Feb 27 07:27:34 prd-ubuntu1804-docker-8c-8g-207 passwd[1018]: password for 'ubuntu' changed by 'root'
Feb 27 07:27:34 prd-ubuntu1804-docker-8c-8g-207 systemd-logind[1148]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 27 07:27:34 prd-ubuntu1804-docker-8c-8g-207 systemd-logind[1148]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 27 07:27:34 prd-ubuntu1804-docker-8c-8g-207 systemd-logind[1148]: New seat seat0.
Feb 27 07:27:34 prd-ubuntu1804-docker-8c-8g-207 sshd[1321]: Server listening on 0.0.0.0 port 22.
Feb 27 07:27:34 prd-ubuntu1804-docker-8c-8g-207 sshd[1321]: Server listening on :: port 22.
Feb 27 07:27:40 prd-ubuntu1804-docker-8c-8g-207 sshd[1587]: Did not receive identification string from 10.30.104.4 port 60316
Feb 27 07:27:48 prd-ubuntu1804-docker-8c-8g-207 sshd[1601]: Invalid user jenkins from 10.30.104.4 port 60346
Feb 27 07:27:48 prd-ubuntu1804-docker-8c-8g-207 sshd[1601]: Received disconnect from 10.30.104.4 port 60346:11: Closed due to user request. [preauth]
Feb 27 07:27:48 prd-ubuntu1804-docker-8c-8g-207 sshd[1601]: Disconnected from invalid user jenkins 10.30.104.4 port 60346 [preauth]
Feb 27 07:27:50 prd-ubuntu1804-docker-8c-8g-207 sshd[1611]: Invalid user jenkins from 10.30.104.4 port 60356
Feb 27 07:27:51 prd-ubuntu1804-docker-8c-8g-207 sshd[1611]: Received disconnect from 10.30.104.4 port 60356:11: Closed due to user request. [preauth]
Feb 27 07:27:51 prd-ubuntu1804-docker-8c-8g-207 sshd[1611]: Disconnected from invalid user jenkins 10.30.104.4 port 60356 [preauth]
Feb 27 07:27:53 prd-ubuntu1804-docker-8c-8g-207 sshd[1613]: Invalid user jenkins from 10.30.104.4 port 60364
Feb 27 07:27:53 prd-ubuntu1804-docker-8c-8g-207 sshd[1613]: Received disconnect from 10.30.104.4 port 60364:11: Closed due to user request. [preauth]
Feb 27 07:27:53 prd-ubuntu1804-docker-8c-8g-207 sshd[1613]: Disconnected from invalid user jenkins 10.30.104.4 port 60364 [preauth]
Feb 27 07:27:55 prd-ubuntu1804-docker-8c-8g-207 sshd[1772]: Invalid user jenkins from 10.30.104.4 port 60380
Feb 27 07:27:55 prd-ubuntu1804-docker-8c-8g-207 sshd[1772]: Received disconnect from 10.30.104.4 port 60380:11: Closed due to user request. [preauth]
Feb 27 07:27:55 prd-ubuntu1804-docker-8c-8g-207 sshd[1772]: Disconnected from invalid user jenkins 10.30.104.4 port 60380 [preauth]
Feb 27 07:27:57 prd-ubuntu1804-docker-8c-8g-207 sshd[1845]: Invalid user jenkins from 10.30.104.4 port 60388
Feb 27 07:27:57 prd-ubuntu1804-docker-8c-8g-207 sshd[1845]: Received disconnect from 10.30.104.4 port 60388:11: Closed due to user request. [preauth]
Feb 27 07:27:57 prd-ubuntu1804-docker-8c-8g-207 sshd[1845]: Disconnected from invalid user jenkins 10.30.104.4 port 60388 [preauth]
Feb 27 07:27:59 prd-ubuntu1804-docker-8c-8g-207 sshd[1883]: Invalid user jenkins from 10.30.104.4 port 60400
Feb 27 07:27:59 prd-ubuntu1804-docker-8c-8g-207 sshd[1883]: Received disconnect from 10.30.104.4 port 60400:11: Closed due to user request. [preauth]
