Nov 13 07:44:44 prd-ubuntu1804-docker-8c-8g-12357 passwd[998]: password for 'ubuntu' changed by 'root' Nov 13 07:44:44 prd-ubuntu1804-docker-8c-8g-12357 systemd-logind[1105]: Watching system buttons on /dev/input/event0 (Power Button) Nov 13 07:44:44 prd-ubuntu1804-docker-8c-8g-12357 systemd-logind[1105]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 13 07:44:44 prd-ubuntu1804-docker-8c-8g-12357 systemd-logind[1105]: New seat seat0. Nov 13 07:44:44 prd-ubuntu1804-docker-8c-8g-12357 sshd[1137]: Server listening on 0.0.0.0 port 22. Nov 13 07:44:44 prd-ubuntu1804-docker-8c-8g-12357 sshd[1137]: Server listening on :: port 22. Nov 13 07:44:46 prd-ubuntu1804-docker-8c-8g-12357 sshd[1422]: Did not receive identification string from 10.30.104.4 port 57140 Nov 13 07:44:54 prd-ubuntu1804-docker-8c-8g-12357 sshd[1450]: Invalid user jenkins from 10.30.104.4 port 57148 Nov 13 07:44:54 prd-ubuntu1804-docker-8c-8g-12357 sshd[1450]: Received disconnect from 10.30.104.4 port 57148:11: Closed due to user request. [preauth] Nov 13 07:44:54 prd-ubuntu1804-docker-8c-8g-12357 sshd[1450]: Disconnected from invalid user jenkins 10.30.104.4 port 57148 [preauth] Nov 13 07:44:56 prd-ubuntu1804-docker-8c-8g-12357 sshd[1454]: Invalid user jenkins from 10.30.104.4 port 57150 Nov 13 07:44:56 prd-ubuntu1804-docker-8c-8g-12357 sshd[1454]: Received disconnect from 10.30.104.4 port 57150:11: Closed due to user request. [preauth] Nov 13 07:44:56 prd-ubuntu1804-docker-8c-8g-12357 sshd[1454]: Disconnected from invalid user jenkins 10.30.104.4 port 57150 [preauth] Nov 13 07:44:58 prd-ubuntu1804-docker-8c-8g-12357 sshd[1456]: Invalid user jenkins from 10.30.104.4 port 57154 Nov 13 07:44:58 prd-ubuntu1804-docker-8c-8g-12357 sshd[1456]: Received disconnect from 10.30.104.4 port 57154:11: Closed due to user request. [preauth] Nov 13 07:44:58 prd-ubuntu1804-docker-8c-8g-12357 sshd[1456]: Disconnected from invalid user jenkins 10.30.104.4 port 57154 [preauth] Nov 13 07:45:00 prd-ubuntu1804-docker-8c-8g-12357 sshd[1458]: Invalid user jenkins from 10.30.104.4 port 57156 Nov 13 07:45:00 prd-ubuntu1804-docker-8c-8g-12357 sshd[1458]: Received disconnect from 10.30.104.4 port 57156:11: Closed due to user request. [preauth] Nov 13 07:45:00 prd-ubuntu1804-docker-8c-8g-12357 sshd[1458]: Disconnected from invalid user jenkins 10.30.104.4 port 57156 [preauth] Nov 13 07:45:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[1460]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 07:45:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[1460]: pam_unix(cron:session): session closed for user root Nov 13 07:45:02 prd-ubuntu1804-docker-8c-8g-12357 sshd[1683]: Invalid user jenkins from 10.30.104.4 port 57168 Nov 13 07:45:02 prd-ubuntu1804-docker-8c-8g-12357 sshd[1683]: Received disconnect from 10.30.104.4 port 57168:11: Closed due to user request. [preauth] Nov 13 07:45:02 prd-ubuntu1804-docker-8c-8g-12357 sshd[1683]: Disconnected from invalid user jenkins 10.30.104.4 port 57168 [preauth] Nov 13 07:45:04 prd-ubuntu1804-docker-8c-8g-12357 sshd[1729]: Invalid user jenkins from 10.30.104.4 port 57176 Nov 13 07:45:04 prd-ubuntu1804-docker-8c-8g-12357 sshd[1729]: Received disconnect from 10.30.104.4 port 57176:11: Closed due to user request. [preauth] Nov 13 07:45:04 prd-ubuntu1804-docker-8c-8g-12357 sshd[1729]: Disconnected from invalid user jenkins 10.30.104.4 port 57176 [preauth] Nov 13 07:45:06 prd-ubuntu1804-docker-8c-8g-12357 sshd[1731]: Invalid user jenkins from 10.30.104.4 port 57222 Nov 13 07:45:06 prd-ubuntu1804-docker-8c-8g-12357 sshd[1731]: Received disconnect from 10.30.104.4 port 57222:11: Closed due to user request. [preauth] Nov 13 07:45:06 prd-ubuntu1804-docker-8c-8g-12357 sshd[1731]: Disconnected from invalid user jenkins 10.30.104.4 port 57222 [preauth] Nov 13 07:45:07 prd-ubuntu1804-docker-8c-8g-12357 useradd[1751]: new group: name=jenkins, GID=1001 Nov 13 07:45:07 prd-ubuntu1804-docker-8c-8g-12357 useradd[1751]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 13 07:45:07 prd-ubuntu1804-docker-8c-8g-12357 usermod[1758]: add 'jenkins' to group 'docker' Nov 13 07:45:07 prd-ubuntu1804-docker-8c-8g-12357 usermod[1758]: add 'jenkins' to shadow group 'docker' Nov 13 07:45:08 prd-ubuntu1804-docker-8c-8g-12357 sshd[1826]: Accepted publickey for jenkins from 10.30.104.4 port 57224 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 13 07:45:08 prd-ubuntu1804-docker-8c-8g-12357 sshd[1826]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 13 07:45:08 prd-ubuntu1804-docker-8c-8g-12357 systemd-logind[1105]: New session 2 of user jenkins. Nov 13 07:45:08 prd-ubuntu1804-docker-8c-8g-12357 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 13 07:46:00 prd-ubuntu1804-docker-8c-8g-12357 CRON[2073]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 07:46:00 prd-ubuntu1804-docker-8c-8g-12357 CRON[2073]: pam_unix(cron:session): session closed for user root Nov 13 07:47:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2077]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 07:47:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2077]: pam_unix(cron:session): session closed for user root Nov 13 07:48:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2087]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 07:48:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2087]: pam_unix(cron:session): session closed for user root Nov 13 07:49:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2093]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 07:49:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2093]: pam_unix(cron:session): session closed for user root Nov 13 07:50:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2119]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 07:50:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2119]: pam_unix(cron:session): session closed for user root Nov 13 07:51:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2905]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 07:51:01 prd-ubuntu1804-docker-8c-8g-12357 CRON[2905]: pam_unix(cron:session): session closed for user root Nov 13 07:51:34 prd-ubuntu1804-docker-8c-8g-12357 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-docker-onap-java11-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Nov 13 07:51:34 prd-ubuntu1804-docker-8c-8g-12357 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)