May 22 18:00:19 prd-ubuntu1804-docker-4c-4g-1581 passwd[922]: password for 'ubuntu' changed by 'root' May 22 18:00:19 prd-ubuntu1804-docker-4c-4g-1581 systemd-logind[1016]: Watching system buttons on /dev/input/event0 (Power Button) May 22 18:00:19 prd-ubuntu1804-docker-4c-4g-1581 systemd-logind[1016]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 22 18:00:19 prd-ubuntu1804-docker-4c-4g-1581 systemd-logind[1016]: New seat seat0. May 22 18:00:20 prd-ubuntu1804-docker-4c-4g-1581 sshd[1206]: Server listening on 0.0.0.0 port 22. May 22 18:00:20 prd-ubuntu1804-docker-4c-4g-1581 sshd[1206]: Server listening on :: port 22. May 22 18:00:24 prd-ubuntu1804-docker-4c-4g-1581 sshd[1480]: Did not receive identification string from 10.32.4.5 port 43078 May 22 18:00:31 prd-ubuntu1804-docker-4c-4g-1581 sshd[1510]: Invalid user jenkins from 10.32.4.5 port 43084 May 22 18:00:31 prd-ubuntu1804-docker-4c-4g-1581 sshd[1510]: Received disconnect from 10.32.4.5 port 43084:11: Closed due to user request. [preauth] May 22 18:00:31 prd-ubuntu1804-docker-4c-4g-1581 sshd[1510]: Disconnected from invalid user jenkins 10.32.4.5 port 43084 [preauth] May 22 18:00:33 prd-ubuntu1804-docker-4c-4g-1581 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 43086 May 22 18:00:33 prd-ubuntu1804-docker-4c-4g-1581 sshd[1514]: Received disconnect from 10.32.4.5 port 43086:11: Closed due to user request. [preauth] May 22 18:00:33 prd-ubuntu1804-docker-4c-4g-1581 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 43086 [preauth] May 22 18:00:35 prd-ubuntu1804-docker-4c-4g-1581 sshd[1516]: Invalid user jenkins from 10.32.4.5 port 43088 May 22 18:00:35 prd-ubuntu1804-docker-4c-4g-1581 sshd[1516]: Received disconnect from 10.32.4.5 port 43088:11: Closed due to user request. [preauth] May 22 18:00:35 prd-ubuntu1804-docker-4c-4g-1581 sshd[1516]: Disconnected from invalid user jenkins 10.32.4.5 port 43088 [preauth] May 22 18:00:37 prd-ubuntu1804-docker-4c-4g-1581 sshd[1518]: Invalid user jenkins from 10.32.4.5 port 43090 May 22 18:00:37 prd-ubuntu1804-docker-4c-4g-1581 sshd[1518]: Received disconnect from 10.32.4.5 port 43090:11: Closed due to user request. [preauth] May 22 18:00:37 prd-ubuntu1804-docker-4c-4g-1581 sshd[1518]: Disconnected from invalid user jenkins 10.32.4.5 port 43090 [preauth] May 22 18:00:39 prd-ubuntu1804-docker-4c-4g-1581 sshd[1520]: Invalid user jenkins from 10.32.4.5 port 43092 May 22 18:00:39 prd-ubuntu1804-docker-4c-4g-1581 sshd[1520]: Received disconnect from 10.32.4.5 port 43092:11: Closed due to user request. [preauth] May 22 18:00:39 prd-ubuntu1804-docker-4c-4g-1581 sshd[1520]: Disconnected from invalid user jenkins 10.32.4.5 port 43092 [preauth] May 22 18:00:41 prd-ubuntu1804-docker-4c-4g-1581 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 43094 May 22 18:00:41 prd-ubuntu1804-docker-4c-4g-1581 sshd[1532]: Received disconnect from 10.32.4.5 port 43094:11: Closed due to user request. [preauth] May 22 18:00:41 prd-ubuntu1804-docker-4c-4g-1581 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 43094 [preauth] May 22 18:00:43 prd-ubuntu1804-docker-4c-4g-1581 sshd[1753]: Invalid user jenkins from 10.32.4.5 port 43098 May 22 18:00:44 prd-ubuntu1804-docker-4c-4g-1581 sshd[1753]: Received disconnect from 10.32.4.5 port 43098:11: Closed due to user request. [preauth] May 22 18:00:44 prd-ubuntu1804-docker-4c-4g-1581 sshd[1753]: Disconnected from invalid user jenkins 10.32.4.5 port 43098 [preauth] May 22 18:00:46 prd-ubuntu1804-docker-4c-4g-1581 sshd[1793]: Invalid user jenkins from 10.32.4.5 port 43100 May 22 18:00:46 prd-ubuntu1804-docker-4c-4g-1581 sshd[1793]: Received disconnect from 10.32.4.5 port 43100:11: Closed due to user request. [preauth] May 22 18:00:46 prd-ubuntu1804-docker-4c-4g-1581 sshd[1793]: Disconnected from invalid user jenkins 10.32.4.5 port 43100 [preauth] May 22 18:00:48 prd-ubuntu1804-docker-4c-4g-1581 sshd[1797]: Invalid user jenkins from 10.32.4.5 port 43102 May 22 18:00:48 prd-ubuntu1804-docker-4c-4g-1581 sshd[1797]: Received disconnect from 10.32.4.5 port 43102:11: Closed due to user request. [preauth] May 22 18:00:48 prd-ubuntu1804-docker-4c-4g-1581 sshd[1797]: Disconnected from invalid user jenkins 10.32.4.5 port 43102 [preauth] May 22 18:00:48 prd-ubuntu1804-docker-4c-4g-1581 useradd[1813]: new group: name=jenkins, GID=1001 May 22 18:00:48 prd-ubuntu1804-docker-4c-4g-1581 useradd[1813]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 22 18:00:48 prd-ubuntu1804-docker-4c-4g-1581 usermod[1820]: add 'jenkins' to group 'docker' May 22 18:00:48 prd-ubuntu1804-docker-4c-4g-1581 usermod[1820]: add 'jenkins' to shadow group 'docker' May 22 