May 15 10:15:45 prd-ubuntu1804-docker-4c-4g-973 passwd[937]: password for 'ubuntu' changed by 'root' May 15 10:15:45 prd-ubuntu1804-docker-4c-4g-973 systemd-logind[1033]: Watching system buttons on /dev/input/event0 (Power Button) May 15 10:15:45 prd-ubuntu1804-docker-4c-4g-973 systemd-logind[1033]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 15 10:15:45 prd-ubuntu1804-docker-4c-4g-973 systemd-logind[1033]: New seat seat0. May 15 10:15:45 prd-ubuntu1804-docker-4c-4g-973 sshd[1299]: Server listening on 0.0.0.0 port 22. May 15 10:15:45 prd-ubuntu1804-docker-4c-4g-973 sshd[1299]: Server listening on :: port 22. May 15 10:15:50 prd-ubuntu1804-docker-4c-4g-973 sshd[1540]: Did not receive identification string from 10.32.4.5 port 54826 May 15 10:15:55 prd-ubuntu1804-docker-4c-4g-973 sshd[1580]: Invalid user jenkins from 10.32.4.5 port 54830 May 15 10:15:55 prd-ubuntu1804-docker-4c-4g-973 sshd[1580]: Received disconnect from 10.32.4.5 port 54830:11: Closed due to user request. [preauth] May 15 10:15:55 prd-ubuntu1804-docker-4c-4g-973 sshd[1580]: Disconnected from invalid user jenkins 10.32.4.5 port 54830 [preauth] May 15 10:15:57 prd-ubuntu1804-docker-4c-4g-973 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 54832 May 15 10:15:57 prd-ubuntu1804-docker-4c-4g-973 sshd[1584]: Received disconnect from 10.32.4.5 port 54832:11: Closed due to user request. [preauth] May 15 10:15:57 prd-ubuntu1804-docker-4c-4g-973 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 54832 [preauth] May 15 10:15:59 prd-ubuntu1804-docker-4c-4g-973 sshd[1586]: Invalid user jenkins from 10.32.4.5 port 54834 May 15 10:15:59 prd-ubuntu1804-docker-4c-4g-973 sshd[1586]: Received disconnect from 10.32.4.5 port 54834:11: Closed due to user request. [preauth] May 15 10:15:59 prd-ubuntu1804-docker-4c-4g-973 sshd[1586]: Disconnected from invalid user jenkins 10.32.4.5 port 54834 [preauth] May 15 10:16:01 prd-ubuntu1804-docker-4c-4g-973 CRON[1588]: pam_unix(cron:session): session opened for user root by (uid=0) May 15 10:16:01 prd-ubuntu1804-docker-4c-4g-973 CRON[1588]: pam_unix(cron:session): session closed for user root May 15 10:16:02 prd-ubuntu1804-docker-4c-4g-973 sshd[1597]: Invalid user jenkins from 10.32.4.5 port 54836 May 15 10:16:02 prd-ubuntu1804-docker-4c-4g-973 sshd[1597]: Received disconnect from 10.32.4.5 port 54836:11: Closed due to user request. [preauth] May 15 10:16:02 prd-ubuntu1804-docker-4c-4g-973 sshd[1597]: Disconnected from invalid user jenkins 10.32.4.5 port 54836 [preauth] May 15 10:16:04 prd-ubuntu1804-docker-4c-4g-973 sshd[1599]: Invalid user jenkins from 10.32.4.5 port 54840 May 15 10:16:04 prd-ubuntu1804-docker-4c-4g-973 sshd[1599]: Received disconnect from 10.32.4.5 port 54840:11: Closed due to user request. [preauth] May 15 10:16:04 prd-ubuntu1804-docker-4c-4g-973 sshd[1599]: Disconnected from invalid user jenkins 10.32.4.5 port 54840 [preauth] May 15 10:16:06 prd-ubuntu1804-docker-4c-4g-973 sshd[1610]: Invalid user jenkins from 10.32.4.5 port 54842 May 15 10:16:06 prd-ubuntu1804-docker-4c-4g-973 sshd[1610]: Received disconnect from 10.32.4.5 port 54842:11: Closed due to user request. [preauth] May 15 10:16:06 prd-ubuntu1804-docker-4c-4g-973 sshd[1610]: Disconnected from invalid user jenkins 10.32.4.5 port 54842 [preauth] May 15 10:16:08 prd-ubuntu1804-docker-4c-4g-973 sshd[1821]: Invalid user jenkins from 10.32.4.5 port 54844 May 15 10:16:08 prd-ubuntu1804-docker-4c-4g-973 sshd[1821]: Received disconnect from 10.32.4.5 port 54844:11: Closed due to user request. [preauth] May 15 10:16:08 prd-ubuntu1804-docker-4c-4g-973 sshd[1821]: Disconnected from invalid user jenkins 10.32.4.5 port 54844 [preauth] May 15 10:16:10 prd-ubuntu1804-docker-4c-4g-973 sshd[1877]: Invalid user jenkins from 10.32.4.5 port 54846 May 15 10:16:10 prd-ubuntu1804-docker-4c-4g-973 sshd[1877]: Received disconnect from 10.32.4.5 port 54846:11: Closed due to user request. [preauth] May 15 10:16:10 prd-ubuntu1804-docker-4c-4g-973 sshd[1877]: Disconnected from invalid user jenkins 10.32.4.5 port 54846 [preauth] May 15 10:16:12 prd-ubuntu1804-docker-4c-4g-973 sshd[1883]: Invalid user jenkins from 10.32.4.5 port 54856 May 15 10:16:12 prd-ubuntu1804-docker-4c-4g-973 sshd[1883]: Received disconnect from 10.32.4.5 port 54856:11: Closed due to user request. [preauth] May 15 10:16:12 prd-ubuntu1804-docker-4c-4g-973 sshd[1883]: Disconnected from invalid user jenkins 10.32.4.5 port 54856 [preauth] May 15 10:16:13 prd-ubuntu1804-docker-4c-4g-973 useradd[1899]: new group: name=jenkins, GID=1001 May 15 10:16:13 prd-ubuntu1804-docker-4c-4g-973 useradd[1899]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 15 10:16:13 prd-ubuntu1804-docker-4c-4g-973 usermod[1906]: add 'jenkins' to group 'docker' May 15 10:16:13 prd-ubuntu1804-docker-4c-4g-973 usermod[1906]: add 'jenkins' to shadow group 'docker' May 15 10:16:14 prd-ubuntu1804-docker-4c-4g-973 sshd[1940]: Accepted publickey for jenkins from 10.32.4.5 port 54858 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 15 10:16:14 prd-ubuntu1804-docker-4c-4g-973 sshd[1940]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 15 10:16:14 prd-ubuntu1804-docker-4c-4g-973 systemd-logind[1033]: New session 2 of user jenkins. May 15 10:16:14 prd-ubuntu1804-docker-4c-4g-973 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 15 10:17:01 prd-ubuntu1804-docker-4c-4g-973 CRON[2497]: pam_unix(cron:session): session opened for user root by (uid=0) May 15 10:17:01 prd-ubuntu1804-docker-4c-4g-973 CRON[2496]: pam_unix(cron:session): session opened for user root by (uid=0) May 15 10:17:01 prd-ubuntu1804-docker-4c-4g-973 CRON[2496]: pam_unix(cron:session): session closed for user root May 15 10:17:01 prd-ubuntu1804-docker-4c-4g-973 CRON[2497]: pam_unix(cron:session): session closed for user root May 15 10:18:01 prd-ubuntu1804-docker-4c-4g-973 CRON[4864]: pam_unix(cron:session): session opened for user root by (uid=0) May 15 10:18:01 prd-ubuntu1804-docker-4c-4g-973 CRON[4864]: pam_unix(cron:session): session closed for user root May 15 10:19:01 prd-ubuntu1804-docker-4c-4g-973 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-awmf-modelmgmtservice-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 15 10:19:01 prd-ubuntu1804-docker-4c-4g-973 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)