Apr 17 13:42:35 prd-ubuntu1804-docker-4c-4g-403 passwd[900]: password for 'ubuntu' changed by 'root'
Apr 17 13:42:35 prd-ubuntu1804-docker-4c-4g-403 sshd[1062]: Server listening on 0.0.0.0 port 22.
Apr 17 13:42:35 prd-ubuntu1804-docker-4c-4g-403 sshd[1062]: Server listening on :: port 22.
Apr 17 13:42:35 prd-ubuntu1804-docker-4c-4g-403 systemd-logind[1031]: Watching system buttons on /dev/input/event0 (Power Button)
Apr 17 13:42:35 prd-ubuntu1804-docker-4c-4g-403 systemd-logind[1031]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Apr 17 13:42:35 prd-ubuntu1804-docker-4c-4g-403 systemd-logind[1031]: New seat seat0.
Apr 17 13:42:40 prd-ubuntu1804-docker-4c-4g-403 sshd[1417]: Did not receive identification string from 10.32.4.5 port 39442
Apr 17 13:42:44 prd-ubuntu1804-docker-4c-4g-403 sshd[1464]: Invalid user jenkins from 10.32.4.5 port 39450
Apr 17 13:42:44 prd-ubuntu1804-docker-4c-4g-403 sshd[1464]: Received disconnect from 10.32.4.5 port 39450:11: Closed due to user request. [preauth]
Apr 17 13:42:44 prd-ubuntu1804-docker-4c-4g-403 sshd[1464]: Disconnected from invalid user jenkins 10.32.4.5 port 39450 [preauth]
Apr 17 13:42:46 prd-ubuntu1804-docker-4c-4g-403 sshd[1468]: Invalid user jenkins from 10.32.4.5 port 39452
Apr 17 13:42:46 prd-ubuntu1804-docker-4c-4g-403 sshd[1468]: Received disconnect from 10.32.4.5 port 39452:11: Closed due to user request. [preauth]
Apr 17 13:42:46 prd-ubuntu1804-docker-4c-4g-403 sshd[1468]: Disconnected from invalid user jenkins 10.32.4.5 port 39452 [preauth]
Apr 17 13:42:48 prd-ubuntu1804-docker-4c-4g-403 sshd[1470]: Invalid user jenkins from 10.32.4.5 port 39456
Apr 17 13:42:48 prd-ubuntu1804-docker-4c-4g-403 sshd[1470]: Received disconnect from 10.32.4.5 port 39456:11: Closed due to user request. [preauth]
Apr 17 13:42:48 prd-ubuntu1804-docker-4c-4g-403 sshd[1470]: Disconnected from invalid user jenkins 10.32.4.5 port 39456 [preauth]
Apr 17 13:42:50 prd-ubuntu1804-docker-4c-4g-403 sshd[1472]: Invalid user jenkins from 10.32.4.5 port 39458
Apr 17 13:42:50 prd-ubuntu1804-docker-4c-4g-403 sshd[1472]: Received disconnect from 10.32.4.5 port 39458:11: Closed due to user request. [preauth]
Apr 17 13:42:50 prd-ubuntu1804-docker-4c-4g-403 sshd[1472]: Disconnected from invalid user jenkins 10.32.4.5 port 39458 [preauth]
Apr 17 13:42:52 prd-ubuntu1804-docker-4c-4g-403 sshd[1474]: Invalid user jenkins from 10.32.4.5 port 39460
Apr 17 13:42:52 prd-ubuntu1804-docker-4c-4g-403 sshd[1474]: Received disconnect from 10.32.4.5 port 39460:11: Closed due to user request. [preauth]
Apr 17 13:42:52 prd-ubuntu1804-docker-4c-4g-403 sshd[1474]: Disconnected from invalid user jenkins 10.32.4.5 port 39460 [preauth]
Apr 17 13:42:54 prd-ubuntu1804-docker-4c-4g-403 sshd[1476]: Invalid user jenkins from 10.32.4.5 port 39462
Apr 17 13:42:54 prd-ubuntu1804-docker-4c-4g-403 sshd[1476]: Received disconnect from 10.32.4.5 port 39462:11: Closed due to user request. [preauth]
Apr 17 13:42:54 prd-ubuntu1804-docker-4c-4g-403 sshd[1476]: Disconnected from invalid user jenkins 10.32.4.5 port 39462 [preauth]
Apr 17 13:42:56 prd-ubuntu1804-docker-4c-4g-403 sshd[1478]: Invalid user jenkins from 10.32.4.5 port 39464
