May 6 11:50:17 prd-ubuntu1804-docker-4c-4g-402 passwd[914]: password for 'ubuntu' changed by 'root' May 6 11:50:17 prd-ubuntu1804-docker-4c-4g-402 sshd[1054]: Server listening on 0.0.0.0 port 22. May 6 11:50:17 prd-ubuntu1804-docker-4c-4g-402 sshd[1054]: Server listening on :: port 22. May 6 11:50:17 prd-ubuntu1804-docker-4c-4g-402 systemd-logind[1012]: Watching system buttons on /dev/input/event0 (Power Button) May 6 11:50:17 prd-ubuntu1804-docker-4c-4g-402 systemd-logind[1012]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 6 11:50:17 prd-ubuntu1804-docker-4c-4g-402 systemd-logind[1012]: New seat seat0. May 6 11:50:21 prd-ubuntu1804-docker-4c-4g-402 sshd[1419]: Did not receive identification string from 10.32.4.5 port 40900 May 6 11:50:26 prd-ubuntu1804-docker-4c-4g-402 sshd[1459]: Invalid user jenkins from 10.32.4.5 port 40902 May 6 11:50:26 prd-ubuntu1804-docker-4c-4g-402 sshd[1459]: Received disconnect from 10.32.4.5 port 40902:11: Closed due to user request. [preauth] May 6 11:50:26 prd-ubuntu1804-docker-4c-4g-402 sshd[1459]: Disconnected from invalid user jenkins 10.32.4.5 port 40902 [preauth] May 6 11:50:28 prd-ubuntu1804-docker-4c-4g-402 sshd[1463]: Invalid user jenkins from 10.32.4.5 port 40906 May 6 11:50:28 prd-ubuntu1804-docker-4c-4g-402 sshd[1463]: Received disconnect from 10.32.4.5 port 40906:11: Closed due to user request. [preauth] May 6 11:50:28 prd-ubuntu1804-docker-4c-4g-402 sshd[1463]: Disconnected from invalid user jenkins 10.32.4.5 port 40906 [preauth] May 6 11:50:30 prd-ubuntu1804-docker-4c-4g-402 sshd[1465]: Invalid user jenkins from 10.32.4.5 port 40910 May 6 11:50:30 prd-ubuntu1804-docker-4c-4g-402 sshd[1465]: Received disconnect from 10.32.4.5 port 40910:11: Closed due to user request. [preauth] May 6 11:50:30 prd-ubuntu1804-docker-4c-4g-402 sshd[1465]: Disconnected from invalid user jenkins 10.32.4.5 port 40910 [preauth] May 6 11:50:32 prd-ubuntu1804-docker-4c-4g-402 sshd[1467]: Invalid user jenkins from 10.32.4.5 port 40912 May 6 11:50:32 prd-ubuntu1804-docker-4c-4g-402 sshd[1467]: Received disconnect from 10.32.4.5 port 40912:11: Closed due to user request. [preauth] May 6 11:50:32 prd-ubuntu1804-docker-4c-4g-402 sshd[1467]: Disconnected from invalid user jenkins 10.32.4.5 port 40912 [preauth] May 6 11:50:34 prd-ubuntu1804-docker-4c-4g-402 sshd[1469]: Invalid user jenkins from 10.32.4.5 port 40916 May 6 11:50:34 prd-ubuntu1804-docker-4c-4g-402 sshd[1469]: Received disconnect from 10.32.4.5 port 40916:11: Closed due to user request. [preauth] May 6 11:50:34 prd-ubuntu1804-docker-4c-4g-402 sshd[1469]: Disconnected from invalid user jenkins 10.32.4.5 port 40916 [preauth] May 6 11:50:36 prd-ubuntu1804-docker-4c-4g-402 sshd[1480]: Invalid user jenkins from 10.32.4.5 port 40918 May 6 11:50:36 prd-ubuntu1804-docker-4c-4g-402 sshd[1480]: Received disconnect from 10.32.4.5 port 40918:11: Closed due to user request. [preauth] May 6 11:50:36 prd-ubuntu1804-docker-4c-4g-402 sshd[1480]: Disconnected from invalid user jenkins 10.32.4.5 port 40918 [preauth] May 6 11:50:38 prd-ubuntu1804-docker-4c-4g-402 sshd[1482]: Invalid user jenkins from 10.32.4.5 port 40920 May 6 11:50:38 prd-ubuntu1804-docker-4c-4g-402 sshd[1482]: Received disconnect from 10.32.4.5 port 40920:11: Closed due to user request. [preauth] May 6 11:50:38 prd-ubuntu1804-docker-4c-4g-402 