18:00:50 prd-ubuntu1804-docker-4c-4g-1581 sshd[1854]: Accepted publickey for jenkins from 10.32.4.5 port 43104 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 22 18:00:50 prd-ubuntu1804-docker-4c-4g-1581 sshd[1854]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 22 18:00:50 prd-ubuntu1804-docker-4c-4g-1581 systemd-logind[1016]: New session 1 of user jenkins. May 22 18:00:50 prd-ubuntu1804-docker-4c-4g-1581 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 22 18:01:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[2170]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:01:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[2170]: pam_unix(cron:session): session closed for user root May 22 18:02:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[2651]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:02:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[2651]: pam_unix(cron:session): session closed for user root May 22 18:03:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[6796]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:03:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[6796]: pam_unix(cron:session): session closed for user root May 22 18:04:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[7512]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:04:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[7512]: pam_unix(cron:session): session closed for user root May 22 18:05:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[8383]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:05:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[8383]: pam_unix(cron:session): session closed for user root May 22 18:06:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[9097]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:06:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[9097]: pam_unix(cron:session): session closed for user root May 22 18:07:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[9807]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:07:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[9807]: pam_unix(cron:session): session closed for user root May 22 18:08:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[10397]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:08:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[10397]: pam_unix(cron:session): session closed for user root May 22 18:09:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[11083]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:09:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[11083]: pam_unix(cron:session): session closed for user root May 22 18:10:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[11849]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:10:02 prd-ubuntu1804-docker-4c-4g-1581 CRON[11849]: pam_unix(cron:session): session closed for user root May 22 18:11:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[12415]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:11:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[12415]: pam_unix(cron:session): session closed for user root May 22 18:12:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[13072]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:12:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[13072]: pam_unix(cron:session): session closed for user root May 22 18:13:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[13902]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:13:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[13902]: pam_unix(cron:session): session closed for user root May 22 18:14:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[14593]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:14:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[14593]: pam_unix(cron:session): session closed for user root May 22 18:15:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[15249]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:15:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[15249]: pam_unix(cron:session): session closed for user root May 22 18:16:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[16857]: pam_unix(cron:session): session opened for user root by (uid=0) May 22 18:16:01 prd-ubuntu1804-docker-4c-4g-1581 CRON[16857]: pam_unix(cron:session): session closed for user root May 22 18:16:15 prd-ubuntu1804-docker-4c-4g-1581 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-smo-install-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 22 18:16:15 prd-ubuntu1804-docker-4c-4g-1581 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)