Aug 14 06:02:44 prd-ubuntu1804-docker-4c-4g-941 passwd[920]: password for 'ubuntu' changed by 'root'
Aug 14 06:02:44 prd-ubuntu1804-docker-4c-4g-941 systemd-logind[1033]: Watching system buttons on /dev/input/event0 (Power Button)
Aug 14 06:02:44 prd-ubuntu1804-docker-4c-4g-941 systemd-logind[1033]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Aug 14 06:02:44 prd-ubuntu1804-docker-4c-4g-941 systemd-logind[1033]: New seat seat0.
Aug 14 06:02:44 prd-ubuntu1804-docker-4c-4g-941 sshd[1261]: Server listening on 0.0.0.0 port 22.
Aug 14 06:02:44 prd-ubuntu1804-docker-4c-4g-941 sshd[1261]: Server listening on :: port 22.
Aug 14 06:02:49 prd-ubuntu1804-docker-4c-4g-941 sshd[1498]: Did not receive identification string from 10.32.4.5 port 34552
Aug 14 06:02:56 prd-ubuntu1804-docker-4c-4g-941 sshd[1533]: Invalid user jenkins from 10.32.4.5 port 34556
Aug 14 06:02:56 prd-ubuntu1804-docker-4c-4g-941 sshd[1533]: Received disconnect from 10.32.4.5 port 34556:11: Closed due to user request. [preauth]
Aug 14 06:02:56 prd-ubuntu1804-docker-4c-4g-941 sshd[1533]: Disconnected from invalid user jenkins 10.32.4.5 port 34556 [preauth]
Aug 14 06:02:58 prd-ubuntu1804-docker-4c-4g-941 sshd[1537]: Invalid user jenkins from 10.32.4.5 port 34558
Aug 14 06:02:58 prd-ubuntu1804-docker-4c-4g-941 sshd[1537]: Received disconnect from 10.32.4.5 port 34558:11: Closed due to user request. [preauth]
Aug 14 06:02:58 prd-ubuntu1804-docker-4c-4g-941 sshd[1537]: Disconnected from invalid user jenkins 10.32.4.5 port 34558 [preauth]
Aug 14 06:03:00 prd-ubuntu1804-docker-4c-4g-941 sshd[1539]: Invalid user jenkins from 10.32.4.5 port 34566
Aug 14 06:03:00 prd-ubuntu1804-docker-4c-4g-941 sshd[1539]: Received disconnect from 10.32.4.5 port 34566:11: Closed due to user request. [preauth]
Aug 14 06:03:00 prd-ubuntu1804-docker-4c-4g-941 sshd[1539]: Disconnected from invalid user jenkins 10.32.4.5 port 34566 [preauth]
Aug 14 06:03:01 prd-ubuntu1804-docker-4c-4g-941 CRON[1542]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 06:03:01 prd-ubuntu1804-docker-4c-4g-941 CRON[1542]: pam_unix(cron:session): session closed for user root
Aug 14 06:03:02 prd-ubuntu1804-docker-4c-4g-941 sshd[1547]: Invalid user jenkins from 10.32.4.5 port 34568
Aug 14 06:03:02 prd-ubuntu1804-docker-4c-4g-941 sshd[1547]: Received disconnect from 10.32.4.5 port 34568:11: Closed due to user request. [preauth]
Aug 14 06:03:02 prd-ubuntu1804-docker-4c-4g-941 sshd[1547]: Disconnected from invalid user jenkins 10.32.4.5 port 34568 [preauth]
Aug 14 06:03:04 prd-ubuntu1804-docker-4c-4g-941 sshd[1549]: Invalid user jenkins from 10.32.4.5 port 34570
Aug 14 06:03:04 prd-ubuntu1804-docker-4c-4g-941 sshd[1549]: Received disconnect from 10.32.4.5 port 34570:11: Closed due to user request. [preauth]
Aug 14 06:03:04 prd-ubuntu1804-docker-4c-4g-941 sshd[1549]: Disconnected from invalid user jenkins 10.32.4.5 port 34570 [preauth]
Aug 14 06:03:06 prd-ubuntu1804-docker-4c-4g-941 sshd[1560]: Invalid user jenkins from 10.32.4.5 port 34580
Aug 14 06:03:06 prd-ubuntu1804-docker-4c-4g-941 sshd[1560]: Received disconnect from 10.32.4.5 port 34580:11: Closed due to user request. [preauth]
Aug 14 06:03:06 prd-ubuntu1804-docker-4c-4g-941 sshd[1560]: Disconnected from invalid user jenkins 10.32.4.5 port 34580 [preauth]
Aug 14 06:03:09 prd-ubuntu1804-docker-4c-4g-941 sshd[1783]: Invalid user jenkins from 10.32.4.5 port 34588
Aug 14 06:03:09 prd-ubuntu1804-docker-4c-4g-941 sshd[1783]: Received disconnect from 10.32.4.5 port 34588:11: Closed due to user request. [preauth]
Aug 14 06:03:09 prd-ubuntu1804-docker-4c-4g-941 sshd[1783]: Disconnected from invalid user jenkins 10.32.4.5 port 34588 [preauth]
Aug 14 06:03:11 prd-ubuntu1804-docker-4c-4g-941 sshd[1822]: Invalid user jenkins from 10.32.4.5 port 34594
Aug 14 06:03:11 prd-ubuntu1804-docker-4c-4g-941 sshd[1822]: Received disconnect from 10.32.4.5 port 34594:11: Closed due to user request. [preauth]
Aug 14 06:03:11 prd-ubuntu1804-docker-4c-4g-941 sshd[1822]: Disconnected from invalid user jenkins 10.32.4.5 port 34594 [preauth]
Aug 14 06:03:13 prd-ubuntu1804-docker-4c-4g-941 sshd[1828]: Invalid user jenkins from 10.32.4.5 port 34598
Aug 14 06:03:13 prd-ubuntu1804-docker-4c-4g-941 sshd[1828]: Received disconnect from 10.32.4.5 port 34598:11: Closed due to user request. [preauth]
Aug 14 06:03:13 prd-ubuntu1804-docker-4c-4g-941 sshd[1828]: Disconnected from invalid user jenkins 10.32.4.5 port 34598 [preauth]
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 useradd[1844]: new group: name=jenkins, GID=1001
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 useradd[1844]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 usermod[1851]: add 'jenkins' to group 'docker'
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 usermod[1851]: add 'jenkins' to shadow group 'docker'
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 sshd[1862]: Accepted publickey for jenkins from 10.32.4.5 port 34604 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 sshd[1862]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 systemd-logind[1033]: New session 2 of user jenkins.
Aug 14 06:03:15 prd-ubuntu1804-docker-4c-4g-941 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Aug 14 06:04:01 prd-ubuntu1804-docker-4c-4g-941 CRON[2440]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 06:04:01 prd-ubuntu1804-docker-4c-4g-941 CRON[2440]: pam_unix(cron:session): session closed for user root
Aug 14 06:05:01 prd-ubuntu1804-docker-4c-4g-941 CRON[2479]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 06:05:01 prd-ubuntu1804-docker-4c-4g-941 CRON[2479]: pam_unix(cron:session): session closed for user root
Aug 14 06:06:01 prd-ubuntu1804-docker-4c-4g-941 CRON[3447]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 06:06:01 prd-ubuntu1804-docker-4c-4g-941 CRON[3447]: pam_unix(cron:session): session closed for user root
Aug 14 06:06:14 prd-ubuntu1804-docker-4c-4g-941 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/it-test-ric-robot-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Aug 14 06:06:14 prd-ubuntu1804-docker-4c-4g-941 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)