Dec 9 06:21:50 prd-ubuntu1804-docker-4c-4g-11291 passwd[948]: password for 'ubuntu' changed by 'root' Dec 9 06:21:51 prd-ubuntu1804-docker-4c-4g-11291 systemd-logind[1094]: Watching system buttons on /dev/input/event0 (Power Button) Dec 9 06:21:51 prd-ubuntu1804-docker-4c-4g-11291 systemd-logind[1094]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 9 06:21:51 prd-ubuntu1804-docker-4c-4g-11291 systemd-logind[1094]: New seat seat0. Dec 9 06:21:51 prd-ubuntu1804-docker-4c-4g-11291 sshd[1248]: Server listening on 0.0.0.0 port 22. Dec 9 06:21:51 prd-ubuntu1804-docker-4c-4g-11291 sshd[1248]: Server listening on :: port 22. Dec 9 06:21:52 prd-ubuntu1804-docker-4c-4g-11291 sshd[1327]: Did not receive identification string from 10.32.4.5 port 48522 Dec 9 06:21:56 prd-ubuntu1804-docker-4c-4g-11291 sshd[1499]: Invalid user jenkins from 10.32.4.5 port 48524 Dec 9 06:21:56 prd-ubuntu1804-docker-4c-4g-11291 sshd[1499]: Received disconnect from 10.32.4.5 port 48524:11: Closed due to user request. [preauth] Dec 9 06:21:56 prd-ubuntu1804-docker-4c-4g-11291 sshd[1499]: Disconnected from invalid user jenkins 10.32.4.5 port 48524 [preauth] Dec 9 06:21:58 prd-ubuntu1804-docker-4c-4g-11291 sshd[1517]: Invalid user jenkins from 10.32.4.5 port 48526 Dec 9 06:21:58 prd-ubuntu1804-docker-4c-4g-11291 sshd[1517]: Received disconnect from 10.32.4.5 port 48526:11: Closed due to user request. [preauth] Dec 9 06:21:58 prd-ubuntu1804-docker-4c-4g-11291 sshd[1517]: Disconnected from invalid user jenkins 10.32.4.5 port 48526 [preauth] Dec 9 06:22:00 prd-ubuntu1804-docker-4c-4g-11291 sshd[1519]: Invalid user jenkins from 10.32.4.5 port 48534 Dec 9 06:22:00 prd-ubuntu1804-docker-4c-4g-11291 sshd[1519]: Received disconnect from 10.32.4.5 port 48534:11: Closed due to user request. [preauth] Dec 9 06:22:00 prd-ubuntu1804-docker-4c-4g-11291 sshd[1519]: Disconnected from invalid user jenkins 10.32.4.5 port 48534 [preauth] Dec 9 06:22:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[1521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 9 06:22:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[1521]: pam_unix(cron:session): session closed for user root Dec 9 06:22:02 prd-ubuntu1804-docker-4c-4g-11291 sshd[1529]: Invalid user jenkins from 10.32.4.5 port 48536 Dec 9 06:22:03 prd-ubuntu1804-docker-4c-4g-11291 sshd[1529]: Received disconnect from 10.32.4.5 port 48536:11: Closed due to user request. [preauth] Dec 9 06:22:03 prd-ubuntu1804-docker-4c-4g-11291 sshd[1529]: Disconnected from invalid user jenkins 10.32.4.5 port 48536 [preauth] Dec 9 06:22:05 prd-ubuntu1804-docker-4c-4g-11291 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 48538 Dec 9 06:22:05 prd-ubuntu1804-docker-4c-4g-11291 sshd[1531]: Received disconnect from 10.32.4.5 port 48538:11: Closed due to user request. [preauth] Dec 9 06:22:05 prd-ubuntu1804-docker-4c-4g-11291 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 48538 [preauth] Dec 9 06:22:07 prd-ubuntu1804-docker-4c-4g-11291 sshd[1533]: Invalid user jenkins from 10.32.4.5 port 48540 Dec 9 06:22:07 prd-ubuntu1804-docker-4c-4g-11291 sshd[1533]: Received disconnect from 10.32.4.5 port 48540:11: Closed due to user request. [preauth] Dec 9 06:22:07 prd-ubuntu1804-docker-4c-4g-11291 sshd[1533]: Disconnected from invalid user jenkins 10.32.4.5 port 48540 [preauth] Dec 9 06:22:09 prd-ubuntu1804-docker-4c-4g-11291 sshd[1535]: Invalid user jenkins from 10.32.4.5 port 48544 Dec 9 06:22:09 prd-ubuntu1804-docker-4c-4g-11291 sshd[1535]: Received disconnect from 10.32.4.5 port 48544:11: Closed due to user request. [preauth] Dec 9 06:22:09 prd-ubuntu1804-docker-4c-4g-11291 sshd[1535]: Disconnected from invalid user jenkins 10.32.4.5 port 48544 [preauth] Dec 9 06:22:11 prd-ubuntu1804-docker-4c-4g-11291 sshd[1537]: Invalid user jenkins from 10.32.4.5 port 48546 Dec 9 06:22:11 prd-ubuntu1804-docker-4c-4g-11291 sshd[1537]: Received disconnect from 10.32.4.5 port 48546:11: Closed due to user request. [preauth] Dec 9 06:22:11 prd-ubuntu1804-docker-4c-4g-11291 sshd[1537]: Disconnected from invalid user jenkins 10.32.4.5 port 48546 [preauth] Dec 9 06:22:13 prd-ubuntu1804-docker-4c-4g-11291 