c-8g-18911 sshd[1471]: Invalid user jenkins from 10.30.104.4 port 60898 Feb 21 12:58:12 prd-ubuntu1804-docker-8c-8g-18911 sshd[1471]: Received disconnect from 10.30.104.4 port 60898:11: Closed due to user request. [preauth] Feb 21 12:58:12 prd-ubuntu1804-docker-8c-8g-18911 sshd[1471]: Disconnected from invalid user jenkins 10.30.104.4 port 60898 [preauth] Feb 21 12:58:14 prd-ubuntu1804-docker-8c-8g-18911 sshd[1473]: Invalid user jenkins from 10.30.104.4 port 60920 Feb 21 12:58:14 prd-ubuntu1804-docker-8c-8g-18911 sshd[1473]: Received disconnect from 10.30.104.4 port 60920:11: Closed due to user request. [preauth] Feb 21 12:58:14 prd-ubuntu1804-docker-8c-8g-18911 sshd[1473]: Disconnected from invalid user jenkins 10.30.104.4 port 60920 [preauth] Feb 21 12:58:16 prd-ubuntu1804-docker-8c-8g-18911 sshd[1475]: Invalid user jenkins from 10.30.104.4 port 60956 Feb 21 12:58:16 prd-ubuntu1804-docker-8c-8g-18911 sshd[1475]: Received disconnect from 10.30.104.4 port 60956:11: Closed due to user request. [preauth] Feb 21 12:58:16 prd-ubuntu1804-docker-8c-8g-18911 sshd[1475]: Disconnected from invalid user jenkins 10.30.104.4 port 60956 [preauth] Feb 21 12:58:19 prd-ubuntu1804-docker-8c-8g-18911 sshd[1636]: Invalid user jenkins from 10.30.104.4 port 60990 Feb 21 12:58:19 prd-ubuntu1804-docker-8c-8g-18911 sshd[1636]: Received disconnect from 10.30.104.4 port 60990:11: Closed due to user request. [preauth] Feb 21 12:58:19 prd-ubuntu1804-docker-8c-8g-18911 sshd[1636]: Disconnected from invalid user jenkins 10.30.104.4 port 60990 [preauth] Feb 21 12:58:21 prd-ubuntu1804-docker-8c-8g-18911 sshd[1695]: Invalid user jenkins from 10.30.104.4 port 32780 Feb 21 12:58:21 prd-ubuntu1804-docker-8c-8g-18911 sshd[1695]: Received disconnect from 10.30.104.4 port 32780:11: Closed due to user request. [preauth] Feb 21 12:58:21 prd-ubuntu1804-docker-8c-8g-18911 sshd[1695]: Disconnected from invalid user jenkins 10.30.104.4 port 32780 [preauth] Feb 21 12:58:23 prd-ubuntu1804-docker-8c-8g-18911 sshd[1722]: Invalid user jenkins from 10.30.104.4 port 32800 Feb 21 12:58:23 prd-ubuntu1804-docker-8c-8g-18911 sshd[1722]: Received disconnect from 10.30.104.4 port 32800:11: Closed due to user request. [preauth] Feb 21 12:58:23 prd-ubuntu1804-docker-8c-8g-18911 sshd[1722]: Disconnected from invalid user jenkins 10.30.104.4 port 32800 [preauth] Feb 21 12:58:26 prd-ubuntu1804-docker-8c-8g-18911 sshd[1752]: Invalid user jenkins from 10.30.104.4 port 32824 Feb 21 12:58:26 prd-ubuntu1804-docker-8c-8g-18911 sshd[1752]: Received disconnect from 10.30.104.4 port 32824:11: Closed due to user request. [preauth] Feb 21 12:58:26 prd-ubuntu1804-docker-8c-8g-18911 sshd[1752]: Disconnected from invalid user jenkins 10.30.104.4 port 32824 [preauth] Feb 21 12:58:28 prd-ubuntu1804-docker-8c-8g-18911 sshd[1756]: Invalid user jenkins from 10.30.104.4 port 32846 Feb 21 12:58:28 prd-ubuntu1804-docker-8c-8g-18911 sshd[1756]: Received disconnect from 10.30.104.4 port 32846:11: Closed due to user request. [preauth] Feb 21 12:58:28 prd-ubuntu1804-docker-8c-8g-18911 sshd[1756]: Disconnected from invalid user jenkins 10.30.104.4 port 32846 [preauth] Feb 21 12:58:30 prd-ubuntu1804-docker-8c-8g-18911 sshd[1758]: Invalid user jenkins from 10.30.104.4 port 32864 Feb 21 12:58:30 prd-ubuntu1804-docker-8c-8g-18911 sshd[1758]: Received disconnect from 10.30.104.4 port 32864:11: Closed due to user request. [preauth] Feb 21 12:58:30 prd-ubuntu1804-docker-8c-8g-18911 sshd[1758]: Disconnected from invalid user jenkins 10.30.104.4 