Jan 3 17:07:17 prd-ubuntu1804-docker-4c-4g-894 passwd[970]: password for 'ubuntu' changed by 'root' Jan 3 17:07:18 prd-ubuntu1804-docker-4c-4g-894 systemd-logind[1149]: Watching system buttons on /dev/input/event0 (Power Button) Jan 3 17:07:18 prd-ubuntu1804-docker-4c-4g-894 systemd-logind[1149]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 3 17:07:18 prd-ubuntu1804-docker-4c-4g-894 systemd-logind[1149]: New seat seat0. Jan 3 17:07:18 prd-ubuntu1804-docker-4c-4g-894 sshd[1330]: Server listening on 0.0.0.0 port 22. Jan 3 17:07:18 prd-ubuntu1804-docker-4c-4g-894 sshd[1330]: Server listening on :: port 22. Jan 3 17:07:21 prd-ubuntu1804-docker-4c-4g-894 sshd[1538]: Did not receive identification string from 10.32.4.5 port 50288 Jan 3 17:07:27 prd-ubuntu1804-docker-4c-4g-894 sshd[1623]: Invalid user jenkins from 10.32.4.5 port 50296 Jan 3 17:07:27 prd-ubuntu1804-docker-4c-4g-894 sshd[1623]: Received disconnect from 10.32.4.5 port 50296:11: Closed due to user request. [preauth] Jan 3 17:07:27 prd-ubuntu1804-docker-4c-4g-894 sshd[1623]: Disconnected from invalid user jenkins 10.32.4.5 port 50296 [preauth] Jan 3 17:07:29 prd-ubuntu1804-docker-4c-4g-894 sshd[1627]: Invalid user jenkins from 10.32.4.5 port 50312 Jan 3 17:07:29 prd-ubuntu1804-docker-4c-4g-894 sshd[1627]: Received disconnect from 10.32.4.5 port 50312:11: Closed due to user request. [preauth] Jan 3 17:07:29 prd-ubuntu1804-docker-4c-4g-894 sshd[1627]: Disconnected from invalid user jenkins 10.32.4.5 port 50312 [preauth] Jan 3 17:07:31 prd-ubuntu1804-docker-4c-4g-894 sshd[1629]: Invalid user jenkins from 10.32.4.5 port 50318 Jan 3 17:07:31 prd-ubuntu1804-docker-4c-4g-894 sshd[1629]: Received disconnect from 10.32.4.5 port 50318:11: Closed due to user request. [preauth] Jan 3 17:07:31 prd-ubuntu1804-docker-4c-4g-894 sshd[1629]: Disconnected from invalid user jenkins 10.32.4.5 port 50318 [preauth] Jan 3 17:07:33 prd-ubuntu1804-docker-4c-4g-894 sshd[1631]: Invalid user jenkins from 10.32.4.5 port 50322 Jan 3 17:07:33 prd-ubuntu1804-docker-4c-4g-894 sshd[1631]: Received disconnect from 10.32.4.5 port 50322:11: Closed due to user request. [preauth] Jan 3 17:07:33 prd-ubuntu1804-docker-4c-4g-894 sshd[1631]: Disconnected from invalid user jenkins 10.32.4.5 port 50322 [preauth] Jan 3 17:07:36 prd-ubuntu1804-docker-4c-4g-894 sshd[1633]: Invalid user jenkins from 10.32.4.5 port 50332 Jan 3 17:07:36 prd-ubuntu1804-docker-4c-4g-894 sshd[1633]: Received disconnect from 10.32.4.5 port 50332:11: Closed due to user request. [preauth] Jan 3 17:07:36 prd-ubuntu1804-docker-4c-4g-894 sshd[1633]: Disconnected from invalid user jenkins 10.32.4.5 port 50332 [preauth] Jan 3 17:07:38 prd-ubuntu1804-docker-4c-4g-894 sshd[1635]: Invalid user jenkins from 10.32.4.5 port 50348 Jan 3 17:07:38 prd-ubuntu1804-docker-4c-4g-894 sshd[1635]: Received disconnect from 10.32.4.5 port 50348:11: Closed due to user request. [preauth] Jan 3 17:07:38 prd-ubuntu1804-docker-4c-4g-894 sshd[1635]: Disconnected from invalid user jenkins 10.32.4.5 port 50348 [preauth] Jan 3 17:07:40 prd-ubuntu1804-docker-4c-4g-894 sshd[1647]: Invalid user jenkins from 10.32.4.5 port 50358 Jan 3 17:07:40 prd-ubuntu1804-docker-4c-4g-894 