Apr 15 09:27:15 prd-ubuntu1804-docker-4c-4g-248 passwd[943]: password for 'ubuntu' changed by 'root' Apr 15 09:27:15 prd-ubuntu1804-docker-4c-4g-248 sshd[1114]: Server listening on 0.0.0.0 port 22. Apr 15 09:27:15 prd-ubuntu1804-docker-4c-4g-248 sshd[1114]: Server listening on :: port 22. Apr 15 09:27:15 prd-ubuntu1804-docker-4c-4g-248 systemd-logind[1107]: Watching system buttons on /dev/input/event0 (Power Button) Apr 15 09:27:15 prd-ubuntu1804-docker-4c-4g-248 systemd-logind[1107]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 15 09:27:15 prd-ubuntu1804-docker-4c-4g-248 systemd-logind[1107]: New seat seat0. Apr 15 09:27:20 prd-ubuntu1804-docker-4c-4g-248 sshd[1485]: Did not receive identification string from 10.32.4.5 port 43708 Apr 15 09:27:25 prd-ubuntu1804-docker-4c-4g-248 sshd[1508]: Invalid user jenkins from 10.32.4.5 port 43732 Apr 15 09:27:25 prd-ubuntu1804-docker-4c-4g-248 sshd[1508]: Received disconnect from 10.32.4.5 port 43732:11: Closed due to user request. [preauth] Apr 15 09:27:25 prd-ubuntu1804-docker-4c-4g-248 sshd[1508]: Disconnected from invalid user jenkins 10.32.4.5 port 43732 [preauth] Apr 15 09:27:27 prd-ubuntu1804-docker-4c-4g-248 sshd[1512]: Invalid user jenkins from 10.32.4.5 port 43736 Apr 15 09:27:27 prd-ubuntu1804-docker-4c-4g-248 sshd[1512]: Received disconnect from 10.32.4.5 port 43736:11: Closed due to user request. [preauth] Apr 15 09:27:27 prd-ubuntu1804-docker-4c-4g-248 sshd[1512]: Disconnected from invalid user jenkins 10.32.4.5 port 43736 [preauth] Apr 15 09:27:29 prd-ubuntu1804-docker-4c-4g-248 sshd[1535]: Invalid user jenkins from 10.32.4.5 port 43740 Apr 15 09:27:29 prd-ubuntu1804-docker-4c-4g-248 sshd[1535]: Received disconnect from 10.32.4.5 port 43740:11: Closed due to user request. [preauth] Apr 15 09:27:29 prd-ubuntu1804-docker-4c-4g-248 sshd[1535]: Disconnected from invalid user jenkins 10.32.4.5 port 43740 [preauth] Apr 15 09:27:31 prd-ubuntu1804-docker-4c-4g-248 sshd[1537]: Invalid user jenkins from 10.32.4.5 port 43746 Apr 15 09:27:31 prd-ubuntu1804-docker-4c-4g-248 sshd[1537]: Received disconnect from 10.32.4.5 port 43746:11: Closed due to user request. [preauth] Apr 15 09:27:31 prd-ubuntu1804-docker-4c-4g-248 sshd[1537]: Disconnected from invalid user jenkins 10.32.4.5 port 43746 [preauth] Apr 15 09:27:33 prd-ubuntu1804-docker-4c-4g-248 sshd[1539]: Invalid user jenkins from 10.32.4.5 port 43748 Apr 15 09:27:33 prd-ubuntu1804-docker-4c-4g-248 sshd[1539]: Received disconnect from 10.32.4.5 port 43748:11: Closed due to user request. [preauth] Apr 15 09:27:33 prd-ubuntu1804-docker-4c-4g-248 sshd[1539]: Disconnected from invalid user jenkins 10.32.4.5 port 43748 [preauth] Apr 15 09:27:35 prd-ubuntu1804-docker-4c-4g-248 sshd[1541]: Invalid user jenkins from 10.32.4.5 port 43752 Apr 15 09:27:35 prd-ubuntu1804-docker-4c-4g-248 sshd[1541]: Received disconnect from 10.32.4.5 port 43752:11: Closed due to user request. [preauth] Apr 15 09:27:35 prd-ubuntu1804-docker-4c-4g-248 sshd[1541]: Disconnected from invalid user jenkins 10.32.4.5 port 43752 [preauth] Apr 15 09:27:37 prd-ubuntu1804-docker-4c-4g-248 sshd[1552]: Invalid user jenkins from 10.32.4.5 port 43754 Apr 15 09:27:37 prd-ubuntu1804-docker-4c-4g-248 sshd[1552]: Received disconnect from 10.32.4.5 port 43754:11: Closed due to user request. [preauth] Apr 15 09:27:37 prd-ubuntu1804-docker-4c-4g-248 sshd[1552]: Disconnected from invalid user jenkins 10.32.4.5 port 43754 [preauth] Apr 15 09:27:39 prd-ubuntu1804-docker-4c-4g-248 sshd[1781]: Invalid user jenkins from 10.32.4.5 port 43756 Apr 15 09:27:40 prd-ubuntu1804-docker-4c-4g-248 sshd[1781]: Received disconnect from 10.32.4.5 port 43756:11: Closed due to user request. [preauth] Apr 15 09:27:40 prd-ubuntu1804-docker-4c-4g-248 sshd[1781]: Disconnected from invalid user jenkins 10.32.4.5 port 43756 [preauth] Apr 15 09:27:42 prd-ubuntu1804-docker-4c-4g-248 sshd[1821]: Invalid user jenkins from 10.32.4.5 port 43776 Apr 15 09:27:42 prd-ubuntu1804-docker-4c-4g-248 sshd[1821]: Received disconnect from 10.32.4.5 port 43776:11: Closed due to user request. [preauth] Apr 15 09:27:42 prd-ubuntu1804-docker-4c-4g-248 sshd[1821]: Disconnected from invalid user jenkins 10.32.4.5 port 43776 [preauth] Apr 15 09:27:44 prd-ubuntu1804-docker-4c-4g-248 sshd[1831]: Invalid user jenkins from 10.32.4.5 port 43790 Apr 15 09:27:44 prd-ubuntu1804-docker-4c-4g-248 sshd[1831]: Received disconnect from 10.32.4.5 port 43790:11: Closed due to user request. [preauth] Apr 15 09:27:44 prd-ubuntu1804-docker-4c-4g-248 sshd[1831]: Disconnected from invalid user jenkins 10.32.4.5 port 43790 [preauth] Apr 15 09:27:44 prd-ubuntu1804-docker-4c-4g-248 useradd[1841]: new group: name=jenkins, GID=1001 Apr 15 09:27:44 prd-ubuntu1804-docker-4c-4g-248 useradd[1841]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 15 09:27:44 prd-ubuntu1804-docker-4c-4g-248 usermod[1848]: add 'jenkins' to group 'docker' Apr 15 09:27:44 prd-ubuntu1804-docker-4c-4g-248 usermod[1848]: add 'jenkins' to shadow group 'docker' Apr 15 09:27:46 prd-ubuntu1804-docker-4c-4g-248 sshd[1882]: Accepted publickey for jenkins from 10.32.4.5 port 43792 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 15 09:27:46 prd-ubuntu1804-docker-4c-4g-248 sshd[1882]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 15 09:27:46 prd-ubuntu1804-docker-4c-4g-248 systemd-logind[1107]: New session 1 of user jenkins. Apr 15 09:27:46 prd-ubuntu1804-docker-4c-4g-248 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 15 09:28:01 prd-ubuntu1804-docker-4c-4g-248 CRON[2412]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 15 09:28:01 prd-ubuntu1804-docker-4c-4g-248 CRON[2412]: pam_unix(cron:session): session closed for user root Apr 15 09:29:01 prd-ubuntu1804-docker-4c-4g-248 CRON[2484]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 15 09:29:01 prd-ubuntu1804-docker-4c-4g-248 CRON[2484]: pam_unix(cron:session): session closed for user root Apr 15 09:30:01 prd-ubuntu1804-docker-4c-4g-248 CRON[6551]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 15 09:30:01 prd-ubuntu1804-docker-4c-4g-248 CRON[6551]: pam_unix(cron:session): session closed for user root Apr 15 09:31:01 prd-ubuntu1804-docker-4c-4g-248 CRON[8254]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 15 09:31:01 prd-ubuntu1804-docker-4c-4g-248 CRON[8254]: pam_unix(cron:session): session closed for user root Apr 15 09:31:43 prd-ubuntu1804-docker-4c-4g-248 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-athp-data-extraction-docker-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 15 09:31:43 prd-ubuntu1804-docker-4c-4g-248 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)