Feb 10 02:19:34 prd-ubuntu1804-docker-4c-4g-1327 passwd[948]: password for 'ubuntu' changed by 'root'
Feb 10 02:19:34 prd-ubuntu1804-docker-4c-4g-1327 systemd-logind[1049]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 10 02:19:34 prd-ubuntu1804-docker-4c-4g-1327 systemd-logind[1049]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 10 02:19:34 prd-ubuntu1804-docker-4c-4g-1327 systemd-logind[1049]: New seat seat0.
Feb 10 02:19:34 prd-ubuntu1804-docker-4c-4g-1327 sshd[1307]: Server listening on 0.0.0.0 port 22.
Feb 10 02:19:34 prd-ubuntu1804-docker-4c-4g-1327 sshd[1307]: Server listening on :: port 22.
Feb 10 02:19:37 prd-ubuntu1804-docker-4c-4g-1327 sshd[1520]: Did not receive identification string from 10.32.4.5 port 57230
Feb 10 02:19:41 prd-ubuntu1804-docker-4c-4g-1327 sshd[1568]: Invalid user jenkins from 10.32.4.5 port 57232
Feb 10 02:19:41 prd-ubuntu1804-docker-4c-4g-1327 sshd[1568]: Received disconnect from 10.32.4.5 port 57232:11: Closed due to user request. [preauth]
Feb 10 02:19:41 prd-ubuntu1804-docker-4c-4g-1327 sshd[1568]: Disconnected from invalid user jenkins 10.32.4.5 port 57232 [preauth]
Feb 10 02:19:43 prd-ubuntu1804-docker-4c-4g-1327 sshd[1586]: Invalid user jenkins from 10.32.4.5 port 57236
Feb 10 02:19:43 prd-ubuntu1804-docker-4c-4g-1327 sshd[1586]: Received disconnect from 10.32.4.5 port 57236:11: Closed due to user request. [preauth]
Feb 10 02:19:43 prd-ubuntu1804-docker-4c-4g-1327 sshd[1586]: Disconnected from invalid user jenkins 10.32.4.5 port 57236 [preauth]
Feb 10 02:19:45 prd-ubuntu1804-docker-4c-4g-1327 sshd[1588]: Invalid user jenkins from 10.32.4.5 port 57238
Feb 10 02:19:45 prd-ubuntu1804-docker-4c-4g-1327 sshd[1588]: Received disconnect from 10.32.4.5 port 57238:11: Closed due to user request. [preauth]
Feb 10 02:19:45 prd-ubuntu1804-docker-4c-4g-1327 sshd[1588]: Disconnected from invalid user jenkins 10.32.4.5 port 57238 [preauth]
Feb 10 02:19:47 prd-ubuntu1804-docker-4c-4g-1327 sshd[1590]: Invalid user jenkins from 10.32.4.5 port 57240
Feb 10 02:19:47 prd-ubuntu1804-docker-4c-4g-1327 sshd[1590]: Received disconnect from 10.32.4.5 port 57240:11: Closed due to user request. [preauth]
Feb 10 02:19:47 prd-ubuntu1804-docker-4c-4g-1327 sshd[1590]: Disconnected from invalid user jenkins 10.32.4.5 port 57240 [preauth]
Feb 10 02:19:49 prd-ubuntu1804-docker-4c-4g-1327 sshd[1611]: Invalid user jenkins from 10.32.4.5 port 57242
Feb 10 02:19:49 prd-ubuntu1804-docker-4c-4g-1327 sshd[1611]: Received disconnect from 10.32.4.5 port 57242:11: Closed due to user request. [preauth]
Feb 10 02:19:49 prd-ubuntu1804-docker-4c-4g-1327 sshd[1611]: Disconnected from invalid user jenkins 10.32.4.5 port 57242 [preauth]
Feb 10 02:19:51 prd-ubuntu1804-docker-4c-4g-1327 sshd[1613]: Invalid user jenkins from 10.32.4.5 port 57244
Feb 10 02:19:51 prd-ubuntu1804-docker-4c-4g-1327 sshd[1613]: Received disconnect from 10.32.4.5 port 57244:11: Closed due to user request. [preauth]
Feb 10 02:19:51 prd-ubuntu1804-docker-4c-4g-1327 sshd[1613]: Disconnected from invalid user jenkins 10.32.4.5 port 57244 [preauth]
Feb 10 02:19:53 prd-ubuntu1804-docker-4c-4g-1327 sshd[1615]: Invalid user jenkins from 10.32.4.5 port 57246
Feb 10 02:19:53 prd-ubuntu1804-docker-4c-4g-1327 sshd[1615]: Received disconnect from 10.32.4.5 port 57246:11: Closed due to user request. [preauth]
Feb 10 02:19:53 prd-ubuntu1804-docker-4c-4g-1327 sshd[1615]: Disconnected from invalid user jenkins 10.32.4.5 port 57246 [preauth]
Feb 10 02:19:55 prd-ubuntu1804-docker-4c-4g-1327 sshd[1626]: Invalid user jenkins from 10.32.4.5 port 57248
Feb 10 02:19:55 prd-ubuntu1804-docker-4c-4g-1327 sshd[1626]: Received disconnect from 10.32.4.5 port 57248:11: Closed due to user request. [preauth]
Feb 10 02:19:55 prd-ubuntu1804-docker-4c-4g-1327 sshd[1626]: Disconnected from invalid user jenkins 10.32.4.5 port 57248 [preauth]
Feb 10 02:19:58 prd-ubuntu1804-docker-4c-4g-1327 sshd[1838]: Invalid user jenkins from 10.32.4.5 port 57250
Feb 10 02:19:58 prd-ubuntu1804-docker-4c-4g-1327 sshd[1838]: Received disconnect from 10.32.4.5 port 57250:11: Closed due to user request. [preauth]
Feb 10 02:19:58 prd-ubuntu1804-docker-4c-4g-1327 sshd[1838]: Disconnected from invalid user jenkins 10.32.4.5 port 57250 [preauth]
Feb 10 02:20:00 prd-ubuntu1804-docker-4c-4g-1327 sshd[1888]: Invalid user jenkins from 10.32.4.5 port 57254
Feb 10 02:20:00 prd-ubuntu1804-docker-4c-4g-1327 sshd[1888]: Received disconnect from 10.32.4.5 port 57254:11: Closed due to user request. [preauth]
Feb 10 02:20:00 prd-ubuntu1804-docker-4c-4g-1327 sshd[1888]: Disconnected from invalid user jenkins 10.32.4.5 port 57254 [preauth]
Feb 10 02:20:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[1894]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:20:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[1894]: pam_unix(cron:session): session closed for user root
Feb 10 02:20:02 prd-ubuntu1804-docker-4c-4g-1327 sshd[1904]: Invalid user jenkins from 10.32.4.5 port 57260
Feb 10 02:20:02 prd-ubuntu1804-docker-4c-4g-1327 sshd[1904]: Received disconnect from 10.32.4.5 port 57260:11: Closed due to user request. [preauth]
Feb 10 02:20:02 prd-ubuntu1804-docker-4c-4g-1327 sshd[1904]: Disconnected from invalid user jenkins 10.32.4.5 port 57260 [preauth]
Feb 10 02:20:03 prd-ubuntu1804-docker-4c-4g-1327 useradd[1920]: new group: name=jenkins, GID=1001
Feb 10 02:20:03 prd-ubuntu1804-docker-4c-4g-1327 useradd[1920]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Feb 10 02:20:03 prd-ubuntu1804-docker-4c-4g-1327 usermod[1927]: add 'jenkins' to group 'docker'
Feb 10 02:20:03 prd-ubuntu1804-docker-4c-4g-1327 usermod[1927]: add 'jenkins' to shadow group 'docker'
Feb 10 02:20:04 prd-ubuntu1804-docker-4c-4g-1327 sshd[1961]: Accepted publickey for jenkins from 10.32.4.5 port 57264 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Feb 10 02:20:04 prd-ubuntu1804-docker-4c-4g-1327 sshd[1961]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 10 02:20:05 prd-ubuntu1804-docker-4c-4g-1327 systemd-logind[1049]: New session 2 of user jenkins.
Feb 10 02:20:05 prd-ubuntu1804-docker-4c-4g-1327 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 10 02:21:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2200]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:21:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2200]: pam_unix(cron:session): session closed for user root
