Feb 27 07:27:27 prd-ubuntu1804-docker-8c-8g-211 passwd[1003]: password for 'ubuntu' changed by 'root'
Feb 27 07:27:27 prd-ubuntu1804-docker-8c-8g-211 systemd-logind[1162]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 27 07:27:27 prd-ubuntu1804-docker-8c-8g-211 systemd-logind[1162]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 27 07:27:27 prd-ubuntu1804-docker-8c-8g-211 systemd-logind[1162]: New seat seat0.
Feb 27 07:27:27 prd-ubuntu1804-docker-8c-8g-211 sshd[1322]: Server listening on 0.0.0.0 port 22.
Feb 27 07:27:27 prd-ubuntu1804-docker-8c-8g-211 sshd[1322]: Server listening on :: port 22.
Feb 27 07:27:30 prd-ubuntu1804-docker-8c-8g-211 sshd[1541]: Did not receive identification string from 10.30.104.4 port 34150
Feb 27 07:27:38 prd-ubuntu1804-docker-8c-8g-211 sshd[1598]: Invalid user jenkins from 10.30.104.4 port 34172
Feb 27 07:27:38 prd-ubuntu1804-docker-8c-8g-211 sshd[1598]: Received disconnect from 10.30.104.4 port 34172:11: Closed due to user request. [preauth]
Feb 27 07:27:38 prd-ubuntu1804-docker-8c-8g-211 sshd[1598]: Disconnected from invalid user jenkins 10.30.104.4 port 34172 [preauth]
Feb 27 07:27:40 prd-ubuntu1804-docker-8c-8g-211 sshd[1602]: Invalid user jenkins from 10.30.104.4 port 34184
Feb 27 07:27:40 prd-ubuntu1804-docker-8c-8g-211 sshd[1602]: Received disconnect from 10.30.104.4 port 34184:11: Closed due to user request. [preauth]
Feb 27 07:27:40 prd-ubuntu1804-docker-8c-8g-211 sshd[1602]: Disconnected from invalid user jenkins 10.30.104.4 port 34184 [preauth]
Feb 27 07:27:42 prd-ubuntu1804-docker-8c-8g-211 sshd[1604]: Invalid user jenkins from 10.30.104.4 port 34194
Feb 27 07:27:42 prd-ubuntu1804-docker-8c-8g-211 sshd[1604]: Received disconnect from 10.30.104.4 port 34194:11: Closed due to user request. [preauth]
Feb 27 07:27:42 prd-ubuntu1804-docker-8c-8g-211 sshd[1604]: Disconnected from invalid user jenkins 10.30.104.4 port 34194 [preauth]
Feb 27 07:27:44 prd-ubuntu1804-docker-8c-8g-211 sshd[1606]: Invalid user jenkins from 10.30.104.4 port 34198
Feb 27 07:27:44 prd-ubuntu1804-docker-8c-8g-211 sshd[1606]: Received disconnect from 10.30.104.4 port 34198:11: Closed due to user request. [preauth]
Feb 27 07:27:44 prd-ubuntu1804-docker-8c-8g-211 sshd[1606]: Disconnected from invalid user jenkins 10.30.104.4 port 34198 [preauth]
Feb 27 07:27:46 prd-ubuntu1804-docker-8c-8g-211 sshd[1614]: Invalid user jenkins from 10.30.104.4 port 34206
Feb 27 07:27:46 prd-ubuntu1804-docker-8c-8g-211 sshd[1614]: Received disconnect from 10.30.104.4 port 34206:11: Closed due to user request. [preauth]
Feb 27 07:27:46 prd-ubuntu1804-docker-8c-8g-211 sshd[1614]: Disconnected from invalid user jenkins 10.30.104.4 port 34206 [preauth]
Feb 27 07:27:48 prd-ubuntu1804-docker-8c-8g-211 sshd[1630]: Invalid user jenkins from 10.30.104.4 port 34216
Feb 27 07:27:48 prd-ubuntu1804-docker-8c-8g-211 sshd[1630]: Received disconnect from 10.30.104.4 port 34216:11: Closed due to user request. [preauth]
Feb 27 07:27:48 prd-ubuntu1804-docker-8c-8g-211 sshd[1630]: Disconnected from invalid user jenkins 10.30.104.4 port 34216 [preauth]
