Jun 20 16:37:45 prd-ubuntu1804-docker-8c-8g-22560 passwd[992]: password for 'ubuntu' changed by 'root'
Jun 20 16:37:45 prd-ubuntu1804-docker-8c-8g-22560 systemd-logind[1018]: Watching system buttons on /dev/input/event0 (Power Button)
Jun 20 16:37:45 prd-ubuntu1804-docker-8c-8g-22560 systemd-logind[1018]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jun 20 16:37:45 prd-ubuntu1804-docker-8c-8g-22560 systemd-logind[1018]: New seat seat0.
Jun 20 16:37:45 prd-ubuntu1804-docker-8c-8g-22560 sshd[1113]: Server listening on 0.0.0.0 port 22.
Jun 20 16:37:45 prd-ubuntu1804-docker-8c-8g-22560 sshd[1113]: Server listening on :: port 22.
Jun 20 16:37:49 prd-ubuntu1804-docker-8c-8g-22560 sshd[1372]: Did not receive identification string from 10.30.104.4 port 40904
Jun 20 16:37:51 prd-ubuntu1804-docker-8c-8g-22560 sshd[1426]: Invalid user jenkins from 10.30.104.4 port 40908
Jun 20 16:37:51 prd-ubuntu1804-docker-8c-8g-22560 sshd[1426]: Received disconnect from 10.30.104.4 port 40908:11: Closed due to user request. [preauth]
Jun 20 16:37:51 prd-ubuntu1804-docker-8c-8g-22560 sshd[1426]: Disconnected from invalid user jenkins 10.30.104.4 port 40908 [preauth]
Jun 20 16:37:53 prd-ubuntu1804-docker-8c-8g-22560 sshd[1448]: Invalid user jenkins from 10.30.104.4 port 40910
Jun 20 16:37:53 prd-ubuntu1804-docker-8c-8g-22560 sshd[1448]: Received disconnect from 10.30.104.4 port 40910:11: Closed due to user request. [preauth]
Jun 20 16:37:53 prd-ubuntu1804-docker-8c-8g-22560 sshd[1448]: Disconnected from invalid user jenkins 10.30.104.4 port 40910 [preauth]
Jun 20 16:37:55 prd-ubuntu1804-docker-8c-8g-22560 sshd[1455]: Invalid user jenkins from 10.30.104.4 port 40914
Jun 20 16:37:55 prd-ubuntu1804-docker-8c-8g-22560 sshd[1455]: Received disconnect from 10.30.104.4 port 40914:11: Closed due to user request. [preauth]
Jun 20 16:37:55 prd-ubuntu1804-docker-8c-8g-22560 sshd[1455]: Disconnected from invalid user jenkins 10.30.104.4 port 40914 [preauth]
Jun 20 16:37:57 prd-ubuntu1804-docker-8c-8g-22560 sshd[1463]: Invalid user jenkins from 10.30.104.4 port 40918
Jun 20 16:37:57 prd-ubuntu1804-docker-8c-8g-22560 sshd[1463]: Received disconnect from 10.30.104.4 port 40918:11: Closed due to user request. [preauth]
Jun 20 16:37:57 prd-ubuntu1804-docker-8c-8g-22560 sshd[1463]: Disconnected from invalid user jenkins 10.30.104.4 port 40918 [preauth]
Jun 20 16:37:59 prd-ubuntu1804-docker-8c-8g-22560 sshd[1465]: Invalid user jenkins from 10.30.104.4 port 40922
Jun 20 16:37:59 prd-ubuntu1804-docker-8c-8g-22560 sshd[1465]: Received disconnect from 10.30.104.4 port 40922:11: Closed due to user request. [preauth]
Jun 20 16:37:59 prd-ubuntu1804-docker-8c-8g-22560 sshd[1465]: Disconnected from invalid user jenkins 10.30.104.4 port 40922 [preauth]
Jun 20 16:38:01 prd-ubuntu1804-docker-8c-8g-22560 CRON[1474]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 20 16:38:01 prd-ubuntu1804-docker-8c-8g-22560 CRON[1474]: pam_unix(cron:session): session closed for user root
Jun 20 16:38:01 prd-ubuntu1804-docker-8c-8g-22560 sshd[1481]: Invalid user jenkins from 10.30.104.4 port 40924
Jun 20 16:38:01 prd-ubuntu1804-docker-8c-8g-22560 sshd[1481]: Received disconnect from 10.30.104.4 port 40924:11: Closed due to user request. [preauth]
Jun 20 16:38:01 prd-ubuntu1804-docker-8c-8g-22560 sshd[1481]: Disconnected from invalid user jenkins 10.30.104.4 port 40924 [preauth]
Jun 20 16:38:03 prd-ubuntu1804-docker-8c-8g-22560 sshd[1483]: Invalid user jenkins from 10.30.104.4 port 40932
Jun 20 16:38:04 prd-ubuntu1804-docker-8c-8g-22560 sshd[1483]: Received disconnect from 10.30.104.4 port 40932:11: Closed due to user request. [preauth]
Jun 20 16:38:04 prd-ubuntu1804-docker-8c-8g-22560 sshd[1483]: Disconnected from invalid user jenkins 10.30.104.4 port 40932 [preauth]
Jun 20 16:38:06 prd-ubuntu1804-docker-8c-8g-22560 sshd[1485]: Invalid user jenkins from 10.30.104.4 port 40936
Jun 20 16:38:06 prd-ubuntu1804-docker-8c-8g-22560 sshd[1485]: Received disconnect from 10.30.104.4 port 40936:11: Closed due to user request. [preauth]
Jun 20 16:38:06 prd-ubuntu1804-docker-8c-8g-22560 sshd[1485]: Disconnected from invalid user jenkins 10.30.104.4 port 40936 [preauth]
Jun 20 16:38:08 prd-ubuntu1804-docker-8c-8g-22560 sshd[1487]: Invalid user jenkins from 10.30.104.4 port 40938
Jun 20 16:38:08 prd-ubuntu1804-docker-8c-8g-22560 sshd[1487]: Received disconnect from 10.30.104.4 port 40938:11: Closed due to user request. [preauth]
Jun 20 16:38:08 prd-ubuntu1804-docker-8c-8g-22560 sshd[1487]: Disconnected from invalid user jenkins 10.30.104.4 port 40938 [preauth]
Jun 20 16:38:11 prd-ubuntu1804-docker-8c-8g-22560 sshd[1710]: Invalid user jenkins from 10.30.104.4 port 40940
Jun 20 16:38:11 prd-ubuntu1804-docker-8c-8g-22560 sshd[1710]: Received disconnect from 10.30.104.4 port 40940:11: Closed due to user request. [preauth]
Jun 20 16:38:11 prd-ubuntu1804-docker-8c-8g-22560 sshd[1710]: Disconnected from invalid user jenkins 10.30.104.4 port 40940 [preauth]
Jun 20 16:38:13 prd-ubuntu1804-docker-8c-8g-22560 sshd[1757]: Invalid user jenkins from 10.30.104.4 port 40942
Jun 20 16:38:13 prd-ubuntu1804-docker-8c-8g-22560 sshd[1757]: Received disconnect from 10.30.104.4 port 40942:11: Closed due to user request. [preauth]
Jun 20 16:38:13 prd-ubuntu1804-docker-8c-8g-22560 sshd[1757]: Disconnected from invalid user jenkins 10.30.104.4 port 40942 [preauth]
Jun 20 16:38:15 prd-ubuntu1804-docker-8c-8g-22560 sshd[1774]: Invalid user jenkins from 10.30.104.4 port 40946
Jun 20 16:38:15 prd-ubuntu1804-docker-8c-8g-22560 sshd[1774]: Received disconnect from 10.30.104.4 port 40946:11: Closed due to user request. [preauth]
Jun 20 16:38:15 prd-ubuntu1804-docker-8c-8g-22560 sshd[1774]: Disconnected from invalid user jenkins 10.30.104.4 port 40946 [preauth]
Jun 20 16:38:15 prd-ubuntu1804-docker-8c-8g-22560 useradd[1779]: new group: name=jenkins, GID=1001
Jun 20 16:38:15 prd-ubuntu1804-docker-8c-8g-22560 useradd[1779]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Jun 20 16:38:15 prd-ubuntu1804-docker-8c-8g-22560 usermod[1786]: add 'jenkins' to group 'docker'
Jun 20 16:38:15 prd-ubuntu1804-docker-8c-8g-22560 usermod[1786]: add 'jenkins' to shadow group 'docker'
Jun 20 16:38:17 prd-ubuntu1804-docker-8c-8g-22560 sshd[1870]: Accepted publickey for jenkins from 10.30.104.4 port 40948 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Jun 20 16:38:17 prd-ubuntu1804-docker-8c-8g-22560 sshd[1870]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jun 20 16:38:17 prd-ubuntu1804-docker-8c-8g-22560 systemd-logind[1018]: New session 2 of user jenkins.
Jun 20 16:38:17 prd-ubuntu1804-docker-8c-8g-22560 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jun 20 16:39:02 prd-ubuntu1804-docker-8c-8g-22560 CRON[2459]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 20 16:39:02 prd-ubuntu1804-docker-8c-8g-22560 CRON[2459]: pam_unix(cron:session): session closed for user root
Jun 20 16:40:01 prd-ubuntu1804-docker-8c-8g-22560 CRON[3241]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 20 16:40:01 prd-ubuntu1804-docker-8c-8g-22560 CRON[3241]: pam_unix(cron:session): session closed for user root
Jun 20 16:41:01 prd-ubuntu1804-docker-8c-8g-22560 CRON[3429]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 20 16:41:01 prd-ubuntu1804-docker-8c-8g-22560 CRON[3429]: pam_unix(cron:session): session closed for user root
Jun 20 16:41:43 prd-ubuntu1804-docker-8c-8g-22560 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-history-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Jun 20 16:41:43 prd-ubuntu1804-docker-8c-8g-22560 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)