Apr 17 13:42:56 prd-ubuntu1804-docker-4c-4g-403 sshd[1478]: Received disconnect from 10.32.4.5 port 39464:11: Closed due to user request. [preauth]
Apr 17 13:42:56 prd-ubuntu1804-docker-4c-4g-403 sshd[1478]: Disconnected from invalid user jenkins 10.32.4.5 port 39464 [preauth]
Apr 17 13:43:00 prd-ubuntu1804-docker-4c-4g-403 sshd[1685]: Invalid user jenkins from 10.32.4.5 port 39466
Apr 17 13:43:00 prd-ubuntu1804-docker-4c-4g-403 sshd[1685]: Received disconnect from 10.32.4.5 port 39466:11: Closed due to user request. [preauth]
Apr 17 13:43:00 prd-ubuntu1804-docker-4c-4g-403 sshd[1685]: Disconnected from invalid user jenkins 10.32.4.5 port 39466 [preauth]
Apr 17 13:43:02 prd-ubuntu1804-docker-4c-4g-403 sshd[1740]: Invalid user jenkins from 10.32.4.5 port 39468
Apr 17 13:43:02 prd-ubuntu1804-docker-4c-4g-403 sshd[1740]: Received disconnect from 10.32.4.5 port 39468:11: Closed due to user request. [preauth]
Apr 17 13:43:02 prd-ubuntu1804-docker-4c-4g-403 sshd[1740]: Disconnected from invalid user jenkins 10.32.4.5 port 39468 [preauth]
Apr 17 13:43:02 prd-ubuntu1804-docker-4c-4g-403 CRON[1757]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 17 13:43:02 prd-ubuntu1804-docker-4c-4g-403 CRON[1757]: pam_unix(cron:session): session closed for user root
Apr 17 13:43:04 prd-ubuntu1804-docker-4c-4g-403 sshd[1768]: Invalid user jenkins from 10.32.4.5 port 39470
Apr 17 13:43:04 prd-ubuntu1804-docker-4c-4g-403 sshd[1768]: Received disconnect from 10.32.4.5 port 39470:11: Closed due to user request. [preauth]
Apr 17 13:43:04 prd-ubuntu1804-docker-4c-4g-403 sshd[1768]: Disconnected from invalid user jenkins 10.32.4.5 port 39470 [preauth]
Apr 17 13:43:05 prd-ubuntu1804-docker-4c-4g-403 useradd[1784]: new group: name=jenkins, GID=1001
Apr 17 13:43:05 prd-ubuntu1804-docker-4c-4g-403 useradd[1784]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Apr 17 13:43:05 prd-ubuntu1804-docker-4c-4g-403 usermod[1791]: add 'jenkins' to group 'docker'
Apr 17 13:43:05 prd-ubuntu1804-docker-4c-4g-403 usermod[1791]: add 'jenkins' to shadow group 'docker'
Apr 17 13:43:06 prd-ubuntu1804-docker-4c-4g-403 sshd[1825]: Accepted publickey for jenkins from 10.32.4.5 port 39474 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI
Apr 17 13:43:06 prd-ubuntu1804-docker-4c-4g-403 sshd[1825]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Apr 17 13:43:06 prd-ubuntu1804-docker-4c-4g-403 systemd-logind[1031]: New session 2 of user jenkins.
Apr 17 13:43:06 prd-ubuntu1804-docker-4c-4g-403 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Apr 17 13:44:01 prd-ubuntu1804-docker-4c-4g-403 CRON[2389]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 17 13:44:01 prd-ubuntu1804-docker-4c-4g-403 CRON[2389]: pam_unix(cron:session): session closed for user root
Apr 17 13:45:01 prd-ubuntu1804-docker-4c-4g-403 CRON[6717]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 17 13:45:01 prd-ubuntu1804-docker-4c-4g-403 CRON[6717]: pam_unix(cron:session): session closed for user root
Apr 17 13:45:22 prd-ubuntu1804-docker-4c-4g-403 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/smo-ves-post-config-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Apr 17 13:45:22 prd-ubuntu1804-docker-4c-4g-403 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)