Feb 27 07:27:52 prd-ubuntu1804-docker-8c-8g-211 sshd[1830]: Invalid user jenkins from 10.30.104.4 port 34226
Feb 27 07:27:52 prd-ubuntu1804-docker-8c-8g-211 sshd[1830]: Received disconnect from 10.30.104.4 port 34226:11: Closed due to user request. [preauth]
Feb 27 07:27:52 prd-ubuntu1804-docker-8c-8g-211 sshd[1830]: Disconnected from invalid user jenkins 10.30.104.4 port 34226 [preauth]
Feb 27 07:27:54 prd-ubuntu1804-docker-8c-8g-211 sshd[1874]: Invalid user jenkins from 10.30.104.4 port 34232
Feb 27 07:27:54 prd-ubuntu1804-docker-8c-8g-211 sshd[1874]: Received disconnect from 10.30.104.4 port 34232:11: Closed due to user request. [preauth]
Feb 27 07:27:54 prd-ubuntu1804-docker-8c-8g-211 sshd[1874]: Disconnected from invalid user jenkins 10.30.104.4 port 34232 [preauth]
Feb 27 07:27:56 prd-ubuntu1804-docker-8c-8g-211 sshd[1878]: Invalid user jenkins from 10.30.104.4 port 34250
Feb 27 07:27:56 prd-ubuntu1804-docker-8c-8g-211 sshd[1878]: Received disconnect from 10.30.104.4 port 34250:11: Closed due to user request. [preauth]
Feb 27 07:27:56 prd-ubuntu1804-docker-8c-8g-211 sshd[1878]: Disconnected from invalid user jenkins 10.30.104.4 port 34250 [preauth]
Feb 27 07:27:58 prd-ubuntu1804-docker-8c-8g-211 sshd[1880]: Invalid user jenkins from 10.30.104.4 port 34262
Feb 27 07:27:58 prd-ubuntu1804-docker-8c-8g-211 sshd[1880]: Received disconnect from 10.30.104.4 port 34262:11: Closed due to user request. [preauth]
Feb 27 07:27:58 prd-ubuntu1804-docker-8c-8g-211 sshd[1880]: Disconnected from invalid user jenkins 10.30.104.4 port 34262 [preauth]
Feb 27 07:28:00 prd-ubuntu1804-docker-8c-8g-211 sshd[1900]: Invalid user jenkins from 10.30.104.4 port 34270
Feb 27 07:28:00 prd-ubuntu1804-docker-8c-8g-211 sshd[1900]: Received disconnect from 10.30.104.4 port 34270:11: Closed due to user request. [preauth]
Feb 27 07:28:00 prd-ubuntu1804-docker-8c-8g-211 sshd[1900]: Disconnected from invalid user jenkins 10.30.104.4 port 34270 [preauth]
Feb 27 07:28:02 prd-ubuntu1804-docker-8c-8g-211 CRON[1902]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:28:02 prd-ubuntu1804-docker-8c-8g-211 CRON[1902]: pam_unix(cron:session): session closed for user root
Feb 27 07:28:02 prd-ubuntu1804-docker-8c-8g-211 sshd[1911]: Invalid user jenkins from 10.30.104.4 port 34278
Feb 27 07:28:02 prd-ubuntu1804-docker-8c-8g-211 sshd[1911]: Received disconnect from 10.30.104.4 port 34278:11: Closed due to user request. [preauth]
Feb 27 07:28:02 prd-ubuntu1804-docker-8c-8g-211 sshd[1911]: Disconnected from invalid user jenkins 10.30.104.4 port 34278 [preauth]
Feb 27 07:28:04 prd-ubuntu1804-docker-8c-8g-211 sshd[1913]: Invalid user jenkins from 10.30.104.4 port 34286
Feb 27 07:28:04 prd-ubuntu1804-docker-8c-8g-211 sshd[1913]: Received disconnect from 10.30.104.4 port 34286:11: Closed due to user request. [preauth]
Feb 27 07:28:04 prd-ubuntu1804-docker-8c-8g-211 sshd[1913]: Disconnected from invalid user jenkins 10.30.104.4 port 34286 [preauth]
