Sep 23 07:30:39 prd-ubuntu1804-docker-4c-4g-4414 passwd[943]: password for 'ubuntu' changed by 'root' Sep 23 07:30:40 prd-ubuntu1804-docker-4c-4g-4414 systemd-logind[1130]: Watching system buttons on /dev/input/event0 (Power Button) Sep 23 07:30:40 prd-ubuntu1804-docker-4c-4g-4414 systemd-logind[1130]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 23 07:30:40 prd-ubuntu1804-docker-4c-4g-4414 systemd-logind[1130]: New seat seat0. Sep 23 07:30:40 prd-ubuntu1804-docker-4c-4g-4414 sshd[1300]: Server listening on 0.0.0.0 port 22. Sep 23 07:30:40 prd-ubuntu1804-docker-4c-4g-4414 sshd[1300]: Server listening on :: port 22. Sep 23 07:30:42 prd-ubuntu1804-docker-4c-4g-4414 sshd[1386]: Did not receive identification string from 10.32.4.5 port 48454 Sep 23 07:30:45 prd-ubuntu1804-docker-4c-4g-4414 sshd[1562]: Invalid user jenkins from 10.32.4.5 port 48460 Sep 23 07:30:45 prd-ubuntu1804-docker-4c-4g-4414 sshd[1562]: Received disconnect from 10.32.4.5 port 48460:11: Closed due to user request. [preauth] Sep 23 07:30:45 prd-ubuntu1804-docker-4c-4g-4414 sshd[1562]: Disconnected from invalid user jenkins 10.32.4.5 port 48460 [preauth] Sep 23 07:30:47 prd-ubuntu1804-docker-4c-4g-4414 sshd[1580]: Invalid user jenkins from 10.32.4.5 port 48470 Sep 23 07:30:47 prd-ubuntu1804-docker-4c-4g-4414 sshd[1580]: Received disconnect from 10.32.4.5 port 48470:11: Closed due to user request. [preauth] Sep 23 07:30:47 prd-ubuntu1804-docker-4c-4g-4414 sshd[1580]: Disconnected from invalid user jenkins 10.32.4.5 port 48470 [preauth] Sep 23 07:30:49 prd-ubuntu1804-docker-4c-4g-4414 sshd[1588]: Invalid user jenkins from 10.32.4.5 port 48476 Sep 23 07:30:49 prd-ubuntu1804-docker-4c-4g-4414 sshd[1588]: Received disconnect from 10.32.4.5 port 48476:11: Closed due to user request. [preauth] Sep 23 07:30:49 prd-ubuntu1804-docker-4c-4g-4414 sshd[1588]: Disconnected from invalid user jenkins 10.32.4.5 port 48476 [preauth] Sep 23 07:30:52 prd-ubuntu1804-docker-4c-4g-4414 sshd[1590]: Invalid user jenkins from 10.32.4.5 port 48482 Sep 23 07:30:52 prd-ubuntu1804-docker-4c-4g-4414 sshd[1590]: Received disconnect from 10.32.4.5 port 48482:11: Closed due to user request. [preauth] Sep 23 07:30:52 prd-ubuntu1804-docker-4c-4g-4414 sshd[1590]: Disconnected from invalid user jenkins 10.32.4.5 port 48482 [preauth] Sep 23 07:30:54 prd-ubuntu1804-docker-4c-4g-4414 sshd[1592]: Invalid user jenkins from 10.32.4.5 port 48488 Sep 23 07:30:54 prd-ubuntu1804-docker-4c-4g-4414 sshd[1592]: Received disconnect from 10.32.4.5 port 48488:11: Closed due to user request. [preauth] Sep 23 07:30:54 prd-ubuntu1804-docker-4c-4g-4414 sshd[1592]: Disconnected from invalid user jenkins 10.32.4.5 port 48488 [preauth] Sep 23 07:30:56 prd-ubuntu1804-docker-4c-4g-4414 sshd[1594]: Invalid user jenkins from 10.32.4.5 port 48494 Sep 23 07:30:56 prd-ubuntu1804-docker-4c-4g-4414 sshd[1594]: Received disconnect from 10.32.4.5 port 48494:11: Closed due to user request. [preauth] Sep 23 07:30:56 prd-ubuntu1804-docker-4c-4g-4414 sshd[1594]: Disconnected from invalid user jenkins 10.32.4.5 port 48494 [preauth] Sep 23 07:30:58 prd-ubuntu1804-docker-4c-4g-4414 sshd[1596]: Invalid user jenkins from 10.32.4.5 port 48498 Sep 23 07:30:58 prd-ubuntu1804-docker-4c-4g-4414 sshd[1596]: Received disconnect from 10.32.4.5 port 48498:11: Closed due to user request. [preauth] Sep 23 07:30:58 prd-ubuntu1804-docker-4c-4g-4414 sshd[1596]: Disconnected from invalid user jenkins 10.32.4.5 port 48498 [preauth] Sep 23 07:31:00 prd-ubuntu1804-docker-4c-4g-4414 sshd[1598]: Invalid user jenkins from 10.32.4.5 port 48514 Sep 23 07:31:00 prd-ubuntu1804-docker-4c-4g-4414 sshd[1598]: Received disconnect from 10.32.4.5 port 48514:11: Closed due to user request. [preauth] Sep 23 07:31:00 prd-ubuntu1804-docker-4c-4g-4414 sshd[1598]: Disconnected from invalid user jenkins 10.32.4.5 port 48514 [preauth] Sep 23 07:31:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[1601]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 07:31:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[1601]: pam_unix(cron:session): session closed for user root Sep 23 07:31:02 prd-ubuntu1804-docker-4c-4g-4414 sshd[1627]: Invalid user jenkins from 10.32.4.5 port 48516 Sep 23 07:31:02 prd-ubuntu1804-docker-4c-4g-4414 sshd[1627]: Received disconnect from 10.32.4.5 port 48516:11: Closed due to user request. [preauth] Sep 23 07:31:02 prd-ubuntu1804-docker-4c-4g-4414 sshd[1627]: Disconnected from invalid user jenkins 10.32.4.5 port 48516 [preauth] Sep 23 07:31:05 prd-ubuntu1804-docker-4c-4g-4414 sshd[1836]: Invalid user jenkins from 10.32.4.5 port 48518 Sep 23 07:31:05 prd-ubuntu1804-docker-4c-4g-4414 sshd[1836]: Received disconnect from 10.32.4.5 port 48518:11: Closed due to user request. [preauth] Sep 23 07:31:05 prd-ubuntu1804-docker-4c-4g-4414 sshd[1836]: Disconnected from invalid user jenkins 10.32.4.5 port 48518 [preauth] Sep 23 07:31:07 prd-ubuntu1804-docker-4c-4g-4414 sshd[1870]: Invalid user jenkins from 10.32.4.5 port 48526 Sep 23 07:31:07 prd-ubuntu1804-docker-4c-4g-4414 sshd[1870]: Received disconnect from 10.32.4.5 port 48526:11: Closed due to user request. [preauth] Sep 23 07:31:07 prd-ubuntu1804-docker-4c-4g-4414 sshd[1870]: Disconnected from invalid user jenkins 10.32.4.5 port 48526 [preauth] Sep 23 07:31:10 prd-ubuntu1804-docker-4c-4g-4414 sshd[1888]: Invalid user jenkins from 10.32.4.5 port 48528 Sep 23 07:31:10 prd-ubuntu1804-docker-4c-4g-4414 sshd[1888]: Received disconnect from 10.32.4.5 port 48528:11: Closed due to user request. [preauth] Sep 23 07:31:10 prd-ubuntu1804-docker-4c-4g-4414 sshd[1888]: Disconnected from invalid user jenkins 10.32.4.5 port 48528 [preauth] Sep 23 07:31:12 prd-ubuntu1804-docker-4c-4g-4414 sshd[1900]: Invalid user jenkins from 10.32.4.5 port 48530 Sep 23 07:31:12 prd-ubuntu1804-docker-4c-4g-4414 sshd[1900]: Received disconnect from 10.32.4.5 port 48530:11: Closed due to user request. [preauth] Sep 23 07:31:12 prd-ubuntu1804-docker-4c-4g-4414 sshd[1900]: Disconnected from invalid user jenkins 10.32.4.5 port 48530 [preauth] Sep 23 07:31:12 prd-ubuntu1804-docker-4c-4g-4414 useradd[1924]: new group: name=jenkins, GID=1001 Sep 23 07:31:12 prd-ubuntu1804-docker-4c-4g-4414 useradd[1924]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 23 07:31:12 prd-ubuntu1804-docker-4c-4g-4414 usermod[1931]: add 'jenkins' to group 'docker' Sep 23 07:31:12 prd-ubuntu1804-docker-4c-4g-4414 usermod[1931]: add 'jenkins' to shadow group 'docker' Sep 23 07:31:14 prd-ubuntu1804-docker-4c-4g-4414 sshd[1981]: Accepted publickey for jenkins from 10.32.4.5 port 48536 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 23 07:31:14 prd-ubuntu1804-docker-4c-4g-4414 sshd[1981]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 23 07:31:14 prd-ubuntu1804-docker-4c-4g-4414 systemd-logind[1130]: New session 2 of user jenkins. Sep 23 07:31:14 prd-ubuntu1804-docker-4c-4g-4414 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 23 07:32:02 prd-ubuntu1804-docker-4c-4g-4414 CRON[2519]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 07:32:02 prd-ubuntu1804-docker-4c-4g-4414 CRON[2519]: pam_unix(cron:session): session closed for user root Sep 23 07:33:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[2554]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 07:33:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[2554]: pam_unix(cron:session): session closed for user root Sep 23 07:34:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[4075]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 07:34:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[4075]: pam_unix(cron:session): session closed for user root Sep 23 07:35:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[8497]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 23 07:35:01 prd-ubuntu1804-docker-4c-4g-4414 CRON[8497]: pam_unix(cron:session): session closed for user root Sep 23 07:35:50 prd-ubuntu1804-docker-4c-4g-4414 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-awmf-modelmgmtservice-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp