Jul 27 02:59:20 prd-ubuntu1804-docker-8c-8g-30972 passwd[1011]: password for 'ubuntu' changed by 'root' Jul 27 02:59:20 prd-ubuntu1804-docker-8c-8g-30972 systemd-logind[1097]: Watching system buttons on /dev/input/event0 (Power Button) Jul 27 02:59:20 prd-ubuntu1804-docker-8c-8g-30972 systemd-logind[1097]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 27 02:59:20 prd-ubuntu1804-docker-8c-8g-30972 systemd-logind[1097]: New seat seat0. Jul 27 02:59:20 prd-ubuntu1804-docker-8c-8g-30972 sshd[1118]: Server listening on 0.0.0.0 port 22. Jul 27 02:59:20 prd-ubuntu1804-docker-8c-8g-30972 sshd[1118]: Server listening on :: port 22. Jul 27 02:59:21 prd-ubuntu1804-docker-8c-8g-30972 sshd[1405]: Did not receive identification string from 10.30.104.4 port 43954 Jul 27 02:59:22 prd-ubuntu1804-docker-8c-8g-30972 sshd[1416]: Invalid user jenkins from 10.30.104.4 port 43956 Jul 27 02:59:22 prd-ubuntu1804-docker-8c-8g-30972 sshd[1416]: Received disconnect from 10.30.104.4 port 43956:11: Closed due to user request. [preauth] Jul 27 02:59:22 prd-ubuntu1804-docker-8c-8g-30972 sshd[1416]: Disconnected from invalid user jenkins 10.30.104.4 port 43956 [preauth] Jul 27 02:59:24 prd-ubuntu1804-docker-8c-8g-30972 sshd[1420]: Invalid user jenkins from 10.30.104.4 port 43958 Jul 27 02:59:24 prd-ubuntu1804-docker-8c-8g-30972 sshd[1420]: Received disconnect from 10.30.104.4 port 43958:11: Closed due to user request. [preauth] Jul 27 02:59:24 prd-ubuntu1804-docker-8c-8g-30972 sshd[1420]: Disconnected from invalid user jenkins 10.30.104.4 port 43958 [preauth] Jul 27 02:59:26 prd-ubuntu1804-docker-8c-8g-30972 sshd[1444]: Invalid user jenkins from 10.30.104.4 port 43960 Jul 27 02:59:26 prd-ubuntu1804-docker-8c-8g-30972 sshd[1444]: Received disconnect from 10.30.104.4 port 43960:11: Closed due to user request. [preauth] Jul 27 02:59:26 prd-ubuntu1804-docker-8c-8g-30972 sshd[1444]: Disconnected from invalid user jenkins 10.30.104.4 port 43960 [preauth] Jul 27 02:59:28 prd-ubuntu1804-docker-8c-8g-30972 sshd[1463]: Invalid user jenkins from 10.30.104.4 port 43964 Jul 27 02:59:28 prd-ubuntu1804-docker-8c-8g-30972 sshd[1463]: Received disconnect from 10.30.104.4 port 43964:11: Closed due to user request. [preauth] Jul 27 02:59:28 prd-ubuntu1804-docker-8c-8g-30972 sshd[1463]: Disconnected from invalid user jenkins 10.30.104.4 port 43964 [preauth] Jul 27 02:59:30 prd-ubuntu1804-docker-8c-8g-30972 sshd[1465]: Invalid user jenkins from 10.30.104.4 port 43972 Jul 27 02:59:30 prd-ubuntu1804-docker-8c-8g-30972 sshd[1465]: Received disconnect from 10.30.104.4 port 43972:11: Closed due to user request. [preauth] Jul 27 02:59:30 prd-ubuntu1804-docker-8c-8g-30972 sshd[1465]: Disconnected from invalid user jenkins 10.30.104.4 port 43972 [preauth] Jul 27 02:59:33 prd-ubuntu1804-docker-8c-8g-30972 sshd[1467]: Invalid user jenkins from 10.30.104.4 port 43974 Jul 27 02:59:33 prd-ubuntu1804-docker-8c-8g-30972 sshd[1467]: Received disconnect from 10.30.104.4 port 43974:11: Closed due to user request. [preauth] Jul 27 02:59:33 prd-ubuntu1804-docker-8c-8g-30972 sshd[1467]: Disconnected from invalid user jenkins 10.30.104.4 