Jun 27 12:07:54 prd-ubuntu1804-docker-4c-4g-4885 passwd[931]: password for 'ubuntu' changed by 'root' Jun 27 12:07:54 prd-ubuntu1804-docker-4c-4g-4885 systemd-logind[968]: Watching system buttons on /dev/input/event0 (Power Button) Jun 27 12:07:54 prd-ubuntu1804-docker-4c-4g-4885 systemd-logind[968]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 27 12:07:54 prd-ubuntu1804-docker-4c-4g-4885 systemd-logind[968]: New seat seat0. Jun 27 12:07:54 prd-ubuntu1804-docker-4c-4g-4885 sshd[1243]: Server listening on 0.0.0.0 port 22. Jun 27 12:07:54 prd-ubuntu1804-docker-4c-4g-4885 sshd[1243]: Server listening on :: port 22. Jun 27 12:07:57 prd-ubuntu1804-docker-4c-4g-4885 sshd[1419]: Did not receive identification string from 10.32.4.5 port 48726 Jun 27 12:08:01 prd-ubuntu1804-docker-4c-4g-4885 sshd[1463]: Invalid user jenkins from 10.32.4.5 port 48740 Jun 27 12:08:01 prd-ubuntu1804-docker-4c-4g-4885 sshd[1463]: Received disconnect from 10.32.4.5 port 48740:11: Closed due to user request. [preauth] Jun 27 12:08:01 prd-ubuntu1804-docker-4c-4g-4885 sshd[1463]: Disconnected from invalid user jenkins 10.32.4.5 port 48740 [preauth] Jun 27 12:08:01 prd-ubuntu1804-docker-4c-4g-4885 CRON[1480]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 27 12:08:01 prd-ubuntu1804-docker-4c-4g-4885 CRON[1480]: pam_unix(cron:session): session closed for user root Jun 27 12:08:03 prd-ubuntu1804-docker-4c-4g-4885 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 48746 Jun 27 12:08:03 prd-ubuntu1804-docker-4c-4g-4885 sshd[1489]: Received disconnect from 10.32.4.5 port 48746:11: Closed due to user request. [preauth] Jun 27 12:08:03 prd-ubuntu1804-docker-4c-4g-4885 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 48746 [preauth] Jun 27 12:08:05 prd-ubuntu1804-docker-4c-4g-4885 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 48754 Jun 27 12:08:05 prd-ubuntu1804-docker-4c-4g-4885 sshd[1491]: Received disconnect from 10.32.4.5 port 48754:11: Closed due to user request. [preauth] Jun 27 12:08:05 prd-ubuntu1804-docker-4c-4g-4885 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 48754 [preauth] Jun 27 12:08:07 prd-ubuntu1804-docker-4c-4g-4885 sshd[1493]: Invalid user jenkins from 10.32.4.5 port 48762 Jun 27 12:08:07 prd-ubuntu1804-docker-4c-4g-4885 sshd[1493]: Received disconnect from 10.32.4.5 port 48762:11: Closed due to user request. [preauth] Jun 27 12:08:07 prd-ubuntu1804-docker-4c-4g-4885 sshd[1493]: Disconnected from invalid user jenkins 10.32.4.5 port 48762 [preauth] Jun 27 12:08:09 prd-ubuntu1804-docker-4c-4g-4885 sshd[1495]: Invalid user jenkins from 10.32.4.5 port 48768 Jun 27 12:08:09 prd-ubuntu1804-docker-4c-4g-4885 sshd[1495]: Received disconnect from 10.32.4.5 port 48768:11: Closed due to user request. [preauth] Jun 27 12:08:09 prd-ubuntu1804-docker-4c-4g-4885 sshd[1495]: Disconnected from invalid user jenkins 10.32.4.5 port 48768 [preauth] Jun 27 12:08:11 prd-ubuntu1804-docker-4c-4g-4885 sshd[1497]: Invalid user jenkins from 10.32.4.5 port 48774 Jun 27 12:08:11 prd-ubuntu1804-docker-4c-4g-4885 sshd[1497]: Received disconnect from 10.32.4.5 port 48774:11: Closed due to user request. [preauth] Jun 27 12:08:11 prd-ubuntu1804-docker-4c-4g-4885 sshd[1497]: Disconnected from invalid user jenkins 10.32.4.5 port 48774 [preauth] Jun 27 12:08:13 prd-ubuntu1804-docker-4c-4g-4885 sshd[1499]: Invalid user jenkins from 10.32.4.5 port 48782 Jun 27 12:08:13 prd-ubuntu1804-docker-4c-4g-4885 sshd[1499]: Received disconnect from 10.32.4.5 port 48782:11: Closed due to user