Jan 26 11:44:17 prd-ubuntu1804-docker-8c-8g-3102 passwd[1007]: password for 'ubuntu' changed by 'root'
Jan 26 11:44:17 prd-ubuntu1804-docker-8c-8g-3102 systemd-logind[1084]: Watching system buttons on /dev/input/event0 (Power Button)
Jan 26 11:44:17 prd-ubuntu1804-docker-8c-8g-3102 systemd-logind[1084]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jan 26 11:44:17 prd-ubuntu1804-docker-8c-8g-3102 systemd-logind[1084]: New seat seat0.
Jan 26 11:44:17 prd-ubuntu1804-docker-8c-8g-3102 sshd[1104]: Server listening on 0.0.0.0 port 22.
Jan 26 11:44:17 prd-ubuntu1804-docker-8c-8g-3102 sshd[1104]: Server listening on :: port 22.
Jan 26 11:44:19 prd-ubuntu1804-docker-8c-8g-3102 sshd[1441]: Did not receive identification string from 10.30.104.4 port 43988
Jan 26 11:44:22 prd-ubuntu1804-docker-8c-8g-3102 sshd[1446]: Invalid user jenkins from 10.30.104.4 port 43992
Jan 26 11:44:22 prd-ubuntu1804-docker-8c-8g-3102 sshd[1446]: Received disconnect from 10.30.104.4 port 43992:11: Closed due to user request. [preauth]
Jan 26 11:44:22 prd-ubuntu1804-docker-8c-8g-3102 sshd[1446]: Disconnected from invalid user jenkins 10.30.104.4 port 43992 [preauth]
Jan 26 11:44:24 prd-ubuntu1804-docker-8c-8g-3102 sshd[1472]: Invalid user jenkins from 10.30.104.4 port 43998
Jan 26 11:44:24 prd-ubuntu1804-docker-8c-8g-3102 sshd[1472]: Received disconnect from 10.30.104.4 port 43998:11: Closed due to user request. [preauth]
Jan 26 11:44:24 prd-ubuntu1804-docker-8c-8g-3102 sshd[1472]: Disconnected from invalid user jenkins 10.30.104.4 port 43998 [preauth]
Jan 26 11:44:26 prd-ubuntu1804-docker-8c-8g-3102 sshd[1474]: Invalid user jenkins from 10.30.104.4 port 44010
Jan 26 11:44:26 prd-ubuntu1804-docker-8c-8g-3102 sshd[1474]: Received disconnect from 10.30.104.4 port 44010:11: Closed due to user request. [preauth]
Jan 26 11:44:26 prd-ubuntu1804-docker-8c-8g-3102 sshd[1474]: Disconnected from invalid user jenkins 10.30.104.4 port 44010 [preauth]
Jan 26 11:44:28 prd-ubuntu1804-docker-8c-8g-3102 sshd[1476]: Invalid user jenkins from 10.30.104.4 port 44014
Jan 26 11:44:28 prd-ubuntu1804-docker-8c-8g-3102 sshd[1476]: Received disconnect from 10.30.104.4 port 44014:11: Closed due to user request. [preauth]
Jan 26 11:44:28 prd-ubuntu1804-docker-8c-8g-3102 sshd[1476]: Disconnected from invalid user jenkins 10.30.104.4 port 44014 [preauth]
Jan 26 11:44:30 prd-ubuntu1804-docker-8c-8g-3102 sshd[1478]: Invalid user jenkins from 10.30.104.4 port 44020
Jan 26 11:44:30 prd-ubuntu1804-docker-8c-8g-3102 sshd[1478]: Received disconnect from 10.30.104.4 port 44020:11: Closed due to user request. [preauth]
Jan 26 11:44:30 prd-ubuntu1804-docker-8c-8g-3102 sshd[1478]: Disconnected from invalid user jenkins 10.30.104.4 port 44020 [preauth]
Jan 26 11:44:32 prd-ubuntu1804-docker-8c-8g-3102 sshd[1480]: Invalid user jenkins from 10.30.104.4 port 44034
Jan 26 11:44:32 prd-ubuntu1804-docker-8c-8g-3102 sshd[1480]: Received disconnect from 10.30.104.4 port 44034:11: Closed due to user request. [preauth]
Jan 26 11:44:32 prd-ubuntu1804-docker-8c-8g-3102 sshd[1480]: Disconnected from invalid user jenkins 10.30.104.4 port 44034 [preauth]
Jan 26 11:44:35 prd-ubuntu1804-docker-8c-8g-3102 sshd[1585]: Invalid user jenkins from 10.30.104.4 port 44042
Jan 26 11:44:35 prd-ubuntu1804-docker-8c-8g-3102 sshd[1585]: Received disconnect from 10.30.104.4 port 44042:11: Closed due to user request. [preauth]
Jan 26 11:44:35 prd-ubuntu1804-docker-8c-8g-3102 sshd[1585]: Disconnected from invalid user jenkins 10.30.104.4 port 44042 [preauth]
Jan 26 11:44:37 prd-ubuntu1804-docker-8c-8g-3102 sshd[1741]: Invalid user jenkins from 10.30.104.4 port 44048
Jan 26 11:44:37 prd-ubuntu1804-docker-8c-8g-3102 sshd[1741]: Received disconnect from 10.30.104.4 port 44048:11: Closed due to user request. [preauth]
Jan 26 11:44:37 prd-ubuntu1804-docker-8c-8g-3102 sshd[1741]: Disconnected from invalid user jenkins 10.30.104.4 port 44048 [preauth]
Jan 26 11:44:39 prd-ubuntu1804-docker-8c-8g-3102 sshd[1761]: Invalid user jenkins from 10.30.104.4 port 44054
Jan 26 11:44:39 prd-ubuntu1804-docker-8c-8g-3102 sshd[1761]: Received disconnect from 10.30.104.4 port 44054:11: Closed due to user request. [preauth]
Jan 26 11:44:39 prd-ubuntu1804-docker-8c-8g-3102 sshd[1761]: Disconnected from invalid user jenkins 10.30.104.4 port 44054 [preauth]
Jan 26 11:44:41 prd-ubuntu1804-docker-8c-8g-3102 sshd[1763]: Invalid user jenkins from 10.30.104.4 port 44060
