Dec 10 03:37:08 prd-ubuntu1804-docker-4c-4g-12600 passwd[948]: password for 'ubuntu' changed by 'root' Dec 10 03:37:08 prd-ubuntu1804-docker-4c-4g-12600 systemd-logind[979]: Watching system buttons on /dev/input/event0 (Power Button) Dec 10 03:37:08 prd-ubuntu1804-docker-4c-4g-12600 systemd-logind[979]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 10 03:37:08 prd-ubuntu1804-docker-4c-4g-12600 systemd-logind[979]: New seat seat0. Dec 10 03:37:08 prd-ubuntu1804-docker-4c-4g-12600 sshd[1217]: Server listening on 0.0.0.0 port 22. Dec 10 03:37:08 prd-ubuntu1804-docker-4c-4g-12600 sshd[1217]: Server listening on :: port 22. Dec 10 03:37:11 prd-ubuntu1804-docker-4c-4g-12600 sshd[1402]: Did not receive identification string from 10.32.4.5 port 47290 Dec 10 03:37:20 prd-ubuntu1804-docker-4c-4g-12600 sshd[1483]: Invalid user jenkins from 10.32.4.5 port 47298 Dec 10 03:37:20 prd-ubuntu1804-docker-4c-4g-12600 sshd[1483]: Received disconnect from 10.32.4.5 port 47298:11: Closed due to user request. [preauth] Dec 10 03:37:20 prd-ubuntu1804-docker-4c-4g-12600 sshd[1483]: Disconnected from invalid user jenkins 10.32.4.5 port 47298 [preauth] Dec 10 03:37:22 prd-ubuntu1804-docker-4c-4g-12600 sshd[1487]: Invalid user jenkins from 10.32.4.5 port 47302 Dec 10 03:37:22 prd-ubuntu1804-docker-4c-4g-12600 sshd[1487]: Received disconnect from 10.32.4.5 port 47302:11: Closed due to user request. [preauth] Dec 10 03:37:22 prd-ubuntu1804-docker-4c-4g-12600 sshd[1487]: Disconnected from invalid user jenkins 10.32.4.5 port 47302 [preauth] Dec 10 03:37:24 prd-ubuntu1804-docker-4c-4g-12600 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 47304 Dec 10 03:37:24 prd-ubuntu1804-docker-4c-4g-12600 sshd[1489]: Received disconnect from 10.32.4.5 port 47304:11: Closed due to user request. [preauth] Dec 10 03:37:24 prd-ubuntu1804-docker-4c-4g-12600 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 47304 [preauth] Dec 10 03:37:26 prd-ubuntu1804-docker-4c-4g-12600 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 47306 Dec 10 03:37:26 prd-ubuntu1804-docker-4c-4g-12600 sshd[1491]: Received disconnect from 10.32.4.5 port 47306:11: Closed due to user request. [preauth] Dec 10 03:37:26 prd-ubuntu1804-docker-4c-4g-12600 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 47306 [preauth] Dec 10 03:37:28 prd-ubuntu1804-docker-4c-4g-12600 sshd[1493]: Invalid user jenkins from 10.32.4.5 port 47308 Dec 10 03:37:29 prd-ubuntu1804-docker-4c-4g-12600 sshd[1493]: Received disconnect from 10.32.4.5 port 47308:11: Closed due to user request. [preauth] Dec 10 03:37:29 prd-ubuntu1804-docker-4c-4g-12600 sshd[1493]: Disconnected from invalid user jenkins 10.32.4.5 port 47308 [preauth] Dec 10 03:37:31 prd-ubuntu1804-docker-4c-4g-12600 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 47310 Dec 10 03:37:31 prd-ubuntu1804-docker-4c-4g-12600 sshd[1532]: Received disconnect from 10.32.4.5 port 47310:11: Closed due to user request. [preauth] Dec 10 03:37:31 prd-ubuntu1804-docker-4c-4g-12600 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 47310 [preauth] Dec 10 03:37:33 prd-ubuntu1804-docker-4c-4g-12600 sshd[1733]: Invalid user jenkins from 10.32.4.5 port 47312 Dec 10 03:37:33 prd-ubuntu1804-docker-4c-4g-12600 sshd[1733]: Received disconnect from 10.32.4.5 port 47312:11: Closed due to user request. [preauth] Dec 10 03:37:33 prd-ubuntu1804-docker-4c-4g-12600 sshd[1733]: Disconnected from invalid user jenkins 10.32.4.5 port 47312 [preauth] Dec 10 03:37:35 prd-ubuntu1804-docker-4c-4g-12600 sshd[1773]: Invalid user jenkins from 10.32.4.5 port 47314 Dec 10 03:37:36 prd-ubuntu1804-docker-4c-4g-12600 sshd[1773]: Received disconnect from 10.32.4.5 port 47314:11: Closed due to user request. [preauth] Dec 10 03:37:36 prd-ubuntu1804-docker-4c-4g-12600 sshd[1773]: Disconnected from invalid user jenkins 10.32.4.5 port 47314 [preauth] Dec 10 03:37:38 prd-ubuntu1804-docker-4c-4g-12600 sshd[1789]: Invalid user jenkins from 10.32.4.5 port 47316 Dec 10 03:37:38 prd-ubuntu1804-docker-4c-4g-12600 sshd[1789]: Received disconnect from 10.32.4.5 port 47316:11: Closed due to user request. [preauth] Dec 10 03:37:38 prd-ubuntu1804-docker-4c-4g-12600 sshd[1789]: Disconnected from invalid user jenkins 10.32.4.5 port 47316 [preauth] Dec 10 03:37:38 prd-ubuntu1804-docker-4c-4g-12600 useradd[1793]: new group: name=jenkins, GID=1001 Dec 10 03:37:38 prd-ubuntu1804-docker-4c-4g-12600 useradd[1793]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Dec 10 03:37:38 prd-ubuntu1804-docker-4c-4g-12600 usermod[1800]: add 'jenkins' to group 'docker' Dec 10 03:37:38 prd-ubuntu1804-docker-4c-4g-12600 usermod[1800]: add 'jenkins' to shadow group 'docker' Dec 10 03:37:40 prd-ubuntu1804-docker-4c-4g-12600 sshd[1844]: Accepted publickey for jenkins from 10.32.4.5 port 47320 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Dec 10 03:37:40 prd-ubuntu1804-docker-4c-4g-12600 sshd[1844]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 10 03:37:40 prd-ubuntu1804-docker-4c-4g-12600 systemd-logind[979]: New session 1 of user jenkins. Dec 10 03:37:40 prd-ubuntu1804-docker-4c-4g-12600 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 10 03:38:01 prd-ubuntu1804-docker-4c-4g-12600 CRON[2366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 10 03:38:01 prd-ubuntu1804-docker-4c-4g-12600 CRON[2366]: pam_unix(cron:session): session closed for user root Dec 10 03:39:01 prd-ubuntu1804-docker-4c-4g-12600 CRON[3023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 10 03:39:01 prd-ubuntu1804-docker-4c-4g-12600 CRON[3023]: pam_unix(cron:session): session closed for user root Dec 10 03:40:01 prd-ubuntu1804-docker-4c-4g-12600 CRON[3388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 10 03:40:01 prd-ubuntu1804-docker-4c-4g-12600 CRON[3388]: pam_unix(cron:session): session closed for user root Dec 10 03:40:26 prd-ubuntu1804-docker-4c-4g-12600 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-aiml-notebook-docker-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Dec 10 03:40:26 prd-ubuntu1804-docker-4c-4g-12600 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)