Feb 10 02:22:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2204]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:22:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2204]: pam_unix(cron:session): session closed for user root
Feb 10 02:23:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2207]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:23:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2207]: pam_unix(cron:session): session closed for user root
Feb 10 02:24:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2211]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:24:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2211]: pam_unix(cron:session): session closed for user root
Feb 10 02:25:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2216]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:25:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2216]: pam_unix(cron:session): session closed for user root
Feb 10 02:26:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2221]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:26:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2221]: pam_unix(cron:session): session closed for user root
Feb 10 02:27:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2224]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:27:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2224]: pam_unix(cron:session): session closed for user root
Feb 10 02:28:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2228]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:28:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2228]: pam_unix(cron:session): session closed for user root
Feb 10 02:29:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2231]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:29:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2231]: pam_unix(cron:session): session closed for user root
Feb 10 02:30:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2237]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:30:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2237]: pam_unix(cron:session): session closed for user root
Feb 10 02:31:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2241]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:31:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2241]: pam_unix(cron:session): session closed for user root
Feb 10 02:32:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2246]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:32:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2246]: pam_unix(cron:session): session closed for user root
Feb 10 02:33:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2249]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:33:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2249]: pam_unix(cron:session): session closed for user root
Feb 10 02:34:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2253]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:34:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2253]: pam_unix(cron:session): session closed for user root
Feb 10 02:35:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2272]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:35:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2272]: pam_unix(cron:session): session closed for user root
Feb 10 02:36:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2278]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:36:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2278]: pam_unix(cron:session): session closed for user root
Feb 10 02:37:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2282]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:37:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2282]: pam_unix(cron:session): session closed for user root
Feb 10 02:38:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2286]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:38:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2286]: pam_unix(cron:session): session closed for user root
Feb 10 02:39:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2289]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:39:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2289]: pam_unix(cron:session): session closed for user root
Feb 10 02:40:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2293]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:40:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2293]: pam_unix(cron:session): session closed for user root
Feb 10 02:41:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2298]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:41:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2298]: pam_unix(cron:session): session closed for user root
Feb 10 02:42:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2302]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:42:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2302]: pam_unix(cron:session): session closed for user root
Feb 10 02:43:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2324]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:43:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2324]: pam_unix(cron:session): session closed for user root
Feb 10 02:44:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2865]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:44:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[2865]: pam_unix(cron:session): session closed for user root
Feb 10 02:45:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[4592]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:45:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[4592]: pam_unix(cron:session): session closed for user root
Feb 10 02:46:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[9154]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:46:01 prd-ubuntu1804-docker-4c-4g-1327 CRON[9154]: pam_unix(cron:session): session closed for user root
Feb 10 02:47:11 prd-ubuntu1804-docker-4c-4g-1327 CRON[11056]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 10 02:47:11 prd-ubuntu1804-docker-4c-4g-1327 CRON[11056]: pam_unix(cron:session): session closed for user root
Feb 10 02:47:24 prd-ubuntu1804-docker-4c-4g-1327 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-ubuntu18-c-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Feb 10 02:47:24 prd-ubuntu1804-docker-4c-4g-1327 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)