Aug 19 07:05:48 prd-ubuntu1804-docker-4c-4g-1356 passwd[945]: password for 'ubuntu' changed by 'root' Aug 19 07:05:48 prd-ubuntu1804-docker-4c-4g-1356 systemd-logind[1037]: Watching system buttons on /dev/input/event0 (Power Button) Aug 19 07:05:48 prd-ubuntu1804-docker-4c-4g-1356 systemd-logind[1037]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 19 07:05:48 prd-ubuntu1804-docker-4c-4g-1356 systemd-logind[1037]: New seat seat0. Aug 19 07:05:48 prd-ubuntu1804-docker-4c-4g-1356 sshd[1233]: Server listening on 0.0.0.0 port 22. Aug 19 07:05:48 prd-ubuntu1804-docker-4c-4g-1356 sshd[1233]: Server listening on :: port 22. Aug 19 07:05:53 prd-ubuntu1804-docker-4c-4g-1356 sshd[1480]: Did not receive identification string from 10.32.4.5 port 55080 Aug 19 07:05:56 prd-ubuntu1804-docker-4c-4g-1356 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 55082 Aug 19 07:05:56 prd-ubuntu1804-docker-4c-4g-1356 sshd[1504]: Received disconnect from 10.32.4.5 port 55082:11: Closed due to user request. [preauth] Aug 19 07:05:56 prd-ubuntu1804-docker-4c-4g-1356 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 55082 [preauth] Aug 19 07:05:58 prd-ubuntu1804-docker-4c-4g-1356 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 55084 Aug 19 07:05:58 prd-ubuntu1804-docker-4c-4g-1356 sshd[1514]: Received disconnect from 10.32.4.5 port 55084:11: Closed due to user request. [preauth] Aug 19 07:05:58 prd-ubuntu1804-docker-4c-4g-1356 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 55084 [preauth] Aug 19 07:06:00 prd-ubuntu1804-docker-4c-4g-1356 sshd[1516]: Invalid user jenkins from 10.32.4.5 port 55092 Aug 19 07:06:00 prd-ubuntu1804-docker-4c-4g-1356 sshd[1516]: Received disconnect from 10.32.4.5 port 55092:11: Closed due to user request. [preauth] Aug 19 07:06:00 prd-ubuntu1804-docker-4c-4g-1356 sshd[1516]: Disconnected from invalid user jenkins 10.32.4.5 port 55092 [preauth] Aug 19 07:06:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[1519]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 07:06:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[1519]: pam_unix(cron:session): session closed for user root Aug 19 07:06:02 prd-ubuntu1804-docker-4c-4g-1356 sshd[1527]: Invalid user jenkins from 10.32.4.5 port 55094 Aug 19 07:06:03 prd-ubuntu1804-docker-4c-4g-1356 sshd[1527]: Received disconnect from 10.32.4.5 port 55094:11: Closed due to user request. [preauth] Aug 19 07:06:03 prd-ubuntu1804-docker-4c-4g-1356 sshd[1527]: Disconnected from invalid user jenkins 10.32.4.5 port 55094 [preauth] Aug 19 07:06:05 prd-ubuntu1804-docker-4c-4g-1356 sshd[1529]: Invalid user jenkins from 10.32.4.5 port 55096 Aug 19 07:06:05 prd-ubuntu1804-docker-4c-4g-1356 sshd[1529]: Received disconnect from 10.32.4.5 port 55096:11: Closed due to user request. [preauth] Aug 19 07:06:05 prd-ubuntu1804-docker-4c-4g-1356 sshd[1529]: Disconnected from invalid user jenkins 10.32.4.5 port 55096 [preauth] Aug 19 07:06:07 prd-ubuntu1804-docker-4c-4g-1356 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 55098 Aug 19 07:06:07 prd-ubuntu1804-docker-4c-4g-1356 sshd[1531]: Received disconnect from 10.32.4.5 port 55098:11: Closed due to user request. [preauth] Aug 19 07:06:07 prd-ubuntu1804-docker-4c-4g-1356 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 55098 [preauth] Aug 19 07:06:09 prd-ubuntu1804-docker-4c-4g-1356 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 55108 Aug 19 07:06:09 prd-ubuntu1804-docker-4c-4g-1356 sshd[1540]: Received disconnect from 10.32.4.5 port 55108:11: Closed due to user request. [preauth] Aug 19 07:06:09 prd-ubuntu1804-docker-4c-4g-1356 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 55108 [preauth] Aug 19 07:06:11 prd-ubuntu1804-docker-4c-4g-1356 sshd[1650]: Invalid user jenkins from 10.32.4.5 port 55110 Aug 19 07:06:11 prd-ubuntu1804-docker-4c-4g-1356 sshd[1650]: Received disconnect from 10.32.4.5 