Jul 20 08:13:48 prd-ubuntu1804-docker-4c-4g-874 passwd[947]: password for 'ubuntu' changed by 'root'
Jul 20 08:13:48 prd-ubuntu1804-docker-4c-4g-874 systemd-logind[1012]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 20 08:13:48 prd-ubuntu1804-docker-4c-4g-874 systemd-logind[1012]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 20 08:13:48 prd-ubuntu1804-docker-4c-4g-874 systemd-logind[1012]: New seat seat0.
Jul 20 08:13:48 prd-ubuntu1804-docker-4c-4g-874 sshd[1242]: Server listening on 0.0.0.0 port 22.
Jul 20 08:13:48 prd-ubuntu1804-docker-4c-4g-874 sshd[1242]: Server listening on :: port 22.
Jul 20 08:13:50 prd-ubuntu1804-docker-4c-4g-874 sshd[1434]: Did not receive identification string from 10.32.4.5 port 51656
Jul 20 08:13:53 prd-ubuntu1804-docker-4c-4g-874 sshd[1475]: Invalid user jenkins from 10.32.4.5 port 51660
Jul 20 08:13:53 prd-ubuntu1804-docker-4c-4g-874 sshd[1475]: Received disconnect from 10.32.4.5 port 51660:11: Closed due to user request. [preauth]
Jul 20 08:13:53 prd-ubuntu1804-docker-4c-4g-874 sshd[1475]: Disconnected from invalid user jenkins 10.32.4.5 port 51660 [preauth]
Jul 20 08:13:55 prd-ubuntu1804-docker-4c-4g-874 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 51662
Jul 20 08:13:55 prd-ubuntu1804-docker-4c-4g-874 sshd[1491]: Received disconnect from 10.32.4.5 port 51662:11: Closed due to user request. [preauth]
Jul 20 08:13:55 prd-ubuntu1804-docker-4c-4g-874 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 51662 [preauth]
Jul 20 08:13:57 prd-ubuntu1804-docker-4c-4g-874 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 51664
Jul 20 08:13:57 prd-ubuntu1804-docker-4c-4g-874 sshd[1496]: Received disconnect from 10.32.4.5 port 51664:11: Closed due to user request. [preauth]
Jul 20 08:13:57 prd-ubuntu1804-docker-4c-4g-874 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 51664 [preauth]
Jul 20 08:13:59 prd-ubuntu1804-docker-4c-4g-874 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 51672
Jul 20 08:13:59 prd-ubuntu1804-docker-4c-4g-874 sshd[1498]: Received disconnect from 10.32.4.5 port 51672:11: Closed due to user request. [preauth]
Jul 20 08:13:59 prd-ubuntu1804-docker-4c-4g-874 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 51672 [preauth]
Jul 20 08:14:01 prd-ubuntu1804-docker-4c-4g-874 CRON[1500]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 20 08:14:01 prd-ubuntu1804-docker-4c-4g-874 CRON[1500]: pam_unix(cron:session): session closed for user root
Jul 20 08:14:01 prd-ubuntu1804-docker-4c-4g-874 sshd[1508]: Invalid user jenkins from 10.32.4.5 port 51674
Jul 20 08:14:01 prd-ubuntu1804-docker-4c-4g-874 sshd[1508]: Received disconnect from 10.32.4.5 port 51674:11: Closed due to user request. [preauth]
Jul 20 08:14:01 prd-ubuntu1804-docker-4c-4g-874 sshd[1508]: Disconnected from invalid user jenkins 10.32.4.5 port 51674 [preauth]
Jul 20 08:14:03 prd-ubuntu1804-docker-4c-4g-874 sshd[1510]: Invalid user jenkins from 10.32.4.5 port 51676
Jul 20 08:14:03 prd-ubuntu1804-docker-4c-4g-874 sshd[1510]: Received disconnect from 10.32.4.5 port 51676:11: Closed due to user request. [preauth]
Jul 20 08:14:03 prd-ubuntu1804-docker-4c-4g-874 sshd[1510]: Disconnected from invalid user jenkins 10.32.4.5 port 51676 [preauth]
Jul 20 08:14:05 prd-ubuntu1804-docker-4c-4g-874 sshd[1512]: Invalid user jenkins from 10.32.4.5 port 51678
Jul 20 08:14:06 prd-ubuntu1804-docker-4c-4g-874 sshd[1512]: Received disconnect from 10.32.4.5 port 51678:11: Closed due to user request. [preauth]
Jul 20 08:14:06 prd-ubuntu1804-docker-4c-4g-874 sshd[1512]: Disconnected from invalid user jenkins 10.32.4.5 port 51678 [preauth]
Jul 20 08:14:08 prd-ubuntu1804-docker-4c-4g-874 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 51682
Jul 20 08:14:08 prd-ubuntu1804-docker-4c-4g-874 sshd[1514]: Received disconnect from 10.32.4.5 port 51682:11: Closed due to user request. [preauth]
Jul 20 08:14:08 prd-ubuntu1804-docker-4c-4g-874 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 51682 [preauth]
Jul 20 08:14:10 prd-ubuntu1804-docker-4c-4g-874 sshd[1594]: Invalid user jenkins from 10.32.4.5 port 51684
Jul 20 08:14:10 prd-ubuntu1804-docker-4c-4g-874 sshd[1594]: Received disconnect from 10.32.4.5 port 51684:11: Closed due to user request. [preauth]
Jul 20 08:14:10 prd-ubuntu1804-docker-4c-4g-874 sshd[1594]: Disconnected from invalid user jenkins 10.32.4.5 port 51684 [preauth]
Jul 20 08:14:12 prd-ubuntu1804-docker-4c-4g-874 sshd[1758]: Invalid user jenkins from 10.32.4.5 port 51686
Jul 20 08:14:12 prd-ubuntu1804-docker-4c-4g-874 sshd[1758]: Received disconnect from 10.32.4.5 port 51686:11: Closed due to user request. [preauth]
Jul 20 08:14:12 prd-ubuntu1804-docker-4c-4g-874 sshd[1758]: Disconnected from invalid user jenkins 10.32.4.5 port 51686 [preauth]
Jul 20 08:14:15 prd-ubuntu1804-docker-4c-4g-874 sshd[1797]: Invalid user jenkins from 10.32.4.5 port 51688
Jul 20 08:14:15 prd-ubuntu1804-docker-4c-4g-874 sshd[1797]: Received disconnect from 10.32.4.5 port 51688:11: Closed due to user request. [preauth]
Jul 20 08:14:15 prd-ubuntu1804-docker-4c-4g-874 sshd[1797]: Disconnected from invalid user jenkins 10.32.4.5 port 51688 [preauth]
Jul 20 08:14:17 prd-ubuntu1804-docker-4c-4g-874 sshd[1801]: Invalid user jenkins from 10.32.4.5 port 51690
Jul 20 08:14:17 prd-ubuntu1804-docker-4c-4g-874 sshd[1801]: Received disconnect from 10.32.4.5 port 51690:11: Closed due to user request. [preauth]
Jul 20 08:14:17 prd-ubuntu1804-docker-4c-4g-874 sshd[1801]: Disconnected from invalid user jenkins 10.32.4.5 port 51690 [preauth]
Jul 20 08:14:18 prd-ubuntu1804-docker-4c-4g-874 useradd[1817]: new group: name=jenkins, GID=1001
Jul 20 08:14:18 prd-ubuntu1804-docker-4c-4g-874 useradd[1817]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Jul 20 08:14:18 prd-ubuntu1804-docker-4c-4g-874 usermod[1824]: add 'jenkins' to group 'docker'
Jul 20 08:14:18 prd-ubuntu1804-docker-4c-4g-874 usermod[1824]: add 'jenkins' to shadow group 'docker'
Jul 20 08:14:19 prd-ubuntu1804-docker-4c-4g-874 sshd[1879]: Accepted publickey for jenkins from 10.32.4.5 port 51694 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Jul 20 08:14:19 prd-ubuntu1804-docker-4c-4g-874 sshd[1879]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jul 20 08:14:19 prd-ubuntu1804-docker-4c-4g-874 systemd-logind[1012]: New session 2 of user jenkins.
Jul 20 08:14:19 prd-ubuntu1804-docker-4c-4g-874 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jul 20 08:15:01 prd-ubuntu1804-docker-4c-4g-874 CRON[2417]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 20 08:15:01 prd-ubuntu1804-docker-4c-4g-874 CRON[2417]: pam_unix(cron:session): session closed for user root
Jul 20 08:16:01 prd-ubuntu1804-docker-4c-4g-874 CRON[2464]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 20 08:16:01 prd-ubuntu1804-docker-4c-4g-874 CRON[2464]: pam_unix(cron:session): session closed for user root
Jul 20 08:17:01 prd-ubuntu1804-docker-4c-4g-874 CRON[2910]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 20 08:17:01 prd-ubuntu1804-docker-4c-4g-874 CRON[2909]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 20 08:17:01 prd-ubuntu1804-docker-4c-4g-874 CRON[2909]: pam_unix(cron:session): session closed for user root
Jul 20 08:17:02 prd-ubuntu1804-docker-4c-4g-874 CRON[2910]: pam_unix(cron:session): session closed for user root
Jul 20 08:18:01 prd-ubuntu1804-docker-4c-4g-874 CRON[4244]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 20 08:18:01 prd-ubuntu1804-docker-4c-4g-874 CRON[4244]: pam_unix(cron:session): session closed for user root
Jul 20 08:19:01 prd-ubuntu1804-docker-4c-4g-874 CRON[6305]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 20 08:19:01 prd-ubuntu1804-docker-4c-4g-874 CRON[6305]: pam_unix(cron:session): session closed for user root
Jul 20 08:19:49 prd-ubuntu1804-docker-4c-4g-874 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/ric-app-rc-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Jul 20 08:19:49 prd-ubuntu1804-docker-4c-4g-874 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)