sshd[1482]: Disconnected from invalid user jenkins 10.32.4.5 port 40920 [preauth] May 6 11:50:40 prd-ubuntu1804-docker-4c-4g-402 sshd[1647]: Invalid user jenkins from 10.32.4.5 port 40922 May 6 11:50:40 prd-ubuntu1804-docker-4c-4g-402 sshd[1647]: Received disconnect from 10.32.4.5 port 40922:11: Closed due to user request. [preauth] May 6 11:50:40 prd-ubuntu1804-docker-4c-4g-402 sshd[1647]: Disconnected from invalid user jenkins 10.32.4.5 port 40922 [preauth] May 6 11:50:42 prd-ubuntu1804-docker-4c-4g-402 sshd[1742]: Invalid user jenkins from 10.32.4.5 port 40930 May 6 11:50:42 prd-ubuntu1804-docker-4c-4g-402 sshd[1742]: Received disconnect from 10.32.4.5 port 40930:11: Closed due to user request. [preauth] May 6 11:50:42 prd-ubuntu1804-docker-4c-4g-402 sshd[1742]: Disconnected from invalid user jenkins 10.32.4.5 port 40930 [preauth] May 6 11:50:45 prd-ubuntu1804-docker-4c-4g-402 sshd[1760]: Invalid user jenkins from 10.32.4.5 port 40932 May 6 11:50:45 prd-ubuntu1804-docker-4c-4g-402 sshd[1760]: Received disconnect from 10.32.4.5 port 40932:11: Closed due to user request. [preauth] May 6 11:50:45 prd-ubuntu1804-docker-4c-4g-402 sshd[1760]: Disconnected from invalid user jenkins 10.32.4.5 port 40932 [preauth] May 6 11:50:46 prd-ubuntu1804-docker-4c-4g-402 useradd[1778]: new group: name=jenkins, GID=1001 May 6 11:50:46 prd-ubuntu1804-docker-4c-4g-402 useradd[1778]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 6 11:50:46 prd-ubuntu1804-docker-4c-4g-402 usermod[1785]: add 'jenkins' to group 'docker' May 6 11:50:46 prd-ubuntu1804-docker-4c-4g-402 usermod[1785]: add 'jenkins' to shadow group 'docker' May 6 11:50:47 prd-ubuntu1804-docker-4c-4g-402 sshd[1819]: Accepted publickey for jenkins from 10.32.4.5 port 40934 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 6 11:50:47 prd-ubuntu1804-docker-4c-4g-402 sshd[1819]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 6 11:50:47 prd-ubuntu1804-docker-4c-4g-402 systemd-logind[1012]: New session 1 of user jenkins. May 6 11:50:47 prd-ubuntu1804-docker-4c-4g-402 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 6 11:51:01 prd-ubuntu1804-docker-4c-4g-402 CRON[2348]: pam_unix(cron:session): session opened for user root by (uid=0) May 6 11:51:01 prd-ubuntu1804-docker-4c-4g-402 CRON[2348]: pam_unix(cron:session): session closed for user root May 6 11:52:01 prd-ubuntu1804-docker-4c-4g-402 CRON[2801]: pam_unix(cron:session): session opened for user root by (uid=0) May 6 11:52:01 prd-ubuntu1804-docker-4c-4g-402 CRON[2801]: pam_unix(cron:session): session closed for user root May 6 11:53:01 prd-ubuntu1804-docker-4c-4g-402 CRON[2949]: pam_unix(cron:session): session opened for user root by (uid=0) May 6 11:53:01 prd-ubuntu1804-docker-4c-4g-402 CRON[2949]: pam_unix(cron:session): session closed for user root May 6 11:54:01 prd-ubuntu1804-docker-4c-4g-402 CRON[3231]: pam_unix(cron:session): session opened for user root by (uid=0) May 6 11:54:01 prd-ubuntu1804-docker-4c-4g-402 CRON[3231]: pam_unix(cron:session): session closed for user root May 6 11:54:21 prd-ubuntu1804-docker-4c-4g-402 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-aiml-dashboard-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 6 11:54:21 prd-ubuntu1804-docker-4c-4g-402 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)