Feb 12 10:13:25 prd-ubuntu1804-docker-4c-4g-6327 passwd[925]: password for 'ubuntu' changed by 'root'
Feb 12 10:13:25 prd-ubuntu1804-docker-4c-4g-6327 systemd-logind[978]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 12 10:13:25 prd-ubuntu1804-docker-4c-4g-6327 systemd-logind[978]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 12 10:13:25 prd-ubuntu1804-docker-4c-4g-6327 systemd-logind[978]: New seat seat0.
Feb 12 10:13:25 prd-ubuntu1804-docker-4c-4g-6327 sshd[1199]: Server listening on 0.0.0.0 port 22.
Feb 12 10:13:25 prd-ubuntu1804-docker-4c-4g-6327 sshd[1199]: Server listening on :: port 22.
Feb 12 10:13:26 prd-ubuntu1804-docker-4c-4g-6327 sshd[1210]: Did not receive identification string from 10.32.4.5 port 50206
Feb 12 10:13:32 prd-ubuntu1804-docker-4c-4g-6327 sshd[1440]: Invalid user jenkins from 10.32.4.5 port 50238
Feb 12 10:13:32 prd-ubuntu1804-docker-4c-4g-6327 sshd[1440]: Received disconnect from 10.32.4.5 port 50238:11: Closed due to user request. [preauth]
Feb 12 10:13:32 prd-ubuntu1804-docker-4c-4g-6327 sshd[1440]: Disconnected from invalid user jenkins 10.32.4.5 port 50238 [preauth]
Feb 12 10:13:34 prd-ubuntu1804-docker-4c-4g-6327 sshd[1449]: Invalid user jenkins from 10.32.4.5 port 50246
Feb 12 10:13:34 prd-ubuntu1804-docker-4c-4g-6327 sshd[1449]: Received disconnect from 10.32.4.5 port 50246:11: Closed due to user request. [preauth]
Feb 12 10:13:34 prd-ubuntu1804-docker-4c-4g-6327 sshd[1449]: Disconnected from invalid user jenkins 10.32.4.5 port 50246 [preauth]
Feb 12 10:13:36 prd-ubuntu1804-docker-4c-4g-6327 sshd[1451]: Invalid user jenkins from 10.32.4.5 port 50254
Feb 12 10:13:36 prd-ubuntu1804-docker-4c-4g-6327 sshd[1451]: Received disconnect from 10.32.4.5 port 50254:11: Closed due to user request. [preauth]
Feb 12 10:13:36 prd-ubuntu1804-docker-4c-4g-6327 sshd[1451]: Disconnected from invalid user jenkins 10.32.4.5 port 50254 [preauth]
Feb 12 10:13:38 prd-ubuntu1804-docker-4c-4g-6327 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 50270
Feb 12 10:13:38 prd-ubuntu1804-docker-4c-4g-6327 sshd[1453]: Received disconnect from 10.32.4.5 port 50270:11: Closed due to user request. [preauth]
Feb 12 10:13:38 prd-ubuntu1804-docker-4c-4g-6327 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 50270 [preauth]
Feb 12 10:13:41 prd-ubuntu1804-docker-4c-4g-6327 sshd[1455]: Invalid user jenkins from 10.32.4.5 port 50278
Feb 12 10:13:41 prd-ubuntu1804-docker-4c-4g-6327 sshd[1455]: Received disconnect from 10.32.4.5 port 50278:11: Closed due to user request. [preauth]
Feb 12 10:13:41 prd-ubuntu1804-docker-4c-4g-6327 sshd[1455]: Disconnected from invalid user jenkins 10.32.4.5 port 50278 [preauth]
Feb 12 10:13:43 prd-ubuntu1804-docker-4c-4g-6327 sshd[1457]: Invalid user jenkins from 10.32.4.5 port 50286
Feb 12 10:13:43 prd-ubuntu1804-docker-4c-4g-6327 sshd[1457]: Received disconnect from 10.32.4.5 port 50286:11: Closed due to user request. [preauth]
Feb 12 10:13:43 prd-ubuntu1804-docker-4c-4g-6327 sshd[1457]: Disconnected from invalid user jenkins 10.32.4.5 port 50286 [preauth]
Feb 12 10:13:45 prd-ubuntu1804-docker-4c-4g-6327 sshd[1459]: Invalid user jenkins from 10.32.4.5 port 50298
Feb 12 10:13:45 prd-ubuntu1804-docker-4c-4g-6327 sshd[1459]: Received disconnect from 10.32.4.5 port 50298:11: Closed due to user request. [preauth]
Feb 12 10:13:45 prd-ubuntu1804-docker-4c-4g-6327 sshd[1459]: Disconnected from invalid user jenkins 10.32.4.5 port 50298 [preauth]
Feb 12 10:13:47 prd-ubuntu1804-docker-4c-4g-6327 sshd[1476]: Invalid user jenkins from 10.32.4.5 port 50302
Feb 12 10:13:47 prd-ubuntu1804-docker-4c-4g-6327 sshd[1476]: Received disconnect from 10.32.4.5 port 50302:11: Closed due to user request. [preauth]
Feb 12 10:13:47 prd-ubuntu1804-docker-4c-4g-6327 sshd[1476]: Disconnected from invalid user jenkins 10.32.4.5 port 50302 [preauth]
Feb 12 10:13:49 prd-ubuntu1804-docker-4c-4g-6327 sshd[1690]: Invalid user jenkins from 10.32.4.5 port 50306
Feb 12 10:13:49 prd-ubuntu1804-docker-4c-4g-6327 sshd[1690]: Received disconnect from 10.32.4.5 port 50306:11: Closed due to user request. [preauth]
Feb 12 10:13:49 prd-ubuntu1804-docker-4c-4g-6327 sshd[1690]: Disconnected from invalid user jenkins 10.32.4.5 port 50306 [preauth]
Feb 12 10:13:51 prd-ubuntu1804-docker-4c-4g-6327 sshd[1716]: Invalid user jenkins from 10.32.4.5 port 50326
Feb 12 10:13:51 prd-ubuntu1804-docker-4c-4g-6327 sshd[1716]: Received disconnect from 10.32.4.5 port 50326:11: Closed due to user request. [preauth]
Feb 12 10:13:51 prd-ubuntu1804-docker-4c-4g-6327 sshd[1716]: Disconnected from invalid user jenkins 10.32.4.5 port 50326 [preauth]
Feb 12 10:13:53 prd-ubuntu1804-docker-4c-4g-6327 sshd[1734]: Invalid user jenkins from 10.32.4.5 port 50334