Feb 27 07:28:07 prd-ubuntu1804-docker-8c-8g-211 sshd[1915]: Invalid user jenkins from 10.30.104.4 port 34294
Feb 27 07:28:07 prd-ubuntu1804-docker-8c-8g-211 sshd[1915]: Received disconnect from 10.30.104.4 port 34294:11: Closed due to user request. [preauth]
Feb 27 07:28:07 prd-ubuntu1804-docker-8c-8g-211 sshd[1915]: Disconnected from invalid user jenkins 10.30.104.4 port 34294 [preauth]
Feb 27 07:28:08 prd-ubuntu1804-docker-8c-8g-211 useradd[1935]: new group: name=jenkins, GID=1001
Feb 27 07:28:08 prd-ubuntu1804-docker-8c-8g-211 useradd[1935]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Feb 27 07:28:09 prd-ubuntu1804-docker-8c-8g-211 sshd[1936]: Invalid user jenkins from 10.30.104.4 port 34302
Feb 27 07:28:09 prd-ubuntu1804-docker-8c-8g-211 sshd[1936]: Received disconnect from 10.30.104.4 port 34302:11: Closed due to user request. [preauth]
Feb 27 07:28:09 prd-ubuntu1804-docker-8c-8g-211 sshd[1936]: Disconnected from invalid user jenkins 10.30.104.4 port 34302 [preauth]
Feb 27 07:28:10 prd-ubuntu1804-docker-8c-8g-211 usermod[1944]: add 'jenkins' to group 'docker'
Feb 27 07:28:10 prd-ubuntu1804-docker-8c-8g-211 usermod[1944]: add 'jenkins' to shadow group 'docker'
Feb 27 07:28:11 prd-ubuntu1804-docker-8c-8g-211 sshd[1965]: Accepted publickey for jenkins from 10.30.104.4 port 34312 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Feb 27 07:28:11 prd-ubuntu1804-docker-8c-8g-211 sshd[1965]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 27 07:28:11 prd-ubuntu1804-docker-8c-8g-211 systemd-logind[1162]: New session 2 of user jenkins.
Feb 27 07:28:11 prd-ubuntu1804-docker-8c-8g-211 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 27 07:29:01 prd-ubuntu1804-docker-8c-8g-211 CRON[2570]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:29:01 prd-ubuntu1804-docker-8c-8g-211 CRON[2570]: pam_unix(cron:session): session closed for user root
Feb 27 07:30:01 prd-ubuntu1804-docker-8c-8g-211 CRON[3375]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:30:01 prd-ubuntu1804-docker-8c-8g-211 CRON[3375]: pam_unix(cron:session): session closed for user root
Feb 27 07:31:01 prd-ubuntu1804-docker-8c-8g-211 CRON[3816]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:31:01 prd-ubuntu1804-docker-8c-8g-211 CRON[3816]: pam_unix(cron:session): session closed for user root
Feb 27 07:32:01 prd-ubuntu1804-docker-8c-8g-211 CRON[3833]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:32:01 prd-ubuntu1804-docker-8c-8g-211 CRON[3833]: pam_unix(cron:session): session closed for user root
Feb 27 07:33:01 prd-ubuntu1804-docker-8c-8g-211 CRON[4387]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:33:01 prd-ubuntu1804-docker-8c-8g-211 CRON[4387]: pam_unix(cron:session): session closed for user root
Feb 27 07:33:52 prd-ubuntu1804-docker-8c-8g-211 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-smoke-usecases-robot-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Feb 27 07:33:52 prd-ubuntu1804-docker-8c-8g-211 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)