Nov 11 12:45:23 prd-ubuntu1804-docker-4c-4g-2454 passwd[926]: password for 'ubuntu' changed by 'root'
Nov 11 12:45:23 prd-ubuntu1804-docker-4c-4g-2454 systemd-logind[983]: Watching system buttons on /dev/input/event0 (Power Button)
Nov 11 12:45:23 prd-ubuntu1804-docker-4c-4g-2454 systemd-logind[983]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Nov 11 12:45:23 prd-ubuntu1804-docker-4c-4g-2454 systemd-logind[983]: New seat seat0.
Nov 11 12:45:23 prd-ubuntu1804-docker-4c-4g-2454 sshd[1094]: Server listening on 0.0.0.0 port 22.
Nov 11 12:45:23 prd-ubuntu1804-docker-4c-4g-2454 sshd[1094]: Server listening on :: port 22.
Nov 11 12:45:27 prd-ubuntu1804-docker-4c-4g-2454 sshd[1438]: Did not receive identification string from 10.32.4.5 port 38634
Nov 11 12:45:32 prd-ubuntu1804-docker-4c-4g-2454 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 38640
Nov 11 12:45:32 prd-ubuntu1804-docker-4c-4g-2454 sshd[1489]: Received disconnect from 10.32.4.5 port 38640:11: Closed due to user request. [preauth]
Nov 11 12:45:32 prd-ubuntu1804-docker-4c-4g-2454 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 38640 [preauth]
Nov 11 12:45:34 prd-ubuntu1804-docker-4c-4g-2454 sshd[1493]: Invalid user jenkins from 10.32.4.5 port 38642
Nov 11 12:45:34 prd-ubuntu1804-docker-4c-4g-2454 sshd[1493]: Received disconnect from 10.32.4.5 port 38642:11: Closed due to user request. [preauth]
Nov 11 12:45:34 prd-ubuntu1804-docker-4c-4g-2454 sshd[1493]: Disconnected from invalid user jenkins 10.32.4.5 port 38642 [preauth]
Nov 11 12:45:36 prd-ubuntu1804-docker-4c-4g-2454 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 38644
Nov 11 12:45:36 prd-ubuntu1804-docker-4c-4g-2454 sshd[1496]: Received disconnect from 10.32.4.5 port 38644:11: Closed due to user request. [preauth]
Nov 11 12:45:36 prd-ubuntu1804-docker-4c-4g-2454 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 38644 [preauth]
Nov 11 12:45:38 prd-ubuntu1804-docker-4c-4g-2454 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 38646
Nov 11 12:45:38 prd-ubuntu1804-docker-4c-4g-2454 sshd[1498]: Received disconnect from 10.32.4.5 port 38646:11: Closed due to user request. [preauth]
Nov 11 12:45:38 prd-ubuntu1804-docker-4c-4g-2454 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 38646 [preauth]
Nov 11 12:45:41 prd-ubuntu1804-docker-4c-4g-2454 sshd[1500]: Invalid user jenkins from 10.32.4.5 port 38648
Nov 11 12:45:41 prd-ubuntu1804-docker-4c-4g-2454 sshd[1500]: Received disconnect from 10.32.4.5 port 38648:11: Closed due to user request. [preauth]
Nov 11 12:45:41 prd-ubuntu1804-docker-4c-4g-2454 sshd[1500]: Disconnected from invalid user jenkins 10.32.4.5 port 38648 [preauth]
Nov 11 12:45:43 prd-ubuntu1804-docker-4c-4g-2454 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 38650
Nov 11 12:45:43 prd-ubuntu1804-docker-4c-4g-2454 sshd[1502]: Received disconnect from 10.32.4.5 port 38650:11: Closed due to user request. [preauth]
Nov 11 12:45:43 prd-ubuntu1804-docker-4c-4g-2454 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 38650 [preauth]
Nov 11 12:45:45 prd-ubuntu1804-docker-4c-4g-2454 sshd[1515]: Invalid user jenkins from 10.32.4.5 port 38652
Nov 11 12:45:45 prd-ubuntu1804-docker-4c-4g-2454 sshd[1515]: Received disconnect from 10.32.4.5 port 38652:11: Closed due to user request. [preauth]
Nov 11 12:45:45 prd-ubuntu1804-docker-4c-4g-2454 sshd[1515]: Disconnected from invalid user jenkins 10.32.4.5 port 38652 [preauth]
Nov 11 12:45:47 prd-ubuntu1804-docker-4c-4g-2454 sshd[1727]: Invalid user jenkins from 10.32.4.5 port 38656
Nov 11 12:45:47 prd-ubuntu1804-docker-4c-4g-2454 sshd[1727]: Received disconnect from 10.32.4.5 port 38656:11: Closed due to user request. [preauth]
Nov 11 12:45:47 prd-ubuntu1804-docker-4c-4g-2454 sshd[1727]: Disconnected from invalid user jenkins 10.32.4.5 port 38656 [preauth]
Nov 11 12:45:49 prd-ubuntu1804-docker-4c-4g-2454 sshd[1773]: Invalid user jenkins from 10.32.4.5 port 38658
Nov 11 12:45:49 prd-ubuntu1804-docker-4c-4g-2454 sshd[1773]: Received disconnect from 10.32.4.5 port 38658:11: Closed due to user request. [preauth]
Nov 11 12:45:49 prd-ubuntu1804-docker-4c-4g-2454 sshd[1773]: Disconnected from invalid user jenkins 10.32.4.5 port 38658 [preauth]
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 useradd[1782]: new group: name=jenkins, GID=1001
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 useradd[1782]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 usermod[1789]: add 'jenkins' to group 'docker'
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 usermod[1789]: add 'jenkins' to shadow group 'docker'
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 sshd[1809]: Accepted publickey for jenkins from 10.32.4.5 port 38660 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 sshd[1809]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 systemd-logind[983]: New session 1 of user jenkins.
Nov 11 12:45:51 prd-ubuntu1804-docker-4c-4g-2454 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Nov 11 12:46:01 prd-ubuntu1804-docker-4c-4g-2454 CRON[2122]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 11 12:46:01 prd-ubuntu1804-docker-4c-4g-2454 CRON[2122]: pam_unix(cron:session): session closed for user root
Nov 11 12:47:01 prd-ubuntu1804-docker-4c-4g-2454 CRON[2407]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 11 12:47:01 prd-ubuntu1804-docker-4c-4g-2454 CRON[2407]: pam_unix(cron:session): session closed for user root
Nov 11 12:48:01 prd-ubuntu1804-docker-4c-4g-2454 CRON[3476]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 11 12:48:01 prd-ubuntu1804-docker-4c-4g-2454 CRON[3476]: pam_unix(cron:session): session closed for user root
Nov 11 12:48:14 prd-ubuntu1804-docker-4c-4g-2454 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-smo-o1-vth-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Nov 11 12:48:14 prd-ubuntu1804-docker-4c-4g-2454 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)