Oct 13 08:17:19 prd-ubuntu1804-docker-4c-4g-6343 passwd[941]: password for 'ubuntu' changed by 'root' Oct 13 08:17:19 prd-ubuntu1804-docker-4c-4g-6343 systemd-logind[1008]: Watching system buttons on /dev/input/event0 (Power Button) Oct 13 08:17:19 prd-ubuntu1804-docker-4c-4g-6343 systemd-logind[1008]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 13 08:17:19 prd-ubuntu1804-docker-4c-4g-6343 systemd-logind[1008]: New seat seat0. Oct 13 08:17:20 prd-ubuntu1804-docker-4c-4g-6343 sshd[1148]: Server listening on 0.0.0.0 port 22. Oct 13 08:17:20 prd-ubuntu1804-docker-4c-4g-6343 sshd[1148]: Server listening on :: port 22. Oct 13 08:17:25 prd-ubuntu1804-docker-4c-4g-6343 sshd[1510]: Did not receive identification string from 10.32.4.5 port 40156 Oct 13 08:17:25 prd-ubuntu1804-docker-4c-4g-6343 sshd[1516]: Invalid user jenkins from 10.32.4.5 port 40158 Oct 13 08:17:25 prd-ubuntu1804-docker-4c-4g-6343 sshd[1516]: Received disconnect from 10.32.4.5 port 40158:11: Closed due to user request. [preauth] Oct 13 08:17:25 prd-ubuntu1804-docker-4c-4g-6343 sshd[1516]: Disconnected from invalid user jenkins 10.32.4.5 port 40158 [preauth] Oct 13 08:17:27 prd-ubuntu1804-docker-4c-4g-6343 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 40160 Oct 13 08:17:27 prd-ubuntu1804-docker-4c-4g-6343 sshd[1532]: Received disconnect from 10.32.4.5 port 40160:11: Closed due to user request. [preauth] Oct 13 08:17:27 prd-ubuntu1804-docker-4c-4g-6343 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 40160 [preauth] Oct 13 08:17:30 prd-ubuntu1804-docker-4c-4g-6343 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 40168 Oct 13 08:17:30 prd-ubuntu1804-docker-4c-4g-6343 sshd[1536]: Received disconnect from 10.32.4.5 port 40168:11: Closed due to user request. [preauth] Oct 13 08:17:30 prd-ubuntu1804-docker-4c-4g-6343 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 40168 [preauth] Oct 13 08:17:32 prd-ubuntu1804-docker-4c-4g-6343 sshd[1538]: Invalid user jenkins from 10.32.4.5 port 40170 Oct 13 08:17:32 prd-ubuntu1804-docker-4c-4g-6343 sshd[1538]: Received disconnect from 10.32.4.5 port 40170:11: Closed due to user request. [preauth] Oct 13 08:17:32 prd-ubuntu1804-docker-4c-4g-6343 sshd[1538]: Disconnected from invalid user jenkins 10.32.4.5 port 40170 [preauth] Oct 13 08:17:34 prd-ubuntu1804-docker-4c-4g-6343 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 40172 Oct 13 08:17:34 prd-ubuntu1804-docker-4c-4g-6343 sshd[1540]: Received disconnect from 10.32.4.5 port 40172:11: Closed due to user request. [preauth] Oct 13 08:17:34 prd-ubuntu1804-docker-4c-4g-6343 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 40172 [preauth] Oct 13 08:17:36 prd-ubuntu1804-docker-4c-4g-6343 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 40174 Oct 13 08:17:36 prd-ubuntu1804-docker-4c-4g-6343 sshd[1542]: Received disconnect from 10.32.4.5 port 40174:11: Closed due to user request. [preauth] Oct 13 08:17:36 prd-ubuntu1804-docker-4c-4g-6343 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 40174 [preauth] Oct 13 08:17:38 prd-ubuntu1804-docker-4c-4g-6343 sshd[1544]: Invalid user jenkins from 10.32.4.5 port 40178 Oct 13 08:17:38 prd-ubuntu1804-docker-4c-4g-6343 sshd[1544]: Received disconnect from 10.32.4.5 port 40178:11: Closed due to user request. [preauth] Oct 13 08:17:38 prd-ubuntu1804-docker-4c-4g-6343 sshd[1544]: Disconnected from invalid user jenkins 10.32.4.5 port 40178 [preauth] Oct 13 08:17:40 prd-ubuntu1804-docker-4c-4g-6343 sshd[1551]: Invalid user jenkins from 10.32.4.5 port 40180 Oct 13 08:17:40 prd-ubuntu1804-docker-4c-4g-6343 sshd[1551]: Received disconnect from 10.32.4.5 port 40180:11: Closed due to user request. [preauth] Oct 13 08:17:40 prd-ubuntu1804-docker-4c-4g-6343 sshd[1551]: Disconnected from invalid user jenkins 10.32.4.5 port 40180 [preauth] Oct 13 08:17:43 prd-ubuntu1804-docker-4c-4g-6343 sshd[1704]: Invalid user jenkins from 10.32.4.5 port 40182 Oct 13 08:17:43 prd-ubuntu1804-docker-4c-4g-6343 sshd[1704]: Received disconnect from 