sshd[1622]: Invalid user jenkins from 10.32.4.5 port 48548 Dec 9 06:22:13 prd-ubuntu1804-docker-4c-4g-11291 sshd[1622]: Received disconnect from 10.32.4.5 port 48548:11: Closed due to user request. [preauth] Dec 9 06:22:13 prd-ubuntu1804-docker-4c-4g-11291 sshd[1622]: Disconnected from invalid user jenkins 10.32.4.5 port 48548 [preauth] Dec 9 06:22:15 prd-ubuntu1804-docker-4c-4g-11291 sshd[1776]: Invalid user jenkins from 10.32.4.5 port 48550 Dec 9 06:22:15 prd-ubuntu1804-docker-4c-4g-11291 sshd[1776]: Received disconnect from 10.32.4.5 port 48550:11: Closed due to user request. [preauth] Dec 9 06:22:15 prd-ubuntu1804-docker-4c-4g-11291 sshd[1776]: Disconnected from invalid user jenkins 10.32.4.5 port 48550 [preauth] Dec 9 06:22:17 prd-ubuntu1804-docker-4c-4g-11291 sshd[1815]: Invalid user jenkins from 10.32.4.5 port 48552 Dec 9 06:22:17 prd-ubuntu1804-docker-4c-4g-11291 sshd[1815]: Received disconnect from 10.32.4.5 port 48552:11: Closed due to user request. [preauth] Dec 9 06:22:17 prd-ubuntu1804-docker-4c-4g-11291 sshd[1815]: Disconnected from invalid user jenkins 10.32.4.5 port 48552 [preauth] Dec 9 06:22:19 prd-ubuntu1804-docker-4c-4g-11291 sshd[1819]: Invalid user jenkins from 10.32.4.5 port 48554 Dec 9 06:22:19 prd-ubuntu1804-docker-4c-4g-11291 sshd[1819]: Received disconnect from 10.32.4.5 port 48554:11: Closed due to user request. [preauth] Dec 9 06:22:19 prd-ubuntu1804-docker-4c-4g-11291 sshd[1819]: Disconnected from invalid user jenkins 10.32.4.5 port 48554 [preauth] Dec 9 06:22:21 prd-ubuntu1804-docker-4c-4g-11291 useradd[1835]: new group: name=jenkins, GID=1001 Dec 9 06:22:21 prd-ubuntu1804-docker-4c-4g-11291 useradd[1835]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Dec 9 06:22:21 prd-ubuntu1804-docker-4c-4g-11291 usermod[1842]: add 'jenkins' to group 'docker' Dec 9 06:22:21 prd-ubuntu1804-docker-4c-4g-11291 usermod[1842]: add 'jenkins' to shadow group 'docker' Dec 9 06:22:22 prd-ubuntu1804-docker-4c-4g-11291 sshd[1876]: Accepted publickey for jenkins from 10.32.4.5 port 48556 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Dec 9 06:22:22 prd-ubuntu1804-docker-4c-4g-11291 sshd[1876]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 9 06:22:22 prd-ubuntu1804-docker-4c-4g-11291 systemd-logind[1094]: New session 2 of user jenkins. Dec 9 06:22:22 prd-ubuntu1804-docker-4c-4g-11291 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 9 06:23:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[2415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 9 06:23:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[2415]: pam_unix(cron:session): session closed for user root Dec 9 06:24:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[2460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 9 06:24:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[2460]: pam_unix(cron:session): session closed for user root Dec 9 06:25:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[3044]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 9 06:25:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[3043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 9 06:25:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[3044]: pam_unix(cron:session): session closed for user root Dec 9 06:26:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[7751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 9 06:26:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[7751]: pam_unix(cron:session): session closed for user root Dec 9 06:26:06 prd-ubuntu1804-docker-4c-4g-11291 CRON[3043]: pam_unix(cron:session): session closed for user root Dec 9 06:27:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[9231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 9 06:27:01 prd-ubuntu1804-docker-4c-4g-11291 CRON[9231]: pam_unix(cron:session): session closed for user root Dec 9 06:27:39 prd-ubuntu1804-docker-4c-4g-11291 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-awmf-modelmgmtservice-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Dec 9 06:27:39 prd-ubuntu1804-docker-4c-4g-11291 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)