May 8 15:28:50 prd-ubuntu1804-docker-4c-4g-346 passwd[951]: password for 'ubuntu' changed by 'root' May 8 15:28:50 prd-ubuntu1804-docker-4c-4g-346 systemd-logind[989]: Watching system buttons on /dev/input/event0 (Power Button) May 8 15:28:50 prd-ubuntu1804-docker-4c-4g-346 systemd-logind[989]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 8 15:28:50 prd-ubuntu1804-docker-4c-4g-346 systemd-logind[989]: New seat seat0. May 8 15:28:50 prd-ubuntu1804-docker-4c-4g-346 sshd[1200]: Server listening on 0.0.0.0 port 22. May 8 15:28:50 prd-ubuntu1804-docker-4c-4g-346 sshd[1200]: Server listening on :: port 22. May 8 15:28:52 prd-ubuntu1804-docker-4c-4g-346 sshd[1346]: Did not receive identification string from 10.32.4.5 port 34256 May 8 15:28:54 prd-ubuntu1804-docker-4c-4g-346 sshd[1470]: Invalid user jenkins from 10.32.4.5 port 34258 May 8 15:28:54 prd-ubuntu1804-docker-4c-4g-346 sshd[1470]: Received disconnect from 10.32.4.5 port 34258:11: Closed due to user request. [preauth] May 8 15:28:54 prd-ubuntu1804-docker-4c-4g-346 sshd[1470]: Disconnected from invalid user jenkins 10.32.4.5 port 34258 [preauth] May 8 15:28:56 prd-ubuntu1804-docker-4c-4g-346 sshd[1510]: Invalid user jenkins from 10.32.4.5 port 34260 May 8 15:28:56 prd-ubuntu1804-docker-4c-4g-346 sshd[1510]: Received disconnect from 10.32.4.5 port 34260:11: Closed due to user request. [preauth] May 8 15:28:56 prd-ubuntu1804-docker-4c-4g-346 sshd[1510]: Disconnected from invalid user jenkins 10.32.4.5 port 34260 [preauth] May 8 15:28:58 prd-ubuntu1804-docker-4c-4g-346 sshd[1527]: Invalid user jenkins from 10.32.4.5 port 34262 May 8 15:28:58 prd-ubuntu1804-docker-4c-4g-346 sshd[1527]: Received disconnect from 10.32.4.5 port 34262:11: Closed due to user request. [preauth] May 8 15:28:58 prd-ubuntu1804-docker-4c-4g-346 sshd[1527]: Disconnected from invalid user jenkins 10.32.4.5 port 34262 [preauth] May 8 15:29:00 prd-ubuntu1804-docker-4c-4g-346 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 34264 May 8 15:29:00 prd-ubuntu1804-docker-4c-4g-346 sshd[1532]: Received disconnect from 10.32.4.5 port 34264:11: Closed due to user request. [preauth] May 8 15:29:00 prd-ubuntu1804-docker-4c-4g-346 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 34264 [preauth] May 8 15:29:01 prd-ubuntu1804-docker-4c-4g-346 CRON[1535]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 15:29:01 prd-ubuntu1804-docker-4c-4g-346 CRON[1535]: pam_unix(cron:session): session closed for user root May 8 15:29:02 prd-ubuntu1804-docker-4c-4g-346 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 34268 May 8 15:29:02 prd-ubuntu1804-docker-4c-4g-346 sshd[1542]: Received disconnect from 10.32.4.5 port 34268:11: Closed due to user request. [preauth] May 8 15:29:02 prd-ubuntu1804-docker-4c-4g-346 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 34268 [preauth] May 8 15:29:04 prd-ubuntu1804-docker-4c-4g-346 sshd[1544]: Invalid user jenkins from 10.32.4.5 port 34270 May 8 15:29:04 prd-ubuntu1804-docker-4c-4g-346 sshd[1544]: Received disconnect from 10.32.4.5 port 34270:11: Closed due to user request. [preauth] May 8 15:29:04 prd-ubuntu1804-docker-4c-4g-346 sshd[1544]: Disconnected from invalid user jenkins 10.32.4.5 port 34270 [preauth] May 8 15:29:06 prd-ubuntu1804-docker-4c-4g-346 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 34272 May 8 15:29:06 prd-ubuntu1804-docker-4c-4g-346 sshd[1546]: Received disconnect from 10.32.4.5 port 34272:11: Closed due to user request. [preauth] May 8 15:29:06 prd-ubuntu1804-docker-4c-4g-346 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 34272 [preauth] May 8 15:29:08 prd-ubuntu1804-docker-4c-4g-346 sshd[1548]: Invalid user jenkins from 10.32.4.5 port 34274 May 8 15:29:08 prd-ubuntu1804-docker-4c-4g-346 sshd[1548]: Received disconnect from 10.32.4.5 port 34274:11: Closed due to user request. [preauth] May 8 15:29:08 prd-ubuntu1804-docker-4c-4g-346 sshd[1548]: Disconnected from invalid user jenkins 10.32.4.5 port 34274 [preauth] May 8 15:29:11 prd-ubuntu1804-docker-4c-4g-346 sshd[1550]: Invalid user jenkins from 10.32.4.5 port 34284 May 8 15:29:11 prd-ubuntu1804-docker-4c-4g-346 sshd[1550]: Received disconnect from 10.32.4.5 port 34284:11: Closed due to user request. [preauth] May 8 15:29:11 prd-ubuntu1804-docker-4c-4g-346 sshd[1550]: Disconnected from invalid user jenkins 10.32.4.5 port 34284 [preauth] May 8 15:29:13 prd-ubuntu1804-docker-4c-4g-346 sshd[1624]: Invalid user jenkins from 10.32.4.5 port 34286 May 8 15:29:13 prd-ubuntu1804-docker-4c-4g-346 sshd[1624]: Received disconnect from 10.32.4.5 port 34286:11: Closed due to user request. [preauth] May 8 15:29:13 prd-ubuntu1804-docker-4c-4g-346 sshd[1624]: Disconnected from invalid user jenkins 10.32.4.5 port 34286 [preauth] May 8 15:29:15 prd-ubuntu1804-docker-4c-4g-346 sshd[1792]: Invalid user jenkins from 10.32.4.5 port 34288 May 8 15:29:15 prd-ubuntu1804-docker-4c-4g-346 sshd[1792]: Received disconnect from 10.32.4.5 port 34288:11: Closed due to user request. [preauth] May 8 15:29:15 prd-ubuntu1804-docker-4c-4g-346 sshd[1792]: Disconnected from invalid user jenkins 10.32.4.5 port 34288 [preauth] May 8 15:29:17 prd-ubuntu1804-docker-4c-4g-346 sshd[1831]: Invalid user jenkins from 10.32.4.5 port 34292 May 8 15:29:17 prd-ubuntu1804-docker-4c-4g-346 sshd[1831]: Received disconnect from 10.32.4.5 port 34292:11: Closed due to user request. [preauth] May 8 15:29:17 prd-ubuntu1804-docker-4c-4g-346 sshd[1831]: Disconnected from invalid user jenkins 10.32.4.5 port 34292 [preauth] May 8 15:29:19 prd-ubuntu1804-docker-4c-4g-346 sshd[1835]: Invalid user jenkins from 10.32.4.5 port 34294 May 8 15:29:19 prd-ubuntu1804-docker-4c-4g-346 sshd[1835]: Received disconnect from 10.32.4.5 port 34294:11: Closed due to user request. [preauth] May 8 15:29:19 prd-ubuntu1804-docker-4c-4g-346 sshd[1835]: Disconnected from invalid user jenkins 10.32.4.5 port 34294 [preauth] May 8 15:29:20 prd-ubuntu1804-docker-4c-4g-346 useradd[1842]: new group: name=jenkins, GID=1001 May 8 15:29:20 prd-ubuntu1804-docker-4c-4g-346 useradd[1842]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 8 15:29:20 prd-ubuntu1804-docker-4c-4g-346 usermod[1849]: add 'jenkins' to group 'docker' May 8 15:29:20 prd-ubuntu1804-docker-4c-4g-346 usermod[1849]: add 'jenkins' to shadow group 'docker' May 8 15:29:21 prd-ubuntu1804-docker-4c-4g-346 sshd[1892]: Accepted publickey for jenkins from 10.32.4.5 port 34296 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 8 15:29:21 prd-ubuntu1804-docker-4c-4g-346 sshd[1892]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 8 15:29:21 prd-ubuntu1804-docker-4c-4g-346 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 8 15:29:21 prd-ubuntu1804-docker-4c-4g-346 systemd-logind[989]: New session 2 of user jenkins. May 8 15:30:01 prd-ubuntu1804-docker-4c-4g-346 CRON[2412]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 15:30:01 prd-ubuntu1804-docker-4c-4g-346 CRON[2412]: pam_unix(cron:session): session closed for user root May 8 15:31:01 prd-ubuntu1804-docker-4c-4g-346 CRON[2450]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 15:31:01 prd-ubuntu1804-docker-4c-4g-346 CRON[2450]: pam_unix(cron:session): session closed for user root May 8 15:32:01 prd-ubuntu1804-docker-4c-4g-346 CRON[3468]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 15:32:01 prd-ubuntu1804-docker-4c-4g-346 CRON[3468]: pam_unix(cron:session): session closed for user root May 8 15:33:01 prd-ubuntu1804-docker-4c-4g-346 CRON[4628]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 15:33:01 prd-ubuntu1804-docker-4c-4g-346 CRON[4628]: pam_unix(cron:session): session closed for user root May 8 15:33:24 prd-ubuntu1804-docker-4c-4g-346 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-test-nanobot-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 8 15:33:24 prd-ubuntu1804-docker-4c-4g-346 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)