Feb 19 01:41:53 prd-ubuntu1804-docker-4c-4g-7013 passwd[937]: password for 'ubuntu' changed by 'root'
Feb 19 01:41:53 prd-ubuntu1804-docker-4c-4g-7013 systemd-logind[976]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 19 01:41:53 prd-ubuntu1804-docker-4c-4g-7013 systemd-logind[976]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 19 01:41:53 prd-ubuntu1804-docker-4c-4g-7013 systemd-logind[976]: New seat seat0.
Feb 19 01:41:54 prd-ubuntu1804-docker-4c-4g-7013 sshd[1270]: Server listening on 0.0.0.0 port 22.
Feb 19 01:41:54 prd-ubuntu1804-docker-4c-4g-7013 sshd[1270]: Server listening on :: port 22.
Feb 19 01:41:56 prd-ubuntu1804-docker-4c-4g-7013 sshd[1464]: Did not receive identification string from 10.32.4.5 port 52190
Feb 19 01:42:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[1547]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:42:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[1547]: pam_unix(cron:session): session closed for user root
Feb 19 01:42:01 prd-ubuntu1804-docker-4c-4g-7013 sshd[1561]: Invalid user jenkins from 10.32.4.5 port 52196
Feb 19 01:42:01 prd-ubuntu1804-docker-4c-4g-7013 sshd[1561]: Received disconnect from 10.32.4.5 port 52196:11: Closed due to user request. [preauth]
Feb 19 01:42:01 prd-ubuntu1804-docker-4c-4g-7013 sshd[1561]: Disconnected from invalid user jenkins 10.32.4.5 port 52196 [preauth]
Feb 19 01:42:04 prd-ubuntu1804-docker-4c-4g-7013 sshd[1571]: Invalid user jenkins from 10.32.4.5 port 52198
Feb 19 01:42:04 prd-ubuntu1804-docker-4c-4g-7013 sshd[1571]: Received disconnect from 10.32.4.5 port 52198:11: Closed due to user request. [preauth]
Feb 19 01:42:04 prd-ubuntu1804-docker-4c-4g-7013 sshd[1571]: Disconnected from invalid user jenkins 10.32.4.5 port 52198 [preauth]
Feb 19 01:42:06 prd-ubuntu1804-docker-4c-4g-7013 sshd[1573]: Invalid user jenkins from 10.32.4.5 port 52200
Feb 19 01:42:06 prd-ubuntu1804-docker-4c-4g-7013 sshd[1573]: Received disconnect from 10.32.4.5 port 52200:11: Closed due to user request. [preauth]
Feb 19 01:42:06 prd-ubuntu1804-docker-4c-4g-7013 sshd[1573]: Disconnected from invalid user jenkins 10.32.4.5 port 52200 [preauth]
Feb 19 01:42:08 prd-ubuntu1804-docker-4c-4g-7013 sshd[1575]: Invalid user jenkins from 10.32.4.5 port 52206
Feb 19 01:42:08 prd-ubuntu1804-docker-4c-4g-7013 sshd[1575]: Received disconnect from 10.32.4.5 port 52206:11: Closed due to user request. [preauth]
Feb 19 01:42:08 prd-ubuntu1804-docker-4c-4g-7013 sshd[1575]: Disconnected from invalid user jenkins 10.32.4.5 port 52206 [preauth]
Feb 19 01:42:10 prd-ubuntu1804-docker-4c-4g-7013 sshd[1577]: Invalid user jenkins from 10.32.4.5 port 52208
Feb 19 01:42:10 prd-ubuntu1804-docker-4c-4g-7013 sshd[1577]: Received disconnect from 10.32.4.5 port 52208:11: Closed due to user request. [preauth]
Feb 19 01:42:10 prd-ubuntu1804-docker-4c-4g-7013 sshd[1577]: Disconnected from invalid user jenkins 10.32.4.5 port 52208 [preauth]
Feb 19 01:42:12 prd-ubuntu1804-docker-4c-4g-7013 sshd[1579]: Invalid user jenkins from 10.32.4.5 port 52212
Feb 19 01:42:12 prd-ubuntu1804-docker-4c-4g-7013 sshd[1579]: Received disconnect from 10.32.4.5 port 52212:11: Closed due to user request. [preauth]
Feb 19 01:42:12 prd-ubuntu1804-docker-4c-4g-7013 sshd[1579]: Disconnected from invalid user jenkins 10.32.4.5 port 52212 [preauth]
Feb 19 01:42:14 prd-ubuntu1804-docker-4c-4g-7013 sshd[1581]: Invalid user jenkins from 10.32.4.5 port 52216
Feb 19 01:42:14 prd-ubuntu1804-docker-4c-4g-7013 sshd[1581]: Received disconnect from 10.32.4.5 port 52216:11: Closed due to user request. [preauth]
Feb 19 01:42:14 prd-ubuntu1804-docker-4c-4g-7013 sshd[1581]: Disconnected from invalid user jenkins 10.32.4.5 port 52216 [preauth]
Feb 19 01:42:17 prd-ubuntu1804-docker-4c-4g-7013 sshd[1741]: Invalid user jenkins from 10.32.4.5 port 52220
Feb 19 01:42:17 prd-ubuntu1804-docker-4c-4g-7013 sshd[1741]: Received disconnect from 10.32.4.5 port 52220:11: Closed due to user request. [preauth]
Feb 19 01:42:17 prd-ubuntu1804-docker-4c-4g-7013 sshd[1741]: Disconnected from invalid user jenkins 10.32.4.5 port 52220 [preauth]
Feb 19 01:42:19 prd-ubuntu1804-docker-4c-4g-7013 sshd[1823]: Invalid user jenkins from 10.32.4.5 port 52222
Feb 19 01:42:19 prd-ubuntu1804-docker-4c-4g-7013 sshd[1823]: Received disconnect from 10.32.4.5 port 52222:11: Closed due to user request. [preauth]
Feb 19 01:42:19 prd-ubuntu1804-docker-4c-4g-7013 sshd[1823]: Disconnected from invalid user jenkins 10.32.4.5 port 52222 [preauth]
Feb 19 01:42:21 prd-ubuntu1804-docker-4c-4g-7013 sshd[1857]: Invalid user jenkins from 10.32.4.5 port 52224
Feb 19 01:42:21 prd-ubuntu1804-docker-4c-4g-7013 sshd[1857]: Received disconnect from 10.32.4.5 port 52224:11: Closed due to user request. [preauth]
Feb 19 01:42:21 prd-ubuntu1804-docker-4c-4g-7013 sshd[1857]: Disconnected from invalid user jenkins 10.32.4.5 port 52224 [preauth]
Feb 19 01:42:23 prd-ubuntu1804-docker-4c-4g-7013 sshd[1861]: Invalid user jenkins from 10.32.4.5 port 52232
Feb 19 01:42:23 prd-ubuntu1804-docker-4c-4g-7013 sshd[1861]: Received disconnect from 10.32.4.5 port 52232:11: Closed due to user request. [preauth]
Feb 19 01:42:23 prd-ubuntu1804-docker-4c-4g-7013 sshd[1861]: Disconnected from invalid user jenkins 10.32.4.5 port 52232 [preauth]
Feb 19 01:42:25 prd-ubuntu1804-docker-4c-4g-7013 useradd[1877]: new group: name=jenkins, GID=1001
Feb 19 01:42:25 prd-ubuntu1804-docker-4c-4g-7013 useradd[1877]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Feb 19 01:42:25 prd-ubuntu1804-docker-4c-4g-7013 usermod[1884]: add 'jenkins' to group 'docker'
Feb 19 01:42:25 prd-ubuntu1804-docker-4c-4g-7013 usermod[1884]: add 'jenkins' to shadow group 'docker'
Feb 19 01:42:25 prd-ubuntu1804-docker-4c-4g-7013 sshd[1927]: Accepted publickey for jenkins from 10.32.4.5 port 52238 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Feb 19 01:42:25 prd-ubuntu1804-docker-4c-4g-7013 sshd[1927]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 19 01:42:25 prd-ubuntu1804-docker-4c-4g-7013 systemd-logind[976]: New session 2 of user jenkins.
Feb 19 01:42:26 prd-ubuntu1804-docker-4c-4g-7013 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 19 01:43:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[2458]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:43:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[2458]: pam_unix(cron:session): session closed for user root
Feb 19 01:44:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[2509]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:44:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[2509]: pam_unix(cron:session): session closed for user root
Feb 19 01:45:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[3158]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:45:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[3158]: pam_unix(cron:session): session closed for user root
Feb 19 01:46:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[6632]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:46:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[6632]: pam_unix(cron:session): session closed for user root
Feb 19 01:47:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[8042]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:47:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[8042]: pam_unix(cron:session): session closed for user root
Feb 19 01:48:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[8962]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:48:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[8962]: pam_unix(cron:session): session closed for user root
Feb 19 01:49:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[10618]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:49:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[10618]: pam_unix(cron:session): session closed for user root
Feb 19 01:50:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[10743]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:50:01 prd-ubuntu1804-docker-4c-4g-7013 CRON[10743]: pam_unix(cron:session): session closed for user root
Feb 19 01:51:02 prd-ubuntu1804-docker-4c-4g-7013 CRON[10989]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 19 01:51:02 prd-ubuntu1804-docker-4c-4g-7013 CRON[10989]: pam_unix(cron:session): session closed for user root
Feb 19 01:52:00 prd-ubuntu1804-docker-4c-4g-7013 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-e2-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Feb 19 01:52:00 prd-ubuntu1804-docker-4c-4g-7013 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)