Dec 1 17:27:52 prd-ubuntu1804-docker-8c-8g-1499 passwd[1003]: password for 'ubuntu' changed by 'root' Dec 1 17:27:52 prd-ubuntu1804-docker-8c-8g-1499 systemd-logind[1087]: Watching system buttons on /dev/input/event0 (Power Button) Dec 1 17:27:52 prd-ubuntu1804-docker-8c-8g-1499 systemd-logind[1087]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 1 17:27:52 prd-ubuntu1804-docker-8c-8g-1499 systemd-logind[1087]: New seat seat0. Dec 1 17:27:52 prd-ubuntu1804-docker-8c-8g-1499 sshd[1220]: Server listening on 0.0.0.0 port 22. Dec 1 17:27:52 prd-ubuntu1804-docker-8c-8g-1499 sshd[1220]: Server listening on :: port 22. Dec 1 17:27:54 prd-ubuntu1804-docker-8c-8g-1499 sshd[1474]: Did not receive identification string from 10.30.104.4 port 36662 Dec 1 17:28:01 prd-ubuntu1804-docker-8c-8g-1499 sshd[1528]: Invalid user jenkins from 10.30.104.4 port 36668 Dec 1 17:28:01 prd-ubuntu1804-docker-8c-8g-1499 sshd[1528]: Received disconnect from 10.30.104.4 port 36668:11: Closed due to user request. [preauth] Dec 1 17:28:01 prd-ubuntu1804-docker-8c-8g-1499 sshd[1528]: Disconnected from invalid user jenkins 10.30.104.4 port 36668 [preauth] Dec 1 17:28:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[1532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 17:28:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[1532]: pam_unix(cron:session): session closed for user root Dec 1 17:28:03 prd-ubuntu1804-docker-8c-8g-1499 sshd[1540]: Invalid user jenkins from 10.30.104.4 port 36682 Dec 1 17:28:03 prd-ubuntu1804-docker-8c-8g-1499 sshd[1540]: Received disconnect from 10.30.104.4 port 36682:11: Closed due to user request. [preauth] Dec 1 17:28:03 prd-ubuntu1804-docker-8c-8g-1499 sshd[1540]: Disconnected from invalid user jenkins 10.30.104.4 port 36682 [preauth] Dec 1 17:28:05 prd-ubuntu1804-docker-8c-8g-1499 sshd[1542]: Invalid user jenkins from 10.30.104.4 port 36688 Dec 1 17:28:05 prd-ubuntu1804-docker-8c-8g-1499 sshd[1542]: Received disconnect from 10.30.104.4 port 36688:11: Closed due to user request. [preauth] Dec 1 17:28:05 prd-ubuntu1804-docker-8c-8g-1499 sshd[1542]: Disconnected from invalid user jenkins 10.30.104.4 port 36688 [preauth] Dec 1 17:28:08 prd-ubuntu1804-docker-8c-8g-1499 sshd[1544]: Invalid user jenkins from 10.30.104.4 port 36692 Dec 1 17:28:08 prd-ubuntu1804-docker-8c-8g-1499 sshd[1544]: Received disconnect from 10.30.104.4 port 36692:11: Closed due to user request. [preauth] Dec 1 17:28:08 prd-ubuntu1804-docker-8c-8g-1499 sshd[1544]: Disconnected from invalid user jenkins 10.30.104.4 port 36692 [preauth] Dec 1 17:28:10 prd-ubuntu1804-docker-8c-8g-1499 sshd[1546]: Invalid user jenkins from 10.30.104.4 port 36698 Dec 1 17:28:10 prd-ubuntu1804-docker-8c-8g-1499 sshd[1546]: Received disconnect from 10.30.104.4 port 36698:11: Closed due to user request. [preauth] Dec 1 17:28:10 prd-ubuntu1804-docker-8c-8g-1499 sshd[1546]: Disconnected from invalid user jenkins 10.30.104.4 port 36698 [preauth] Dec 1 17:28:12 prd-ubuntu1804-docker-8c-8g-1499 sshd[1762]: Invalid user jenkins from 10.30.104.4 port 36710 Dec 1 17:28:12 prd-ubuntu1804-docker-8c-8g-1499 sshd[1762]: Received disconnect from 10.30.104.4 port 36710:11: Closed due to user request. [preauth] Dec 1 17:28:12 prd-ubuntu1804-docker-8c-8g-1499 sshd[1762]: Disconnected from invalid user jenkins 10.30.104.4 port 36710 [preauth] Dec 1 17:28:14 prd-ubuntu1804-docker-8c-8g-1499 sshd[1808]: Invalid user jenkins from 10.30.104.4 port 36712 Dec 1 17:28:15 prd-ubuntu1804-docker-8c-8g-1499 sshd[1808]: Received disconnect from 10.30.104.4 port 36712:11: Closed due to user request. [preauth] Dec 1 17:28:15 prd-ubuntu1804-docker-8c-8g-1499 sshd[1808]: Disconnected from invalid user jenkins 10.30.104.4 port 36712 [preauth] Dec 1 17:28:17 prd-ubuntu1804-docker-8c-8g-1499 sshd[1810]: Invalid user jenkins from 10.30.104.4 