Jan 26 14:06:11 prd-ubuntu1804-docker-8c-8g-3195 passwd[1003]: password for 'ubuntu' changed by 'root' Jan 26 14:06:11 prd-ubuntu1804-docker-8c-8g-3195 systemd-logind[1067]: Watching system buttons on /dev/input/event0 (Power Button) Jan 26 14:06:11 prd-ubuntu1804-docker-8c-8g-3195 systemd-logind[1067]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 26 14:06:11 prd-ubuntu1804-docker-8c-8g-3195 systemd-logind[1067]: New seat seat0. Jan 26 14:06:11 prd-ubuntu1804-docker-8c-8g-3195 sshd[1235]: Server listening on 0.0.0.0 port 22. Jan 26 14:06:11 prd-ubuntu1804-docker-8c-8g-3195 sshd[1235]: Server listening on :: port 22. Jan 26 14:06:17 prd-ubuntu1804-docker-8c-8g-3195 sshd[1501]: Did not receive identification string from 10.30.104.4 port 48178 Jan 26 14:06:23 prd-ubuntu1804-docker-8c-8g-3195 sshd[1506]: Invalid user jenkins from 10.30.104.4 port 48210 Jan 26 14:06:23 prd-ubuntu1804-docker-8c-8g-3195 sshd[1506]: Received disconnect from 10.30.104.4 port 48210:11: Closed due to user request. [preauth] Jan 26 14:06:23 prd-ubuntu1804-docker-8c-8g-3195 sshd[1506]: Disconnected from invalid user jenkins 10.30.104.4 port 48210 [preauth] Jan 26 14:06:25 prd-ubuntu1804-docker-8c-8g-3195 sshd[1510]: Invalid user jenkins from 10.30.104.4 port 48246 Jan 26 14:06:25 prd-ubuntu1804-docker-8c-8g-3195 sshd[1510]: Received disconnect from 10.30.104.4 port 48246:11: Closed due to user request. [preauth] Jan 26 14:06:25 prd-ubuntu1804-docker-8c-8g-3195 sshd[1510]: Disconnected from invalid user jenkins 10.30.104.4 port 48246 [preauth] Jan 26 14:06:27 prd-ubuntu1804-docker-8c-8g-3195 sshd[1512]: Invalid user jenkins from 10.30.104.4 port 48272 Jan 26 14:06:27 prd-ubuntu1804-docker-8c-8g-3195 sshd[1512]: Received disconnect from 10.30.104.4 port 48272:11: Closed due to user request. [preauth] Jan 26 14:06:27 prd-ubuntu1804-docker-8c-8g-3195 sshd[1512]: Disconnected from invalid user jenkins 10.30.104.4 port 48272 [preauth] Jan 26 14:06:29 prd-ubuntu1804-docker-8c-8g-3195 sshd[1522]: Invalid user jenkins from 10.30.104.4 port 48302 Jan 26 14:06:29 prd-ubuntu1804-docker-8c-8g-3195 sshd[1522]: Received disconnect from 10.30.104.4 port 48302:11: Closed due to user request. [preauth] Jan 26 14:06:29 prd-ubuntu1804-docker-8c-8g-3195 sshd[1522]: Disconnected from invalid user jenkins 10.30.104.4 port 48302 [preauth] Jan 26 14:06:31 prd-ubuntu1804-docker-8c-8g-3195 sshd[1635]: Invalid user jenkins from 10.30.104.4 port 48326 Jan 26 14:06:31 prd-ubuntu1804-docker-8c-8g-3195 sshd[1635]: Received disconnect from 10.30.104.4 port 48326:11: Closed due to user request. [preauth] Jan 26 14:06:31 prd-ubuntu1804-docker-8c-8g-3195 sshd[1635]: Disconnected from invalid user jenkins 10.30.104.4 port 48326 [preauth] Jan 26 14:06:33 prd-ubuntu1804-docker-8c-8g-3195 sshd[1722]: Invalid user jenkins from 10.30.104.4 port 48348 Jan 26 14:06:33 prd-ubuntu1804-docker-8c-8g-3195 sshd[1722]: Received disconnect from 10.30.104.4 port 48348:11: Closed due to user request. [preauth] Jan 26 14:06:33 prd-ubuntu1804-docker-8c-8g-3195 sshd[1722]: Disconnected from invalid user jenkins 10.30.104.4 port 48348 [preauth] Jan 26 14:06:35 prd-ubuntu1804-docker-8c-8g-3195 sshd[1750]: Invalid user jenkins from 10.30.104.4 port 48380 Jan 26 14:06:35 prd-ubuntu1804-docker-8c-8g-3195 sshd[1750]: Received disconnect from 10.30.104.4 port 48380:11: Closed due to user request. [preauth] Jan 26 14:06:35 prd-ubuntu1804-docker-8c-8g-3195 sshd[1750]: Disconnected from invalid user jenkins 10.30.104.4 port 48380 [preauth] Jan 26 14:06:37 prd-ubuntu1804-docker-8c-8g-3195 sshd[1769]: Invalid user jenkins from 10.30.104.4 port 48410 Jan 26 14:06:37 prd-ubuntu1804-docker-8c-8g-3195 sshd[1769]: Received disconnect from 10.30.104.4 port 48410:11: Closed due to user request. [preauth] Jan 26 14:06:37 prd-ubuntu1804-docker-8c-8g-3195 sshd[1769]: Disconnected from invalid user jenkins 10.30.104.4 port 48410 [preauth] Jan 26 14:06:39 prd-ubuntu1804-docker-8c-8g-3195 sshd[1792]: Invalid user jenkins from 10.30.104.4 port 48436 Jan 26 14:06:39 prd-ubuntu1804-docker-8c-8g-3195 sshd[1792]: Received disconnect from 10.30.104.4 port 48436:11: Closed due to user request. [preauth] Jan 26 14:06:39 prd-ubuntu1804-docker-8c-8g-3195 sshd[1792]: Disconnected from invalid user jenkins 10.30.104.4 port 48436 [preauth] Jan 26 14:06:41 prd-ubuntu1804-docker-8c-8g-3195 sshd[1815]: Invalid user jenkins from 10.30.104.4 port 48454 Jan 26 14:06:43 prd-ubuntu1804-docker-8c-8g-3195 sshd[1815]: Received disconnect from 10.30.104.4 port 48454:11: Closed due to user request. [preauth] Jan 26 14:06:43 prd-ubuntu1804-docker-8c-8g-3195 sshd[1815]: Disconnected from invalid user jenkins 10.30.104.4 port 48454 [preauth] Jan 26 14:06:45 prd-ubuntu1804-docker-8c-8g-3195 sshd[1817]: Invalid user jenkins from 10.30.104.4 port 48484 Jan 26 14:06:45 prd-ubuntu1804-docker-8c-8g-3195 sshd[1817]: Received disconnect from 10.30.104.4 port 48484:11: Closed due to user request. [preauth] Jan 26 14:06:45 prd-ubuntu1804-docker-8c-8g-3195 sshd[1817]: Disconnected from invalid user jenkins 10.30.104.4 port 48484 [preauth] Jan 26 14:06:47 prd-ubuntu1804-docker-8c-8g-3195 sshd[1819]: Invalid user jenkins from 10.30.104.4 port 48500 Jan 26 14:06:50 prd-ubuntu1804-docker-8c-8g-3195 sshd[1819]: Received disconnect from 10.30.104.4 port 48500:11: Closed due to user request. [preauth] Jan 26 14:06:50 prd-ubuntu1804-docker-8c-8g-3195 sshd[1819]: Disconnected from invalid user jenkins 10.30.104.4 port 48500 [preauth] Jan 26 14:06:50 prd-ubuntu1804-docker-8c-8g-3195 sshd[1821]: Invalid user jenkins from 10.30.104.4 port 48510 Jan 26 14:06:50 prd-ubuntu1804-docker-8c-8g-3195 sshd[1821]: Received disconnect from 10.30.104.4 port 48510:11: Closed due to user request. [preauth] Jan 26 14:06:50 prd-ubuntu1804-docker-8c-8g-3195 sshd[1821]: Disconnected from invalid user jenkins 10.30.104.4 port 48510 [preauth] Jan 26 14:06:52 prd-ubuntu1804-docker-8c-8g-3195 sshd[1823]: Invalid user jenkins from 10.30.104.4 port 48544 Jan 26 14:06:52 prd-ubuntu1804-docker-8c-8g-3195 sshd[1823]: Received disconnect from 10.30.104.4 port 48544:11: Closed due to user request. [preauth] Jan 26 14:06:52 prd-ubuntu1804-docker-8c-8g-3195 sshd[1823]: Disconnected from invalid user jenkins 10.30.104.4 port 48544 [preauth] Jan 26 14:06:55 prd-ubuntu1804-docker-8c-8g-3195 sshd[1825]: Invalid user jenkins from 10.30.104.4 port 48572 Jan 26 14:06:55 prd-ubuntu1804-docker-8c-8g-3195 sshd[1825]: Received disconnect from 10.30.104.4 port 48572:11: Closed due to user request. [preauth] Jan 26 14:06:55 prd-ubuntu1804-docker-8c-8g-3195 sshd[1825]: Disconnected from invalid user jenkins 10.30.104.4 port 48572 [preauth] Jan 26 14:06:57 prd-ubuntu1804-docker-8c-8g-3195 sshd[1827]: Invalid user jenkins from 10.30.104.4 port 48594 Jan 26 14:06:57 prd-ubuntu1804-docker-8c-8g-3195 sshd[1827]: Received disconnect from 10.30.104.4 port 48594:11: Closed due to user request. [preauth] Jan 26 14:06:57 prd-ubuntu1804-docker-8c-8g-3195 sshd[1827]: Disconnected from invalid user jenkins 10.30.104.4 port 48594 [preauth] Jan 26 14:06:59 prd-ubuntu1804-docker-8c-8g-3195 sshd[1829]: Invalid user jenkins from 10.30.104.4 port 48616 Jan 26 14:06:59 prd-ubuntu1804-docker-8c-8g-3195 sshd[1829]: Received disconnect from 10.30.104.4 port 48616:11: Closed due to user request. [preauth] Jan 26 14:06:59 prd-ubuntu1804-docker-8c-8g-3195 sshd[1829]: Disconnected from invalid user jenkins 10.30.104.4 port 48616 [preauth] Jan 26 14:07:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[1831]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:07:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[1831]: pam_unix(cron:session): session closed for user root Jan 26 14:07:01 prd-ubuntu1804-docker-8c-8g-3195 sshd[1841]: Invalid user jenkins from 10.30.104.4 port 