Oct 7 09:57:49 prd-ubuntu1804-docker-4c-4g-6990 passwd[939]: password for 'ubuntu' changed by 'root' Oct 7 09:57:49 prd-ubuntu1804-docker-4c-4g-6990 systemd-logind[1096]: Watching system buttons on /dev/input/event0 (Power Button) Oct 7 09:57:49 prd-ubuntu1804-docker-4c-4g-6990 systemd-logind[1096]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 7 09:57:49 prd-ubuntu1804-docker-4c-4g-6990 systemd-logind[1096]: New seat seat0. Oct 7 09:57:50 prd-ubuntu1804-docker-4c-4g-6990 sshd[1298]: Server listening on 0.0.0.0 port 22. Oct 7 09:57:50 prd-ubuntu1804-docker-4c-4g-6990 sshd[1298]: Server listening on :: port 22. Oct 7 09:57:53 prd-ubuntu1804-docker-4c-4g-6990 sshd[1513]: Did not receive identification string from 10.32.4.5 port 34298 Oct 7 09:58:00 prd-ubuntu1804-docker-4c-4g-6990 sshd[1598]: Invalid user jenkins from 10.32.4.5 port 34300 Oct 7 09:58:00 prd-ubuntu1804-docker-4c-4g-6990 sshd[1598]: Received disconnect from 10.32.4.5 port 34300:11: Closed due to user request. [preauth] Oct 7 09:58:00 prd-ubuntu1804-docker-4c-4g-6990 sshd[1598]: Disconnected from invalid user jenkins 10.32.4.5 port 34300 [preauth] Oct 7 09:58:01 prd-ubuntu1804-docker-4c-4g-6990 CRON[1603]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 7 09:58:01 prd-ubuntu1804-docker-4c-4g-6990 CRON[1603]: pam_unix(cron:session): session closed for user root Oct 7 09:58:02 prd-ubuntu1804-docker-4c-4g-6990 sshd[1611]: Invalid user jenkins from 10.32.4.5 port 34302 Oct 7 09:58:02 prd-ubuntu1804-docker-4c-4g-6990 sshd[1611]: Received disconnect from 10.32.4.5 port 34302:11: Closed due to user request. [preauth] Oct 7 09:58:02 prd-ubuntu1804-docker-4c-4g-6990 sshd[1611]: Disconnected from invalid user jenkins 10.32.4.5 port 34302 [preauth] Oct 7 09:58:04 prd-ubuntu1804-docker-4c-4g-6990 sshd[1613]: Invalid user jenkins from 10.32.4.5 port 34304 Oct 7 09:58:04 prd-ubuntu1804-docker-4c-4g-6990 sshd[1613]: Received disconnect from 10.32.4.5 port 34304:11: Closed due to user request. [preauth] Oct 7 09:58:04 prd-ubuntu1804-docker-4c-4g-6990 sshd[1613]: Disconnected from invalid user jenkins 10.32.4.5 port 34304 [preauth] Oct 7 09:58:07 prd-ubuntu1804-docker-4c-4g-6990 sshd[1615]: Invalid user jenkins from 10.32.4.5 port 34306 Oct 7 09:58:07 prd-ubuntu1804-docker-4c-4g-6990 sshd[1615]: Received disconnect from 10.32.4.5 port 34306:11: Closed due to user request. [preauth] Oct 7 09:58:07 prd-ubuntu1804-docker-4c-4g-6990 sshd[1615]: Disconnected from invalid user jenkins 10.32.4.5 port 34306 [preauth] Oct 7 09:58:09 prd-ubuntu1804-docker-4c-4g-6990 sshd[1617]: Invalid user jenkins from 10.32.4.5 port 34310 Oct 7 09:58:09 prd-ubuntu1804-docker-4c-4g-6990 sshd[1617]: Received disconnect from 10.32.4.5 port 34310:11: Closed due to user request. [preauth] Oct 7 09:58:09 prd-ubuntu1804-docker-4c-4g-6990 sshd[1617]: Disconnected from invalid user jenkins 10.32.4.5 port 34310 [preauth] Oct 7 09:58:11 prd-ubuntu1804-docker-4c-4g-6990 sshd[1630]: Invalid user jenkins from 10.32.4.5 port 34312 Oct 7 09:58:11 prd-ubuntu1804-docker-4c-4g-6990 sshd[1630]: Received disconnect from 10.32.4.5 port 34312:11: Closed due to user request. [preauth] Oct 7 09:58:11 prd-ubuntu1804-docker-4c-4g-6990 sshd[1630]: Disconnected from invalid user jenkins 10.32.4.5 port 34312 [preauth] Oct 7 09:58:13 prd-ubuntu1804-docker-4c-4g-6990 sshd[1833]: Invalid user jenkins from 10.32.4.5 port 34314 Oct 7 09:58:13 prd-ubuntu1804-docker-4c-4g-6990 sshd[1833]: Received disconnect from 10.32.4.5 port 34314:11: Closed due to user request. [preauth] Oct 7 09:58:13 prd-ubuntu1804-docker-4c-4g-6990 sshd[1833]: Disconnected from invalid user jenkins 10.32.4.5 port 34314 [preauth] Oct 7 09:58:15 prd-ubuntu1804-docker-4c-4g-6990 sshd[1887]: Invalid user jenkins from 10.32.4.5 port 34322 Oct 7 09:58:16 prd-ubuntu1804-docker-4c-4g-6990 sshd[1887]: Received disconnect from 10.32.4.5 port 34322:11: Closed due to user request. [preauth] Oct 7 09:58:16 prd-ubuntu1804-docker-4c-4g-6990 sshd[1887]: Disconnected from invalid user jenkins 10.32.4.5 port 34322 [preauth] Oct 7 09:58:18 prd-ubuntu1804-docker-4c-4g-6990 sshd[1895]: Invalid user jenkins from 10.32.4.5 port 34324 Oct 7 09:58:18 prd-ubuntu1804-docker-4c-4g-6990 sshd[1895]: Received disconnect from 10.32.4.5 port 34324:11: Closed due to user request. [preauth] Oct 7 09:58:18 prd-ubuntu1804-docker-4c-4g-6990 sshd[1895]: Disconnected from invalid user jenkins 10.32.4.5 port 34324 [preauth] Oct 7 09:58:18 prd-ubuntu1804-docker-4c-4g-6990 useradd[1911]: new group: name=jenkins, GID=1001 Oct 7 09:58:18 prd-ubuntu1804-docker-4c-4g-6990 useradd[1911]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 7 09:58:18 prd-ubuntu1804-docker-4c-4g-6990 usermod[1918]: add 'jenkins' to group 'docker' Oct 7 09:58:18 prd-ubuntu1804-docker-4c-4g-6990 usermod[1918]: add 'jenkins' to shadow group 'docker' Oct 7 09:58:20 prd-ubuntu1804-docker-4c-4g-6990 sshd[1960]: Accepted publickey for jenkins from 10.32.4.5 port 34326 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 7 09:58:20 prd-ubuntu1804-docker-4c-4g-6990 sshd[1960]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 7 09:58:20 prd-ubuntu1804-docker-4c-4g-6990 systemd-logind[1096]: New session 2 of user jenkins. Oct 7 09:58:20 prd-ubuntu1804-docker-4c-4g-6990 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 7 09:59:02 prd-ubuntu1804-docker-4c-4g-6990 CRON[2697]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 7 09:59:02 prd-ubuntu1804-docker-4c-4g-6990 CRON[2697]: pam_unix(cron:session): session closed for user root Oct 7 10:00:01 prd-ubuntu1804-docker-4c-4g-6990 CRON[5175]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 7 10:00:01 prd-ubuntu1804-docker-4c-4g-6990 CRON[5175]: pam_unix(cron:session): session closed for user root Oct 7 10:00:33 prd-ubuntu1804-docker-4c-4g-6990 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-awmf-modelmgmtservice-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 7 10:00:33 prd-ubuntu1804-docker-4c-4g-6990 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)