Nov 12 06:55:21 prd-ubuntu1804-docker-8c-8g-83142 passwd[989]: password for 'ubuntu' changed by 'root' Nov 12 06:55:21 prd-ubuntu1804-docker-8c-8g-83142 systemd-logind[1109]: Watching system buttons on /dev/input/event0 (Power Button) Nov 12 06:55:21 prd-ubuntu1804-docker-8c-8g-83142 systemd-logind[1109]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 12 06:55:21 prd-ubuntu1804-docker-8c-8g-83142 systemd-logind[1109]: New seat seat0. Nov 12 06:55:21 prd-ubuntu1804-docker-8c-8g-83142 sshd[1138]: Server listening on 0.0.0.0 port 22. Nov 12 06:55:21 prd-ubuntu1804-docker-8c-8g-83142 sshd[1138]: Server listening on :: port 22. Nov 12 06:55:22 prd-ubuntu1804-docker-8c-8g-83142 sshd[1356]: Did not receive identification string from 10.30.104.4 port 41052 Nov 12 06:55:26 prd-ubuntu1804-docker-8c-8g-83142 sshd[1438]: Invalid user jenkins from 10.30.104.4 port 41068 Nov 12 06:55:26 prd-ubuntu1804-docker-8c-8g-83142 sshd[1438]: Received disconnect from 10.30.104.4 port 41068:11: Closed due to user request. [preauth] Nov 12 06:55:26 prd-ubuntu1804-docker-8c-8g-83142 sshd[1438]: Disconnected from invalid user jenkins 10.30.104.4 port 41068 [preauth] Nov 12 06:55:28 prd-ubuntu1804-docker-8c-8g-83142 sshd[1451]: Invalid user jenkins from 10.30.104.4 port 41100 Nov 12 06:55:28 prd-ubuntu1804-docker-8c-8g-83142 sshd[1451]: Received disconnect from 10.30.104.4 port 41100:11: Closed due to user request. [preauth] Nov 12 06:55:28 prd-ubuntu1804-docker-8c-8g-83142 sshd[1451]: Disconnected from invalid user jenkins 10.30.104.4 port 41100 [preauth] Nov 12 06:55:30 prd-ubuntu1804-docker-8c-8g-83142 sshd[1453]: Invalid user jenkins from 10.30.104.4 port 41124 Nov 12 06:55:31 prd-ubuntu1804-docker-8c-8g-83142 sshd[1453]: Received disconnect from 10.30.104.4 port 41124:11: Closed due to user request. [preauth] Nov 12 06:55:31 prd-ubuntu1804-docker-8c-8g-83142 sshd[1453]: Disconnected from invalid user jenkins 10.30.104.4 port 41124 [preauth] Nov 12 06:55:33 prd-ubuntu1804-docker-8c-8g-83142 sshd[1455]: Invalid user jenkins from 10.30.104.4 port 41148 Nov 12 06:55:33 prd-ubuntu1804-docker-8c-8g-83142 sshd[1455]: Received disconnect from 10.30.104.4 port 41148:11: Closed due to user request. [preauth] Nov 12 06:55:33 prd-ubuntu1804-docker-8c-8g-83142 sshd[1455]: Disconnected from invalid user jenkins 10.30.104.4 port 41148 [preauth] Nov 12 06:55:35 prd-ubuntu1804-docker-8c-8g-83142 sshd[1457]: Invalid user jenkins from 10.30.104.4 port 41172 Nov 12 06:55:35 prd-ubuntu1804-docker-8c-8g-83142 sshd[1457]: Received disconnect from 10.30.104.4 port 41172:11: Closed due to user request. [preauth] Nov 12 06:55:35 prd-ubuntu1804-docker-8c-8g-83142 sshd[1457]: Disconnected from invalid user jenkins 10.30.104.4 port 41172 [preauth] Nov 12 06:55:37 prd-ubuntu1804-docker-8c-8g-83142 sshd[1459]: Invalid user jenkins from 10.30.104.4 port 41196 Nov 12 06:55:37 prd-ubuntu1804-docker-8c-8g-83142 sshd[1459]: Received disconnect from 10.30.104.4 port 41196:11: Closed due to user request. [preauth] Nov 12 06:55:37 prd-ubuntu1804-docker-8c-8g-83142 sshd[1459]: Disconnected from invalid user jenkins 10.30.104.4 port 41196 [preauth] Nov 12 06:55:39 prd-ubuntu1804-docker-8c-8g-83142 sshd[1469]: Invalid user jenkins from 10.30.104.4 port 41222 Nov 12 06:55:39 prd-ubuntu1804-docker-8c-8g-83142 sshd[1469]: Received disconnect from 10.30.104.4 port 41222:11: Closed due to user request. [preauth] Nov 12 06:55:39 prd-ubuntu1804-docker-8c-8g-83142 sshd[1469]: Disconnected from invalid user jenkins 10.30.104.4 port 