Jul 30 15:37:15 prd-ubuntu1804-docker-4c-4g-1693 passwd[942]: password for 'ubuntu' changed by 'root'
Jul 30 15:37:15 prd-ubuntu1804-docker-4c-4g-1693 systemd-logind[998]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 30 15:37:15 prd-ubuntu1804-docker-4c-4g-1693 systemd-logind[998]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 30 15:37:15 prd-ubuntu1804-docker-4c-4g-1693 systemd-logind[998]: New seat seat0.
Jul 30 15:37:16 prd-ubuntu1804-docker-4c-4g-1693 sshd[1249]: Server listening on 0.0.0.0 port 22.
Jul 30 15:37:16 prd-ubuntu1804-docker-4c-4g-1693 sshd[1249]: Server listening on :: port 22.
Jul 30 15:37:17 prd-ubuntu1804-docker-4c-4g-1693 sshd[1262]: Did not receive identification string from 10.32.4.5 port 41092
Jul 30 15:37:23 prd-ubuntu1804-docker-4c-4g-1693 sshd[1513]: Invalid user jenkins from 10.32.4.5 port 41096
Jul 30 15:37:23 prd-ubuntu1804-docker-4c-4g-1693 sshd[1513]: Received disconnect from 10.32.4.5 port 41096:11: Closed due to user request. [preauth]
Jul 30 15:37:23 prd-ubuntu1804-docker-4c-4g-1693 sshd[1513]: Disconnected from invalid user jenkins 10.32.4.5 port 41096 [preauth]
Jul 30 15:37:25 prd-ubuntu1804-docker-4c-4g-1693 sshd[1523]: Invalid user jenkins from 10.32.4.5 port 41098
Jul 30 15:37:25 prd-ubuntu1804-docker-4c-4g-1693 sshd[1523]: Received disconnect from 10.32.4.5 port 41098:11: Closed due to user request. [preauth]
Jul 30 15:37:25 prd-ubuntu1804-docker-4c-4g-1693 sshd[1523]: Disconnected from invalid user jenkins 10.32.4.5 port 41098 [preauth]
Jul 30 15:37:27 prd-ubuntu1804-docker-4c-4g-1693 sshd[1525]: Invalid user jenkins from 10.32.4.5 port 41100
Jul 30 15:37:27 prd-ubuntu1804-docker-4c-4g-1693 sshd[1525]: Received disconnect from 10.32.4.5 port 41100:11: Closed due to user request. [preauth]
Jul 30 15:37:27 prd-ubuntu1804-docker-4c-4g-1693 sshd[1525]: Disconnected from invalid user jenkins 10.32.4.5 port 41100 [preauth]
Jul 30 15:37:30 prd-ubuntu1804-docker-4c-4g-1693 sshd[1527]: Invalid user jenkins from 10.32.4.5 port 41108
Jul 30 15:37:30 prd-ubuntu1804-docker-4c-4g-1693 sshd[1527]: Received disconnect from 10.32.4.5 port 41108:11: Closed due to user request. [preauth]
Jul 30 15:37:30 prd-ubuntu1804-docker-4c-4g-1693 sshd[1527]: Disconnected from invalid user jenkins 10.32.4.5 port 41108 [preauth]
Jul 30 15:37:32 prd-ubuntu1804-docker-4c-4g-1693 sshd[1529]: Invalid user jenkins from 10.32.4.5 port 41110
Jul 30 15:37:32 prd-ubuntu1804-docker-4c-4g-1693 sshd[1529]: Received disconnect from 10.32.4.5 port 41110:11: Closed due to user request. [preauth]
Jul 30 15:37:32 prd-ubuntu1804-docker-4c-4g-1693 sshd[1529]: Disconnected from invalid user jenkins 10.32.4.5 port 41110 [preauth]
Jul 30 15:37:34 prd-ubuntu1804-docker-4c-4g-1693 sshd[1531]: Invalid user jenkins from 10.32.4.5 port 41112
Jul 30 15:37:34 prd-ubuntu1804-docker-4c-4g-1693 sshd[1531]: Received disconnect from 10.32.4.5 port 41112:11: Closed due to user request. [preauth]
Jul 30 15:37:34 prd-ubuntu1804-docker-4c-4g-1693 sshd[1531]: Disconnected from invalid user jenkins 10.32.4.5 port 41112 [preauth]
Jul 30 15:37:36 prd-ubuntu1804-docker-4c-4g-1693 sshd[1533]: Invalid user jenkins from 10.32.4.5 port 41114
Jul 30 15:37:36 prd-ubuntu1804-docker-4c-4g-1693 sshd[1533]: Received disconnect from 10.32.4.5 port 41114:11: Closed due to user request. [preauth]
Jul 30 15:37:36 prd-ubuntu1804-docker-4c-4g-1693 sshd[1533]: Disconnected from invalid user jenkins 10.32.4.5 port 41114 [preauth]
Jul 30 15:37:38 prd-ubuntu1804-docker-4c-4g-1693 sshd[1557]: Invalid user jenkins from 10.32.4.5 port 41118
Jul 30 15:37:38 prd-ubuntu1804-docker-4c-4g-1693 sshd[1557]: Received disconnect from 10.32.4.5 port 41118:11: Closed due to user request. [preauth]
Jul 30 15:37:38 prd-ubuntu1804-docker-4c-4g-1693 sshd[1557]: Disconnected from invalid user jenkins 10.32.4.5 port 41118 [preauth]
Jul 30 15:37:40 prd-ubuntu1804-docker-4c-4g-1693 sshd[1766]: Invalid user jenkins from 10.32.4.5 port 41120
Jul 30 15:37:40 prd-ubuntu1804-docker-4c-4g-1693 sshd[1766]: Received disconnect from 10.32.4.5 port 41120:11: Closed due to user request. [preauth]
Jul 30 15:37:40 prd-ubuntu1804-docker-4c-4g-1693 sshd[1766]: Disconnected from invalid user jenkins 10.32.4.5 port 41120 [preauth]
Jul 30 15:37:42 prd-ubuntu1804-docker-4c-4g-1693 sshd[1803]: Invalid user jenkins from 10.32.4.5 port 41122
Jul 30 15:37:43 prd-ubuntu1804-docker-4c-4g-1693 sshd[1803]: Received disconnect from 10.32.4.5 port 41122:11: Closed due to user request. [preauth]
Jul 30 15:37:43 prd-ubuntu1804-docker-4c-4g-1693 sshd[1803]: Disconnected from invalid user jenkins 10.32.4.5 port 41122 [preauth]
Jul 30 15:37:45 prd-ubuntu1804-docker-4c-4g-1693 sshd[1808]: Invalid user jenkins from 10.32.4.5 port 41124
Jul 30 15:37:45 prd-ubuntu1804-docker-4c-4g-1693 sshd[1808]: Received disconnect from 10.32.4.5 port 41124:11: Closed due to user request. [preauth]
Jul 30 15:37:45 prd-ubuntu1804-docker-4c-4g-1693 sshd[1808]: Disconnected from invalid user jenkins 10.32.4.5 port 41124 [preauth]
Jul 30 15:37:46 prd-ubuntu1804-docker-4c-4g-1693 useradd[1826]: new group: name=jenkins, GID=1001
Jul 30 15:37:46 prd-ubuntu1804-docker-4c-4g-1693 useradd[1826]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Jul 30 15:37:46 prd-ubuntu1804-docker-4c-4g-1693 usermod[1833]: add 'jenkins' to group 'docker'
Jul 30 15:37:46 prd-ubuntu1804-docker-4c-4g-1693 usermod[1833]: add 'jenkins' to shadow group 'docker'
Jul 30 15:37:47 prd-ubuntu1804-docker-4c-4g-1693 sshd[1867]: Accepted publickey for jenkins from 10.32.4.5 port 41128 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Jul 30 15:37:47 prd-ubuntu1804-docker-4c-4g-1693 sshd[1867]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jul 30 15:37:47 prd-ubuntu1804-docker-4c-4g-1693 systemd-logind[998]: New session 1 of user jenkins.
Jul 30 15:37:47 prd-ubuntu1804-docker-4c-4g-1693 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jul 30 15:38:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[2161]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:38:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[2161]: pam_unix(cron:session): session closed for user root
Jul 30 15:39:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[2457]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:39:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[2457]: pam_unix(cron:session): session closed for user root
Jul 30 15:40:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[3142]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:40:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[3142]: pam_unix(cron:session): session closed for user root
Jul 30 15:41:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[6966]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:41:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[6966]: pam_unix(cron:session): session closed for user root
Jul 30 15:42:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[7691]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:42:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[7691]: pam_unix(cron:session): session closed for user root
Jul 30 15:43:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[8402]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:43:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[8402]: pam_unix(cron:session): session closed for user root
Jul 30 15:44:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[8712]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:44:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[8712]: pam_unix(cron:session): session closed for user root
Jul 30 15:45:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[9382]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:45:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[9382]: pam_unix(cron:session): session closed for user root
Jul 30 15:46:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[9958]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:46:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[9958]: pam_unix(cron:session): session closed for user root
Jul 30 15:47:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[10635]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:47:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[10635]: pam_unix(cron:session): session closed for user root
Jul 30 15:48:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[11321]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:48:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[11321]: pam_unix(cron:session): session closed for user root
Jul 30 15:49:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[12068]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:49:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[12068]: pam_unix(cron:session): session closed for user root
Jul 30 15:50:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[12662]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:50:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[12662]: pam_unix(cron:session): session closed for user root
Jul 30 15:51:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[13969]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:51:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[13969]: pam_unix(cron:session): session closed for user root
Jul 30 15:52:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[14478]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 15:52:01 prd-ubuntu1804-docker-4c-4g-1693 CRON[14478]: pam_unix(cron:session): session closed for user root
Jul 30 15:52:12 prd-ubuntu1804-docker-4c-4g-1693 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-smo-install-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Jul 30 15:52:12 prd-ubuntu1804-docker-4c-4g-1693 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)