Feb 12 10:13:53 prd-ubuntu1804-docker-4c-4g-6327 sshd[1734]: Received disconnect from 10.32.4.5 port 50334:11: Closed due to user request. [preauth]
Feb 12 10:13:53 prd-ubuntu1804-docker-4c-4g-6327 sshd[1734]: Disconnected from invalid user jenkins 10.32.4.5 port 50334 [preauth]
Feb 12 10:13:55 prd-ubuntu1804-docker-4c-4g-6327 sshd[1738]: Invalid user jenkins from 10.32.4.5 port 50344
Feb 12 10:13:56 prd-ubuntu1804-docker-4c-4g-6327 sshd[1738]: Received disconnect from 10.32.4.5 port 50344:11: Closed due to user request. [preauth]
Feb 12 10:13:56 prd-ubuntu1804-docker-4c-4g-6327 sshd[1738]: Disconnected from invalid user jenkins 10.32.4.5 port 50344 [preauth]
Feb 12 10:13:57 prd-ubuntu1804-docker-4c-4g-6327 useradd[1763]: new group: name=jenkins, GID=1001
Feb 12 10:13:57 prd-ubuntu1804-docker-4c-4g-6327 useradd[1763]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Feb 12 10:13:57 prd-ubuntu1804-docker-4c-4g-6327 usermod[1783]: add 'jenkins' to group 'docker'
Feb 12 10:13:57 prd-ubuntu1804-docker-4c-4g-6327 usermod[1783]: add 'jenkins' to shadow group 'docker'
Feb 12 10:13:58 prd-ubuntu1804-docker-4c-4g-6327 sshd[1817]: Accepted publickey for jenkins from 10.32.4.5 port 50360 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Feb 12 10:13:58 prd-ubuntu1804-docker-4c-4g-6327 sshd[1817]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 12 10:13:58 prd-ubuntu1804-docker-4c-4g-6327 systemd-logind[978]: New session 1 of user jenkins.
Feb 12 10:13:58 prd-ubuntu1804-docker-4c-4g-6327 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 12 10:14:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[2004]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:14:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[2004]: pam_unix(cron:session): session closed for user root
Feb 12 10:15:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[2356]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:15:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[2356]: pam_unix(cron:session): session closed for user root
Feb 12 10:16:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[2808]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:16:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[2808]: pam_unix(cron:session): session closed for user root
Feb 12 10:17:02 prd-ubuntu1804-docker-4c-4g-6327 CRON[3084]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:17:02 prd-ubuntu1804-docker-4c-4g-6327 CRON[3085]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:17:02 prd-ubuntu1804-docker-4c-4g-6327 CRON[3084]: pam_unix(cron:session): session closed for user root
Feb 12 10:17:02 prd-ubuntu1804-docker-4c-4g-6327 CRON[3085]: pam_unix(cron:session): session closed for user root
Feb 12 10:18:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3358]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:18:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3358]: pam_unix(cron:session): session closed for user root
Feb 12 10:19:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3364]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:19:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3364]: pam_unix(cron:session): session closed for user root
Feb 12 10:20:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3433]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:20:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3433]: pam_unix(cron:session): session closed for user root
Feb 12 10:21:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3524]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:21:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3524]: pam_unix(cron:session): session closed for user root
Feb 12 10:22:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3552]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:22:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3552]: pam_unix(cron:session): session closed for user root
Feb 12 10:23:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3600]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:23:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3600]: pam_unix(cron:session): session closed for user root
Feb 12 10:24:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3829]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 12 10:24:01 prd-ubuntu1804-docker-4c-4g-6327 CRON[3829]: pam_unix(cron:session): session closed for user root
Feb 12 10:24:25 prd-ubuntu1804-docker-4c-4g-6327 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/portal-nonrtric-controlpanel-docker-merge-h-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Feb 12 10:24:25 prd-ubuntu1804-docker-4c-4g-6327 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)