port 43974 [preauth] Jul 27 02:59:35 prd-ubuntu1804-docker-8c-8g-30972 sshd[1469]: Invalid user jenkins from 10.30.104.4 port 43976 Jul 27 02:59:35 prd-ubuntu1804-docker-8c-8g-30972 sshd[1469]: Received disconnect from 10.30.104.4 port 43976:11: Closed due to user request. [preauth] Jul 27 02:59:35 prd-ubuntu1804-docker-8c-8g-30972 sshd[1469]: Disconnected from invalid user jenkins 10.30.104.4 port 43976 [preauth] Jul 27 02:59:37 prd-ubuntu1804-docker-8c-8g-30972 sshd[1477]: Invalid user jenkins from 10.30.104.4 port 43978 Jul 27 02:59:37 prd-ubuntu1804-docker-8c-8g-30972 sshd[1477]: Received disconnect from 10.30.104.4 port 43978:11: Closed due to user request. [preauth] Jul 27 02:59:37 prd-ubuntu1804-docker-8c-8g-30972 sshd[1477]: Disconnected from invalid user jenkins 10.30.104.4 port 43978 [preauth] Jul 27 02:59:39 prd-ubuntu1804-docker-8c-8g-30972 sshd[1704]: Invalid user jenkins from 10.30.104.4 port 43982 Jul 27 02:59:39 prd-ubuntu1804-docker-8c-8g-30972 sshd[1704]: Received disconnect from 10.30.104.4 port 43982:11: Closed due to user request. [preauth] Jul 27 02:59:39 prd-ubuntu1804-docker-8c-8g-30972 sshd[1704]: Disconnected from invalid user jenkins 10.30.104.4 port 43982 [preauth] Jul 27 02:59:41 prd-ubuntu1804-docker-8c-8g-30972 sshd[1739]: Invalid user jenkins from 10.30.104.4 port 43984 Jul 27 02:59:41 prd-ubuntu1804-docker-8c-8g-30972 sshd[1739]: Received disconnect from 10.30.104.4 port 43984:11: Closed due to user request. [preauth] Jul 27 02:59:41 prd-ubuntu1804-docker-8c-8g-30972 sshd[1739]: Disconnected from invalid user jenkins 10.30.104.4 port 43984 [preauth] Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 useradd[1759]: new group: name=jenkins, GID=1001 Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 useradd[1759]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 usermod[1766]: add 'jenkins' to group 'docker' Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 usermod[1766]: add 'jenkins' to shadow group 'docker' Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 sshd[1797]: Accepted publickey for jenkins from 10.30.104.4 port 43988 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 sshd[1797]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 systemd-logind[1097]: New session 1 of user jenkins. Jul 27 02:59:43 prd-ubuntu1804-docker-8c-8g-30972 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 27 03:00:01 prd-ubuntu1804-docker-8c-8g-30972 CRON[2377]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 03:00:01 prd-ubuntu1804-docker-8c-8g-30972 CRON[2377]: pam_unix(cron:session): session closed for user root Jul 27 03:01:01 prd-ubuntu1804-docker-8c-8g-30972 CRON[3158]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 03:01:01 prd-ubuntu1804-docker-8c-8g-30972 CRON[3158]: pam_unix(cron:session): session closed for user root Jul 27 03:01:24 prd-ubuntu1804-docker-8c-8g-30972 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-onap-component-simulators-aai-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jul 27 03:01:24 prd-ubuntu1804-docker-8c-8g-30972 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)