port 55110:11: Closed due to user request. [preauth] Aug 19 07:06:11 prd-ubuntu1804-docker-4c-4g-1356 sshd[1650]: Disconnected from invalid user jenkins 10.32.4.5 port 55110 [preauth] Aug 19 07:06:13 prd-ubuntu1804-docker-4c-4g-1356 sshd[1769]: Invalid user jenkins from 10.32.4.5 port 55112 Aug 19 07:06:13 prd-ubuntu1804-docker-4c-4g-1356 sshd[1769]: Received disconnect from 10.32.4.5 port 55112:11: Closed due to user request. [preauth] Aug 19 07:06:13 prd-ubuntu1804-docker-4c-4g-1356 sshd[1769]: Disconnected from invalid user jenkins 10.32.4.5 port 55112 [preauth] Aug 19 07:06:15 prd-ubuntu1804-docker-4c-4g-1356 sshd[1805]: Invalid user jenkins from 10.32.4.5 port 55114 Aug 19 07:06:15 prd-ubuntu1804-docker-4c-4g-1356 sshd[1805]: Received disconnect from 10.32.4.5 port 55114:11: Closed due to user request. [preauth] Aug 19 07:06:15 prd-ubuntu1804-docker-4c-4g-1356 sshd[1805]: Disconnected from invalid user jenkins 10.32.4.5 port 55114 [preauth] Aug 19 07:06:18 prd-ubuntu1804-docker-4c-4g-1356 sshd[1813]: Invalid user jenkins from 10.32.4.5 port 55116 Aug 19 07:06:18 prd-ubuntu1804-docker-4c-4g-1356 sshd[1813]: Received disconnect from 10.32.4.5 port 55116:11: Closed due to user request. [preauth] Aug 19 07:06:18 prd-ubuntu1804-docker-4c-4g-1356 sshd[1813]: Disconnected from invalid user jenkins 10.32.4.5 port 55116 [preauth] Aug 19 07:06:20 prd-ubuntu1804-docker-4c-4g-1356 sshd[1836]: Invalid user jenkins from 10.32.4.5 port 55118 Aug 19 07:06:20 prd-ubuntu1804-docker-4c-4g-1356 sshd[1836]: Received disconnect from 10.32.4.5 port 55118:11: Closed due to user request. [preauth] Aug 19 07:06:20 prd-ubuntu1804-docker-4c-4g-1356 sshd[1836]: Disconnected from invalid user jenkins 10.32.4.5 port 55118 [preauth] Aug 19 07:06:20 prd-ubuntu1804-docker-4c-4g-1356 useradd[1840]: new group: name=jenkins, GID=1001 Aug 19 07:06:20 prd-ubuntu1804-docker-4c-4g-1356 useradd[1840]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 19 07:06:20 prd-ubuntu1804-docker-4c-4g-1356 usermod[1847]: add 'jenkins' to group 'docker' Aug 19 07:06:20 prd-ubuntu1804-docker-4c-4g-1356 usermod[1847]: add 'jenkins' to shadow group 'docker' Aug 19 07:06:22 prd-ubuntu1804-docker-4c-4g-1356 sshd[1893]: Accepted publickey for jenkins from 10.32.4.5 port 55120 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 19 07:06:22 prd-ubuntu1804-docker-4c-4g-1356 sshd[1893]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 19 07:06:22 prd-ubuntu1804-docker-4c-4g-1356 systemd-logind[1037]: New session 2 of user jenkins. Aug 19 07:06:22 prd-ubuntu1804-docker-4c-4g-1356 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 19 07:07:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[2393]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 07:07:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[2393]: pam_unix(cron:session): session closed for user root Aug 19 07:08:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[2454]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 07:08:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[2454]: pam_unix(cron:session): session closed for user root Aug 19 07:09:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[2967]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 07:09:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[2967]: pam_unix(cron:session): session closed for user root Aug 19 07:10:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[3416]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 19 07:10:01 prd-ubuntu1804-docker-4c-4g-1356 CRON[3416]: pam_unix(cron:session): session closed for user root Aug 19 07:10:04 prd-ubuntu1804-docker-4c-4g-1356 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-ping-test-head-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 19 07:10:04 prd-ubuntu1804-docker-4c-4g-1356 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)