10.32.4.5 port 40182:11: Closed due to user request. [preauth] Oct 13 08:17:43 prd-ubuntu1804-docker-4c-4g-6343 sshd[1704]: Disconnected from invalid user jenkins 10.32.4.5 port 40182 [preauth] Oct 13 08:17:46 prd-ubuntu1804-docker-4c-4g-6343 sshd[1787]: Invalid user jenkins from 10.32.4.5 port 40184 Oct 13 08:17:46 prd-ubuntu1804-docker-4c-4g-6343 sshd[1787]: Received disconnect from 10.32.4.5 port 40184:11: Closed due to user request. [preauth] Oct 13 08:17:46 prd-ubuntu1804-docker-4c-4g-6343 sshd[1787]: Disconnected from invalid user jenkins 10.32.4.5 port 40184 [preauth] Oct 13 08:17:48 prd-ubuntu1804-docker-4c-4g-6343 sshd[1826]: Invalid user jenkins from 10.32.4.5 port 40186 Oct 13 08:17:48 prd-ubuntu1804-docker-4c-4g-6343 sshd[1826]: Received disconnect from 10.32.4.5 port 40186:11: Closed due to user request. [preauth] Oct 13 08:17:48 prd-ubuntu1804-docker-4c-4g-6343 sshd[1826]: Disconnected from invalid user jenkins 10.32.4.5 port 40186 [preauth] Oct 13 08:17:50 prd-ubuntu1804-docker-4c-4g-6343 sshd[1830]: Invalid user jenkins from 10.32.4.5 port 40188 Oct 13 08:17:50 prd-ubuntu1804-docker-4c-4g-6343 sshd[1830]: Received disconnect from 10.32.4.5 port 40188:11: Closed due to user request. [preauth] Oct 13 08:17:50 prd-ubuntu1804-docker-4c-4g-6343 sshd[1830]: Disconnected from invalid user jenkins 10.32.4.5 port 40188 [preauth] Oct 13 08:17:52 prd-ubuntu1804-docker-4c-4g-6343 sshd[1855]: Invalid user jenkins from 10.32.4.5 port 40190 Oct 13 08:17:52 prd-ubuntu1804-docker-4c-4g-6343 useradd[1858]: new group: name=jenkins, GID=1001 Oct 13 08:17:52 prd-ubuntu1804-docker-4c-4g-6343 useradd[1858]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 13 08:17:52 prd-ubuntu1804-docker-4c-4g-6343 sshd[1855]: Received disconnect from 10.32.4.5 port 40190:11: Closed due to user request. [preauth] Oct 13 08:17:52 prd-ubuntu1804-docker-4c-4g-6343 sshd[1855]: Disconnected from invalid user jenkins 10.32.4.5 port 40190 [preauth] Oct 13 08:17:52 prd-ubuntu1804-docker-4c-4g-6343 usermod[1865]: add 'jenkins' to group 'docker' Oct 13 08:17:52 prd-ubuntu1804-docker-4c-4g-6343 usermod[1865]: add 'jenkins' to shadow group 'docker' Oct 13 08:17:54 prd-ubuntu1804-docker-4c-4g-6343 sshd[1909]: Accepted publickey for jenkins from 10.32.4.5 port 40194 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 13 08:17:54 prd-ubuntu1804-docker-4c-4g-6343 sshd[1909]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 13 08:17:54 prd-ubuntu1804-docker-4c-4g-6343 systemd-logind[1008]: New session 1 of user jenkins. Oct 13 08:17:54 prd-ubuntu1804-docker-4c-4g-6343 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 13 08:18:02 prd-ubuntu1804-docker-4c-4g-6343 CRON[2110]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 13 08:18:02 prd-ubuntu1804-docker-4c-4g-6343 CRON[2110]: pam_unix(cron:session): session closed for user root Oct 13 08:19:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[2471]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 13 08:19:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[2471]: pam_unix(cron:session): session closed for user root Oct 13 08:20:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[2875]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 13 08:20:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[2875]: pam_unix(cron:session): session closed for user root Oct 13 08:21:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[2970]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 13 08:21:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[2970]: pam_unix(cron:session): session closed for user root Oct 13 08:22:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[3452]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 13 08:22:01 prd-ubuntu1804-docker-4c-4g-6343 CRON[3452]: pam_unix(cron:session): session closed for user root Oct 13 08:22:47 prd-ubuntu1804-docker-4c-4g-6343 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-aiml-notebook-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp