May 1 06:30:20 prd-ubuntu1804-docker-8c-8g-7372 passwd[984]: password for 'ubuntu' changed by 'root' May 1 06:30:20 prd-ubuntu1804-docker-8c-8g-7372 systemd-logind[1062]: Watching system buttons on /dev/input/event0 (Power Button) May 1 06:30:20 prd-ubuntu1804-docker-8c-8g-7372 systemd-logind[1062]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 1 06:30:20 prd-ubuntu1804-docker-8c-8g-7372 systemd-logind[1062]: New seat seat0. May 1 06:30:20 prd-ubuntu1804-docker-8c-8g-7372 sshd[1110]: Server listening on 0.0.0.0 port 22. May 1 06:30:20 prd-ubuntu1804-docker-8c-8g-7372 sshd[1110]: Server listening on :: port 22. May 1 06:30:22 prd-ubuntu1804-docker-8c-8g-7372 sshd[1405]: Did not receive identification string from 10.30.104.4 port 34150 May 1 06:30:32 prd-ubuntu1804-docker-8c-8g-7372 sshd[1424]: Invalid user jenkins from 10.30.104.4 port 34154 May 1 06:30:32 prd-ubuntu1804-docker-8c-8g-7372 sshd[1424]: Received disconnect from 10.30.104.4 port 34154:11: Closed due to user request. [preauth] May 1 06:30:32 prd-ubuntu1804-docker-8c-8g-7372 sshd[1424]: Disconnected from invalid user jenkins 10.30.104.4 port 34154 [preauth] May 1 06:30:34 prd-ubuntu1804-docker-8c-8g-7372 sshd[1428]: Invalid user jenkins from 10.30.104.4 port 34158 May 1 06:30:34 prd-ubuntu1804-docker-8c-8g-7372 sshd[1428]: Received disconnect from 10.30.104.4 port 34158:11: Closed due to user request. [preauth] May 1 06:30:34 prd-ubuntu1804-docker-8c-8g-7372 sshd[1428]: Disconnected from invalid user jenkins 10.30.104.4 port 34158 [preauth] May 1 06:30:36 prd-ubuntu1804-docker-8c-8g-7372 sshd[1430]: Invalid user jenkins from 10.30.104.4 port 34160 May 1 06:30:36 prd-ubuntu1804-docker-8c-8g-7372 sshd[1430]: Received disconnect from 10.30.104.4 port 34160:11: Closed due to user request. [preauth] May 1 06:30:36 prd-ubuntu1804-docker-8c-8g-7372 sshd[1430]: Disconnected from invalid user jenkins 10.30.104.4 port 34160 [preauth] May 1 06:30:38 prd-ubuntu1804-docker-8c-8g-7372 sshd[1646]: Invalid user jenkins from 10.30.104.4 port 34162 May 1 06:30:38 prd-ubuntu1804-docker-8c-8g-7372 sshd[1646]: Received disconnect from 10.30.104.4 port 34162:11: Closed due to user request. [preauth] May 1 06:30:38 prd-ubuntu1804-docker-8c-8g-7372 sshd[1646]: Disconnected from invalid user jenkins 10.30.104.4 port 34162 [preauth] May 1 06:30:40 prd-ubuntu1804-docker-8c-8g-7372 sshd[1693]: Invalid user jenkins from 10.30.104.4 port 34164 May 1 06:30:40 prd-ubuntu1804-docker-8c-8g-7372 sshd[1693]: Received disconnect from 10.30.104.4 port 34164:11: Closed due to user request. [preauth] May 1 06:30:40 prd-ubuntu1804-docker-8c-8g-7372 sshd[1693]: Disconnected from invalid user jenkins 10.30.104.4 port 34164 [preauth] May 1 06:30:42 prd-ubuntu1804-docker-8c-8g-7372 sshd[1695]: Invalid user jenkins from 10.30.104.4 port 34166 May 1 06:30:42 prd-ubuntu1804-docker-8c-8g-7372 sshd[1695]: Received disconnect from 10.30.104.4 port 34166:11: Closed due to user request. [preauth] May 1 06:30:42 prd-ubuntu1804-docker-8c-8g-7372 sshd[1695]: Disconnected from invalid user jenkins 10.30.104.4 port 34166 [preauth] May 1 06:30:44 prd-ubuntu1804-docker-8c-8g-7372 sshd[1703]: Invalid user jenkins from 10.30.104.4 port 34168 May 1 06:30:44 prd-ubuntu1804-docker-8c-8g-7372 sshd[1703]: Received disconnect from 10.30.104.4 port 34168:11: Closed due to user request. [preauth] May 1 06:30:44 prd-ubuntu1804-docker-8c-8g-7372 sshd[1703]: Disconnected from invalid user jenkins 10.30.104.4 port 34168 [preauth] May 1 06:30:45 prd-ubuntu1804-docker-8c-8g-7372 useradd[1710]: new group: name=jenkins, GID=1001 May 1 06:30:45 prd-ubuntu1804-docker-8c-8g-7372 useradd[1710]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 1 06:30:45 prd-ubuntu1804-docker-8c-8g-7372 usermod[1717]: add 'jenkins' to group 'docker' May 1 06:30:45 prd-ubuntu1804-docker-8c-8g-7372 usermod[1717]: add 'jenkins' to shadow group 'docker' May 1 06:30:47 prd-ubuntu1804-docker-8c-8g-7372 sshd[1778]: Accepted publickey for jenkins from 10.30.104.4 port 34172 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 May 1 06:30:47 prd-ubuntu1804-docker-8c-8g-7372 sshd[1778]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 1 06:30:47 prd-ubuntu1804-docker-8c-8g-7372 systemd-logind[1062]: New session 1 of user jenkins. May 1 06:30:47 prd-ubuntu1804-docker-8c-8g-7372 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 1 06:31:00 prd-ubuntu1804-docker-8c-8g-7372 CRON[2067]: pam_unix(cron:session): session opened for user root by (uid=0) May 1 06:31:00 prd-ubuntu1804-docker-8c-8g-7372 CRON[2067]: pam_unix(cron:session): session closed for user root May 1 06:32:01 prd-ubuntu1804-docker-8c-8g-7372 CRON[2664]: pam_unix(cron:session): session opened for user root by (uid=0) May 1 06:32:02 prd-ubuntu1804-docker-8c-8g-7372 CRON[2664]: pam_unix(cron:session): session closed for user root May 1 06:32:07 prd-ubuntu1804-docker-8c-8g-7372 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/vnfrqts-requirements-master-build-and-upload ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 1 06:32:07 prd-ubuntu1804-docker-8c-8g-7372 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)