Jan 26 11:44:41 prd-ubuntu1804-docker-8c-8g-3102 sshd[1763]: Received disconnect from 10.30.104.4 port 44060:11: Closed due to user request. [preauth]
Jan 26 11:44:41 prd-ubuntu1804-docker-8c-8g-3102 sshd[1763]: Disconnected from invalid user jenkins 10.30.104.4 port 44060 [preauth]
Jan 26 11:44:43 prd-ubuntu1804-docker-8c-8g-3102 sshd[1765]: Invalid user jenkins from 10.30.104.4 port 44068
Jan 26 11:44:43 prd-ubuntu1804-docker-8c-8g-3102 sshd[1765]: Received disconnect from 10.30.104.4 port 44068:11: Closed due to user request. [preauth]
Jan 26 11:44:43 prd-ubuntu1804-docker-8c-8g-3102 sshd[1765]: Disconnected from invalid user jenkins 10.30.104.4 port 44068 [preauth]
Jan 26 11:44:46 prd-ubuntu1804-docker-8c-8g-3102 sshd[1767]: Invalid user jenkins from 10.30.104.4 port 44074
Jan 26 11:44:46 prd-ubuntu1804-docker-8c-8g-3102 sshd[1767]: Received disconnect from 10.30.104.4 port 44074:11: Closed due to user request. [preauth]
Jan 26 11:44:46 prd-ubuntu1804-docker-8c-8g-3102 sshd[1767]: Disconnected from invalid user jenkins 10.30.104.4 port 44074 [preauth]
Jan 26 11:44:48 prd-ubuntu1804-docker-8c-8g-3102 sshd[1779]: Invalid user jenkins from 10.30.104.4 port 44080
Jan 26 11:44:48 prd-ubuntu1804-docker-8c-8g-3102 sshd[1779]: Received disconnect from 10.30.104.4 port 44080:11: Closed due to user request. [preauth]
Jan 26 11:44:48 prd-ubuntu1804-docker-8c-8g-3102 sshd[1779]: Disconnected from invalid user jenkins 10.30.104.4 port 44080 [preauth]
Jan 26 11:44:50 prd-ubuntu1804-docker-8c-8g-3102 sshd[1792]: Invalid user jenkins from 10.30.104.4 port 44084
Jan 26 11:44:50 prd-ubuntu1804-docker-8c-8g-3102 sshd[1792]: Received disconnect from 10.30.104.4 port 44084:11: Closed due to user request. [preauth]
Jan 26 11:44:50 prd-ubuntu1804-docker-8c-8g-3102 sshd[1792]: Disconnected from invalid user jenkins 10.30.104.4 port 44084 [preauth]
Jan 26 11:44:51 prd-ubuntu1804-docker-8c-8g-3102 useradd[1812]: new group: name=jenkins, GID=1001
Jan 26 11:44:51 prd-ubuntu1804-docker-8c-8g-3102 useradd[1812]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Jan 26 11:44:52 prd-ubuntu1804-docker-8c-8g-3102 usermod[1819]: add 'jenkins' to group 'docker'
Jan 26 11:44:52 prd-ubuntu1804-docker-8c-8g-3102 usermod[1819]: add 'jenkins' to shadow group 'docker'
Jan 26 11:44:52 prd-ubuntu1804-docker-8c-8g-3102 sshd[1850]: Accepted publickey for jenkins from 10.30.104.4 port 44090 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Jan 26 11:44:52 prd-ubuntu1804-docker-8c-8g-3102 sshd[1850]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jan 26 11:44:52 prd-ubuntu1804-docker-8c-8g-3102 systemd-logind[1084]: New session 1 of user jenkins.
Jan 26 11:44:52 prd-ubuntu1804-docker-8c-8g-3102 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jan 26 11:45:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[2155]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 26 11:45:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[2155]: pam_unix(cron:session): session closed for user root
Jan 26 11:46:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[2856]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 26 11:46:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[2856]: pam_unix(cron:session): session closed for user root
Jan 26 11:47:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[5768]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 26 11:47:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[5768]: pam_unix(cron:session): session closed for user root
Jan 26 11:48:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[9282]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 26 11:48:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[9282]: pam_unix(cron:session): session closed for user root
Jan 26 11:49:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[9767]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 26 11:49:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[9767]: pam_unix(cron:session): session closed for user root
Jan 26 11:50:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[10313]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 26 11:50:01 prd-ubuntu1804-docker-8c-8g-3102 CRON[10313]: pam_unix(cron:session): session closed for user root
Jan 26 11:50:08 prd-ubuntu1804-docker-8c-8g-3102 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-security-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Jan 26 11:50:08 prd-ubuntu1804-docker-8c-8g-3102 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)