May 12 13:13:01 prd-ubuntu1804-docker-4c-4g-772 passwd[950]: password for 'ubuntu' changed by 'root' May 12 13:13:01 prd-ubuntu1804-docker-4c-4g-772 systemd-logind[1046]: Watching system buttons on /dev/input/event0 (Power Button) May 12 13:13:01 prd-ubuntu1804-docker-4c-4g-772 systemd-logind[1046]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 12 13:13:01 prd-ubuntu1804-docker-4c-4g-772 systemd-logind[1046]: New seat seat0. May 12 13:13:01 prd-ubuntu1804-docker-4c-4g-772 sshd[1100]: Server listening on 0.0.0.0 port 22. May 12 13:13:01 prd-ubuntu1804-docker-4c-4g-772 sshd[1100]: Server listening on :: port 22. May 12 13:13:03 prd-ubuntu1804-docker-4c-4g-772 sshd[1430]: Did not receive identification string from 10.32.4.5 port 50168 May 12 13:13:04 prd-ubuntu1804-docker-4c-4g-772 sshd[1441]: Invalid user jenkins from 10.32.4.5 port 50170 May 12 13:13:05 prd-ubuntu1804-docker-4c-4g-772 sshd[1441]: Received disconnect from 10.32.4.5 port 50170:11: Closed due to user request. [preauth] May 12 13:13:05 prd-ubuntu1804-docker-4c-4g-772 sshd[1441]: Disconnected from invalid user jenkins 10.32.4.5 port 50170 [preauth] May 12 13:13:06 prd-ubuntu1804-docker-4c-4g-772 sshd[1480]: Invalid user jenkins from 10.32.4.5 port 50176 May 12 13:13:07 prd-ubuntu1804-docker-4c-4g-772 sshd[1480]: Received disconnect from 10.32.4.5 port 50176:11: Closed due to user request. [preauth] May 12 13:13:07 prd-ubuntu1804-docker-4c-4g-772 sshd[1480]: Disconnected from invalid user jenkins 10.32.4.5 port 50176 [preauth] May 12 13:13:09 prd-ubuntu1804-docker-4c-4g-772 sshd[1495]: Invalid user jenkins from 10.32.4.5 port 50178 May 12 13:13:09 prd-ubuntu1804-docker-4c-4g-772 sshd[1495]: Received disconnect from 10.32.4.5 port 50178:11: Closed due to user request. [preauth] May 12 13:13:09 prd-ubuntu1804-docker-4c-4g-772 sshd[1495]: Disconnected from invalid user jenkins 10.32.4.5 port 50178 [preauth] May 12 13:13:11 prd-ubuntu1804-docker-4c-4g-772 sshd[1497]: Invalid user jenkins from 10.32.4.5 port 50186 May 12 13:13:11 prd-ubuntu1804-docker-4c-4g-772 sshd[1497]: Received disconnect from 10.32.4.5 port 50186:11: Closed due to user request. [preauth] May 12 13:13:11 prd-ubuntu1804-docker-4c-4g-772 sshd[1497]: Disconnected from invalid user jenkins 10.32.4.5 port 50186 [preauth] May 12 13:13:13 prd-ubuntu1804-docker-4c-4g-772 sshd[1499]: Invalid user jenkins from 10.32.4.5 port 50188 May 12 13:13:13 prd-ubuntu1804-docker-4c-4g-772 sshd[1499]: Received disconnect from 10.32.4.5 port 50188:11: Closed due to user request. [preauth] May 12 13:13:13 prd-ubuntu1804-docker-4c-4g-772 sshd[1499]: Disconnected from invalid user jenkins 10.32.4.5 port 50188 [preauth] May 12 13:13:15 prd-ubuntu1804-docker-4c-4g-772 sshd[1501]: Invalid user jenkins from 10.32.4.5 port 50190 May 12 13:13:15 prd-ubuntu1804-docker-4c-4g-772 sshd[1501]: Received disconnect from 10.32.4.5 port 50190:11: Closed due to user request. [preauth] May 12 13:13:15 prd-ubuntu1804-docker-4c-4g-772 sshd[1501]: Disconnected from invalid user jenkins 10.32.4.5 port 50190 [preauth] May 12 13:13:17 prd-ubuntu1804-docker-4c-4g-772 