Feb 27 07:27:59 prd-ubuntu1804-docker-8c-8g-207 sshd[1883]: Disconnected from invalid user jenkins 10.30.104.4 port 60400 [preauth]
Feb 27 07:28:01 prd-ubuntu1804-docker-8c-8g-207 CRON[1887]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:28:01 prd-ubuntu1804-docker-8c-8g-207 CRON[1887]: pam_unix(cron:session): session closed for user root
Feb 27 07:28:01 prd-ubuntu1804-docker-8c-8g-207 sshd[1897]: Invalid user jenkins from 10.30.104.4 port 60408
Feb 27 07:28:01 prd-ubuntu1804-docker-8c-8g-207 sshd[1897]: Received disconnect from 10.30.104.4 port 60408:11: Closed due to user request. [preauth]
Feb 27 07:28:01 prd-ubuntu1804-docker-8c-8g-207 sshd[1897]: Disconnected from invalid user jenkins 10.30.104.4 port 60408 [preauth]
Feb 27 07:28:04 prd-ubuntu1804-docker-8c-8g-207 sshd[1899]: Invalid user jenkins from 10.30.104.4 port 60416
Feb 27 07:28:04 prd-ubuntu1804-docker-8c-8g-207 sshd[1899]: Received disconnect from 10.30.104.4 port 60416:11: Closed due to user request. [preauth]
Feb 27 07:28:04 prd-ubuntu1804-docker-8c-8g-207 sshd[1899]: Disconnected from invalid user jenkins 10.30.104.4 port 60416 [preauth]
Feb 27 07:28:06 prd-ubuntu1804-docker-8c-8g-207 sshd[1921]: Invalid user jenkins from 10.30.104.4 port 60424
Feb 27 07:28:06 prd-ubuntu1804-docker-8c-8g-207 sshd[1921]: Received disconnect from 10.30.104.4 port 60424:11: Closed due to user request. [preauth]
Feb 27 07:28:06 prd-ubuntu1804-docker-8c-8g-207 sshd[1921]: Disconnected from invalid user jenkins 10.30.104.4 port 60424 [preauth]
Feb 27 07:28:08 prd-ubuntu1804-docker-8c-8g-207 sshd[1923]: Invalid user jenkins from 10.30.104.4 port 60432
Feb 27 07:28:08 prd-ubuntu1804-docker-8c-8g-207 sshd[1923]: Received disconnect from 10.30.104.4 port 60432:11: Closed due to user request. [preauth]
Feb 27 07:28:08 prd-ubuntu1804-docker-8c-8g-207 sshd[1923]: Disconnected from invalid user jenkins 10.30.104.4 port 60432 [preauth]
Feb 27 07:28:10 prd-ubuntu1804-docker-8c-8g-207 sshd[1925]: Invalid user jenkins from 10.30.104.4 port 60442
Feb 27 07:28:10 prd-ubuntu1804-docker-8c-8g-207 sshd[1925]: Received disconnect from 10.30.104.4 port 60442:11: Closed due to user request. [preauth]
Feb 27 07:28:10 prd-ubuntu1804-docker-8c-8g-207 sshd[1925]: Disconnected from invalid user jenkins 10.30.104.4 port 60442 [preauth]
Feb 27 07:28:12 prd-ubuntu1804-docker-8c-8g-207 sshd[1927]: Invalid user jenkins from 10.30.104.4 port 60450
Feb 27 07:28:12 prd-ubuntu1804-docker-8c-8g-207 sshd[1927]: Received disconnect from 10.30.104.4 port 60450:11: Closed due to user request. [preauth]
Feb 27 07:28:12 prd-ubuntu1804-docker-8c-8g-207 sshd[1927]: Disconnected from invalid user jenkins 10.30.104.4 port 60450 [preauth]
Feb 27 07:28:14 prd-ubuntu1804-docker-8c-8g-207 sshd[1929]: Invalid user jenkins from 10.30.104.4 port 60456
Feb 27 07:28:14 prd-ubuntu1804-docker-8c-8g-207 sshd[1929]: Received disconnect from 10.30.104.4 port 60456:11: Closed due to user request. [preauth]
Feb 27 07:28:14 prd-ubuntu1804-docker-8c-8g-207 sshd[1929]: Disconnected from invalid user jenkins 10.30.104.4 port 60456 [preauth]
