May 5 01:35:49 prd-ubuntu1804-docker-4c-4g-342 passwd[961]: password for 'ubuntu' changed by 'root' May 5 01:35:49 prd-ubuntu1804-docker-4c-4g-342 systemd-logind[1066]: Watching system buttons on /dev/input/event0 (Power Button) May 5 01:35:49 prd-ubuntu1804-docker-4c-4g-342 systemd-logind[1066]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 5 01:35:49 prd-ubuntu1804-docker-4c-4g-342 systemd-logind[1066]: New seat seat0. May 5 01:35:49 prd-ubuntu1804-docker-4c-4g-342 sshd[1266]: Server listening on 0.0.0.0 port 22. May 5 01:35:49 prd-ubuntu1804-docker-4c-4g-342 sshd[1266]: Server listening on :: port 22. May 5 01:35:54 prd-ubuntu1804-docker-4c-4g-342 sshd[1534]: Did not receive identification string from 10.32.4.5 port 43854 May 5 01:35:55 prd-ubuntu1804-docker-4c-4g-342 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 43856 May 5 01:35:55 prd-ubuntu1804-docker-4c-4g-342 sshd[1540]: Received disconnect from 10.32.4.5 port 43856:11: Closed due to user request. [preauth] May 5 01:35:55 prd-ubuntu1804-docker-4c-4g-342 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 43856 [preauth] May 5 01:35:57 prd-ubuntu1804-docker-4c-4g-342 sshd[1559]: Invalid user jenkins from 10.32.4.5 port 43858 May 5 01:35:57 prd-ubuntu1804-docker-4c-4g-342 sshd[1559]: Received disconnect from 10.32.4.5 port 43858:11: Closed due to user request. [preauth] May 5 01:35:57 prd-ubuntu1804-docker-4c-4g-342 sshd[1559]: Disconnected from invalid user jenkins 10.32.4.5 port 43858 [preauth] May 5 01:35:59 prd-ubuntu1804-docker-4c-4g-342 sshd[1561]: Invalid user jenkins from 10.32.4.5 port 43860 May 5 01:35:59 prd-ubuntu1804-docker-4c-4g-342 sshd[1561]: Received disconnect from 10.32.4.5 port 43860:11: Closed due to user request. [preauth] May 5 01:35:59 prd-ubuntu1804-docker-4c-4g-342 sshd[1561]: Disconnected from invalid user jenkins 10.32.4.5 port 43860 [preauth] May 5 01:36:01 prd-ubuntu1804-docker-4c-4g-342 CRON[1564]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 01:36:01 prd-ubuntu1804-docker-4c-4g-342 CRON[1564]: pam_unix(cron:session): session closed for user root May 5 01:36:01 prd-ubuntu1804-docker-4c-4g-342 sshd[1571]: Invalid user jenkins from 10.32.4.5 port 43864 May 5 01:36:01 prd-ubuntu1804-docker-4c-4g-342 sshd[1571]: Received disconnect from 10.32.4.5 port 43864:11: Closed due to user request. [preauth] May 5 01:36:01 prd-ubuntu1804-docker-4c-4g-342 sshd[1571]: Disconnected from invalid user jenkins 10.32.4.5 port 43864 [preauth] May 5 01:36:03 prd-ubuntu1804-docker-4c-4g-342 sshd[1573]: Invalid user jenkins from 10.32.4.5 port 43868 May 5 01:36:04 prd-ubuntu1804-docker-4c-4g-342 sshd[1573]: Received disconnect from 10.32.4.5 port 43868:11: Closed due to user request. [preauth] May 5 01:36:04 prd-ubuntu1804-docker-4c-4g-342 sshd[1573]: Disconnected from invalid user jenkins 10.32.4.5 port 43868 [preauth] May 5 01:36:06 prd-ubuntu1804-docker-4c-4g-342 sshd[1575]: Invalid user jenkins from 10.32.4.5 port 43870 May 5 01:36:06 prd-ubuntu1804-docker-4c-4g-342 sshd[1575]: Received disconnect from 10.32.4.5 port 43870:11: Closed due to user request. [preauth] May 5 01:36:06 prd-ubuntu1804-docker-4c-4g-342 sshd[1575]: Disconnected from invalid user jenkins 10.32.4.5 port 43870 [preauth] May 5 01:36:08 prd-ubuntu1804-docker-4c-4g-342 sshd[1577]: Invalid user jenkins from 10.32.4.5 port 43872 May 5 01:36:08 prd-ubuntu1804-docker-4c-4g-342 sshd[1577]: Received disconnect from 10.32.4.5 port 43872:11: Closed due to user request. [preauth] May 5 01:36:08 prd-ubuntu1804-docker-4c-4g-342 sshd[1577]: Disconnected from invalid user jenkins 10.32.4.5 port 43872 [preauth] May 5 01:36:10 prd-ubuntu1804-docker-4c-4g-342 sshd[1579]: Invalid user