sshd[1503]: Invalid user jenkins from 10.32.4.5 port 50192 May 12 13:13:17 prd-ubuntu1804-docker-4c-4g-772 sshd[1503]: Received disconnect from 10.32.4.5 port 50192:11: Closed due to user request. [preauth] May 12 13:13:17 prd-ubuntu1804-docker-4c-4g-772 sshd[1503]: Disconnected from invalid user jenkins 10.32.4.5 port 50192 [preauth] May 12 13:13:19 prd-ubuntu1804-docker-4c-4g-772 sshd[1505]: Invalid user jenkins from 10.32.4.5 port 50196 May 12 13:13:19 prd-ubuntu1804-docker-4c-4g-772 sshd[1505]: Received disconnect from 10.32.4.5 port 50196:11: Closed due to user request. [preauth] May 12 13:13:19 prd-ubuntu1804-docker-4c-4g-772 sshd[1505]: Disconnected from invalid user jenkins 10.32.4.5 port 50196 [preauth] May 12 13:13:21 prd-ubuntu1804-docker-4c-4g-772 sshd[1507]: Invalid user jenkins from 10.32.4.5 port 50198 May 12 13:13:21 prd-ubuntu1804-docker-4c-4g-772 sshd[1507]: Received disconnect from 10.32.4.5 port 50198:11: Closed due to user request. [preauth] May 12 13:13:21 prd-ubuntu1804-docker-4c-4g-772 sshd[1507]: Disconnected from invalid user jenkins 10.32.4.5 port 50198 [preauth] May 12 13:13:25 prd-ubuntu1804-docker-4c-4g-772 sshd[1635]: Invalid user jenkins from 10.32.4.5 port 50200 May 12 13:13:25 prd-ubuntu1804-docker-4c-4g-772 sshd[1635]: Received disconnect from 10.32.4.5 port 50200:11: Closed due to user request. [preauth] May 12 13:13:25 prd-ubuntu1804-docker-4c-4g-772 sshd[1635]: Disconnected from invalid user jenkins 10.32.4.5 port 50200 [preauth] May 12 13:13:27 prd-ubuntu1804-docker-4c-4g-772 sshd[1751]: Invalid user jenkins from 10.32.4.5 port 50202 May 12 13:13:27 prd-ubuntu1804-docker-4c-4g-772 sshd[1751]: Received disconnect from 10.32.4.5 port 50202:11: Closed due to user request. [preauth] May 12 13:13:27 prd-ubuntu1804-docker-4c-4g-772 sshd[1751]: Disconnected from invalid user jenkins 10.32.4.5 port 50202 [preauth] May 12 13:13:29 prd-ubuntu1804-docker-4c-4g-772 sshd[1785]: Invalid user jenkins from 10.32.4.5 port 50204 May 12 13:13:29 prd-ubuntu1804-docker-4c-4g-772 sshd[1785]: Received disconnect from 10.32.4.5 port 50204:11: Closed due to user request. [preauth] May 12 13:13:29 prd-ubuntu1804-docker-4c-4g-772 sshd[1785]: Disconnected from invalid user jenkins 10.32.4.5 port 50204 [preauth] May 12 13:13:30 prd-ubuntu1804-docker-4c-4g-772 useradd[1803]: new group: name=jenkins, GID=1001 May 12 13:13:30 prd-ubuntu1804-docker-4c-4g-772 useradd[1803]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 12 13:13:31 prd-ubuntu1804-docker-4c-4g-772 usermod[1810]: add 'jenkins' to group 'docker' May 12 13:13:31 prd-ubuntu1804-docker-4c-4g-772 usermod[1810]: add 'jenkins' to shadow group 'docker' May 12 13:13:31 prd-ubuntu1804-docker-4c-4g-772 sshd[1844]: Accepted publickey for jenkins from 10.32.4.5 port 50206 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 12 13:13:31 prd-ubuntu1804-docker-4c-4g-772 sshd[1844]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 12 13:13:31 prd-ubuntu1804-docker-4c-4g-772 systemd-logind[1046]: New session 1 of user jenkins. May 12 13:13:31 prd-ubuntu1804-docker-4c-4g-772 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 12 13:14:02 prd-ubuntu1804-docker-4c-4g-772 CRON[2405]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:14:02 prd-ubuntu1804-docker-4c-4g-772 CRON[2405]: pam_unix(cron:session): session closed for user root May 12 13:15:01 prd-ubuntu1804-docker-4c-4g-772 CRON[5636]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:15:01 prd-ubuntu1804-docker-4c-4g-772 CRON[5636]: pam_unix(cron:session): session closed for user root May 12 13:16:01 prd-ubuntu1804-docker-4c-4g-772 CRON[7075]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:16:01 prd-ubuntu1804-docker-4c-4g-772 CRON[7075]: pam_unix(cron:session): session closed for user root May 12 13:17:01 prd-ubuntu1804-docker-4c-4g-772 CRON[7851]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:17:01 prd-ubuntu1804-docker-4c-4g-772 CRON[7852]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:17:01 prd-ubuntu1804-docker-4c-4g-772 CRON[7851]: pam_unix(cron:session): session closed for user root May 12 13:17:01 prd-ubuntu1804-docker-4c-4g-772 CRON[7852]: pam_unix(cron:session): session closed for user root May 12 13:18:01 prd-ubuntu1804-docker-4c-4g-772 CRON[8451]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:18:01 prd-ubuntu1804-docker-4c-4g-772 CRON[8451]: pam_unix(cron:session): session closed for user root May 12 13:19:01 prd-ubuntu1804-docker-4c-4g-772 CRON[9001]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:19:01 prd-ubuntu1804-docker-4c-4g-772 CRON[9001]: pam_unix(cron:session): session closed for user root May 12 13:20:01 prd-ubuntu1804-docker-4c-4g-772 CRON[9646]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:20:01 prd-ubuntu1804-docker-4c-4g-772 CRON[9646]: pam_unix(cron:session): session closed for user root May 12 13:21:01 prd-ubuntu1804-docker-4c-4g-772 CRON[10408]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:21:01 prd-ubuntu1804-docker-4c-4g-772 CRON[10408]: pam_unix(cron:session): session closed for user root May 12 13:22:01 prd-ubuntu1804-docker-4c-4g-772 CRON[11161]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:22:01 prd-ubuntu1804-docker-4c-4g-772 CRON[11161]: pam_unix(cron:session): session closed for user root May 12 13:23:01 prd-ubuntu1804-docker-4c-4g-772 CRON[11906]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:23:01 prd-ubuntu1804-docker-4c-4g-772 CRON[11906]: pam_unix(cron:session): session closed for user root May 12 13:24:01 prd-ubuntu1804-docker-4c-4g-772 CRON[12542]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:24:01 prd-ubuntu1804-docker-4c-4g-772 CRON[12542]: pam_unix(cron:session): session closed for user root May 12 13:25:01 prd-ubuntu1804-docker-4c-4g-772 CRON[13851]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 13:25:01 prd-ubuntu1804-docker-4c-4g-772 CRON[13851]: pam_unix(cron:session): session closed for user root May 12 13:25:39 prd-ubuntu1804-docker-4c-4g-772 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-smo-install-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 12 13:25:39 prd-ubuntu1804-docker-4c-4g-772 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)