port 36714 Dec 1 17:28:17 prd-ubuntu1804-docker-8c-8g-1499 sshd[1810]: Received disconnect from 10.30.104.4 port 36714:11: Closed due to user request. [preauth] Dec 1 17:28:17 prd-ubuntu1804-docker-8c-8g-1499 sshd[1810]: Disconnected from invalid user jenkins 10.30.104.4 port 36714 [preauth] Dec 1 17:28:19 prd-ubuntu1804-docker-8c-8g-1499 sshd[1820]: Invalid user jenkins from 10.30.104.4 port 36720 Dec 1 17:28:19 prd-ubuntu1804-docker-8c-8g-1499 sshd[1820]: Received disconnect from 10.30.104.4 port 36720:11: Closed due to user request. [preauth] Dec 1 17:28:19 prd-ubuntu1804-docker-8c-8g-1499 sshd[1820]: Disconnected from invalid user jenkins 10.30.104.4 port 36720 [preauth] Dec 1 17:28:21 prd-ubuntu1804-docker-8c-8g-1499 sshd[1822]: Invalid user jenkins from 10.30.104.4 port 36722 Dec 1 17:28:21 prd-ubuntu1804-docker-8c-8g-1499 sshd[1822]: Received disconnect from 10.30.104.4 port 36722:11: Closed due to user request. [preauth] Dec 1 17:28:21 prd-ubuntu1804-docker-8c-8g-1499 sshd[1822]: Disconnected from invalid user jenkins 10.30.104.4 port 36722 [preauth] Dec 1 17:28:23 prd-ubuntu1804-docker-8c-8g-1499 sshd[1833]: Invalid user jenkins from 10.30.104.4 port 36724 Dec 1 17:28:23 prd-ubuntu1804-docker-8c-8g-1499 sshd[1833]: Received disconnect from 10.30.104.4 port 36724:11: Closed due to user request. [preauth] Dec 1 17:28:23 prd-ubuntu1804-docker-8c-8g-1499 sshd[1833]: Disconnected from invalid user jenkins 10.30.104.4 port 36724 [preauth] Dec 1 17:28:23 prd-ubuntu1804-docker-8c-8g-1499 useradd[1846]: new group: name=jenkins, GID=1001 Dec 1 17:28:23 prd-ubuntu1804-docker-8c-8g-1499 useradd[1846]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Dec 1 17:28:23 prd-ubuntu1804-docker-8c-8g-1499 usermod[1861]: add 'jenkins' to group 'docker' Dec 1 17:28:23 prd-ubuntu1804-docker-8c-8g-1499 usermod[1861]: add 'jenkins' to shadow group 'docker' Dec 1 17:28:25 prd-ubuntu1804-docker-8c-8g-1499 sshd[1934]: Accepted publickey for jenkins from 10.30.104.4 port 36730 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Dec 1 17:28:25 prd-ubuntu1804-docker-8c-8g-1499 sshd[1934]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 1 17:28:25 prd-ubuntu1804-docker-8c-8g-1499 systemd-logind[1087]: New session 2 of user jenkins. Dec 1 17:28:25 prd-ubuntu1804-docker-8c-8g-1499 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 1 17:29:02 prd-ubuntu1804-docker-8c-8g-1499 CRON[2498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 17:29:02 prd-ubuntu1804-docker-8c-8g-1499 CRON[2498]: pam_unix(cron:session): session closed for user root Dec 1 17:30:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[3101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 17:30:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[3101]: pam_unix(cron:session): session closed for user root Dec 1 17:31:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[3681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 17:31:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[3681]: pam_unix(cron:session): session closed for user root Dec 1 17:32:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[4107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 17:32:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[4107]: pam_unix(cron:session): session closed for user root Dec 1 17:33:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[4311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 17:33:01 prd-ubuntu1804-docker-8c-8g-1499 CRON[4311]: pam_unix(cron:session): session closed for user root Dec 1 17:33:13 prd-ubuntu1804-docker-8c-8g-1499 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-smoke-usecases-robot-docker-merge-kohn ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Dec 1 17:33:13 prd-ubuntu1804-docker-8c-8g-1499 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)