May 25 08:56:49 prd-ubuntu1804-docker-4c-4g-1731 passwd[919]: password for 'ubuntu' changed by 'root'
May 25 08:56:50 prd-ubuntu1804-docker-4c-4g-1731 systemd-logind[1033]: Watching system buttons on /dev/input/event0 (Power Button)
May 25 08:56:50 prd-ubuntu1804-docker-4c-4g-1731 systemd-logind[1033]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
May 25 08:56:50 prd-ubuntu1804-docker-4c-4g-1731 systemd-logind[1033]: New seat seat0.
May 25 08:56:50 prd-ubuntu1804-docker-4c-4g-1731 sshd[1097]: Server listening on 0.0.0.0 port 22.
May 25 08:56:50 prd-ubuntu1804-docker-4c-4g-1731 sshd[1097]: Server listening on :: port 22.
May 25 08:56:50 prd-ubuntu1804-docker-4c-4g-1731 sshd[1294]: Did not receive identification string from 10.32.4.5 port 56302
May 25 08:56:53 prd-ubuntu1804-docker-4c-4g-1731 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 56304
May 25 08:56:53 prd-ubuntu1804-docker-4c-4g-1731 sshd[1514]: Received disconnect from 10.32.4.5 port 56304:11: Closed due to user request. [preauth]
May 25 08:56:53 prd-ubuntu1804-docker-4c-4g-1731 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 56304 [preauth]
May 25 08:56:55 prd-ubuntu1804-docker-4c-4g-1731 sshd[1556]: Invalid user jenkins from 10.32.4.5 port 56306
May 25 08:56:55 prd-ubuntu1804-docker-4c-4g-1731 sshd[1556]: Received disconnect from 10.32.4.5 port 56306:11: Closed due to user request. [preauth]
May 25 08:56:55 prd-ubuntu1804-docker-4c-4g-1731 sshd[1556]: Disconnected from invalid user jenkins 10.32.4.5 port 56306 [preauth]
May 25 08:56:57 prd-ubuntu1804-docker-4c-4g-1731 sshd[1576]: Invalid user jenkins from 10.32.4.5 port 56308
May 25 08:56:57 prd-ubuntu1804-docker-4c-4g-1731 sshd[1576]: Received disconnect from 10.32.4.5 port 56308:11: Closed due to user request. [preauth]
May 25 08:56:57 prd-ubuntu1804-docker-4c-4g-1731 sshd[1576]: Disconnected from invalid user jenkins 10.32.4.5 port 56308 [preauth]
May 25 08:56:59 prd-ubuntu1804-docker-4c-4g-1731 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 56312
May 25 08:56:59 prd-ubuntu1804-docker-4c-4g-1731 sshd[1584]: Received disconnect from 10.32.4.5 port 56312:11: Closed due to user request. [preauth]
May 25 08:56:59 prd-ubuntu1804-docker-4c-4g-1731 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 56312 [preauth]
May 25 08:57:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[1587]: pam_unix(cron:session): session opened for user root by (uid=0)
May 25 08:57:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[1587]: pam_unix(cron:session): session closed for user root
May 25 08:57:01 prd-ubuntu1804-docker-4c-4g-1731 sshd[1595]: Invalid user jenkins from 10.32.4.5 port 56316
May 25 08:57:01 prd-ubuntu1804-docker-4c-4g-1731 sshd[1595]: Received disconnect from 10.32.4.5 port 56316:11: Closed due to user request. [preauth]
May 25 08:57:01 prd-ubuntu1804-docker-4c-4g-1731 sshd[1595]: Disconnected from invalid user jenkins 10.32.4.5 port 56316 [preauth]
May 25 08:57:03 prd-ubuntu1804-docker-4c-4g-1731 sshd[1597]: Invalid user jenkins from 10.32.4.5 port 56318
May 25 08:57:03 prd-ubuntu1804-docker-4c-4g-1731 sshd[1597]: Received disconnect from 10.32.4.5 port 56318:11: Closed due to user request. [preauth]
May 25 08:57:03 prd-ubuntu1804-docker-4c-4g-1731 sshd[1597]: Disconnected from invalid user jenkins 10.32.4.5 port 56318 [preauth]
May 25 08:57:05 prd-ubuntu1804-docker-4c-4g-1731 sshd[1599]: Invalid user jenkins from 10.32.4.5 port 56320
May 25 08:57:06 prd-ubuntu1804-docker-4c-4g-1731 sshd[1599]: Received disconnect from 10.32.4.5 port 56320:11: Closed due to user request. [preauth]
May 25 08:57:06 prd-ubuntu1804-docker-4c-4g-1731 sshd[1599]: Disconnected from invalid user jenkins 10.32.4.5 port 56320 [preauth]
May 25 08:57:08 prd-ubuntu1804-docker-4c-4g-1731 sshd[1601]: Invalid user jenkins from 10.32.4.5 port 56322
May 25 08:57:08 prd-ubuntu1804-docker-4c-4g-1731 sshd[1601]: Received disconnect from 10.32.4.5 port 56322:11: Closed due to user request. [preauth]
May 25 08:57:08 prd-ubuntu1804-docker-4c-4g-1731 sshd[1601]: Disconnected from invalid user jenkins 10.32.4.5 port 56322 [preauth]
May 25 08:57:10 prd-ubuntu1804-docker-4c-4g-1731 sshd[1603]: Invalid user jenkins from 10.32.4.5 port 56324
May 25 08:57:10 prd-ubuntu1804-docker-4c-4g-1731 sshd[1603]: Received disconnect from 10.32.4.5 port 56324:11: Closed due to user request. [preauth]
May 25 08:57:10 prd-ubuntu1804-docker-4c-4g-1731 sshd[1603]: Disconnected from invalid user jenkins 10.32.4.5 port 56324 [preauth]
May 25 08:57:12 prd-ubuntu1804-docker-4c-4g-1731 sshd[1623]: Invalid user jenkins from 10.32.4.5 port 56326
May 25 08:57:12 prd-ubuntu1804-docker-4c-4g-1731 sshd[1623]: Received disconnect from 10.32.4.5 port 56326:11: Closed due to user request. [preauth]
May 25 08:57:12 prd-ubuntu1804-docker-4c-4g-1731 sshd[1623]: Disconnected from invalid user jenkins 10.32.4.5 port 56326 [preauth]
May 25 08:57:14 prd-ubuntu1804-docker-4c-4g-1731 sshd[1834]: Invalid user jenkins from 10.32.4.5 port 56328
May 25 08:57:14 prd-ubuntu1804-docker-4c-4g-1731 sshd[1834]: Received disconnect from 10.32.4.5 port 56328:11: Closed due to user request. [preauth]
May 25 08:57:14 prd-ubuntu1804-docker-4c-4g-1731 sshd[1834]: Disconnected from invalid user jenkins 10.32.4.5 port 56328 [preauth]
May 25 08:57:16 prd-ubuntu1804-docker-4c-4g-1731 sshd[1871]: Invalid user jenkins from 10.32.4.5 port 56332
May 25 08:57:17 prd-ubuntu1804-docker-4c-4g-1731 sshd[1871]: Received disconnect from 10.32.4.5 port 56332:11: Closed due to user request. [preauth]
May 25 08:57:17 prd-ubuntu1804-docker-4c-4g-1731 sshd[1871]: Disconnected from invalid user jenkins 10.32.4.5 port 56332 [preauth]
May 25 08:57:19 prd-ubuntu1804-docker-4c-4g-1731 sshd[1889]: Invalid user jenkins from 10.32.4.5 port 56334
May 25 08:57:19 prd-ubuntu1804-docker-4c-4g-1731 sshd[1889]: Received disconnect from 10.32.4.5 port 56334:11: Closed due to user request. [preauth]
May 25 08:57:19 prd-ubuntu1804-docker-4c-4g-1731 sshd[1889]: Disconnected from invalid user jenkins 10.32.4.5 port 56334 [preauth]
May 25 08:57:20 prd-ubuntu1804-docker-4c-4g-1731 useradd[1898]: new group: name=jenkins, GID=1001
May 25 08:57:20 prd-ubuntu1804-docker-4c-4g-1731 useradd[1898]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
May 25 08:57:21 prd-ubuntu1804-docker-4c-4g-1731 usermod[1905]: add 'jenkins' to group 'docker'
May 25 08:57:21 prd-ubuntu1804-docker-4c-4g-1731 usermod[1905]: add 'jenkins' to shadow group 'docker'
May 25 08:57:21 prd-ubuntu1804-docker-4c-4g-1731 sshd[1916]: Received disconnect from 10.32.4.5 port 56336:11: Closed due to user request. [preauth]
May 25 08:57:21 prd-ubuntu1804-docker-4c-4g-1731 sshd[1916]: Disconnected from authenticating user jenkins 10.32.4.5 port 56336 [preauth]
May 25 08:57:23 prd-ubuntu1804-docker-4c-4g-1731 sshd[1960]: Accepted publickey for jenkins from 10.32.4.5 port 56338 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
May 25 08:57:23 prd-ubuntu1804-docker-4c-4g-1731 sshd[1960]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
May 25 08:57:23 prd-ubuntu1804-docker-4c-4g-1731 systemd-logind[1033]: New session 2 of user jenkins.
May 25 08:57:23 prd-ubuntu1804-docker-4c-4g-1731 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
May 25 08:58:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[2475]: pam_unix(cron:session): session opened for user root by (uid=0)
May 25 08:58:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[2475]: pam_unix(cron:session): session closed for user root
May 25 08:59:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[2516]: pam_unix(cron:session): session opened for user root by (uid=0)
May 25 08:59:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[2516]: pam_unix(cron:session): session closed for user root
May 25 09:00:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[3292]: pam_unix(cron:session): session opened for user root by (uid=0)
May 25 09:00:01 prd-ubuntu1804-docker-4c-4g-1731 CRON[3292]: pam_unix(cron:session): session closed for user root
May 25 09:00:35 prd-ubuntu1804-docker-4c-4g-1731 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-dmaap-vth-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
May 25 09:00:35 prd-ubuntu1804-docker-4c-4g-1731 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)