May 24 10:05:36 prd-ubuntu1804-docker-4c-4g-1679 passwd[952]: password for 'ubuntu' changed by 'root' May 24 10:05:36 prd-ubuntu1804-docker-4c-4g-1679 systemd-logind[1060]: Watching system buttons on /dev/input/event0 (Power Button) May 24 10:05:36 prd-ubuntu1804-docker-4c-4g-1679 systemd-logind[1060]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 24 10:05:36 prd-ubuntu1804-docker-4c-4g-1679 systemd-logind[1060]: New seat seat0. May 24 10:05:36 prd-ubuntu1804-docker-4c-4g-1679 sshd[1282]: Server listening on 0.0.0.0 port 22. May 24 10:05:36 prd-ubuntu1804-docker-4c-4g-1679 sshd[1282]: Server listening on :: port 22. May 24 10:05:37 prd-ubuntu1804-docker-4c-4g-1679 sshd[1358]: Did not receive identification string from 10.32.4.5 port 55020 May 24 10:05:42 prd-ubuntu1804-docker-4c-4g-1679 sshd[1537]: Invalid user jenkins from 10.32.4.5 port 55022 May 24 10:05:42 prd-ubuntu1804-docker-4c-4g-1679 sshd[1537]: Received disconnect from 10.32.4.5 port 55022:11: Closed due to user request. [preauth] May 24 10:05:42 prd-ubuntu1804-docker-4c-4g-1679 sshd[1537]: Disconnected from invalid user jenkins 10.32.4.5 port 55022 [preauth] May 24 10:05:44 prd-ubuntu1804-docker-4c-4g-1679 sshd[1557]: Invalid user jenkins from 10.32.4.5 port 55026 May 24 10:05:44 prd-ubuntu1804-docker-4c-4g-1679 sshd[1557]: Received disconnect from 10.32.4.5 port 55026:11: Closed due to user request. [preauth] May 24 10:05:44 prd-ubuntu1804-docker-4c-4g-1679 sshd[1557]: Disconnected from invalid user jenkins 10.32.4.5 port 55026 [preauth] May 24 10:05:46 prd-ubuntu1804-docker-4c-4g-1679 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 55028 May 24 10:05:47 prd-ubuntu1804-docker-4c-4g-1679 sshd[1559]: Received disconnect from 10.32.4.5 port 55028:11: Closed due to user request. [preauth] May 24 10:05:47 prd-ubuntu1804-docker-4c-4g-1679 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 55028 [preauth] May 24 10:05:49 prd-ubuntu1804-docker-4c-4g-1679 sshd[1561]: Invalid user jenkins from 10.32.4.5 port 55032 May 24 10:05:49 prd-ubuntu1804-docker-4c-4g-1679 sshd[1561]: Received disconnect from 10.32.4.5 port 55032:11: Closed due to user request. [preauth] May 24 10:05:49 prd-ubuntu1804-docker-4c-4g-1679 sshd[1561]: Disconnected from invalid user jenkins 10.32.4.5 port 55032 [preauth] May 24 10:05:51 prd-ubuntu1804-docker-4c-4g-1679 sshd[1563]: Invalid user jenkins from 10.32.4.5 port 55034 May 24 10:05:51 prd-ubuntu1804-docker-4c-4g-1679 sshd[1563]: Received disconnect from 10.32.4.5 port 55034:11: Closed due to user request. [preauth] May 24 10:05:51 prd-ubuntu1804-docker-4c-4g-1679 sshd[1563]: Disconnected from invalid user jenkins 10.32.4.5 port 55034 [preauth] May 24 10:05:53 prd-ubuntu1804-docker-4c-4g-1679 sshd[1565]: Invalid user jenkins from 10.32.4.5 port 55036 May 24 10:05:53 prd-ubuntu1804-docker-4c-4g-1679 sshd[1565]: Received disconnect from 10.32.4.5 port 55036:11: Closed due to user request. [preauth] May 24 10:05:53 prd-ubuntu1804-docker-4c-4g-1679 sshd[1565]: Disconnected from invalid user jenkins 10.32.4.5 port 55036 [preauth] May 24 10:05:55 prd-ubuntu1804-docker-4c-4g-1679 sshd[1567]: Invalid user jenkins from 10.32.4.5 port 55038 May 24 10:05:55 prd-ubuntu1804-docker-4c-4g-1679 sshd[1567]: Received disconnect from 10.32.4.5 port 55038:11: Closed due to user request. [preauth] May 24 10:05:55 prd-ubuntu1804-docker-4c-4g-1679 sshd[1567]: Disconnected from invalid user jenkins 10.32.4.5 port 55038 [preauth] May 24 10:05:57 prd-ubuntu1804-docker-4c-4g-1679 sshd[1569]: Invalid user jenkins from 10.32.4.5 port 55040 May 24 10:05:57 prd-ubuntu1804-docker-4c-4g-1679 sshd[1569]: Received disconnect from 10.32.4.5 port 55040:11: Closed due to user request. [preauth] May 24 10:05:57 prd-ubuntu1804-docker-4c-4g-1679 sshd[1569]: Disconnected from invalid user jenkins 10.32.4.5 port 55040 [preauth] May 24 10:06:00 prd-ubuntu1804-docker-4c-4g-1679 sshd[1785]: Invalid user jenkins from 10.32.4.5 port 55044 May 24 10:06:00 prd-ubuntu1804-docker-4c-4g-1679 sshd[1785]: Received disconnect from 10.32.4.5 port 55044:11: Closed due to user request. [preauth] May 24 10:06:00 