port 32864 [preauth] Feb 21 12:58:32 prd-ubuntu1804-docker-8c-8g-18911 sshd[1781]: Invalid user jenkins from 10.30.104.4 port 32884 Feb 21 12:58:32 prd-ubuntu1804-docker-8c-8g-18911 sshd[1781]: Received disconnect from 10.30.104.4 port 32884:11: Closed due to user request. [preauth] Feb 21 12:58:32 prd-ubuntu1804-docker-8c-8g-18911 sshd[1781]: Disconnected from invalid user jenkins 10.30.104.4 port 32884 [preauth] Feb 21 12:58:34 prd-ubuntu1804-docker-8c-8g-18911 sshd[1783]: Invalid user jenkins from 10.30.104.4 port 32918 Feb 21 12:58:35 prd-ubuntu1804-docker-8c-8g-18911 sshd[1783]: Received disconnect from 10.30.104.4 port 32918:11: Closed due to user request. [preauth] Feb 21 12:58:35 prd-ubuntu1804-docker-8c-8g-18911 sshd[1783]: Disconnected from invalid user jenkins 10.30.104.4 port 32918 [preauth] Feb 21 12:58:37 prd-ubuntu1804-docker-8c-8g-18911 sshd[1785]: Invalid user jenkins from 10.30.104.4 port 32948 Feb 21 12:58:37 prd-ubuntu1804-docker-8c-8g-18911 sshd[1785]: Received disconnect from 10.30.104.4 port 32948:11: Closed due to user request. [preauth] Feb 21 12:58:37 prd-ubuntu1804-docker-8c-8g-18911 sshd[1785]: Disconnected from invalid user jenkins 10.30.104.4 port 32948 [preauth] Feb 21 12:58:39 prd-ubuntu1804-docker-8c-8g-18911 sshd[1787]: Invalid user jenkins from 10.30.104.4 port 32976 Feb 21 12:58:39 prd-ubuntu1804-docker-8c-8g-18911 sshd[1787]: Received disconnect from 10.30.104.4 port 32976:11: Closed due to user request. [preauth] Feb 21 12:58:39 prd-ubuntu1804-docker-8c-8g-18911 sshd[1787]: Disconnected from invalid user jenkins 10.30.104.4 port 32976 [preauth] Feb 21 12:58:41 prd-ubuntu1804-docker-8c-8g-18911 sshd[1789]: Invalid user jenkins from 10.30.104.4 port 33006 Feb 21 12:58:41 prd-ubuntu1804-docker-8c-8g-18911 sshd[1789]: Received disconnect from 10.30.104.4 port 33006:11: Closed due to user request. [preauth] Feb 21 12:58:41 prd-ubuntu1804-docker-8c-8g-18911 sshd[1789]: Disconnected from invalid user jenkins 10.30.104.4 port 33006 [preauth] Feb 21 12:58:43 prd-ubuntu1804-docker-8c-8g-18911 sshd[1791]: Invalid user jenkins from 10.30.104.4 port 33044 Feb 21 12:58:43 prd-ubuntu1804-docker-8c-8g-18911 sshd[1791]: Received disconnect from 10.30.104.4 port 33044:11: Closed due to user request. [preauth] Feb 21 12:58:43 prd-ubuntu1804-docker-8c-8g-18911 sshd[1791]: Disconnected from invalid user jenkins 10.30.104.4 port 33044 [preauth] Feb 21 12:58:45 prd-ubuntu1804-docker-8c-8g-18911 sshd[1793]: Invalid user jenkins from 10.30.104.4 port 33080 Feb 21 12:58:45 prd-ubuntu1804-docker-8c-8g-18911 sshd[1793]: Received disconnect from 10.30.104.4 port 33080:11: Closed due to user request. [preauth] Feb 21 12:58:45 prd-ubuntu1804-docker-8c-8g-18911 sshd[1793]: Disconnected from invalid user jenkins 10.30.104.4 port 33080 [preauth] Feb 21 12:58:47 prd-ubuntu1804-docker-8c-8g-18911 sshd[1795]: Invalid user jenkins from 10.30.104.4 port 33112 Feb 21 12:58:47 prd-ubuntu1804-docker-8c-8g-18911 sshd[1795]: Received disconnect from 10.30.104.4 port 33112:11: Closed due to user request. [preauth] Feb 21 12:58:47 prd-ubuntu1804-docker-8c-8g-18911 sshd[1795]: Disconnected from invalid user jenkins 10.30.104.4 port 33112 [preauth] Feb 21 12:58:50 prd-ubuntu1804-docker-8c-8g-18911 sshd[1797]: Invalid user jenkins from 10.30.104.4 port 33146 Feb 21 12:58:50 prd-ubuntu1804-docker-8c-8g-18911 sshd[1797]: Received disconnect from 10.30.104.4 port 33146:11: Closed due to user request. [preauth] Feb 21 12:58:50 prd-ubuntu1804-docker-8c-8g-18911 