Jul 30 01:49:43 prd-ubuntu1804-docker-4c-4g-7025 passwd[934]: password for 'ubuntu' changed by 'root'
Jul 30 01:49:43 prd-ubuntu1804-docker-4c-4g-7025 systemd-logind[1041]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 30 01:49:43 prd-ubuntu1804-docker-4c-4g-7025 systemd-logind[1041]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 30 01:49:43 prd-ubuntu1804-docker-4c-4g-7025 systemd-logind[1041]: New seat seat0.
Jul 30 01:49:43 prd-ubuntu1804-docker-4c-4g-7025 sshd[1237]: Server listening on 0.0.0.0 port 22.
Jul 30 01:49:43 prd-ubuntu1804-docker-4c-4g-7025 sshd[1237]: Server listening on :: port 22.
Jul 30 01:49:46 prd-ubuntu1804-docker-4c-4g-7025 sshd[1463]: Did not receive identification string from 10.32.4.5 port 60026
Jul 30 01:49:52 prd-ubuntu1804-docker-4c-4g-7025 sshd[1515]: Invalid user jenkins from 10.32.4.5 port 60032
Jul 30 01:49:52 prd-ubuntu1804-docker-4c-4g-7025 sshd[1515]: Received disconnect from 10.32.4.5 port 60032:11: Closed due to user request. [preauth]
Jul 30 01:49:52 prd-ubuntu1804-docker-4c-4g-7025 sshd[1515]: Disconnected from invalid user jenkins 10.32.4.5 port 60032 [preauth]
Jul 30 01:49:54 prd-ubuntu1804-docker-4c-4g-7025 sshd[1519]: Invalid user jenkins from 10.32.4.5 port 60034
Jul 30 01:49:54 prd-ubuntu1804-docker-4c-4g-7025 sshd[1519]: Received disconnect from 10.32.4.5 port 60034:11: Closed due to user request. [preauth]
Jul 30 01:49:54 prd-ubuntu1804-docker-4c-4g-7025 sshd[1519]: Disconnected from invalid user jenkins 10.32.4.5 port 60034 [preauth]
Jul 30 01:49:56 prd-ubuntu1804-docker-4c-4g-7025 sshd[1521]: Invalid user jenkins from 10.32.4.5 port 60036
Jul 30 01:49:56 prd-ubuntu1804-docker-4c-4g-7025 sshd[1521]: Received disconnect from 10.32.4.5 port 60036:11: Closed due to user request. [preauth]
Jul 30 01:49:56 prd-ubuntu1804-docker-4c-4g-7025 sshd[1521]: Disconnected from invalid user jenkins 10.32.4.5 port 60036 [preauth]
Jul 30 01:49:58 prd-ubuntu1804-docker-4c-4g-7025 sshd[1523]: Invalid user jenkins from 10.32.4.5 port 60038
Jul 30 01:49:58 prd-ubuntu1804-docker-4c-4g-7025 sshd[1523]: Received disconnect from 10.32.4.5 port 60038:11: Closed due to user request. [preauth]
Jul 30 01:49:58 prd-ubuntu1804-docker-4c-4g-7025 sshd[1523]: Disconnected from invalid user jenkins 10.32.4.5 port 60038 [preauth]
Jul 30 01:50:01 prd-ubuntu1804-docker-4c-4g-7025 sshd[1525]: Invalid user jenkins from 10.32.4.5 port 60044
Jul 30 01:50:01 prd-ubuntu1804-docker-4c-4g-7025 sshd[1525]: Received disconnect from 10.32.4.5 port 60044:11: Closed due to user request. [preauth]
Jul 30 01:50:01 prd-ubuntu1804-docker-4c-4g-7025 sshd[1525]: Disconnected from invalid user jenkins 10.32.4.5 port 60044 [preauth]
Jul 30 01:50:01 prd-ubuntu1804-docker-4c-4g-7025 CRON[1527]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 01:50:01 prd-ubuntu1804-docker-4c-4g-7025 CRON[1527]: pam_unix(cron:session): session closed for user root
Jul 30 01:50:03 prd-ubuntu1804-docker-4c-4g-7025 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 60052
Jul 30 01:50:03 prd-ubuntu1804-docker-4c-4g-7025 sshd[1536]: Received disconnect from 10.32.4.5 port 60052:11: Closed due to user request. [preauth]
Jul 30 01:50:03 prd-ubuntu1804-docker-4c-4g-7025 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 60052 [preauth]
Jul 30 01:50:05 prd-ubuntu1804-docker-4c-4g-7025 sshd[1613]: Invalid user jenkins from 10.32.4.5 port 60054
Jul 30 01:50:05 prd-ubuntu1804-docker-4c-4g-7025 sshd[1613]: Received disconnect from 10.32.4.5 port 60054:11: Closed due to user request. [preauth]
Jul 30 01:50:05 prd-ubuntu1804-docker-4c-4g-7025 sshd[1613]: Disconnected from invalid user jenkins 10.32.4.5 port 60054 [preauth]
Jul 30 01:50:08 prd-ubuntu1804-docker-4c-4g-7025 sshd[1774]: Invalid user jenkins from 10.32.4.5 port 60056
Jul 30 01:50:08 prd-ubuntu1804-docker-4c-4g-7025 sshd[1774]: Received disconnect from 10.32.4.5 port 60056:11: Closed due to user request. [preauth]
Jul 30 01:50:08 prd-ubuntu1804-docker-4c-4g-7025 sshd[1774]: Disconnected from invalid user jenkins 10.32.4.5 port 60056 [preauth]
Jul 30 01:50:10 prd-ubuntu1804-docker-4c-4g-7025 sshd[1813]: Invalid user jenkins from 10.32.4.5 port 60064
Jul 30 01:50:10 prd-ubuntu1804-docker-4c-4g-7025 sshd[1813]: Received disconnect from 10.32.4.5 port 60064:11: Closed due to user request. [preauth]
Jul 30 01:50:10 prd-ubuntu1804-docker-4c-4g-7025 sshd[1813]: Disconnected from invalid user jenkins 10.32.4.5 port 60064 [preauth]
Jul 30 01:50:12 prd-ubuntu1804-docker-4c-4g-7025 sshd[1817]: Invalid user jenkins from 10.32.4.5 port 60066
Jul 30 01:50:12 prd-ubuntu1804-docker-4c-4g-7025 sshd[1817]: Received disconnect from 10.32.4.5 port 60066:11: Closed due to user request. [preauth]
Jul 30 01:50:12 prd-ubuntu1804-docker-4c-4g-7025 sshd[1817]: Disconnected from invalid user jenkins 10.32.4.5 port 60066 [preauth]
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 useradd[1824]: new group: name=jenkins, GID=1001
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 useradd[1824]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 usermod[1831]: add 'jenkins' to group 'docker'
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 usermod[1831]: add 'jenkins' to shadow group 'docker'
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 sshd[1865]: Accepted publickey for jenkins from 10.32.4.5 port 60068 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 sshd[1865]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 systemd-logind[1041]: New session 2 of user jenkins.
Jul 30 01:50:14 prd-ubuntu1804-docker-4c-4g-7025 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jul 30 01:51:03 prd-ubuntu1804-docker-4c-4g-7025 CRON[2407]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 01:51:03 prd-ubuntu1804-docker-4c-4g-7025 CRON[2407]: pam_unix(cron:session): session closed for user root
Jul 30 01:52:01 prd-ubuntu1804-docker-4c-4g-7025 CRON[2436]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 01:52:01 prd-ubuntu1804-docker-4c-4g-7025 CRON[2436]: pam_unix(cron:session): session closed for user root
Jul 30 01:53:01 prd-ubuntu1804-docker-4c-4g-7025 CRON[3173]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 01:53:01 prd-ubuntu1804-docker-4c-4g-7025 CRON[3173]: pam_unix(cron:session): session closed for user root
Jul 30 01:53:03 prd-ubuntu1804-docker-4c-4g-7025 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-service-api-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Jul 30 01:53:03 prd-ubuntu1804-docker-4c-4g-7025 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)