May 5 11:31:47 prd-ubuntu1804-docker-4c-4g-351 passwd[938]: password for 'ubuntu' changed by 'root' May 5 11:31:47 prd-ubuntu1804-docker-4c-4g-351 systemd-logind[1026]: Watching system buttons on /dev/input/event0 (Power Button) May 5 11:31:47 prd-ubuntu1804-docker-4c-4g-351 systemd-logind[1026]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 5 11:31:47 prd-ubuntu1804-docker-4c-4g-351 systemd-logind[1026]: New seat seat0. May 5 11:31:48 prd-ubuntu1804-docker-4c-4g-351 sshd[1280]: Server listening on 0.0.0.0 port 22. May 5 11:31:48 prd-ubuntu1804-docker-4c-4g-351 sshd[1280]: Server listening on :: port 22. May 5 11:31:52 prd-ubuntu1804-docker-4c-4g-351 sshd[1493]: Did not receive identification string from 10.32.4.5 port 37654 May 5 11:31:55 prd-ubuntu1804-docker-4c-4g-351 sshd[1526]: Invalid user jenkins from 10.32.4.5 port 37656 May 5 11:31:55 prd-ubuntu1804-docker-4c-4g-351 sshd[1526]: Received disconnect from 10.32.4.5 port 37656:11: Closed due to user request. [preauth] May 5 11:31:55 prd-ubuntu1804-docker-4c-4g-351 sshd[1526]: Disconnected from invalid user jenkins 10.32.4.5 port 37656 [preauth] May 5 11:31:57 prd-ubuntu1804-docker-4c-4g-351 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 37658 May 5 11:31:57 prd-ubuntu1804-docker-4c-4g-351 sshd[1545]: Received disconnect from 10.32.4.5 port 37658:11: Closed due to user request. [preauth] May 5 11:31:57 prd-ubuntu1804-docker-4c-4g-351 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 37658 [preauth] May 5 11:31:59 prd-ubuntu1804-docker-4c-4g-351 sshd[1565]: Invalid user jenkins from 10.32.4.5 port 37660 May 5 11:31:59 prd-ubuntu1804-docker-4c-4g-351 sshd[1565]: Received disconnect from 10.32.4.5 port 37660:11: Closed due to user request. [preauth] May 5 11:31:59 prd-ubuntu1804-docker-4c-4g-351 sshd[1565]: Disconnected from invalid user jenkins 10.32.4.5 port 37660 [preauth] May 5 11:32:01 prd-ubuntu1804-docker-4c-4g-351 CRON[1568]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 11:32:01 prd-ubuntu1804-docker-4c-4g-351 CRON[1568]: pam_unix(cron:session): session closed for user root May 5 11:32:01 prd-ubuntu1804-docker-4c-4g-351 sshd[1576]: Invalid user jenkins from 10.32.4.5 port 37662 May 5 11:32:01 prd-ubuntu1804-docker-4c-4g-351 sshd[1576]: Received disconnect from 10.32.4.5 port 37662:11: Closed due to user request. [preauth] May 5 11:32:01 prd-ubuntu1804-docker-4c-4g-351 sshd[1576]: Disconnected from invalid user jenkins 10.32.4.5 port 37662 [preauth] May 5 11:32:03 prd-ubuntu1804-docker-4c-4g-351 sshd[1578]: Invalid user jenkins from 10.32.4.5 port 37666 May 5 11:32:03 prd-ubuntu1804-docker-4c-4g-351 sshd[1578]: Received disconnect from 10.32.4.5 port 37666:11: Closed due to user request. [preauth] May 5 11:32:03 prd-ubuntu1804-docker-4c-4g-351 sshd[1578]: Disconnected from invalid user jenkins 10.32.4.5 port 37666 [preauth] May 5 11:32:05 prd-ubuntu1804-docker-4c-4g-351 sshd[1580]: Invalid user jenkins from 10.32.4.5 port 37668 May 5 11:32:05 prd-ubuntu1804-docker-4c-4g-351 sshd[1580]: Received disconnect from 10.32.4.5 port 37668:11: Closed due to user request. [preauth] May 5 11:32:05 prd-ubuntu1804-docker-4c-4g-351 sshd[1580]: Disconnected from invalid user jenkins 10.32.4.5 port 37668 [preauth] May 5 11:32:07 prd-ubuntu1804-docker-4c-4g-351 sshd[1582]: Invalid user jenkins from 10.32.4.5 port 37670 May 5 11:32:08 prd-ubuntu1804-docker-4c-4g-351 sshd[1582]: Received disconnect from 10.32.4.5 port 37670:11: Closed due to user request. [preauth] May 5 11:32:08 prd-ubuntu1804-docker-4c-4g-351 