Feb 5 07:53:07 prd-ubuntu1804-docker-8c-8g-5404 passwd[994]: password for 'ubuntu' changed by 'root' Feb 5 07:53:07 prd-ubuntu1804-docker-8c-8g-5404 systemd-logind[1084]: Watching system buttons on /dev/input/event0 (Power Button) Feb 5 07:53:07 prd-ubuntu1804-docker-8c-8g-5404 systemd-logind[1084]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 5 07:53:07 prd-ubuntu1804-docker-8c-8g-5404 systemd-logind[1084]: New seat seat0. Feb 5 07:53:07 prd-ubuntu1804-docker-8c-8g-5404 sshd[1136]: Server listening on 0.0.0.0 port 22. Feb 5 07:53:07 prd-ubuntu1804-docker-8c-8g-5404 sshd[1136]: Server listening on :: port 22. Feb 5 07:53:10 prd-ubuntu1804-docker-8c-8g-5404 sshd[1408]: Did not receive identification string from 10.30.104.4 port 34240 Feb 5 07:53:12 prd-ubuntu1804-docker-8c-8g-5404 sshd[1414]: Invalid user jenkins from 10.30.104.4 port 34248 Feb 5 07:53:12 prd-ubuntu1804-docker-8c-8g-5404 sshd[1414]: Received disconnect from 10.30.104.4 port 34248:11: Closed due to user request. [preauth] Feb 5 07:53:12 prd-ubuntu1804-docker-8c-8g-5404 sshd[1414]: Disconnected from invalid user jenkins 10.30.104.4 port 34248 [preauth] Feb 5 07:53:14 prd-ubuntu1804-docker-8c-8g-5404 sshd[1437]: Invalid user jenkins from 10.30.104.4 port 34262 Feb 5 07:53:14 prd-ubuntu1804-docker-8c-8g-5404 sshd[1437]: Received disconnect from 10.30.104.4 port 34262:11: Closed due to user request. [preauth] Feb 5 07:53:14 prd-ubuntu1804-docker-8c-8g-5404 sshd[1437]: Disconnected from invalid user jenkins 10.30.104.4 port 34262 [preauth] Feb 5 07:53:16 prd-ubuntu1804-docker-8c-8g-5404 sshd[1439]: Invalid user jenkins from 10.30.104.4 port 34276 Feb 5 07:53:16 prd-ubuntu1804-docker-8c-8g-5404 sshd[1439]: Received disconnect from 10.30.104.4 port 34276:11: Closed due to user request. [preauth] Feb 5 07:53:16 prd-ubuntu1804-docker-8c-8g-5404 sshd[1439]: Disconnected from invalid user jenkins 10.30.104.4 port 34276 [preauth] Feb 5 07:53:18 prd-ubuntu1804-docker-8c-8g-5404 sshd[1441]: Invalid user jenkins from 10.30.104.4 port 34284 Feb 5 07:53:18 prd-ubuntu1804-docker-8c-8g-5404 sshd[1441]: Received disconnect from 10.30.104.4 port 34284:11: Closed due to user request. [preauth] Feb 5 07:53:18 prd-ubuntu1804-docker-8c-8g-5404 sshd[1441]: Disconnected from invalid user jenkins 10.30.104.4 port 34284 [preauth] Feb 5 07:53:20 prd-ubuntu1804-docker-8c-8g-5404 sshd[1443]: Invalid user jenkins from 10.30.104.4 port 34292 Feb 5 07:53:21 prd-ubuntu1804-docker-8c-8g-5404 sshd[1443]: Received disconnect from 10.30.104.4 port 34292:11: Closed due to user request. [preauth] Feb 5 07:53:21 prd-ubuntu1804-docker-8c-8g-5404 sshd[1443]: Disconnected from invalid user jenkins 10.30.104.4 port 34292 [preauth] Feb 5 07:53:23 prd-ubuntu1804-docker-8c-8g-5404 sshd[1445]: Invalid user jenkins from 10.30.104.4 port 34302 Feb 5 07:53:23 prd-ubuntu1804-docker-8c-8g-5404 sshd[1445]: Received disconnect from 10.30.104.4 port 34302:11: Closed due to user request. [preauth] Feb 5 07:53:23 prd-ubuntu1804-docker-8c-8g-5404 sshd[1445]: Disconnected from invalid user jenkins 10.30.104.4 port 34302 [preauth] Feb 5 07:53:25 prd-ubuntu1804-docker-8c-8g-5404 sshd[1457]: Invalid user jenkins from 10.30.104.4 port 34312 Feb 5 07:53:25 prd-ubuntu1804-docker-8c-8g-5404 sshd[1457]: Received disconnect from 10.30.104.4 port 34312:11: Closed due to user request. [preauth] Feb 5 07:53:25 prd-ubuntu1804-docker-8c-8g-5404 sshd[1457]: Disconnected from invalid user jenkins 10.30.104.4 port 34312 [preauth] Feb 5 07:53:27 prd-ubuntu1804-docker-8c-8g-5404 sshd[1656]: Invalid user jenkins from 10.30.104.4 port 34322 Feb 5 07:53:27 prd-ubuntu1804-docker-8c-8g-5404 sshd[1656]: Received disconnect from 10.30.104.4 port 34322:11: Closed due to user request. [preauth] Feb 5 07:53:27 prd-ubuntu1804-docker-8c-8g-5404 sshd[1656]: Disconnected from invalid user jenkins 10.30.104.4 port 34322 [preauth] Feb 5 07:53:29 prd-ubuntu1804-docker-8c-8g-5404 sshd[1691]: Invalid user jenkins from 10.30.104.4 port 34332 Feb 5 07:53:29 prd-ubuntu1804-docker-8c-8g-5404 sshd[1691]: Received disconnect from 10.30.104.4 port 34332:11: Closed due to user request. [preauth] Feb 5 07:53:29 