May 19 01:07:45 prd-ubuntu1804-docker-4c-4g-1238 passwd[943]: password for 'ubuntu' changed by 'root' May 19 01:07:45 prd-ubuntu1804-docker-4c-4g-1238 systemd-logind[1007]: Watching system buttons on /dev/input/event0 (Power Button) May 19 01:07:45 prd-ubuntu1804-docker-4c-4g-1238 systemd-logind[1007]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 19 01:07:45 prd-ubuntu1804-docker-4c-4g-1238 systemd-logind[1007]: New seat seat0. May 19 01:07:45 prd-ubuntu1804-docker-4c-4g-1238 sshd[1232]: Server listening on 0.0.0.0 port 22. May 19 01:07:45 prd-ubuntu1804-docker-4c-4g-1238 sshd[1232]: Server listening on :: port 22. May 19 01:07:48 prd-ubuntu1804-docker-4c-4g-1238 sshd[1454]: Did not receive identification string from 10.32.4.5 port 54870 May 19 01:07:52 prd-ubuntu1804-docker-4c-4g-1238 sshd[1509]: Invalid user jenkins from 10.32.4.5 port 54872 May 19 01:07:53 prd-ubuntu1804-docker-4c-4g-1238 sshd[1509]: Received disconnect from 10.32.4.5 port 54872:11: Closed due to user request. [preauth] May 19 01:07:53 prd-ubuntu1804-docker-4c-4g-1238 sshd[1509]: Disconnected from invalid user jenkins 10.32.4.5 port 54872 [preauth] May 19 01:07:55 prd-ubuntu1804-docker-4c-4g-1238 sshd[1516]: Invalid user jenkins from 10.32.4.5 port 54874 May 19 01:07:55 prd-ubuntu1804-docker-4c-4g-1238 sshd[1516]: Received disconnect from 10.32.4.5 port 54874:11: Closed due to user request. [preauth] May 19 01:07:55 prd-ubuntu1804-docker-4c-4g-1238 sshd[1516]: Disconnected from invalid user jenkins 10.32.4.5 port 54874 [preauth] May 19 01:07:57 prd-ubuntu1804-docker-4c-4g-1238 sshd[1518]: Invalid user jenkins from 10.32.4.5 port 54876 May 19 01:07:57 prd-ubuntu1804-docker-4c-4g-1238 sshd[1518]: Received disconnect from 10.32.4.5 port 54876:11: Closed due to user request. [preauth] May 19 01:07:57 prd-ubuntu1804-docker-4c-4g-1238 sshd[1518]: Disconnected from invalid user jenkins 10.32.4.5 port 54876 [preauth] May 19 01:07:59 prd-ubuntu1804-docker-4c-4g-1238 sshd[1520]: Invalid user jenkins from 10.32.4.5 port 54878 May 19 01:07:59 prd-ubuntu1804-docker-4c-4g-1238 sshd[1520]: Received disconnect from 10.32.4.5 port 54878:11: Closed due to user request. [preauth] May 19 01:07:59 prd-ubuntu1804-docker-4c-4g-1238 sshd[1520]: Disconnected from invalid user jenkins 10.32.4.5 port 54878 [preauth] May 19 01:08:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[1522]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:08:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[1522]: pam_unix(cron:session): session closed for user root May 19 01:08:01 prd-ubuntu1804-docker-4c-4g-1238 sshd[1530]: Invalid user jenkins from 10.32.4.5 port 54882 May 19 01:08:01 prd-ubuntu1804-docker-4c-4g-1238 sshd[1530]: Received disconnect from 10.32.4.5 port 54882:11: Closed due to user request. [preauth] May 19 01:08:01 prd-ubuntu1804-docker-4c-4g-1238 sshd[1530]: Disconnected from invalid user jenkins 10.32.4.5 port 54882 [preauth] May 19 01:08:03 prd-ubuntu1804-docker-4c-4g-1238 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 54884 May 19 01:08:03 prd-ubuntu1804-docker-4c-4g-1238 sshd[1532]: Received disconnect from 10.32.4.5 port 54884:11: Closed due to user request. [preauth] May 19 01:08:03 prd-ubuntu1804-docker-4c-4g-1238 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 54884 [preauth] May 19 01:08:05 prd-ubuntu1804-docker-4c-4g-1238 sshd[1534]: Invalid user jenkins from 10.32.4.5 port 54886 May 19 01:08:05 prd-ubuntu1804-docker-4c-4g-1238 sshd[1534]: Received disconnect from 10.32.4.5 port 54886:11: Closed due to user request. [preauth] May 19 01:08:05 prd-ubuntu1804-docker-4c-4g-1238 sshd[1534]: Disconnected from invalid user jenkins 10.32.4.5 port 54886 [preauth] May 19 01:08:07 prd-ubuntu1804-docker-4c-4g-1238 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 54888 May 19 01:08:07 prd-ubuntu1804-docker-4c-4g-1238 sshd[1572]: Received disconnect from 10.32.4.5 port 54888:11: Closed due to user request. [preauth] May 19 01:08:07 prd-ubuntu1804-docker-4c-4g-1238 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 54888 [preauth] May 19 01:08:10 prd-ubuntu1804-docker-4c-4g-1238 sshd[1771]: Invalid user jenkins from 10.32.4.5 port 54896 May 19 01:08:10 prd-ubuntu1804-docker-4c-4g-1238 sshd[1771]: Received disconnect from 10.32.4.5 port 54896:11: Closed due to user request. [preauth] May 19 01:08:10 prd-ubuntu1804-docker-4c-4g-1238 sshd[1771]: Disconnected from invalid user jenkins 10.32.4.5 port 54896 [preauth] May 19 01:08:12 prd-ubuntu1804-docker-4c-4g-1238 sshd[1811]: Invalid user jenkins from 10.32.4.5 port 54898 May 19 01:08:12 prd-ubuntu1804-docker-4c-4g-1238 sshd[1811]: Received disconnect from 10.32.4.5 port 54898:11: Closed due to user request. [preauth] May 19 01:08:12 prd-ubuntu1804-docker-4c-4g-1238 sshd[1811]: Disconnected from invalid user jenkins 10.32.4.5 port 54898 [preauth] May 19 01:08:14 prd-ubuntu1804-docker-4c-4g-1238 sshd[1815]: Invalid user jenkins from 10.32.4.5 port 54900 May 19 01:08:14 prd-ubuntu1804-docker-4c-4g-1238 sshd[1815]: Received disconnect from 10.32.4.5 port 54900:11: Closed due to user request. [preauth] May 19 01:08:14 prd-ubuntu1804-docker-4c-4g-1238 sshd[1815]: Disconnected from invalid user jenkins 10.32.4.5 port 54900 [preauth] May 19 01:08:15 prd-ubuntu1804-docker-4c-4g-1238 useradd[1822]: new group: name=jenkins, GID=1001 May 19 01:08:15 prd-ubuntu1804-docker-4c-4g-1238 useradd[1822]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 19 01:08:16 prd-ubuntu1804-docker-4c-4g-1238 usermod[1829]: add 'jenkins' to group 'docker' May 19 01:08:16 prd-ubuntu1804-docker-4c-4g-1238 usermod[1829]: add 'jenkins' to shadow group 'docker' May 19 01:08:16 prd-ubuntu1804-docker-4c-4g-1238 sshd[1863]: Accepted publickey for jenkins from 10.32.4.5 port 54904 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 19 01:08:16 prd-ubuntu1804-docker-4c-4g-1238 sshd[1863]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 19 01:08:16 prd-ubuntu1804-docker-4c-4g-1238 systemd-logind[1007]: New session 2 of user jenkins. May 19 01:08:17 prd-ubuntu1804-docker-4c-4g-1238 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 19 01:09:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[2411]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:09:02 prd-ubuntu1804-docker-4c-4g-1238 CRON[2411]: pam_unix(cron:session): session closed for user root May 19 01:10:02 prd-ubuntu1804-docker-4c-4g-1238 CRON[2465]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:10:02 prd-ubuntu1804-docker-4c-4g-1238 CRON[2465]: pam_unix(cron:session): session closed for user root May 19 01:11:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3158]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:11:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3158]: pam_unix(cron:session): session closed for user root May 19 01:12:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3195]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:12:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3195]: pam_unix(cron:session): session closed for user root May 19 01:13:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3446]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:13:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3446]: pam_unix(cron:session): session closed for user root May 19 01:14:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3452]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:14:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3452]: pam_unix(cron:session): session closed for user root May 19 01:15:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3610]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:15:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3610]: pam_unix(cron:session): session closed for user root May 19 01:16:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3614]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:16:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3614]: pam_unix(cron:session): session closed for user root May 19 01:17:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3684]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:17:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3685]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:17:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3684]: pam_unix(cron:session): session closed for user root May 19 01:17:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3685]: pam_unix(cron:session): session closed for user root May 19 01:18:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3916]: pam_unix(cron:session): session opened for user root by (uid=0) May 19 01:18:01 prd-ubuntu1804-docker-4c-4g-1238 CRON[3916]: pam_unix(cron:session): session closed for user root May 19 01:18:30 prd-ubuntu1804-docker-4c-4g-1238 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/portal-nonrtric-controlpanel-docker-merge-g-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 19 01:18:30 prd-ubuntu1804-docker-4c-4g-1238 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)