sshd[1797]: Disconnected from invalid user jenkins 10.30.104.4 port 33146 [preauth] Feb 21 12:58:52 prd-ubuntu1804-docker-8c-8g-18911 sshd[1799]: Invalid user jenkins from 10.30.104.4 port 33174 Feb 21 12:58:52 prd-ubuntu1804-docker-8c-8g-18911 sshd[1799]: Received disconnect from 10.30.104.4 port 33174:11: Closed due to user request. [preauth] Feb 21 12:58:52 prd-ubuntu1804-docker-8c-8g-18911 sshd[1799]: Disconnected from invalid user jenkins 10.30.104.4 port 33174 [preauth] Feb 21 12:58:56 prd-ubuntu1804-docker-8c-8g-18911 sshd[1801]: Invalid user jenkins from 10.30.104.4 port 33192 Feb 21 12:58:56 prd-ubuntu1804-docker-8c-8g-18911 sshd[1801]: Received disconnect from 10.30.104.4 port 33192:11: Closed due to user request. [preauth] Feb 21 12:58:56 prd-ubuntu1804-docker-8c-8g-18911 sshd[1801]: Disconnected from invalid user jenkins 10.30.104.4 port 33192 [preauth] Feb 21 12:58:58 prd-ubuntu1804-docker-8c-8g-18911 sshd[1803]: Invalid user jenkins from 10.30.104.4 port 33236 Feb 21 12:58:58 prd-ubuntu1804-docker-8c-8g-18911 sshd[1803]: Received disconnect from 10.30.104.4 port 33236:11: Closed due to user request. [preauth] Feb 21 12:58:58 prd-ubuntu1804-docker-8c-8g-18911 sshd[1803]: Disconnected from invalid user jenkins 10.30.104.4 port 33236 [preauth] Feb 21 12:59:00 prd-ubuntu1804-docker-8c-8g-18911 sshd[1820]: Invalid user jenkins from 10.30.104.4 port 33258 Feb 21 12:59:00 prd-ubuntu1804-docker-8c-8g-18911 sshd[1820]: Received disconnect from 10.30.104.4 port 33258:11: Closed due to user request. [preauth] Feb 21 12:59:00 prd-ubuntu1804-docker-8c-8g-18911 sshd[1820]: Disconnected from invalid user jenkins 10.30.104.4 port 33258 [preauth] Feb 21 12:59:00 prd-ubuntu1804-docker-8c-8g-18911 useradd[1825]: new group: name=jenkins, GID=1001 Feb 21 12:59:00 prd-ubuntu1804-docker-8c-8g-18911 useradd[1825]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 21 12:59:02 prd-ubuntu1804-docker-8c-8g-18911 CRON[1826]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 12:59:02 prd-ubuntu1804-docker-8c-8g-18911 CRON[1826]: pam_unix(cron:session): session closed for user root Feb 21 12:59:02 prd-ubuntu1804-docker-8c-8g-18911 sshd[1829]: Received disconnect from 10.30.104.4 port 33282:11: Closed due to user request. [preauth] Feb 21 12:59:02 prd-ubuntu1804-docker-8c-8g-18911 sshd[1829]: Disconnected from authenticating user jenkins 10.30.104.4 port 33282 [preauth] Feb 21 12:59:04 prd-ubuntu1804-docker-8c-8g-18911 usermod[1837]: add 'jenkins' to group 'docker' Feb 21 12:59:04 prd-ubuntu1804-docker-8c-8g-18911 usermod[1837]: add 'jenkins' to shadow group 'docker' Feb 21 12:59:04 prd-ubuntu1804-docker-8c-8g-18911 sshd[1838]: Received disconnect from 10.30.104.4 port 33304:11: Closed due to user request. [preauth] Feb 21 12:59:04 prd-ubuntu1804-docker-8c-8g-18911 sshd[1838]: Disconnected from authenticating user jenkins 10.30.104.4 port 33304 [preauth] Feb 21 12:59:06 prd-ubuntu1804-docker-8c-8g-18911 sshd[1900]: Accepted publickey for jenkins from 10.30.104.4 port 33322 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Feb 21 12:59:06 prd-ubuntu1804-docker-8c-8g-18911 sshd[1900]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 21 12:59:06 prd-ubuntu1804-docker-8c-8g-18911 systemd-logind[1067]: New session 3 of user jenkins. Feb 21 12:59:06 prd-ubuntu1804-docker-8c-8g-18911 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 21 13:00:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2115]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:00:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2115]: pam_unix(cron:session): session closed for user root Feb 21 13:01:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2119]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:01:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2119]: pam_unix(cron:session): session closed for user root Feb 21 13:02:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2122]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:02:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2122]: pam_unix(cron:session): session closed for user root Feb 21 13:03:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2129]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:03:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2129]: pam_unix(cron:session): session closed for user root Feb 21 13:04:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2133]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:04:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2133]: pam_unix(cron:session): session closed for user root Feb 21 13:05:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2138]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:05:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2138]: pam_unix(cron:session): session closed for user root Feb 21 13:06:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2143]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:06:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2143]: pam_unix(cron:session): session closed for user root Feb 21 13:07:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2147]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:07:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2147]: pam_unix(cron:session): session closed for user root Feb 21 13:08:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2150]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:08:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2150]: pam_unix(cron:session): session closed for user root Feb 21 13:09:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2155]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:09:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2155]: pam_unix(cron:session): session closed for user root Feb 21 13:10:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2158]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:10:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2158]: pam_unix(cron:session): session closed for user root Feb 21 13:11:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2162]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:11:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2162]: pam_unix(cron:session): session closed for user root Feb 21 13:12:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2515]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:12:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[2515]: pam_unix(cron:session): session closed for user root Feb 21 13:13:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[3409]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 21 13:13:01 prd-ubuntu1804-docker-8c-8g-18911 CRON[3409]: pam_unix(cron:session): session closed for user root Feb 21 13:13:20 prd-ubuntu1804-docker-8c-8g-18911 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-infra-healthcheck-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 21 13:13:20 prd-ubuntu1804-docker-8c-8g-18911 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)