prd-ubuntu1804-docker-8c-8g-5404 sshd[1691]: Disconnected from invalid user jenkins 10.30.104.4 port 34332 [preauth] Feb 5 07:53:31 prd-ubuntu1804-docker-8c-8g-5404 sshd[1714]: Invalid user jenkins from 10.30.104.4 port 34346 Feb 5 07:53:31 prd-ubuntu1804-docker-8c-8g-5404 sshd[1714]: Received disconnect from 10.30.104.4 port 34346:11: Closed due to user request. [preauth] Feb 5 07:53:31 prd-ubuntu1804-docker-8c-8g-5404 sshd[1714]: Disconnected from invalid user jenkins 10.30.104.4 port 34346 [preauth] Feb 5 07:53:33 prd-ubuntu1804-docker-8c-8g-5404 sshd[1722]: Invalid user jenkins from 10.30.104.4 port 34356 Feb 5 07:53:33 prd-ubuntu1804-docker-8c-8g-5404 sshd[1722]: Received disconnect from 10.30.104.4 port 34356:11: Closed due to user request. [preauth] Feb 5 07:53:33 prd-ubuntu1804-docker-8c-8g-5404 sshd[1722]: Disconnected from invalid user jenkins 10.30.104.4 port 34356 [preauth] Feb 5 07:53:36 prd-ubuntu1804-docker-8c-8g-5404 sshd[1724]: Invalid user jenkins from 10.30.104.4 port 34368 Feb 5 07:53:36 prd-ubuntu1804-docker-8c-8g-5404 sshd[1724]: Received disconnect from 10.30.104.4 port 34368:11: Closed due to user request. [preauth] Feb 5 07:53:36 prd-ubuntu1804-docker-8c-8g-5404 sshd[1724]: Disconnected from invalid user jenkins 10.30.104.4 port 34368 [preauth] Feb 5 07:53:38 prd-ubuntu1804-docker-8c-8g-5404 sshd[1726]: Invalid user jenkins from 10.30.104.4 port 34376 Feb 5 07:53:38 prd-ubuntu1804-docker-8c-8g-5404 sshd[1726]: Received disconnect from 10.30.104.4 port 34376:11: Closed due to user request. [preauth] Feb 5 07:53:38 prd-ubuntu1804-docker-8c-8g-5404 sshd[1726]: Disconnected from invalid user jenkins 10.30.104.4 port 34376 [preauth] Feb 5 07:53:40 prd-ubuntu1804-docker-8c-8g-5404 sshd[1747]: Invalid user jenkins from 10.30.104.4 port 34384 Feb 5 07:53:40 prd-ubuntu1804-docker-8c-8g-5404 sshd[1747]: Received disconnect from 10.30.104.4 port 34384:11: Closed due to user request. [preauth] Feb 5 07:53:40 prd-ubuntu1804-docker-8c-8g-5404 sshd[1747]: Disconnected from invalid user jenkins 10.30.104.4 port 34384 [preauth] Feb 5 07:53:41 prd-ubuntu1804-docker-8c-8g-5404 useradd[1767]: new group: name=jenkins, GID=1001 Feb 5 07:53:41 prd-ubuntu1804-docker-8c-8g-5404 useradd[1767]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 5 07:53:42 prd-ubuntu1804-docker-8c-8g-5404 sshd[1768]: Received disconnect from 10.30.104.4 port 34396:11: Closed due to user request. [preauth] Feb 5 07:53:42 prd-ubuntu1804-docker-8c-8g-5404 sshd[1768]: Disconnected from authenticating user jenkins 10.30.104.4 port 34396 [preauth] Feb 5 07:53:42 prd-ubuntu1804-docker-8c-8g-5404 usermod[1776]: add 'jenkins' to group 'docker' Feb 5 07:53:42 prd-ubuntu1804-docker-8c-8g-5404 usermod[1776]: add 'jenkins' to shadow group 'docker' Feb 5 07:53:44 prd-ubuntu1804-docker-8c-8g-5404 sshd[1843]: Accepted publickey for jenkins from 10.30.104.4 port 34402 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Feb 5 07:53:44 prd-ubuntu1804-docker-8c-8g-5404 sshd[1843]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 5 07:53:44 prd-ubuntu1804-docker-8c-8g-5404 systemd-logind[1084]: New session 1 of user jenkins. Feb 5 07:53:44 prd-ubuntu1804-docker-8c-8g-5404 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 5 07:54:01 prd-ubuntu1804-docker-8c-8g-5404 CRON[2336]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 5 07:54:01 prd-ubuntu1804-docker-8c-8g-5404 CRON[2336]: pam_unix(cron:session): session closed for user root Feb 5 07:55:01 prd-ubuntu1804-docker-8c-8g-5404 CRON[2448]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 5 07:55:01 prd-ubuntu1804-docker-8c-8g-5404 CRON[2448]: pam_unix(cron:session): session closed for user root Feb 5 07:56:01 prd-ubuntu1804-docker-8c-8g-5404 CRON[3736]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 5 07:56:01 prd-ubuntu1804-docker-8c-8g-5404 CRON[3736]: pam_unix(cron:session): session closed for user root Feb 5 07:56:02 prd-ubuntu1804-docker-8c-8g-5404 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-docker-onap-java11-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 5 07:56:02 prd-ubuntu1804-docker-8c-8g-5404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)