sshd[1647]: Received disconnect from 10.32.4.5 port 50358:11: Closed due to user request. [preauth] Jan 3 17:07:40 prd-ubuntu1804-docker-4c-4g-894 sshd[1647]: Disconnected from invalid user jenkins 10.32.4.5 port 50358 [preauth] Jan 3 17:07:43 prd-ubuntu1804-docker-4c-4g-894 sshd[1870]: Invalid user jenkins from 10.32.4.5 port 50376 Jan 3 17:07:43 prd-ubuntu1804-docker-4c-4g-894 sshd[1870]: Received disconnect from 10.32.4.5 port 50376:11: Closed due to user request. [preauth] Jan 3 17:07:43 prd-ubuntu1804-docker-4c-4g-894 sshd[1870]: Disconnected from invalid user jenkins 10.32.4.5 port 50376 [preauth] Jan 3 17:07:45 prd-ubuntu1804-docker-4c-4g-894 sshd[1911]: Invalid user jenkins from 10.32.4.5 port 50386 Jan 3 17:07:45 prd-ubuntu1804-docker-4c-4g-894 sshd[1911]: Received disconnect from 10.32.4.5 port 50386:11: Closed due to user request. [preauth] Jan 3 17:07:45 prd-ubuntu1804-docker-4c-4g-894 sshd[1911]: Disconnected from invalid user jenkins 10.32.4.5 port 50386 [preauth] Jan 3 17:07:47 prd-ubuntu1804-docker-4c-4g-894 sshd[1915]: Invalid user jenkins from 10.32.4.5 port 50394 Jan 3 17:07:47 prd-ubuntu1804-docker-4c-4g-894 sshd[1915]: Received disconnect from 10.32.4.5 port 50394:11: Closed due to user request. [preauth] Jan 3 17:07:47 prd-ubuntu1804-docker-4c-4g-894 sshd[1915]: Disconnected from invalid user jenkins 10.32.4.5 port 50394 [preauth] Jan 3 17:07:48 prd-ubuntu1804-docker-4c-4g-894 useradd[1931]: new group: name=jenkins, GID=1001 Jan 3 17:07:48 prd-ubuntu1804-docker-4c-4g-894 useradd[1931]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 3 17:07:48 prd-ubuntu1804-docker-4c-4g-894 usermod[1938]: add 'jenkins' to group 'docker' Jan 3 17:07:48 prd-ubuntu1804-docker-4c-4g-894 usermod[1938]: add 'jenkins' to shadow group 'docker' Jan 3 17:07:49 prd-ubuntu1804-docker-4c-4g-894 sshd[1972]: Accepted publickey for jenkins from 10.32.4.5 port 50404 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 3 17:07:49 prd-ubuntu1804-docker-4c-4g-894 sshd[1972]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 3 17:07:49 prd-ubuntu1804-docker-4c-4g-894 systemd-logind[1149]: New session 1 of user jenkins. Jan 3 17:07:49 prd-ubuntu1804-docker-4c-4g-894 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 3 17:08:02 prd-ubuntu1804-docker-4c-4g-894 CRON[2291]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 3 17:08:02 prd-ubuntu1804-docker-4c-4g-894 CRON[2291]: pam_unix(cron:session): session closed for user root Jan 3 17:09:01 prd-ubuntu1804-docker-4c-4g-894 CRON[2564]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 3 17:09:01 prd-ubuntu1804-docker-4c-4g-894 CRON[2564]: pam_unix(cron:session): session closed for user root Jan 3 17:10:01 prd-ubuntu1804-docker-4c-4g-894 CRON[6379]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 3 17:10:01 prd-ubuntu1804-docker-4c-4g-894 CRON[6379]: pam_unix(cron:session): session closed for user root Jan 3 17:10:20 prd-ubuntu1804-docker-4c-4g-894 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-athp-tps-kubeflow-adapter-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 3 17:10:20 prd-ubuntu1804-docker-4c-4g-894 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)