Aug 28 01:28:51 prd-ubuntu1804-docker-4c-4g-2199 passwd[955]: password for 'ubuntu' changed by 'root' Aug 28 01:28:51 prd-ubuntu1804-docker-4c-4g-2199 systemd-logind[1027]: Watching system buttons on /dev/input/event0 (Power Button) Aug 28 01:28:51 prd-ubuntu1804-docker-4c-4g-2199 systemd-logind[1027]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 28 01:28:51 prd-ubuntu1804-docker-4c-4g-2199 systemd-logind[1027]: New seat seat0. Aug 28 01:28:51 prd-ubuntu1804-docker-4c-4g-2199 sshd[1275]: Server listening on 0.0.0.0 port 22. Aug 28 01:28:51 prd-ubuntu1804-docker-4c-4g-2199 sshd[1275]: Server listening on :: port 22. Aug 28 01:28:51 prd-ubuntu1804-docker-4c-4g-2199 sshd[1282]: Did not receive identification string from 10.32.4.5 port 53272 Aug 28 01:28:56 prd-ubuntu1804-docker-4c-4g-2199 sshd[1508]: Invalid user jenkins from 10.32.4.5 port 53276 Aug 28 01:28:56 prd-ubuntu1804-docker-4c-4g-2199 sshd[1508]: Received disconnect from 10.32.4.5 port 53276:11: Closed due to user request. [preauth] Aug 28 01:28:56 prd-ubuntu1804-docker-4c-4g-2199 sshd[1508]: Disconnected from invalid user jenkins 10.32.4.5 port 53276 [preauth] Aug 28 01:28:58 prd-ubuntu1804-docker-4c-4g-2199 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 53278 Aug 28 01:28:58 prd-ubuntu1804-docker-4c-4g-2199 sshd[1540]: Received disconnect from 10.32.4.5 port 53278:11: Closed due to user request. [preauth] Aug 28 01:28:58 prd-ubuntu1804-docker-4c-4g-2199 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 53278 [preauth] Aug 28 01:29:00 prd-ubuntu1804-docker-4c-4g-2199 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 53286 Aug 28 01:29:00 prd-ubuntu1804-docker-4c-4g-2199 sshd[1545]: Received disconnect from 10.32.4.5 port 53286:11: Closed due to user request. [preauth] Aug 28 01:29:00 prd-ubuntu1804-docker-4c-4g-2199 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 53286 [preauth] Aug 28 01:29:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[1547]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 28 01:29:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[1547]: pam_unix(cron:session): session closed for user root Aug 28 01:29:02 prd-ubuntu1804-docker-4c-4g-2199 sshd[1557]: Invalid user jenkins from 10.32.4.5 port 53288 Aug 28 01:29:02 prd-ubuntu1804-docker-4c-4g-2199 sshd[1557]: Received disconnect from 10.32.4.5 port 53288:11: Closed due to user request. [preauth] Aug 28 01:29:02 prd-ubuntu1804-docker-4c-4g-2199 sshd[1557]: Disconnected from invalid user jenkins 10.32.4.5 port 53288 [preauth] Aug 28 01:29:04 prd-ubuntu1804-docker-4c-4g-2199 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 53290 Aug 28 01:29:04 prd-ubuntu1804-docker-4c-4g-2199 sshd[1559]: Received disconnect from 10.32.4.5 port 53290:11: Closed due to user request. [preauth] Aug 28 01:29:04 prd-ubuntu1804-docker-4c-4g-2199 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 53290 [preauth] Aug 28 01:29:06 prd-ubuntu1804-docker-4c-4g-2199 sshd[1561]: Invalid user jenkins from 10.32.4.5 port 53292 Aug 28 01:29:06 prd-ubuntu1804-docker-4c-4g-2199 sshd[1561]: Received disconnect from 10.32.4.5 port 53292:11: Closed due to user request. [preauth] Aug 28 01:29:06 prd-ubuntu1804-docker-4c-4g-2199 sshd[1561]: Disconnected from invalid user jenkins 10.32.4.5 port 53292 [preauth] Aug 28 01:29:08 prd-ubuntu1804-docker-4c-4g-2199 sshd[1563]: Invalid user jenkins from 10.32.4.5 port 53296 Aug 28 01:29:08 prd-ubuntu1804-docker-4c-4g-2199 sshd[1563]: Received disconnect from 10.32.4.5 port 53296:11: Closed due to user request. [preauth] Aug 28 01:29:08 prd-ubuntu1804-docker-4c-4g-2199 sshd[1563]: Disconnected from invalid user jenkins 10.32.4.5 port 53296 [preauth] Aug 28 01:29:10 prd-ubuntu1804-docker-4c-4g-2199 sshd[1565]: Invalid user jenkins from 10.32.4.5 port 53298 Aug 28 01:29:10 prd-ubuntu1804-docker-4c-4g-2199 sshd[1565]: Received disconnect from 10.32.4.5 port 53298:11: Closed due to user request. [preauth] Aug 28 01:29:10 prd-ubuntu1804-docker-4c-4g-2199 sshd[1565]: Disconnected from invalid user jenkins 10.32.4.5 port 53298 [preauth] Aug 28 01:29:13 prd-ubuntu1804-docker-4c-4g-2199 sshd[1605]: Invalid user jenkins from 10.32.4.5 port 53300 Aug 28 01:29:13 prd-ubuntu1804-docker-4c-4g-2199 sshd[1605]: Received disconnect from 10.32.4.5 port 53300:11: Closed due to user request. [preauth] Aug 28 01:29:13 prd-ubuntu1804-docker-4c-4g-2199 sshd[1605]: Disconnected from invalid user jenkins 10.32.4.5 port 53300 [preauth] Aug 28 01:29:15 prd-ubuntu1804-docker-4c-4g-2199 sshd[1807]: Invalid user jenkins from 10.32.4.5 port 53302 Aug 28 01:29:15 prd-ubuntu1804-docker-4c-4g-2199 sshd[1807]: Received disconnect from 10.32.4.5 port 53302:11: Closed due to user request. [preauth] Aug 28 01:29:15 prd-ubuntu1804-docker-4c-4g-2199 sshd[1807]: Disconnected from invalid user jenkins 10.32.4.5 port 53302 [preauth] Aug 28 01:29:17 prd-ubuntu1804-docker-4c-4g-2199 sshd[1847]: Invalid user jenkins from 10.32.4.5 port 53304 Aug 28 01:29:17 prd-ubuntu1804-docker-4c-4g-2199 sshd[1847]: Received disconnect from 10.32.4.5 port 53304:11: Closed due to user request. [preauth] Aug 28 01:29:17 prd-ubuntu1804-docker-4c-4g-2199 sshd[1847]: Disconnected from invalid user jenkins 10.32.4.5 port 53304 [preauth] Aug 28 01:29:19 prd-ubuntu1804-docker-4c-4g-2199 sshd[1851]: Invalid user jenkins from 10.32.4.5 port 53306 Aug 28 01:29:19 prd-ubuntu1804-docker-4c-4g-2199 sshd[1851]: Received disconnect from 10.32.4.5 port 53306:11: Closed due to user request. [preauth] Aug 28 01:29:19 prd-ubuntu1804-docker-4c-4g-2199 sshd[1851]: Disconnected from invalid user jenkins 10.32.4.5 port 53306 [preauth] Aug 28 01:29:21 prd-ubuntu1804-docker-4c-4g-2199 useradd[1867]: new group: name=jenkins, GID=1001 Aug 28 01:29:21 prd-ubuntu1804-docker-4c-4g-2199 useradd[1867]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 28 01:29:21 prd-ubuntu1804-docker-4c-4g-2199 usermod[1874]: add 'jenkins' to group 'docker' Aug 28 01:29:21 prd-ubuntu1804-docker-4c-4g-2199 usermod[1874]: add 'jenkins' to shadow group 'docker' Aug 28 01:29:21 prd-ubuntu1804-docker-4c-4g-2199 sshd[1908]: Accepted publickey for jenkins from 10.32.4.5 port 53308 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 28 01:29:21 prd-ubuntu1804-docker-4c-4g-2199 sshd[1908]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 28 01:29:22 prd-ubuntu1804-docker-4c-4g-2199 systemd-logind[1027]: New session 2 of user jenkins. Aug 28 01:29:22 prd-ubuntu1804-docker-4c-4g-2199 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 28 01:30:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[2431]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 28 01:30:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[2431]: pam_unix(cron:session): session closed for user root Aug 28 01:31:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[2483]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 28 01:31:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[2483]: pam_unix(cron:session): session closed for user root Aug 28 01:32:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[2952]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 28 01:32:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[2952]: pam_unix(cron:session): session closed for user root Aug 28 01:33:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[3034]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 28 01:33:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[3034]: pam_unix(cron:session): session closed for user root Aug 28 01:34:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[3262]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 28 01:34:01 prd-ubuntu1804-docker-4c-4g-2199 CRON[3262]: pam_unix(cron:session): session closed for user root Aug 28 01:34:41 prd-ubuntu1804-docker-4c-4g-2199 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-aiml-dashboard-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 28 01:34:41 prd-ubuntu1804-docker-4c-4g-2199 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)