request. [preauth] Jun 27 12:08:13 prd-ubuntu1804-docker-4c-4g-4885 sshd[1499]: Disconnected from invalid user jenkins 10.32.4.5 port 48782 [preauth] Jun 27 12:08:15 prd-ubuntu1804-docker-4c-4g-4885 sshd[1511]: Invalid user jenkins from 10.32.4.5 port 48788 Jun 27 12:08:15 prd-ubuntu1804-docker-4c-4g-4885 sshd[1511]: Received disconnect from 10.32.4.5 port 48788:11: Closed due to user request. [preauth] Jun 27 12:08:15 prd-ubuntu1804-docker-4c-4g-4885 sshd[1511]: Disconnected from invalid user jenkins 10.32.4.5 port 48788 [preauth] Jun 27 12:08:18 prd-ubuntu1804-docker-4c-4g-4885 sshd[1738]: Invalid user jenkins from 10.32.4.5 port 48794 Jun 27 12:08:18 prd-ubuntu1804-docker-4c-4g-4885 sshd[1738]: Received disconnect from 10.32.4.5 port 48794:11: Closed due to user request. [preauth] Jun 27 12:08:18 prd-ubuntu1804-docker-4c-4g-4885 sshd[1738]: Disconnected from invalid user jenkins 10.32.4.5 port 48794 [preauth] Jun 27 12:08:20 prd-ubuntu1804-docker-4c-4g-4885 sshd[1781]: Invalid user jenkins from 10.32.4.5 port 48802 Jun 27 12:08:20 prd-ubuntu1804-docker-4c-4g-4885 sshd[1781]: Received disconnect from 10.32.4.5 port 48802:11: Closed due to user request. [preauth] Jun 27 12:08:20 prd-ubuntu1804-docker-4c-4g-4885 sshd[1781]: Disconnected from invalid user jenkins 10.32.4.5 port 48802 [preauth] Jun 27 12:08:22 prd-ubuntu1804-docker-4c-4g-4885 sshd[1787]: Invalid user jenkins from 10.32.4.5 port 48812 Jun 27 12:08:22 prd-ubuntu1804-docker-4c-4g-4885 sshd[1787]: Received disconnect from 10.32.4.5 port 48812:11: Closed due to user request. [preauth] Jun 27 12:08:22 prd-ubuntu1804-docker-4c-4g-4885 sshd[1787]: Disconnected from invalid user jenkins 10.32.4.5 port 48812 [preauth] Jun 27 12:08:23 prd-ubuntu1804-docker-4c-4g-4885 useradd[1803]: new group: name=jenkins, GID=1001 Jun 27 12:08:23 prd-ubuntu1804-docker-4c-4g-4885 useradd[1803]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 27 12:08:23 prd-ubuntu1804-docker-4c-4g-4885 usermod[1810]: add 'jenkins' to group 'docker' Jun 27 12:08:23 prd-ubuntu1804-docker-4c-4g-4885 usermod[1810]: add 'jenkins' to shadow group 'docker' Jun 27 12:08:24 prd-ubuntu1804-docker-4c-4g-4885 sshd[1844]: Accepted publickey for jenkins from 10.32.4.5 port 48816 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 27 12:08:24 prd-ubuntu1804-docker-4c-4g-4885 sshd[1844]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 27 12:08:24 prd-ubuntu1804-docker-4c-4g-4885 systemd-logind[968]: New session 2 of user jenkins. Jun 27 12:08:24 prd-ubuntu1804-docker-4c-4g-4885 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 27 12:09:02 prd-ubuntu1804-docker-4c-4g-4885 CRON[2412]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 27 12:09:02 prd-ubuntu1804-docker-4c-4g-4885 CRON[2412]: pam_unix(cron:session): session closed for user root Jun 27 12:10:01 prd-ubuntu1804-docker-4c-4g-4885 CRON[3079]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 27 12:10:01 prd-ubuntu1804-docker-4c-4g-4885 CRON[3079]: pam_unix(cron:session): session closed for user root Jun 27 12:11:01 prd-ubuntu1804-docker-4c-4g-4885 CRON[5222]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 27 12:11:01 prd-ubuntu1804-docker-4c-4g-4885 CRON[5222]: pam_unix(cron:session): session closed for user root Jun 27 12:11:45 prd-ubuntu1804-docker-4c-4g-4885 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-awmf-modelmgmtservice-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 27 12:11:45 prd-ubuntu1804-docker-4c-4g-4885 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)