41222 [preauth] Nov 12 06:55:42 prd-ubuntu1804-docker-8c-8g-83142 sshd[1613]: Invalid user jenkins from 10.30.104.4 port 41246 Nov 12 06:55:42 prd-ubuntu1804-docker-8c-8g-83142 sshd[1613]: Received disconnect from 10.30.104.4 port 41246:11: Closed due to user request. [preauth] Nov 12 06:55:42 prd-ubuntu1804-docker-8c-8g-83142 sshd[1613]: Disconnected from invalid user jenkins 10.30.104.4 port 41246 [preauth] Nov 12 06:55:44 prd-ubuntu1804-docker-8c-8g-83142 sshd[1679]: Invalid user jenkins from 10.30.104.4 port 41258 Nov 12 06:55:44 prd-ubuntu1804-docker-8c-8g-83142 sshd[1679]: Received disconnect from 10.30.104.4 port 41258:11: Closed due to user request. [preauth] Nov 12 06:55:44 prd-ubuntu1804-docker-8c-8g-83142 sshd[1679]: Disconnected from invalid user jenkins 10.30.104.4 port 41258 [preauth] Nov 12 06:55:46 prd-ubuntu1804-docker-8c-8g-83142 sshd[1709]: Invalid user jenkins from 10.30.104.4 port 41268 Nov 12 06:55:46 prd-ubuntu1804-docker-8c-8g-83142 sshd[1709]: Received disconnect from 10.30.104.4 port 41268:11: Closed due to user request. [preauth] Nov 12 06:55:46 prd-ubuntu1804-docker-8c-8g-83142 sshd[1709]: Disconnected from invalid user jenkins 10.30.104.4 port 41268 [preauth] Nov 12 06:55:48 prd-ubuntu1804-docker-8c-8g-83142 sshd[1732]: Invalid user jenkins from 10.30.104.4 port 41286 Nov 12 06:55:48 prd-ubuntu1804-docker-8c-8g-83142 sshd[1732]: Received disconnect from 10.30.104.4 port 41286:11: Closed due to user request. [preauth] Nov 12 06:55:48 prd-ubuntu1804-docker-8c-8g-83142 sshd[1732]: Disconnected from invalid user jenkins 10.30.104.4 port 41286 [preauth] Nov 12 06:55:50 prd-ubuntu1804-docker-8c-8g-83142 sshd[1734]: Invalid user jenkins from 10.30.104.4 port 41300 Nov 12 06:55:50 prd-ubuntu1804-docker-8c-8g-83142 sshd[1734]: Received disconnect from 10.30.104.4 port 41300:11: Closed due to user request. [preauth] Nov 12 06:55:50 prd-ubuntu1804-docker-8c-8g-83142 sshd[1734]: Disconnected from invalid user jenkins 10.30.104.4 port 41300 [preauth] Nov 12 06:55:52 prd-ubuntu1804-docker-8c-8g-83142 sshd[1757]: Invalid user jenkins from 10.30.104.4 port 41310 Nov 12 06:55:53 prd-ubuntu1804-docker-8c-8g-83142 sshd[1757]: Received disconnect from 10.30.104.4 port 41310:11: Closed due to user request. [preauth] Nov 12 06:55:53 prd-ubuntu1804-docker-8c-8g-83142 sshd[1757]: Disconnected from invalid user jenkins 10.30.104.4 port 41310 [preauth] Nov 12 06:55:55 prd-ubuntu1804-docker-8c-8g-83142 sshd[1759]: Invalid user jenkins from 10.30.104.4 port 41330 Nov 12 06:55:55 prd-ubuntu1804-docker-8c-8g-83142 sshd[1759]: Received disconnect from 10.30.104.4 port 41330:11: Closed due to user request. [preauth] Nov 12 06:55:55 prd-ubuntu1804-docker-8c-8g-83142 sshd[1759]: Disconnected from invalid user jenkins 10.30.104.4 port 41330 [preauth] Nov 12 06:55:57 prd-ubuntu1804-docker-8c-8g-83142 sshd[1761]: Invalid user jenkins from 10.30.104.4 port 41336 Nov 12 06:55:57 prd-ubuntu1804-docker-8c-8g-83142 sshd[1761]: Received disconnect from 10.30.104.4 port 41336:11: Closed due to user request. [preauth] Nov 12 06:55:57 prd-ubuntu1804-docker-8c-8g-83142 sshd[1761]: Disconnected from invalid user jenkins 10.30.104.4 port 41336 [preauth] Nov 12 06:55:59 prd-ubuntu1804-docker-8c-8g-83142 sshd[1763]: Invalid user jenkins from 10.30.104.4 port 41354 Nov 12 06:55:59 prd-ubuntu1804-docker-8c-8g-83142 sshd[1763]: Received disconnect from 10.30.104.4 port 41354:11: Closed due to user request. [preauth] Nov 12 06:55:59 prd-ubuntu1804-docker-8c-8g-83142 sshd[1763]: Disconnected from invalid user jenkins 10.30.104.4 port 41354 [preauth] Nov 12 06:56:01 prd-ubuntu1804-docker-8c-8g-83142 sshd[1765]: Invalid user jenkins from 10.30.104.4 port 41372 Nov 12 06:56:03 prd-ubuntu1804-docker-8c-8g-83142 sshd[1765]: Received disconnect from 10.30.104.4 port 41372:11: Closed due to user request. [preauth] Nov 12 06:56:03 prd-ubuntu1804-docker-8c-8g-83142 sshd[1765]: Disconnected from invalid user jenkins 10.30.104.4 port 41372 [preauth] Nov 12 06:56:03 prd-ubuntu1804-docker-8c-8g-83142 CRON[1768]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 12 06:56:03 prd-ubuntu1804-docker-8c-8g-83142 CRON[1768]: pam_unix(cron:session): session closed for user root Nov 12 06:56:03 prd-ubuntu1804-docker-8c-8g-83142 sshd[1776]: Invalid user jenkins from 10.30.104.4 port 41378 Nov 12 06:56:03 prd-ubuntu1804-docker-8c-8g-83142 sshd[1776]: Received disconnect from 10.30.104.4 port 41378:11: Closed due to user request. [preauth] Nov 12 06:56:03 prd-ubuntu1804-docker-8c-8g-83142 sshd[1776]: Disconnected from invalid user jenkins 10.30.104.4 port 41378 [preauth] Nov 12 06:56:05 prd-ubuntu1804-docker-8c-8g-83142 useradd[1796]: new group: name=jenkins, GID=1001 Nov 12 06:56:05 prd-ubuntu1804-docker-8c-8g-83142 useradd[1796]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 12 06:56:05 prd-ubuntu1804-docker-8c-8g-83142 sshd[1797]: Received disconnect from 10.30.104.4 port 41388:11: Closed due to user request. [preauth] Nov 12 06:56:05 prd-ubuntu1804-docker-8c-8g-83142 sshd[1797]: Disconnected from authenticating user jenkins 10.30.104.4 port 41388 [preauth] Nov 12 06:56:06 prd-ubuntu1804-docker-8c-8g-83142 usermod[1805]: add 'jenkins' to group 'docker' Nov 12 06:56:06 prd-ubuntu1804-docker-8c-8g-83142 usermod[1805]: add 'jenkins' to shadow group 'docker' Nov 12 06:56:07 prd-ubuntu1804-docker-8c-8g-83142 sshd[1866]: Accepted publickey for jenkins from 10.30.104.4 port 41422 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 12 06:56:07 prd-ubuntu1804-docker-8c-8g-83142 sshd[1866]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 12 06:56:07 prd-ubuntu1804-docker-8c-8g-83142 systemd-logind[1109]: New session 2 of user jenkins. Nov 12 06:56:07 prd-ubuntu1804-docker-8c-8g-83142 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 12 06:57:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[2626]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 12 06:57:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[2626]: pam_unix(cron:session): session closed for user root Nov 12 06:58:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[3719]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 12 06:58:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[3719]: pam_unix(cron:session): session closed for user root Nov 12 06:59:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[3896]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 12 06:59:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[3896]: pam_unix(cron:session): session closed for user root Nov 12 07:00:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[4428]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 12 07:00:01 prd-ubuntu1804-docker-8c-8g-83142 CRON[4428]: pam_unix(cron:session): session closed for user root Nov 12 07:00:52 prd-ubuntu1804-docker-8c-8g-83142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-smoke-usecases-robot-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Nov 12 07:00:52 prd-ubuntu1804-docker-8c-8g-83142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)