Dec 5 12:18:49 prd-ubuntu1804-docker-4c-4g-12162 passwd[943]: password for 'ubuntu' changed by 'root' Dec 5 12:18:49 prd-ubuntu1804-docker-4c-4g-12162 systemd-logind[1042]: Watching system buttons on /dev/input/event0 (Power Button) Dec 5 12:18:49 prd-ubuntu1804-docker-4c-4g-12162 systemd-logind[1042]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 5 12:18:49 prd-ubuntu1804-docker-4c-4g-12162 systemd-logind[1042]: New seat seat0. Dec 5 12:18:49 prd-ubuntu1804-docker-4c-4g-12162 sshd[1209]: Server listening on 0.0.0.0 port 22. Dec 5 12:18:49 prd-ubuntu1804-docker-4c-4g-12162 sshd[1209]: Server listening on :: port 22. Dec 5 12:18:52 prd-ubuntu1804-docker-4c-4g-12162 sshd[1423]: Did not receive identification string from 10.32.4.5 port 34638 Dec 5 12:19:00 prd-ubuntu1804-docker-4c-4g-12162 sshd[1479]: Invalid user jenkins from 10.32.4.5 port 34642 Dec 5 12:19:00 prd-ubuntu1804-docker-4c-4g-12162 sshd[1479]: Received disconnect from 10.32.4.5 port 34642:11: Closed due to user request. [preauth] Dec 5 12:19:00 prd-ubuntu1804-docker-4c-4g-12162 sshd[1479]: Disconnected from invalid user jenkins 10.32.4.5 port 34642 [preauth] Dec 5 12:19:01 prd-ubuntu1804-docker-4c-4g-12162 CRON[1483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 12:19:01 prd-ubuntu1804-docker-4c-4g-12162 CRON[1483]: pam_unix(cron:session): session closed for user root Dec 5 12:19:02 prd-ubuntu1804-docker-4c-4g-12162 sshd[1492]: Invalid user jenkins from 10.32.4.5 port 34644 Dec 5 12:19:02 prd-ubuntu1804-docker-4c-4g-12162 sshd[1492]: Received disconnect from 10.32.4.5 port 34644:11: Closed due to user request. [preauth] Dec 5 12:19:02 prd-ubuntu1804-docker-4c-4g-12162 sshd[1492]: Disconnected from invalid user jenkins 10.32.4.5 port 34644 [preauth] Dec 5 12:19:04 prd-ubuntu1804-docker-4c-4g-12162 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 34646 Dec 5 12:19:04 prd-ubuntu1804-docker-4c-4g-12162 sshd[1494]: Received disconnect from 10.32.4.5 port 34646:11: Closed due to user request. [preauth] Dec 5 12:19:04 prd-ubuntu1804-docker-4c-4g-12162 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 34646 [preauth] Dec 5 12:19:06 prd-ubuntu1804-docker-4c-4g-12162 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 34648 Dec 5 12:19:06 prd-ubuntu1804-docker-4c-4g-12162 sshd[1496]: Received disconnect from 10.32.4.5 port 34648:11: Closed due to user request. [preauth] Dec 5 12:19:06 prd-ubuntu1804-docker-4c-4g-12162 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 34648 [preauth] Dec 5 12:19:08 prd-ubuntu1804-docker-4c-4g-12162 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 34652 Dec 5 12:19:08 prd-ubuntu1804-docker-4c-4g-12162 sshd[1498]: Received disconnect from 10.32.4.5 port 34652:11: Closed due to user request. [preauth] Dec 5 12:19:08 prd-ubuntu1804-docker-4c-4g-12162 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 34652 [preauth] Dec 5 12:19:10 prd-ubuntu1804-docker-4c-4g-12162 sshd[1529]: Invalid user jenkins from 10.32.4.5 port 34654 Dec 5 12:19:11 prd-ubuntu1804-docker-4c-4g-12162 sshd[1529]: Received disconnect from 10.32.4.5 port 34654:11: Closed due to user request. [preauth] Dec 5 12:19:11 prd-ubuntu1804-docker-4c-4g-12162 sshd[1529]: Disconnected from invalid user jenkins 10.32.4.5 port 34654 [preauth] Dec 5 12:19:13 prd-ubuntu1804-docker-4c-4g-12162 sshd[1733]: Invalid user jenkins from 10.32.4.5 port 34658 Dec 5 12:19:14 prd-ubuntu1804-docker-4c-4g-12162 sshd[1733]: Received disconnect from 10.32.4.5 port 34658:11: Closed due to user request. [preauth] Dec 5 12:19:14 prd-ubuntu1804-docker-4c-4g-12162 sshd[1733]: Disconnected from invalid user jenkins 10.32.4.5 port 34658 [preauth] Dec 5 12:19:16 prd-ubuntu1804-docker-4c-4g-12162 sshd[1772]: Invalid user jenkins from 10.32.4.5 port 34666 Dec 5 12:19:16 prd-ubuntu1804-docker-4c-4g-12162 sshd[1772]: Received disconnect from 10.32.4.5 port 34666:11: Closed due to user request. [preauth] Dec 5 12:19:16 prd-ubuntu1804-docker-4c-4g-12162 sshd[1772]: Disconnected from invalid user jenkins 10.32.4.5 port 34666 [preauth] Dec 5 12:19:17 prd-ubuntu1804-docker-4c-4g-12162 useradd[1790]: new group: name=jenkins, GID=1001 Dec 5 12:19:17 prd-ubuntu1804-docker-4c-4g-12162 useradd[1790]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Dec 5 12:19:18 prd-ubuntu1804-docker-4c-4g-12162 usermod[1797]: add 'jenkins' to group 'docker' Dec 5 12:19:18 prd-ubuntu1804-docker-4c-4g-12162 usermod[1797]: add 'jenkins' to shadow group 'docker' Dec 5 12:19:18 prd-ubuntu1804-docker-4c-4g-12162 sshd[1839]: Accepted publickey for jenkins from 10.32.4.5 port 34668 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Dec 5 12:19:18 prd-ubuntu1804-docker-4c-4g-12162 sshd[1839]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 5 12:19:18 prd-ubuntu1804-docker-4c-4g-12162 systemd-logind[1042]: New session 2 of user jenkins. Dec 5 12:19:18 prd-ubuntu1804-docker-4c-4g-12162 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 5 12:20:02 prd-ubuntu1804-docker-4c-4g-12162 CRON[2621]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 12:20:02 prd-ubuntu1804-docker-4c-4g-12162 CRON[2621]: pam_unix(cron:session): session closed for user root Dec 5 12:21:01 prd-ubuntu1804-docker-4c-4g-12162 CRON[3110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 12:21:01 prd-ubuntu1804-docker-4c-4g-12162 CRON[3110]: pam_unix(cron:session): session closed for user root Dec 5 12:22:01 prd-ubuntu1804-docker-4c-4g-12162 CRON[3765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 5 12:22:01 prd-ubuntu1804-docker-4c-4g-12162 CRON[3765]: pam_unix(cron:session): session closed for user root Dec 5 12:22:02 prd-ubuntu1804-docker-4c-4g-12162 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-aiml-notebook-docker-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Dec 5 12:22:02 prd-ubuntu1804-docker-4c-4g-12162 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)