prd-ubuntu1804-docker-4c-4g-1679 sshd[1785]: Disconnected from invalid user jenkins 10.32.4.5 port 55044 [preauth] May 24 10:06:02 prd-ubuntu1804-docker-4c-4g-1679 CRON[1833]: pam_unix(cron:session): session opened for user root by (uid=0) May 24 10:06:02 prd-ubuntu1804-docker-4c-4g-1679 CRON[1833]: pam_unix(cron:session): session closed for user root May 24 10:06:02 prd-ubuntu1804-docker-4c-4g-1679 sshd[1842]: Invalid user jenkins from 10.32.4.5 port 55046 May 24 10:06:02 prd-ubuntu1804-docker-4c-4g-1679 sshd[1842]: Received disconnect from 10.32.4.5 port 55046:11: Closed due to user request. [preauth] May 24 10:06:02 prd-ubuntu1804-docker-4c-4g-1679 sshd[1842]: Disconnected from invalid user jenkins 10.32.4.5 port 55046 [preauth] May 24 10:06:04 prd-ubuntu1804-docker-4c-4g-1679 sshd[1860]: Invalid user jenkins from 10.32.4.5 port 55048 May 24 10:06:04 prd-ubuntu1804-docker-4c-4g-1679 sshd[1860]: Received disconnect from 10.32.4.5 port 55048:11: Closed due to user request. [preauth] May 24 10:06:04 prd-ubuntu1804-docker-4c-4g-1679 sshd[1860]: Disconnected from invalid user jenkins 10.32.4.5 port 55048 [preauth] May 24 10:06:06 prd-ubuntu1804-docker-4c-4g-1679 useradd[1869]: new group: name=jenkins, GID=1001 May 24 10:06:06 prd-ubuntu1804-docker-4c-4g-1679 useradd[1869]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 24 10:06:06 prd-ubuntu1804-docker-4c-4g-1679 usermod[1878]: add 'jenkins' to group 'docker' May 24 10:06:06 prd-ubuntu1804-docker-4c-4g-1679 usermod[1878]: add 'jenkins' to shadow group 'docker' May 24 10:06:07 prd-ubuntu1804-docker-4c-4g-1679 sshd[1870]: Received disconnect from 10.32.4.5 port 55050:11: Closed due to user request. [preauth] May 24 10:06:07 prd-ubuntu1804-docker-4c-4g-1679 sshd[1870]: Disconnected from authenticating user jenkins 10.32.4.5 port 55050 [preauth] May 24 10:06:09 prd-ubuntu1804-docker-4c-4g-1679 sshd[1930]: Accepted publickey for jenkins from 10.32.4.5 port 55052 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 24 10:06:09 prd-ubuntu1804-docker-4c-4g-1679 sshd[1930]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 24 10:06:09 prd-ubuntu1804-docker-4c-4g-1679 systemd-logind[1060]: New session 2 of user jenkins. May 24 10:06:09 prd-ubuntu1804-docker-4c-4g-1679 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 24 10:07:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2146]: pam_unix(cron:session): session opened for user root by (uid=0) May 24 10:07:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2146]: pam_unix(cron:session): session closed for user root May 24 10:08:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2161]: pam_unix(cron:session): session opened for user root by (uid=0) May 24 10:08:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2161]: pam_unix(cron:session): session closed for user root May 24 10:09:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2480]: pam_unix(cron:session): session opened for user root by (uid=0) May 24 10:09:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2480]: pam_unix(cron:session): session closed for user root May 24 10:10:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2916]: pam_unix(cron:session): session opened for user root by (uid=0) May 24 10:10:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2916]: pam_unix(cron:session): session closed for user root May 24 10:11:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2964]: pam_unix(cron:session): session opened for user root by (uid=0) May 24 10:11:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[2964]: pam_unix(cron:session): session closed for user root May 24 10:12:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[3449]: pam_unix(cron:session): session opened for user root by (uid=0) May 24 10:12:01 prd-ubuntu1804-docker-4c-4g-1679 CRON[3449]: pam_unix(cron:session): session closed for user root May 24 10:12:24 prd-ubuntu1804-docker-4c-4g-1679 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-aiml-notebook-docker-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 24 10:12:24 prd-ubuntu1804-docker-4c-4g-1679 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)