48642 Jan 26 14:07:01 prd-ubuntu1804-docker-8c-8g-3195 sshd[1841]: Received disconnect from 10.30.104.4 port 48642:11: Closed due to user request. [preauth] Jan 26 14:07:01 prd-ubuntu1804-docker-8c-8g-3195 sshd[1841]: Disconnected from invalid user jenkins 10.30.104.4 port 48642 [preauth] Jan 26 14:07:03 prd-ubuntu1804-docker-8c-8g-3195 sshd[1843]: Invalid user jenkins from 10.30.104.4 port 48676 Jan 26 14:07:03 prd-ubuntu1804-docker-8c-8g-3195 sshd[1843]: Received disconnect from 10.30.104.4 port 48676:11: Closed due to user request. [preauth] Jan 26 14:07:03 prd-ubuntu1804-docker-8c-8g-3195 sshd[1843]: Disconnected from invalid user jenkins 10.30.104.4 port 48676 [preauth] Jan 26 14:07:05 prd-ubuntu1804-docker-8c-8g-3195 sshd[1845]: Invalid user jenkins from 10.30.104.4 port 48696 Jan 26 14:07:05 prd-ubuntu1804-docker-8c-8g-3195 sshd[1845]: Received disconnect from 10.30.104.4 port 48696:11: Closed due to user request. [preauth] Jan 26 14:07:05 prd-ubuntu1804-docker-8c-8g-3195 sshd[1845]: Disconnected from invalid user jenkins 10.30.104.4 port 48696 [preauth] Jan 26 14:07:07 prd-ubuntu1804-docker-8c-8g-3195 sshd[1847]: Invalid user jenkins from 10.30.104.4 port 48714 Jan 26 14:07:09 prd-ubuntu1804-docker-8c-8g-3195 sshd[1847]: Received disconnect from 10.30.104.4 port 48714:11: Closed due to user request. [preauth] Jan 26 14:07:09 prd-ubuntu1804-docker-8c-8g-3195 sshd[1847]: Disconnected from invalid user jenkins 10.30.104.4 port 48714 [preauth] Jan 26 14:07:10 prd-ubuntu1804-docker-8c-8g-3195 sshd[1849]: Invalid user jenkins from 10.30.104.4 port 48744 Jan 26 14:07:10 prd-ubuntu1804-docker-8c-8g-3195 sshd[1849]: Received disconnect from 10.30.104.4 port 48744:11: Closed due to user request. [preauth] Jan 26 14:07:10 prd-ubuntu1804-docker-8c-8g-3195 sshd[1849]: Disconnected from invalid user jenkins 10.30.104.4 port 48744 [preauth] Jan 26 14:07:10 prd-ubuntu1804-docker-8c-8g-3195 useradd[1869]: new group: name=jenkins, GID=1001 Jan 26 14:07:10 prd-ubuntu1804-docker-8c-8g-3195 useradd[1869]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 26 14:07:10 prd-ubuntu1804-docker-8c-8g-3195 usermod[1876]: add 'jenkins' to group 'docker' Jan 26 14:07:10 prd-ubuntu1804-docker-8c-8g-3195 usermod[1876]: add 'jenkins' to shadow group 'docker' Jan 26 14:07:12 prd-ubuntu1804-docker-8c-8g-3195 sshd[1937]: Accepted publickey for jenkins from 10.30.104.4 port 48770 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jan 26 14:07:12 prd-ubuntu1804-docker-8c-8g-3195 sshd[1937]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 26 14:07:12 prd-ubuntu1804-docker-8c-8g-3195 systemd-logind[1067]: New session 2 of user jenkins. Jan 26 14:07:12 prd-ubuntu1804-docker-8c-8g-3195 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 26 14:08:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[2491]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:08:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[2491]: pam_unix(cron:session): session closed for user root Jan 26 14:09:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[2988]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:09:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[2988]: pam_unix(cron:session): session closed for user root Jan 26 14:10:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[4469]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:10:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[4469]: pam_unix(cron:session): session closed for user root Jan 26 14:11:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[5080]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:11:01 prd-ubuntu1804-docker-8c-8g-3195 CRON[5080]: pam_unix(cron:session): session closed for user root Jan 26 14:11:17 prd-ubuntu1804-docker-8c-8g-3195 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-smoke-usecases-robot-py3-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp