Oct 24 13:42:59 prd-ubuntu1804-docker-4c-4g-8560 passwd[932]: password for 'ubuntu' changed by 'root'
Oct 24 13:42:59 prd-ubuntu1804-docker-4c-4g-8560 systemd-logind[993]: Watching system buttons on /dev/input/event0 (Power Button)
Oct 24 13:42:59 prd-ubuntu1804-docker-4c-4g-8560 systemd-logind[993]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Oct 24 13:42:59 prd-ubuntu1804-docker-4c-4g-8560 systemd-logind[993]: New seat seat0.
Oct 24 13:43:00 prd-ubuntu1804-docker-4c-4g-8560 sshd[1235]: Server listening on 0.0.0.0 port 22.
Oct 24 13:43:00 prd-ubuntu1804-docker-4c-4g-8560 sshd[1235]: Server listening on :: port 22.
Oct 24 13:43:01 prd-ubuntu1804-docker-4c-4g-8560 CRON[1279]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 24 13:43:01 prd-ubuntu1804-docker-4c-4g-8560 CRON[1279]: pam_unix(cron:session): session closed for user root
Oct 24 13:43:03 prd-ubuntu1804-docker-4c-4g-8560 sshd[1433]: Did not receive identification string from 10.32.4.5 port 34374
Oct 24 13:43:10 prd-ubuntu1804-docker-4c-4g-8560 sshd[1499]: Invalid user jenkins from 10.32.4.5 port 34378
Oct 24 13:43:10 prd-ubuntu1804-docker-4c-4g-8560 sshd[1499]: Received disconnect from 10.32.4.5 port 34378:11: Closed due to user request. [preauth]
Oct 24 13:43:10 prd-ubuntu1804-docker-4c-4g-8560 sshd[1499]: Disconnected from invalid user jenkins 10.32.4.5 port 34378 [preauth]
Oct 24 13:43:12 prd-ubuntu1804-docker-4c-4g-8560 sshd[1503]: Invalid user jenkins from 10.32.4.5 port 34380
Oct 24 13:43:12 prd-ubuntu1804-docker-4c-4g-8560 sshd[1503]: Received disconnect from 10.32.4.5 port 34380:11: Closed due to user request. [preauth]
Oct 24 13:43:12 prd-ubuntu1804-docker-4c-4g-8560 sshd[1503]: Disconnected from invalid user jenkins 10.32.4.5 port 34380 [preauth]
Oct 24 13:43:14 prd-ubuntu1804-docker-4c-4g-8560 sshd[1505]: Invalid user jenkins from 10.32.4.5 port 34388
Oct 24 13:43:14 prd-ubuntu1804-docker-4c-4g-8560 sshd[1505]: Received disconnect from 10.32.4.5 port 34388:11: Closed due to user request. [preauth]
Oct 24 13:43:14 prd-ubuntu1804-docker-4c-4g-8560 sshd[1505]: Disconnected from invalid user jenkins 10.32.4.5 port 34388 [preauth]
Oct 24 13:43:16 prd-ubuntu1804-docker-4c-4g-8560 sshd[1507]: Invalid user jenkins from 10.32.4.5 port 34390
Oct 24 13:43:16 prd-ubuntu1804-docker-4c-4g-8560 sshd[1507]: Received disconnect from 10.32.4.5 port 34390:11: Closed due to user request. [preauth]
Oct 24 13:43:16 prd-ubuntu1804-docker-4c-4g-8560 sshd[1507]: Disconnected from invalid user jenkins 10.32.4.5 port 34390 [preauth]
Oct 24 13:43:18 prd-ubuntu1804-docker-4c-4g-8560 sshd[1528]: Invalid user jenkins from 10.32.4.5 port 34392
Oct 24 13:43:19 prd-ubuntu1804-docker-4c-4g-8560 sshd[1528]: Received disconnect from 10.32.4.5 port 34392:11: Closed due to user request. [preauth]
Oct 24 13:43:19 prd-ubuntu1804-docker-4c-4g-8560 sshd[1528]: Disconnected from invalid user jenkins 10.32.4.5 port 34392 [preauth]
Oct 24 13:43:21 prd-ubuntu1804-docker-4c-4g-8560 sshd[1530]: Invalid user jenkins from 10.32.4.5 port 34394
Oct 24 13:43:21 prd-ubuntu1804-docker-4c-4g-8560 sshd[1530]: Received disconnect from 10.32.4.5 port 34394:11: Closed due to user request. [preauth]
Oct 24 13:43:21 prd-ubuntu1804-docker-4c-4g-8560 sshd[1530]: Disconnected from invalid user jenkins 10.32.4.5 port 34394 [preauth]
Oct 24 13:43:23 prd-ubuntu1804-docker-4c-4g-8560 sshd[1731]: Invalid user jenkins from 10.32.4.5 port 34398
Oct 24 13:43:23 prd-ubuntu1804-docker-4c-4g-8560 sshd[1731]: Received disconnect from 10.32.4.5 port 34398:11: Closed due to user request. [preauth]
Oct 24 13:43:23 prd-ubuntu1804-docker-4c-4g-8560 sshd[1731]: Disconnected from invalid user jenkins 10.32.4.5 port 34398 [preauth]
Oct 24 13:43:25 prd-ubuntu1804-docker-4c-4g-8560 sshd[1785]: Invalid user jenkins from 10.32.4.5 port 34400
Oct 24 13:43:26 prd-ubuntu1804-docker-4c-4g-8560 sshd[1785]: Received disconnect from 10.32.4.5 port 34400:11: Closed due to user request. [preauth]
Oct 24 13:43:26 prd-ubuntu1804-docker-4c-4g-8560 sshd[1785]: Disconnected from invalid user jenkins 10.32.4.5 port 34400 [preauth]
Oct 24 13:43:28 prd-ubuntu1804-docker-4c-4g-8560 sshd[1805]: Invalid user jenkins from 10.32.4.5 port 34404
Oct 24 13:43:28 prd-ubuntu1804-docker-4c-4g-8560 sshd[1805]: Received disconnect from 10.32.4.5 port 34404:11: Closed due to user request. [preauth]
Oct 24 13:43:28 prd-ubuntu1804-docker-4c-4g-8560 sshd[1805]: Disconnected from invalid user jenkins 10.32.4.5 port 34404 [preauth]
Oct 24 13:43:29 prd-ubuntu1804-docker-4c-4g-8560 useradd[1821]: new group: name=jenkins, GID=1001
Oct 24 13:43:29 prd-ubuntu1804-docker-4c-4g-8560 useradd[1821]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Oct 24 13:43:29 prd-ubuntu1804-docker-4c-4g-8560 usermod[1828]: add 'jenkins' to group 'docker'
Oct 24 13:43:29 prd-ubuntu1804-docker-4c-4g-8560 usermod[1828]: add 'jenkins' to shadow group 'docker'
Oct 24 13:43:30 prd-ubuntu1804-docker-4c-4g-8560 sshd[1862]: Accepted publickey for jenkins from 10.32.4.5 port 34406 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Oct 24 13:43:30 prd-ubuntu1804-docker-4c-4g-8560 sshd[1862]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Oct 24 13:43:30 prd-ubuntu1804-docker-4c-4g-8560 systemd-logind[993]: New session 2 of user jenkins.
Oct 24 13:43:30 prd-ubuntu1804-docker-4c-4g-8560 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Oct 24 13:44:02 prd-ubuntu1804-docker-4c-4g-8560 CRON[2399]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 24 13:44:02 prd-ubuntu1804-docker-4c-4g-8560 CRON[2399]: pam_unix(cron:session): session closed for user root
Oct 24 13:45:01 prd-ubuntu1804-docker-4c-4g-8560 CRON[3544]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 24 13:45:01 prd-ubuntu1804-docker-4c-4g-8560 CRON[3544]: pam_unix(cron:session): session closed for user root
Oct 24 13:45:44 prd-ubuntu1804-docker-4c-4g-8560 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/smo-ves-post-config-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Oct 24 13:45:44 prd-ubuntu1804-docker-4c-4g-8560 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)