Oct 30 11:27:16 prd-ubuntu1804-docker-4c-4g-9110 passwd[937]: password for 'ubuntu' changed by 'root' Oct 30 11:27:16 prd-ubuntu1804-docker-4c-4g-9110 systemd-logind[996]: Watching system buttons on /dev/input/event0 (Power Button) Oct 30 11:27:16 prd-ubuntu1804-docker-4c-4g-9110 systemd-logind[996]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 30 11:27:16 prd-ubuntu1804-docker-4c-4g-9110 systemd-logind[996]: New seat seat0. Oct 30 11:27:16 prd-ubuntu1804-docker-4c-4g-9110 sshd[1287]: Server listening on 0.0.0.0 port 22. Oct 30 11:27:16 prd-ubuntu1804-docker-4c-4g-9110 sshd[1287]: Server listening on :: port 22. Oct 30 11:27:19 prd-ubuntu1804-docker-4c-4g-9110 sshd[1506]: Did not receive identification string from 10.32.4.5 port 56930 Oct 30 11:27:21 prd-ubuntu1804-docker-4c-4g-9110 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 56932 Oct 30 11:27:21 prd-ubuntu1804-docker-4c-4g-9110 sshd[1540]: Received disconnect from 10.32.4.5 port 56932:11: Closed due to user request. [preauth] Oct 30 11:27:21 prd-ubuntu1804-docker-4c-4g-9110 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 56932 [preauth] Oct 30 11:27:23 prd-ubuntu1804-docker-4c-4g-9110 sshd[1571]: Invalid user jenkins from 10.32.4.5 port 56936 Oct 30 11:27:23 prd-ubuntu1804-docker-4c-4g-9110 sshd[1571]: Received disconnect from 10.32.4.5 port 56936:11: Closed due to user request. [preauth] Oct 30 11:27:23 prd-ubuntu1804-docker-4c-4g-9110 sshd[1571]: Disconnected from invalid user jenkins 10.32.4.5 port 56936 [preauth] Oct 30 11:27:25 prd-ubuntu1804-docker-4c-4g-9110 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 56938 Oct 30 11:27:25 prd-ubuntu1804-docker-4c-4g-9110 sshd[1584]: Received disconnect from 10.32.4.5 port 56938:11: Closed due to user request. [preauth] Oct 30 11:27:25 prd-ubuntu1804-docker-4c-4g-9110 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 56938 [preauth] Oct 30 11:27:27 prd-ubuntu1804-docker-4c-4g-9110 sshd[1586]: Invalid user jenkins from 10.32.4.5 port 56940 Oct 30 11:27:27 prd-ubuntu1804-docker-4c-4g-9110 sshd[1586]: Received disconnect from 10.32.4.5 port 56940:11: Closed due to user request. [preauth] Oct 30 11:27:27 prd-ubuntu1804-docker-4c-4g-9110 sshd[1586]: Disconnected from invalid user jenkins 10.32.4.5 port 56940 [preauth] Oct 30 11:27:29 prd-ubuntu1804-docker-4c-4g-9110 sshd[1588]: Invalid user jenkins from 10.32.4.5 port 56942 Oct 30 11:27:29 prd-ubuntu1804-docker-4c-4g-9110 sshd[1588]: Received disconnect from 10.32.4.5 port 56942:11: Closed due to user request. [preauth] Oct 30 11:27:29 prd-ubuntu1804-docker-4c-4g-9110 sshd[1588]: Disconnected from invalid user jenkins 10.32.4.5 port 56942 [preauth] Oct 30 11:27:31 prd-ubuntu1804-docker-4c-4g-9110 sshd[1590]: Invalid user jenkins from 10.32.4.5 port 56944 Oct 30 11:27:32 prd-ubuntu1804-docker-4c-4g-9110 sshd[1590]: Received disconnect from 10.32.4.5 port 56944:11: Closed due to user request. [preauth] Oct 30 11:27:32 prd-ubuntu1804-docker-4c-4g-9110 sshd[1590]: Disconnected from invalid user jenkins 10.32.4.5 port 56944 [preauth] Oct 30 11:27:34 prd-ubuntu1804-docker-4c-4g-9110 sshd[1592]: Invalid user jenkins from 10.32.4.5 port 56946 Oct 30 11:27:34 prd-ubuntu1804-docker-4c-4g-9110 sshd[1592]: Received disconnect from 10.32.4.5 port 56946:11: Closed due to user request. [preauth] Oct 30 11:27:34 prd-ubuntu1804-docker-4c-4g-9110 sshd[1592]: Disconnected from invalid user jenkins 10.32.4.5 port 56946 [preauth] Oct 30 11:27:36 prd-ubuntu1804-docker-4c-4g-9110 sshd[1594]: Invalid user jenkins from 10.32.4.5 port 56948 Oct 30 11:27:36 prd-ubuntu1804-docker-4c-4g-9110 sshd[1594]: Received disconnect from 10.32.4.5 port 56948:11: Closed due to user request. [preauth] Oct 30 11:27:36 prd-ubuntu1804-docker-4c-4g-9110 sshd[1594]: Disconnected from invalid user jenkins 10.32.4.5 port 56948 [preauth] Oct 30 11:27:38 prd-ubuntu1804-docker-4c-4g-9110 sshd[1626]: Invalid user jenkins from 10.32.4.5 port 56950 Oct 30 11:27:38 prd-ubuntu1804-docker-4c-4g-9110 sshd[1626]: Received disconnect from 10.32.4.5 port 56950:11: Closed due to user request. [preauth] Oct 30 11:27:38 prd-ubuntu1804-docker-4c-4g-9110 sshd[1626]: Disconnected from invalid user jenkins 10.32.4.5 port 56950 [preauth] Oct 30 11:27:40 prd-ubuntu1804-docker-4c-4g-9110 sshd[1835]: Invalid user jenkins from 10.32.4.5 port 56954 Oct 30 11:27:40 prd-ubuntu1804-docker-4c-4g-9110 sshd[1835]: Received disconnect from 10.32.4.5 port 56954:11: Closed due to user request. [preauth] Oct 30 11:27:40 prd-ubuntu1804-docker-4c-4g-9110 sshd[1835]: Disconnected from invalid user jenkins 10.32.4.5 port 56954 [preauth] Oct 30 11:27:42 prd-ubuntu1804-docker-4c-4g-9110 sshd[1874]: Invalid user jenkins from 10.32.4.5 port 56956 Oct 30 11:27:42 prd-ubuntu1804-docker-4c-4g-9110 sshd[1874]: Received disconnect from 10.32.4.5 port 56956:11: Closed due to user request. [preauth] Oct 30 11:27:42 prd-ubuntu1804-docker-4c-4g-9110 sshd[1874]: Disconnected from invalid user jenkins 10.32.4.5 port 56956 [preauth] Oct 30 11:27:44 prd-ubuntu1804-docker-4c-4g-9110 useradd[1893]: new group: name=jenkins, GID=1001 Oct 30 11:27:44 prd-ubuntu1804-docker-4c-4g-9110 useradd[1893]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 30 11:27:44 prd-ubuntu1804-docker-4c-4g-9110 sshd[1892]: Invalid user jenkins from 10.32.4.5 port 56958 Oct 30 11:27:44 prd-ubuntu1804-docker-4c-4g-9110 sshd[1892]: Received disconnect from 10.32.4.5 port 56958:11: Closed due to user request. [preauth] Oct 30 11:27:44 prd-ubuntu1804-docker-4c-4g-9110 sshd[1892]: Disconnected from invalid user jenkins 10.32.4.5 port 56958 [preauth] Oct 30 11:27:44 prd-ubuntu1804-docker-4c-4g-9110 usermod[1901]: add 'jenkins' to group 'docker' Oct 30 11:27:44 prd-ubuntu1804-docker-4c-4g-9110 usermod[1901]: add 'jenkins' to shadow group 'docker' Oct 30 11:27:46 prd-ubuntu1804-docker-4c-4g-9110 sshd[1935]: Accepted publickey for jenkins from 10.32.4.5 port 56966 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 30 11:27:46 prd-ubuntu1804-docker-4c-4g-9110 sshd[1935]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 30 11:27:46 prd-ubuntu1804-docker-4c-4g-9110 systemd-logind[996]: New session 1 of user jenkins. Oct 30 11:27:46 prd-ubuntu1804-docker-4c-4g-9110 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 30 11:28:01 prd-ubuntu1804-docker-4c-4g-9110 CRON[2473]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 30 11:28:01 prd-ubuntu1804-docker-4c-4g-9110 CRON[2473]: pam_unix(cron:session): session closed for user root Oct 30 11:29:02 prd-ubuntu1804-docker-4c-4g-9110 CRON[2724]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 30 11:29:02 prd-ubuntu1804-docker-4c-4g-9110 CRON[2724]: pam_unix(cron:session): session closed for user root Oct 30 11:30:01 prd-ubuntu1804-docker-4c-4g-9110 CRON[3507]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 30 11:30:01 prd-ubuntu1804-docker-4c-4g-9110 CRON[3507]: pam_unix(cron:session): session closed for user root Oct 30 11:30:46 prd-ubuntu1804-docker-4c-4g-9110 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-athp-sdk-model-storage-pypi-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 30 11:30:46 prd-ubuntu1804-docker-4c-4g-9110 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)