sshd[1582]: Disconnected from invalid user jenkins 10.32.4.5 port 37670 [preauth] May 5 11:32:10 prd-ubuntu1804-docker-4c-4g-351 sshd[1592]: Invalid user jenkins from 10.32.4.5 port 37672 May 5 11:32:10 prd-ubuntu1804-docker-4c-4g-351 sshd[1592]: Received disconnect from 10.32.4.5 port 37672:11: Closed due to user request. [preauth] May 5 11:32:10 prd-ubuntu1804-docker-4c-4g-351 sshd[1592]: Disconnected from invalid user jenkins 10.32.4.5 port 37672 [preauth] May 5 11:32:12 prd-ubuntu1804-docker-4c-4g-351 sshd[1815]: Invalid user jenkins from 10.32.4.5 port 37680 May 5 11:32:12 prd-ubuntu1804-docker-4c-4g-351 sshd[1815]: Received disconnect from 10.32.4.5 port 37680:11: Closed due to user request. [preauth] May 5 11:32:12 prd-ubuntu1804-docker-4c-4g-351 sshd[1815]: Disconnected from invalid user jenkins 10.32.4.5 port 37680 [preauth] May 5 11:32:14 prd-ubuntu1804-docker-4c-4g-351 sshd[1855]: Invalid user jenkins from 10.32.4.5 port 37682 May 5 11:32:14 prd-ubuntu1804-docker-4c-4g-351 sshd[1855]: Received disconnect from 10.32.4.5 port 37682:11: Closed due to user request. [preauth] May 5 11:32:14 prd-ubuntu1804-docker-4c-4g-351 sshd[1855]: Disconnected from invalid user jenkins 10.32.4.5 port 37682 [preauth] May 5 11:32:16 prd-ubuntu1804-docker-4c-4g-351 sshd[1866]: Invalid user jenkins from 10.32.4.5 port 37684 May 5 11:32:16 prd-ubuntu1804-docker-4c-4g-351 sshd[1866]: Received disconnect from 10.32.4.5 port 37684:11: Closed due to user request. [preauth] May 5 11:32:16 prd-ubuntu1804-docker-4c-4g-351 sshd[1866]: Disconnected from invalid user jenkins 10.32.4.5 port 37684 [preauth] May 5 11:32:16 prd-ubuntu1804-docker-4c-4g-351 useradd[1875]: new group: name=jenkins, GID=1001 May 5 11:32:16 prd-ubuntu1804-docker-4c-4g-351 useradd[1875]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 5 11:32:16 prd-ubuntu1804-docker-4c-4g-351 usermod[1882]: add 'jenkins' to group 'docker' May 5 11:32:16 prd-ubuntu1804-docker-4c-4g-351 usermod[1882]: add 'jenkins' to shadow group 'docker' May 5 11:32:18 prd-ubuntu1804-docker-4c-4g-351 sshd[1916]: Accepted publickey for jenkins from 10.32.4.5 port 37686 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 5 11:32:18 prd-ubuntu1804-docker-4c-4g-351 sshd[1916]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 5 11:32:18 prd-ubuntu1804-docker-4c-4g-351 systemd-logind[1026]: New session 2 of user jenkins. May 5 11:32:18 prd-ubuntu1804-docker-4c-4g-351 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 5 11:33:01 prd-ubuntu1804-docker-4c-4g-351 CRON[2467]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 11:33:01 prd-ubuntu1804-docker-4c-4g-351 CRON[2467]: pam_unix(cron:session): session closed for user root May 5 11:34:01 prd-ubuntu1804-docker-4c-4g-351 CRON[8098]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 11:34:01 prd-ubuntu1804-docker-4c-4g-351 CRON[8098]: pam_unix(cron:session): session closed for user root May 5 11:35:01 prd-ubuntu1804-docker-4c-4g-351 CRON[8483]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 11:35:01 prd-ubuntu1804-docker-4c-4g-351 CRON[8483]: pam_unix(cron:session): session closed for user root May 5 11:36:01 prd-ubuntu1804-docker-4c-4g-351 CRON[19010]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 11:36:01 prd-ubuntu1804-docker-4c-4g-351 CRON[19010]: pam_unix(cron:session): session closed for user root May 5 11:36:46 prd-ubuntu1804-docker-4c-4g-351 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-a1-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp