Nov 22 00:45:50 prd-ubuntu1804-docker-4c-4g-9863 passwd[936]: password for 'ubuntu' changed by 'root'
Nov 22 00:45:50 prd-ubuntu1804-docker-4c-4g-9863 systemd-logind[972]: Watching system buttons on /dev/input/event0 (Power Button)
Nov 22 00:45:50 prd-ubuntu1804-docker-4c-4g-9863 systemd-logind[972]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Nov 22 00:45:50 prd-ubuntu1804-docker-4c-4g-9863 systemd-logind[972]: New seat seat0.
Nov 22 00:45:51 prd-ubuntu1804-docker-4c-4g-9863 sshd[1122]: Server listening on 0.0.0.0 port 22.
Nov 22 00:45:51 prd-ubuntu1804-docker-4c-4g-9863 sshd[1122]: Server listening on :: port 22.
Nov 22 00:45:53 prd-ubuntu1804-docker-4c-4g-9863 sshd[1455]: Did not receive identification string from 10.32.4.5 port 58990
Nov 22 00:45:56 prd-ubuntu1804-docker-4c-4g-9863 sshd[1492]: Invalid user jenkins from 10.32.4.5 port 58992
Nov 22 00:45:56 prd-ubuntu1804-docker-4c-4g-9863 sshd[1492]: Received disconnect from 10.32.4.5 port 58992:11: Closed due to user request. [preauth]
Nov 22 00:45:56 prd-ubuntu1804-docker-4c-4g-9863 sshd[1492]: Disconnected from invalid user jenkins 10.32.4.5 port 58992 [preauth]
Nov 22 00:45:58 prd-ubuntu1804-docker-4c-4g-9863 sshd[1521]: Invalid user jenkins from 10.32.4.5 port 58994
Nov 22 00:45:58 prd-ubuntu1804-docker-4c-4g-9863 sshd[1521]: Received disconnect from 10.32.4.5 port 58994:11: Closed due to user request. [preauth]
Nov 22 00:45:58 prd-ubuntu1804-docker-4c-4g-9863 sshd[1521]: Disconnected from invalid user jenkins 10.32.4.5 port 58994 [preauth]
Nov 22 00:46:00 prd-ubuntu1804-docker-4c-4g-9863 sshd[1528]: Invalid user jenkins from 10.32.4.5 port 59002
Nov 22 00:46:00 prd-ubuntu1804-docker-4c-4g-9863 sshd[1528]: Received disconnect from 10.32.4.5 port 59002:11: Closed due to user request. [preauth]
Nov 22 00:46:00 prd-ubuntu1804-docker-4c-4g-9863 sshd[1528]: Disconnected from invalid user jenkins 10.32.4.5 port 59002 [preauth]
Nov 22 00:46:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[1531]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:46:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[1531]: pam_unix(cron:session): session closed for user root
Nov 22 00:46:02 prd-ubuntu1804-docker-4c-4g-9863 sshd[1539]: Invalid user jenkins from 10.32.4.5 port 59004
Nov 22 00:46:02 prd-ubuntu1804-docker-4c-4g-9863 sshd[1539]: Received disconnect from 10.32.4.5 port 59004:11: Closed due to user request. [preauth]
Nov 22 00:46:02 prd-ubuntu1804-docker-4c-4g-9863 sshd[1539]: Disconnected from invalid user jenkins 10.32.4.5 port 59004 [preauth]
Nov 22 00:46:04 prd-ubuntu1804-docker-4c-4g-9863 sshd[1541]: Invalid user jenkins from 10.32.4.5 port 59006
Nov 22 00:46:04 prd-ubuntu1804-docker-4c-4g-9863 sshd[1541]: Received disconnect from 10.32.4.5 port 59006:11: Closed due to user request. [preauth]
Nov 22 00:46:04 prd-ubuntu1804-docker-4c-4g-9863 sshd[1541]: Disconnected from invalid user jenkins 10.32.4.5 port 59006 [preauth]
Nov 22 00:46:06 prd-ubuntu1804-docker-4c-4g-9863 sshd[1543]: Invalid user jenkins from 10.32.4.5 port 59010
Nov 22 00:46:06 prd-ubuntu1804-docker-4c-4g-9863 sshd[1543]: Received disconnect from 10.32.4.5 port 59010:11: Closed due to user request. [preauth]
Nov 22 00:46:06 prd-ubuntu1804-docker-4c-4g-9863 sshd[1543]: Disconnected from invalid user jenkins 10.32.4.5 port 59010 [preauth]
Nov 22 00:46:08 prd-ubuntu1804-docker-4c-4g-9863 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 59014
Nov 22 00:46:08 prd-ubuntu1804-docker-4c-4g-9863 sshd[1545]: Received disconnect from 10.32.4.5 port 59014:11: Closed due to user request. [preauth]
Nov 22 00:46:08 prd-ubuntu1804-docker-4c-4g-9863 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 59014 [preauth]
Nov 22 00:46:10 prd-ubuntu1804-docker-4c-4g-9863 sshd[1547]: Invalid user jenkins from 10.32.4.5 port 59016
Nov 22 00:46:10 prd-ubuntu1804-docker-4c-4g-9863 sshd[1547]: Received disconnect from 10.32.4.5 port 59016:11: Closed due to user request. [preauth]
Nov 22 00:46:10 prd-ubuntu1804-docker-4c-4g-9863 sshd[1547]: Disconnected from invalid user jenkins 10.32.4.5 port 59016 [preauth]
Nov 22 00:46:12 prd-ubuntu1804-docker-4c-4g-9863 sshd[1567]: Invalid user jenkins from 10.32.4.5 port 59018
Nov 22 00:46:12 prd-ubuntu1804-docker-4c-4g-9863 sshd[1567]: Received disconnect from 10.32.4.5 port 59018:11: Closed due to user request. [preauth]
Nov 22 00:46:12 prd-ubuntu1804-docker-4c-4g-9863 sshd[1567]: Disconnected from invalid user jenkins 10.32.4.5 port 59018 [preauth]
Nov 22 00:46:15 prd-ubuntu1804-docker-4c-4g-9863 sshd[1785]: Invalid user jenkins from 10.32.4.5 port 59020
Nov 22 00:46:15 prd-ubuntu1804-docker-4c-4g-9863 sshd[1785]: Received disconnect from 10.32.4.5 port 59020:11: Closed due to user request. [preauth]
Nov 22 00:46:15 prd-ubuntu1804-docker-4c-4g-9863 sshd[1785]: Disconnected from invalid user jenkins 10.32.4.5 port 59020 [preauth]
Nov 22 00:46:17 prd-ubuntu1804-docker-4c-4g-9863 sshd[1823]: Invalid user jenkins from 10.32.4.5 port 59022
Nov 22 00:46:17 prd-ubuntu1804-docker-4c-4g-9863 sshd[1823]: Received disconnect from 10.32.4.5 port 59022:11: Closed due to user request. [preauth]
Nov 22 00:46:17 prd-ubuntu1804-docker-4c-4g-9863 sshd[1823]: Disconnected from invalid user jenkins 10.32.4.5 port 59022 [preauth]
Nov 22 00:46:19 prd-ubuntu1804-docker-4c-4g-9863 sshd[1829]: Invalid user jenkins from 10.32.4.5 port 59024
Nov 22 00:46:19 prd-ubuntu1804-docker-4c-4g-9863 sshd[1829]: Received disconnect from 10.32.4.5 port 59024:11: Closed due to user request. [preauth]
Nov 22 00:46:19 prd-ubuntu1804-docker-4c-4g-9863 sshd[1829]: Disconnected from invalid user jenkins 10.32.4.5 port 59024 [preauth]
Nov 22 00:46:21 prd-ubuntu1804-docker-4c-4g-9863 sshd[1843]: Invalid user jenkins from 10.32.4.5 port 59026
Nov 22 00:46:21 prd-ubuntu1804-docker-4c-4g-9863 sshd[1843]: Received disconnect from 10.32.4.5 port 59026:11: Closed due to user request. [preauth]
Nov 22 00:46:21 prd-ubuntu1804-docker-4c-4g-9863 sshd[1843]: Disconnected from invalid user jenkins 10.32.4.5 port 59026 [preauth]
Nov 22 00:46:22 prd-ubuntu1804-docker-4c-4g-9863 useradd[1847]: new group: name=jenkins, GID=1001
Nov 22 00:46:22 prd-ubuntu1804-docker-4c-4g-9863 useradd[1847]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Nov 22 00:46:22 prd-ubuntu1804-docker-4c-4g-9863 usermod[1854]: add 'jenkins' to group 'docker'
Nov 22 00:46:22 prd-ubuntu1804-docker-4c-4g-9863 usermod[1854]: add 'jenkins' to shadow group 'docker'
Nov 22 00:46:24 prd-ubuntu1804-docker-4c-4g-9863 sshd[1910]: Accepted publickey for jenkins from 10.32.4.5 port 59030 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Nov 22 00:46:24 prd-ubuntu1804-docker-4c-4g-9863 sshd[1910]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Nov 22 00:46:24 prd-ubuntu1804-docker-4c-4g-9863 systemd-logind[972]: New session 2 of user jenkins.
Nov 22 00:46:24 prd-ubuntu1804-docker-4c-4g-9863 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Nov 22 00:47:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[2408]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:47:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[2408]: pam_unix(cron:session): session closed for user root
Nov 22 00:48:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[2459]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:48:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[2459]: pam_unix(cron:session): session closed for user root
Nov 22 00:49:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[3465]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:49:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[3465]: pam_unix(cron:session): session closed for user root
Nov 22 00:50:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[5750]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:50:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[5750]: pam_unix(cron:session): session closed for user root
Nov 22 00:51:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10746]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:51:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10746]: pam_unix(cron:session): session closed for user root
Nov 22 00:52:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10753]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:52:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10753]: pam_unix(cron:session): session closed for user root
Nov 22 00:53:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10756]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:53:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10756]: pam_unix(cron:session): session closed for user root
Nov 22 00:54:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10760]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:54:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10760]: pam_unix(cron:session): session closed for user root
Nov 22 00:55:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10763]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:55:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10763]: pam_unix(cron:session): session closed for user root
Nov 22 00:56:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10826]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:56:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10826]: pam_unix(cron:session): session closed for user root
Nov 22 00:57:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[10831]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:57:02 prd-ubuntu1804-docker-4c-4g-9863 CRON[10831]: pam_unix(cron:session): session closed for user root
Nov 22 00:58:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11177]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:58:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11177]: pam_unix(cron:session): session closed for user root
Nov 22 00:59:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11405]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 00:59:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11405]: pam_unix(cron:session): session closed for user root
Nov 22 01:00:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11409]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 01:00:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11409]: pam_unix(cron:session): session closed for user root
Nov 22 01:01:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11793]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 22 01:01:01 prd-ubuntu1804-docker-4c-4g-9863 CRON[11793]: pam_unix(cron:session): session closed for user root
Nov 22 01:01:15 prd-ubuntu1804-docker-4c-4g-9863 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-ubuntu22-c-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Nov 22 01:01:15 prd-ubuntu1804-docker-4c-4g-9863 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)