Oct 3 04:01:21 prd-ubuntu1804-docker-4c-4g-5462 passwd[939]: password for 'ubuntu' changed by 'root' Oct 3 04:01:21 prd-ubuntu1804-docker-4c-4g-5462 systemd-logind[1019]: Watching system buttons on /dev/input/event0 (Power Button) Oct 3 04:01:21 prd-ubuntu1804-docker-4c-4g-5462 systemd-logind[1019]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 3 04:01:21 prd-ubuntu1804-docker-4c-4g-5462 systemd-logind[1019]: New seat seat0. Oct 3 04:01:21 prd-ubuntu1804-docker-4c-4g-5462 sshd[1080]: Server listening on 0.0.0.0 port 22. Oct 3 04:01:21 prd-ubuntu1804-docker-4c-4g-5462 sshd[1080]: Server listening on :: port 22. Oct 3 04:01:22 prd-ubuntu1804-docker-4c-4g-5462 sshd[1225]: Did not receive identification string from 10.32.4.5 port 56622 Oct 3 04:01:26 prd-ubuntu1804-docker-4c-4g-5462 sshd[1433]: Invalid user jenkins from 10.32.4.5 port 56626 Oct 3 04:01:26 prd-ubuntu1804-docker-4c-4g-5462 sshd[1433]: Received disconnect from 10.32.4.5 port 56626:11: Closed due to user request. [preauth] Oct 3 04:01:26 prd-ubuntu1804-docker-4c-4g-5462 sshd[1433]: Disconnected from invalid user jenkins 10.32.4.5 port 56626 [preauth] Oct 3 04:01:28 prd-ubuntu1804-docker-4c-4g-5462 sshd[1465]: Invalid user jenkins from 10.32.4.5 port 56628 Oct 3 04:01:28 prd-ubuntu1804-docker-4c-4g-5462 sshd[1465]: Received disconnect from 10.32.4.5 port 56628:11: Closed due to user request. [preauth] Oct 3 04:01:28 prd-ubuntu1804-docker-4c-4g-5462 sshd[1465]: Disconnected from invalid user jenkins 10.32.4.5 port 56628 [preauth] Oct 3 04:01:30 prd-ubuntu1804-docker-4c-4g-5462 sshd[1473]: Invalid user jenkins from 10.32.4.5 port 56636 Oct 3 04:01:30 prd-ubuntu1804-docker-4c-4g-5462 sshd[1473]: Received disconnect from 10.32.4.5 port 56636:11: Closed due to user request. [preauth] Oct 3 04:01:30 prd-ubuntu1804-docker-4c-4g-5462 sshd[1473]: Disconnected from invalid user jenkins 10.32.4.5 port 56636 [preauth] Oct 3 04:01:32 prd-ubuntu1804-docker-4c-4g-5462 sshd[1493]: Invalid user jenkins from 10.32.4.5 port 56638 Oct 3 04:01:32 prd-ubuntu1804-docker-4c-4g-5462 sshd[1493]: Received disconnect from 10.32.4.5 port 56638:11: Closed due to user request. [preauth] Oct 3 04:01:32 prd-ubuntu1804-docker-4c-4g-5462 sshd[1493]: Disconnected from invalid user jenkins 10.32.4.5 port 56638 [preauth] Oct 3 04:01:34 prd-ubuntu1804-docker-4c-4g-5462 sshd[1495]: Invalid user jenkins from 10.32.4.5 port 56640 Oct 3 04:01:34 prd-ubuntu1804-docker-4c-4g-5462 sshd[1495]: Received disconnect from 10.32.4.5 port 56640:11: Closed due to user request. [preauth] Oct 3 04:01:34 prd-ubuntu1804-docker-4c-4g-5462 sshd[1495]: Disconnected from invalid user jenkins 10.32.4.5 port 56640 [preauth] Oct 3 04:01:36 prd-ubuntu1804-docker-4c-4g-5462 sshd[1497]: Invalid user jenkins from 10.32.4.5 port 56642 Oct 3 04:01:36 prd-ubuntu1804-docker-4c-4g-5462 sshd[1497]: Received disconnect from 10.32.4.5 port 56642:11: Closed due to user request. [preauth] Oct 3 04:01:36 prd-ubuntu1804-docker-4c-4g-5462 sshd[1497]: Disconnected from invalid user jenkins 10.32.4.5 port 56642 [preauth] Oct 3 04:01:38 prd-ubuntu1804-docker-4c-4g-5462 sshd[1499]: Invalid user jenkins from 10.32.4.5 port 56646 Oct 3 04:01:38 prd-ubuntu1804-docker-4c-4g-5462 sshd[1499]: Received disconnect from 10.32.4.5 port 56646:11: Closed due to user request. [preauth] Oct 3 04:01:38 prd-ubuntu1804-docker-4c-4g-5462 sshd[1499]: Disconnected from invalid user jenkins 10.32.4.5 port 56646 [preauth] Oct 3 04:01:41 prd-ubuntu1804-docker-4c-4g-5462 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 56648 Oct 3 04:01:41 prd-ubuntu1804-docker-4c-4g-5462 sshd[1502]: Received disconnect from 10.32.4.5 port 56648:11: Closed due to user request. [preauth] Oct 3 04:01:41 prd-ubuntu1804-docker-4c-4g-5462 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 56648 [preauth] Oct 3 04:01:43 prd-ubuntu1804-docker-4c-4g-5462 sshd[1541]: Invalid user jenkins from 10.32.4.5 port 56650 Oct 3 04:01:43 prd-ubuntu1804-docker-4c-4g-5462 sshd[1541]: Received disconnect from 10.32.4.5 port 56650:11: Closed due to user request. [preauth] Oct 3 04:01:43 prd-ubuntu1804-docker-4c-4g-5462 sshd[1541]: Disconnected from invalid user jenkins 10.32.4.5 port 56650 [preauth] Oct 3 04:01:45 prd-ubuntu1804-docker-4c-4g-5462 sshd[1740]: Invalid user jenkins from 10.32.4.5 port 56654 Oct 3 04:01:45 prd-ubuntu1804-docker-4c-4g-5462 sshd[1740]: Received disconnect from 10.32.4.5 port 56654:11: Closed due to user request. [preauth] Oct 3 04:01:45 prd-ubuntu1804-docker-4c-4g-5462 sshd[1740]: Disconnected from invalid user jenkins 10.32.4.5 port 56654 [preauth] Oct 3 04:01:47 prd-ubuntu1804-docker-4c-4g-5462 sshd[1776]: Invalid user jenkins from 10.32.4.5 port 56656 Oct 3 04:01:48 prd-ubuntu1804-docker-4c-4g-5462 sshd[1776]: Received disconnect from 10.32.4.5 port 56656:11: Closed due to user request. [preauth] Oct 3 04:01:48 prd-ubuntu1804-docker-4c-4g-5462 sshd[1776]: Disconnected from invalid user jenkins 10.32.4.5 port 56656 [preauth] Oct 3 04:01:50 prd-ubuntu1804-docker-4c-4g-5462 sshd[1782]: Invalid user jenkins from 10.32.4.5 port 56658 Oct 3 04:01:50 prd-ubuntu1804-docker-4c-4g-5462 sshd[1782]: Received disconnect from 10.32.4.5 port 56658:11: Closed due to user request. [preauth] Oct 3 04:01:50 prd-ubuntu1804-docker-4c-4g-5462 sshd[1782]: Disconnected from invalid user jenkins 10.32.4.5 port 56658 [preauth] Oct 3 04:01:52 prd-ubuntu1804-docker-4c-4g-5462 sshd[1792]: Invalid user jenkins from 10.32.4.5 port 56660 Oct 3 04:01:52 prd-ubuntu1804-docker-4c-4g-5462 sshd[1792]: Received disconnect from 10.32.4.5 port 56660:11: Closed due to user request. [preauth] Oct 3 04:01:52 prd-ubuntu1804-docker-4c-4g-5462 sshd[1792]: Disconnected from invalid user jenkins 10.32.4.5 port 56660 [preauth] Oct 3 04:01:52 prd-ubuntu1804-docker-4c-4g-5462 useradd[1812]: new group: name=jenkins, GID=1001 Oct 3 04:01:52 prd-ubuntu1804-docker-4c-4g-5462 useradd[1812]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 3 04:01:52 prd-ubuntu1804-docker-4c-4g-5462 usermod[1820]: add 'jenkins' to group 'docker' Oct 3 04:01:52 prd-ubuntu1804-docker-4c-4g-5462 usermod[1820]: add 'jenkins' to shadow group 'docker' Oct 3 04:01:54 prd-ubuntu1804-docker-4c-4g-5462 sshd[1865]: Accepted publickey for jenkins from 10.32.4.5 port 56664 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 3 04:01:54 prd-ubuntu1804-docker-4c-4g-5462 sshd[1865]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 3 04:01:54 prd-ubuntu1804-docker-4c-4g-5462 systemd-logind[1019]: New session 1 of user jenkins. Oct 3 04:01:54 prd-ubuntu1804-docker-4c-4g-5462 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 3 04:02:02 prd-ubuntu1804-docker-4c-4g-5462 CRON[2077]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 04:02:02 prd-ubuntu1804-docker-4c-4g-5462 CRON[2077]: pam_unix(cron:session): session closed for user root Oct 3 04:03:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[2419]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 04:03:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[2419]: pam_unix(cron:session): session closed for user root Oct 3 04:04:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[2894]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 04:04:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[2894]: pam_unix(cron:session): session closed for user root Oct 3 04:05:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[4150]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 04:05:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[4150]: pam_unix(cron:session): session closed for user root Oct 3 04:06:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[4252]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 04:06:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[4252]: pam_unix(cron:session): session closed for user root Oct 3 04:07:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[4343]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 04:07:01 prd-ubuntu1804-docker-4c-4g-5462 CRON[4343]: pam_unix(cron:session): session closed for user root Oct 3 04:07:54 prd-ubuntu1804-docker-4c-4g-5462 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-awmf-tm-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 3 04:07:54 prd-ubuntu1804-docker-4c-4g-5462 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)