Oct 25 04:02:20 prd-queue-docker-4c-4g-6180 passwd[928]: password for 'ubuntu' changed by 'root' Oct 25 04:02:20 prd-queue-docker-4c-4g-6180 systemd-logind[970]: Watching system buttons on /dev/input/event0 (Power Button) Oct 25 04:02:20 prd-queue-docker-4c-4g-6180 systemd-logind[970]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 25 04:02:20 prd-queue-docker-4c-4g-6180 systemd-logind[970]: New seat seat0. Oct 25 04:02:20 prd-queue-docker-4c-4g-6180 sshd[1037]: Server listening on 0.0.0.0 port 22. Oct 25 04:02:20 prd-queue-docker-4c-4g-6180 sshd[1037]: Server listening on :: port 22. Oct 25 04:02:23 prd-queue-docker-4c-4g-6180 sshd[1233]: Did not receive identification string from 10.30.104.4 port 49048 Oct 25 04:02:32 prd-queue-docker-4c-4g-6180 sshd[1262]: Invalid user jenkins from 10.30.104.4 port 49050 Oct 25 04:02:32 prd-queue-docker-4c-4g-6180 sshd[1262]: Received disconnect from 10.30.104.4 port 49050:11: Closed due to user request. [preauth] Oct 25 04:02:32 prd-queue-docker-4c-4g-6180 sshd[1262]: Disconnected from invalid user jenkins 10.30.104.4 port 49050 [preauth] Oct 25 04:02:34 prd-queue-docker-4c-4g-6180 sshd[1266]: Invalid user jenkins from 10.30.104.4 port 49052 Oct 25 04:02:34 prd-queue-docker-4c-4g-6180 sshd[1266]: Received disconnect from 10.30.104.4 port 49052:11: Closed due to user request. [preauth] Oct 25 04:02:34 prd-queue-docker-4c-4g-6180 sshd[1266]: Disconnected from invalid user jenkins 10.30.104.4 port 49052 [preauth] Oct 25 04:02:36 prd-queue-docker-4c-4g-6180 sshd[1268]: Invalid user jenkins from 10.30.104.4 port 49054 Oct 25 04:02:36 prd-queue-docker-4c-4g-6180 sshd[1268]: Received disconnect from 10.30.104.4 port 49054:11: Closed due to user request. [preauth] Oct 25 04:02:36 prd-queue-docker-4c-4g-6180 sshd[1268]: Disconnected from invalid user jenkins 10.30.104.4 port 49054 [preauth] Oct 25 04:02:40 prd-queue-docker-4c-4g-6180 sshd[1467]: Invalid user jenkins from 10.30.104.4 port 49064 Oct 25 04:02:40 prd-queue-docker-4c-4g-6180 sshd[1467]: Received disconnect from 10.30.104.4 port 49064:11: Closed due to user request. [preauth] Oct 25 04:02:40 prd-queue-docker-4c-4g-6180 sshd[1467]: Disconnected from invalid user jenkins 10.30.104.4 port 49064 [preauth] Oct 25 04:02:42 prd-queue-docker-4c-4g-6180 sshd[1532]: Invalid user jenkins from 10.30.104.4 port 49066 Oct 25 04:02:42 prd-queue-docker-4c-4g-6180 sshd[1532]: Received disconnect from 10.30.104.4 port 49066:11: Closed due to user request. [preauth] Oct 25 04:02:42 prd-queue-docker-4c-4g-6180 sshd[1532]: Disconnected from invalid user jenkins 10.30.104.4 port 49066 [preauth] Oct 25 04:02:44 prd-queue-docker-4c-4g-6180 sshd[1536]: Invalid user jenkins from 10.30.104.4 port 49068 Oct 25 04:02:44 prd-queue-docker-4c-4g-6180 sshd[1536]: Received disconnect from 10.30.104.4 port 49068:11: Closed due to user request. [preauth] Oct 25 04:02:44 prd-queue-docker-4c-4g-6180 sshd[1536]: Disconnected from invalid user jenkins 10.30.104.4 port 49068 [preauth] Oct 25 04:02:45 prd-queue-docker-4c-4g-6180 useradd[1556]: new group: name=jenkins, GID=1001 Oct 25 04:02:45 prd-queue-docker-4c-4g-6180 useradd[1556]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 25 04:02:45 prd-queue-docker-4c-4g-6180 usermod[1563]: add 'jenkins' to group 'docker' Oct 25 04:02:45 prd-queue-docker-4c-4g-6180 usermod[1563]: add 'jenkins' to shadow group 'docker' Oct 25 04:02:46 prd-queue-docker-4c-4g-6180 sshd[1632]: Accepted publickey for jenkins from 10.30.104.4 port 49070 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Oct 25 04:02:46 prd-queue-docker-4c-4g-6180 sshd[1632]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 25 04:02:46 prd-queue-docker-4c-4g-6180 systemd-logind[970]: New session 1 of user jenkins. Oct 25 04:02:46 prd-queue-docker-4c-4g-6180 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 25 04:03:03 prd-queue-docker-4c-4g-6180 CRON[1962]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 25 04:03:03 prd-queue-docker-4c-4g-6180 CRON[1962]: pam_unix(cron:session): session closed for user root Oct 25 04:04:01 prd-queue-docker-4c-4g-6180 CRON[2226]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 25 04:04:01 prd-queue-docker-4c-4g-6180 CRON[2226]: pam_unix(cron:session): session closed for user root Oct 25 04:05:01 prd-queue-docker-4c-4g-6180 CRON[5643]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 25 04:05:01 prd-queue-docker-4c-4g-6180 CRON[5643]: pam_unix(cron:session): session closed for user root Oct 25 04:06:01 prd-queue-docker-4c-4g-6180 CRON[8668]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 25 04:06:01 prd-queue-docker-4c-4g-6180 CRON[8668]: pam_unix(cron:session): session closed for user root Oct 25 04:07:01 prd-queue-docker-4c-4g-6180 CRON[8957]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 25 04:07:01 prd-queue-docker-4c-4g-6180 CRON[8957]: pam_unix(cron:session): session closed for user root Oct 25 04:07:34 prd-queue-docker-4c-4g-6180 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/testsuite-master-3scm-docker-shell-daily ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp