May 10 10:05:02 prd-ubuntu1804-docker-4c-4g-529 passwd[897]: password for 'ubuntu' changed by 'root' May 10 10:05:03 prd-ubuntu1804-docker-4c-4g-529 sshd[1055]: Server listening on 0.0.0.0 port 22. May 10 10:05:03 prd-ubuntu1804-docker-4c-4g-529 sshd[1055]: Server listening on :: port 22. May 10 10:05:03 prd-ubuntu1804-docker-4c-4g-529 systemd-logind[1010]: Watching system buttons on /dev/input/event0 (Power Button) May 10 10:05:03 prd-ubuntu1804-docker-4c-4g-529 systemd-logind[1010]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 10 10:05:03 prd-ubuntu1804-docker-4c-4g-529 systemd-logind[1010]: New seat seat0. May 10 10:05:05 prd-ubuntu1804-docker-4c-4g-529 sshd[1377]: Did not receive identification string from 10.32.4.5 port 40266 May 10 10:05:13 prd-ubuntu1804-docker-4c-4g-529 sshd[1446]: Invalid user jenkins from 10.32.4.5 port 40274 May 10 10:05:13 prd-ubuntu1804-docker-4c-4g-529 sshd[1446]: Received disconnect from 10.32.4.5 port 40274:11: Closed due to user request. [preauth] May 10 10:05:13 prd-ubuntu1804-docker-4c-4g-529 sshd[1446]: Disconnected from invalid user jenkins 10.32.4.5 port 40274 [preauth] May 10 10:05:15 prd-ubuntu1804-docker-4c-4g-529 sshd[1450]: Invalid user jenkins from 10.32.4.5 port 40278 May 10 10:05:15 prd-ubuntu1804-docker-4c-4g-529 sshd[1450]: Received disconnect from 10.32.4.5 port 40278:11: Closed due to user request. [preauth] May 10 10:05:15 prd-ubuntu1804-docker-4c-4g-529 sshd[1450]: Disconnected from invalid user jenkins 10.32.4.5 port 40278 [preauth] May 10 10:05:17 prd-ubuntu1804-docker-4c-4g-529 sshd[1452]: Invalid user jenkins from 10.32.4.5 port 40280 May 10 10:05:17 prd-ubuntu1804-docker-4c-4g-529 sshd[1452]: Received disconnect from 10.32.4.5 port 40280:11: Closed due to user request. [preauth] May 10 10:05:17 prd-ubuntu1804-docker-4c-4g-529 sshd[1452]: Disconnected from invalid user jenkins 10.32.4.5 port 40280 [preauth] May 10 10:05:19 prd-ubuntu1804-docker-4c-4g-529 sshd[1454]: Invalid user jenkins from 10.32.4.5 port 40282 May 10 10:05:19 prd-ubuntu1804-docker-4c-4g-529 sshd[1454]: Received disconnect from 10.32.4.5 port 40282:11: Closed due to user request. [preauth] May 10 10:05:19 prd-ubuntu1804-docker-4c-4g-529 sshd[1454]: Disconnected from invalid user jenkins 10.32.4.5 port 40282 [preauth] May 10 10:05:21 prd-ubuntu1804-docker-4c-4g-529 sshd[1456]: Invalid user jenkins from 10.32.4.5 port 40284 May 10 10:05:21 prd-ubuntu1804-docker-4c-4g-529 sshd[1456]: Received disconnect from 10.32.4.5 port 40284:11: Closed due to user request. [preauth] May 10 10:05:21 prd-ubuntu1804-docker-4c-4g-529 sshd[1456]: Disconnected from invalid user jenkins 10.32.4.5 port 40284 [preauth] May 10 10:05:23 prd-ubuntu1804-docker-4c-4g-529 sshd[1458]: Invalid user jenkins from 10.32.4.5 port 40286 May 10 10:05:23 prd-ubuntu1804-docker-4c-4g-529 sshd[1458]: Received disconnect from 10.32.4.5 port 40286:11: Closed due to user request. [preauth] May 10 10:05:23 prd-ubuntu1804-docker-4c-4g-529 sshd[1458]: Disconnected from invalid user jenkins 10.32.4.5 port 40286 [preauth] May 10 10:05:26 prd-ubuntu1804-docker-4c-4g-529 sshd[1612]: Invalid user jenkins from 10.32.4.5 port 40288 May 10 10:05:26 prd-ubuntu1804-docker-4c-4g-529 sshd[1612]: Received disconnect from 10.32.4.5 port 40288:11: Closed due to user request. [preauth] May 10 10:05:26 prd-ubuntu1804-docker-4c-4g-529 sshd[1612]: Disconnected from invalid user jenkins 10.32.4.5 port 40288 [preauth] May 10 10:05:28 prd-ubuntu1804-docker-4c-4g-529 sshd[1706]: Invalid user jenkins from 10.32.4.5 port 40290 May 10 10:05:28 prd-ubuntu1804-docker-4c-4g-529 sshd[1706]: Received disconnect from 10.32.4.5 port 40290:11: Closed due to user request. [preauth] May 10 10:05:28 prd-ubuntu1804-docker-4c-4g-529 sshd[1706]: Disconnected from invalid user jenkins 10.32.4.5 port 40290 [preauth] May 10 10:05:30 prd-ubuntu1804-docker-4c-4g-529 sshd[1743]: Invalid user jenkins from 10.32.4.5 port 40294 May 10 10:05:30 prd-ubuntu1804-docker-4c-4g-529 sshd[1743]: Received disconnect from 10.32.4.5 port 40294:11: Closed due to user request. [preauth] May 10 10:05:30 prd-ubuntu1804-docker-4c-4g-529 sshd[1743]: Disconnected from invalid user jenkins 10.32.4.5 port 40294 [preauth] May 10 10:05:32 prd-ubuntu1804-docker-4c-4g-529 sshd[1747]: Invalid user jenkins from 10.32.4.5 port 40296 May 10 10:05:32 prd-ubuntu1804-docker-4c-4g-529 sshd[1747]: Received disconnect from 10.32.4.5 port 40296:11: Closed due to user request. [preauth] May 10 10:05:32 prd-ubuntu1804-docker-4c-4g-529 sshd[1747]: Disconnected from invalid user jenkins 10.32.4.5 port 40296 [preauth] May 10 10:05:33 prd-ubuntu1804-docker-4c-4g-529 useradd[1754]: new group: name=jenkins, GID=1001 May 10 10:05:33 prd-ubuntu1804-docker-4c-4g-529 useradd[1754]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 10 10:05:33 prd-ubuntu1804-docker-4c-4g-529 usermod[1761]: add 'jenkins' to group 'docker' May 10 10:05:33 prd-ubuntu1804-docker-4c-4g-529 usermod[1761]: add 'jenkins' to shadow group 'docker' May 10 10:05:34 prd-ubuntu1804-docker-4c-4g-529 sshd[1805]: Accepted publickey for jenkins from 10.32.4.5 port 40298 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 10 10:05:34 prd-ubuntu1804-docker-4c-4g-529 sshd[1805]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 10 10:05:34 prd-ubuntu1804-docker-4c-4g-529 systemd-logind[1010]: New session 1 of user jenkins. May 10 10:05:35 prd-ubuntu1804-docker-4c-4g-529 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 10 10:06:01 prd-ubuntu1804-docker-4c-4g-529 CRON[2316]: pam_unix(cron:session): session opened for user root by (uid=0) May 10 10:06:01 prd-ubuntu1804-docker-4c-4g-529 CRON[2316]: pam_unix(cron:session): session closed for user root May 10 10:07:01 prd-ubuntu1804-docker-4c-4g-529 CRON[2377]: pam_unix(cron:session): session opened for user root by (uid=0) May 10 10:07:01 prd-ubuntu1804-docker-4c-4g-529 CRON[2377]: pam_unix(cron:session): session closed for user root May 10 10:08:01 prd-ubuntu1804-docker-4c-4g-529 CRON[2796]: pam_unix(cron:session): session opened for user root by (uid=0) May 10 10:08:02 prd-ubuntu1804-docker-4c-4g-529 CRON[2796]: pam_unix(cron:session): session closed for user root May 10 10:09:02 prd-ubuntu1804-docker-4c-4g-529 CRON[3417]: pam_unix(cron:session): session opened for user root by (uid=0) May 10 10:09:02 prd-ubuntu1804-docker-4c-4g-529 CRON[3417]: pam_unix(cron:session): session closed for user root May 10 10:10:01 prd-ubuntu1804-docker-4c-4g-529 CRON[3541]: pam_unix(cron:session): session opened for user root by (uid=0) May 10 10:10:01 prd-ubuntu1804-docker-4c-4g-529 CRON[3541]: pam_unix(cron:session): session closed for user root May 10 10:11:01 prd-ubuntu1804-docker-4c-4g-529 CRON[4721]: pam_unix(cron:session): session opened for user root by (uid=0) May 10 10:11:01 prd-ubuntu1804-docker-4c-4g-529 CRON[4721]: pam_unix(cron:session): session closed for user root May 10 10:12:01 prd-ubuntu1804-docker-4c-4g-529 CRON[6682]: pam_unix(cron:session): session opened for user root by (uid=0) May 10 10:12:01 prd-ubuntu1804-docker-4c-4g-529 CRON[6682]: pam_unix(cron:session): session closed for user root May 10 10:12:51 prd-ubuntu1804-docker-4c-4g-529 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-test-ric-benchmarking-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 10 10:12:51 prd-ubuntu1804-docker-4c-4g-529 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)