jenkins from 10.32.4.5 port 43874 May 5 01:36:10 prd-ubuntu1804-docker-4c-4g-342 sshd[1579]: Received disconnect from 10.32.4.5 port 43874:11: Closed due to user request. [preauth] May 5 01:36:10 prd-ubuntu1804-docker-4c-4g-342 sshd[1579]: Disconnected from invalid user jenkins 10.32.4.5 port 43874 [preauth] May 5 01:36:12 prd-ubuntu1804-docker-4c-4g-342 sshd[1745]: Invalid user jenkins from 10.32.4.5 port 43882 May 5 01:36:12 prd-ubuntu1804-docker-4c-4g-342 sshd[1745]: Received disconnect from 10.32.4.5 port 43882:11: Closed due to user request. [preauth] May 5 01:36:12 prd-ubuntu1804-docker-4c-4g-342 sshd[1745]: Disconnected from invalid user jenkins 10.32.4.5 port 43882 [preauth] May 5 01:36:15 prd-ubuntu1804-docker-4c-4g-342 sshd[1842]: Invalid user jenkins from 10.32.4.5 port 43884 May 5 01:36:15 prd-ubuntu1804-docker-4c-4g-342 sshd[1842]: Received disconnect from 10.32.4.5 port 43884:11: Closed due to user request. [preauth] May 5 01:36:15 prd-ubuntu1804-docker-4c-4g-342 sshd[1842]: Disconnected from invalid user jenkins 10.32.4.5 port 43884 [preauth] May 5 01:36:17 prd-ubuntu1804-docker-4c-4g-342 sshd[1862]: Invalid user jenkins from 10.32.4.5 port 43886 May 5 01:36:17 prd-ubuntu1804-docker-4c-4g-342 sshd[1862]: Received disconnect from 10.32.4.5 port 43886:11: Closed due to user request. [preauth] May 5 01:36:17 prd-ubuntu1804-docker-4c-4g-342 sshd[1862]: Disconnected from invalid user jenkins 10.32.4.5 port 43886 [preauth] May 5 01:36:18 prd-ubuntu1804-docker-4c-4g-342 useradd[1878]: new group: name=jenkins, GID=1001 May 5 01:36:18 prd-ubuntu1804-docker-4c-4g-342 useradd[1878]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 5 01:36:18 prd-ubuntu1804-docker-4c-4g-342 usermod[1885]: add 'jenkins' to group 'docker' May 5 01:36:18 prd-ubuntu1804-docker-4c-4g-342 usermod[1885]: add 'jenkins' to shadow group 'docker' May 5 01:36:19 prd-ubuntu1804-docker-4c-4g-342 sshd[1919]: Accepted publickey for jenkins from 10.32.4.5 port 43888 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 5 01:36:19 prd-ubuntu1804-docker-4c-4g-342 sshd[1919]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 5 01:36:19 prd-ubuntu1804-docker-4c-4g-342 systemd-logind[1066]: New session 2 of user jenkins. May 5 01:36:19 prd-ubuntu1804-docker-4c-4g-342 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 5 01:37:01 prd-ubuntu1804-docker-4c-4g-342 CRON[2468]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 01:37:01 prd-ubuntu1804-docker-4c-4g-342 CRON[2468]: pam_unix(cron:session): session closed for user root May 5 01:38:01 prd-ubuntu1804-docker-4c-4g-342 CRON[2927]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 01:38:01 prd-ubuntu1804-docker-4c-4g-342 CRON[2927]: pam_unix(cron:session): session closed for user root May 5 01:39:01 prd-ubuntu1804-docker-4c-4g-342 CRON[11483]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 01:39:01 prd-ubuntu1804-docker-4c-4g-342 CRON[11483]: pam_unix(cron:session): session closed for user root May 5 01:40:01 prd-ubuntu1804-docker-4c-4g-342 CRON[15873]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 01:40:01 prd-ubuntu1804-docker-4c-4g-342 CRON[15873]: pam_unix(cron:session): session closed for user root May 5 01:41:01 prd-ubuntu1804-docker-4c-4g-342 CRON[16442]: pam_unix(cron:session): session opened for user root by (uid=0) May 5 01:41:01 prd-ubuntu1804-docker-4c-4g-342 CRON[16442]: pam_unix(cron:session): session closed for user root May 5 01:41:12 prd-ubuntu1804-docker-4c-4g-342 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-alarm-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp May 5 01:41:12 prd-ubuntu1804-docker-4c-4g-342 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)