Feb 27 07:28:16 prd-ubuntu1804-docker-8c-8g-207 sshd[1931]: Invalid user jenkins from 10.30.104.4 port 60464
Feb 27 07:28:16 prd-ubuntu1804-docker-8c-8g-207 sshd[1931]: Received disconnect from 10.30.104.4 port 60464:11: Closed due to user request. [preauth]
Feb 27 07:28:16 prd-ubuntu1804-docker-8c-8g-207 sshd[1931]: Disconnected from invalid user jenkins 10.30.104.4 port 60464 [preauth]
Feb 27 07:28:17 prd-ubuntu1804-docker-8c-8g-207 useradd[1951]: new group: name=jenkins, GID=1001
Feb 27 07:28:17 prd-ubuntu1804-docker-8c-8g-207 useradd[1951]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Feb 27 07:28:19 prd-ubuntu1804-docker-8c-8g-207 sshd[1955]: Received disconnect from 10.30.104.4 port 60472:11: Closed due to user request. [preauth]
Feb 27 07:28:19 prd-ubuntu1804-docker-8c-8g-207 sshd[1955]: Disconnected from authenticating user jenkins 10.30.104.4 port 60472 [preauth]
Feb 27 07:28:19 prd-ubuntu1804-docker-8c-8g-207 usermod[1960]: add 'jenkins' to group 'docker'
Feb 27 07:28:19 prd-ubuntu1804-docker-8c-8g-207 usermod[1960]: add 'jenkins' to shadow group 'docker'
Feb 27 07:28:21 prd-ubuntu1804-docker-8c-8g-207 sshd[2021]: Accepted publickey for jenkins from 10.30.104.4 port 60478 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Feb 27 07:28:21 prd-ubuntu1804-docker-8c-8g-207 sshd[2021]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 27 07:28:21 prd-ubuntu1804-docker-8c-8g-207 systemd-logind[1148]: New session 2 of user jenkins.
Feb 27 07:28:21 prd-ubuntu1804-docker-8c-8g-207 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 27 07:29:01 prd-ubuntu1804-docker-8c-8g-207 CRON[2565]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:29:01 prd-ubuntu1804-docker-8c-8g-207 CRON[2565]: pam_unix(cron:session): session closed for user root
Feb 27 07:30:01 prd-ubuntu1804-docker-8c-8g-207 CRON[3198]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:30:01 prd-ubuntu1804-docker-8c-8g-207 CRON[3198]: pam_unix(cron:session): session closed for user root
Feb 27 07:31:01 prd-ubuntu1804-docker-8c-8g-207 CRON[4165]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:31:01 prd-ubuntu1804-docker-8c-8g-207 CRON[4165]: pam_unix(cron:session): session closed for user root
Feb 27 07:32:01 prd-ubuntu1804-docker-8c-8g-207 CRON[4681]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:32:01 prd-ubuntu1804-docker-8c-8g-207 CRON[4681]: pam_unix(cron:session): session closed for user root
Feb 27 07:33:01 prd-ubuntu1804-docker-8c-8g-207 CRON[5353]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 27 07:33:01 prd-ubuntu1804-docker-8c-8g-207 CRON[5353]: pam_unix(cron:session): session closed for user root
Feb 27 07:33:46 prd-ubuntu1804-docker-8c-8g-207 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-testkube-executor-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Feb 27 07:33:46 prd-ubuntu1804-docker-8c-8g-207 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)