Apr 23 08:25:38 prd-ubuntu1804-docker-8c-8g-5086 passwd[1008]: password for 'ubuntu' changed by 'root'
Apr 23 08:25:38 prd-ubuntu1804-docker-8c-8g-5086 systemd-logind[1154]: Watching system buttons on /dev/input/event0 (Power Button)
Apr 23 08:25:38 prd-ubuntu1804-docker-8c-8g-5086 systemd-logind[1154]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Apr 23 08:25:38 prd-ubuntu1804-docker-8c-8g-5086 systemd-logind[1154]: New seat seat0.
Apr 23 08:25:38 prd-ubuntu1804-docker-8c-8g-5086 sshd[1322]: Server listening on 0.0.0.0 port 22.
Apr 23 08:25:38 prd-ubuntu1804-docker-8c-8g-5086 sshd[1322]: Server listening on :: port 22.
Apr 23 08:25:39 prd-ubuntu1804-docker-8c-8g-5086 sshd[1408]: Did not receive identification string from 10.30.104.4 port 54406
Apr 23 08:25:41 prd-ubuntu1804-docker-8c-8g-5086 sshd[1571]: Invalid user jenkins from 10.30.104.4 port 54414
Apr 23 08:25:41 prd-ubuntu1804-docker-8c-8g-5086 sshd[1571]: Received disconnect from 10.30.104.4 port 54414:11: Closed due to user request. [preauth]
Apr 23 08:25:41 prd-ubuntu1804-docker-8c-8g-5086 sshd[1571]: Disconnected from invalid user jenkins 10.30.104.4 port 54414 [preauth]
Apr 23 08:25:43 prd-ubuntu1804-docker-8c-8g-5086 sshd[1590]: Invalid user jenkins from 10.30.104.4 port 54428
Apr 23 08:25:43 prd-ubuntu1804-docker-8c-8g-5086 sshd[1590]: Received disconnect from 10.30.104.4 port 54428:11: Closed due to user request. [preauth]
Apr 23 08:25:43 prd-ubuntu1804-docker-8c-8g-5086 sshd[1590]: Disconnected from invalid user jenkins 10.30.104.4 port 54428 [preauth]
Apr 23 08:25:45 prd-ubuntu1804-docker-8c-8g-5086 sshd[1600]: Invalid user jenkins from 10.30.104.4 port 54438
Apr 23 08:25:46 prd-ubuntu1804-docker-8c-8g-5086 sshd[1600]: Received disconnect from 10.30.104.4 port 54438:11: Closed due to user request. [preauth]
Apr 23 08:25:46 prd-ubuntu1804-docker-8c-8g-5086 sshd[1600]: Disconnected from invalid user jenkins 10.30.104.4 port 54438 [preauth]
Apr 23 08:25:48 prd-ubuntu1804-docker-8c-8g-5086 sshd[1602]: Invalid user jenkins from 10.30.104.4 port 54446
Apr 23 08:25:48 prd-ubuntu1804-docker-8c-8g-5086 sshd[1602]: Received disconnect from 10.30.104.4 port 54446:11: Closed due to user request. [preauth]
Apr 23 08:25:48 prd-ubuntu1804-docker-8c-8g-5086 sshd[1602]: Disconnected from invalid user jenkins 10.30.104.4 port 54446 [preauth]
Apr 23 08:25:50 prd-ubuntu1804-docker-8c-8g-5086 sshd[1604]: Invalid user jenkins from 10.30.104.4 port 54460
Apr 23 08:25:50 prd-ubuntu1804-docker-8c-8g-5086 sshd[1604]: Received disconnect from 10.30.104.4 port 54460:11: Closed due to user request. [preauth]
Apr 23 08:25:50 prd-ubuntu1804-docker-8c-8g-5086 sshd[1604]: Disconnected from invalid user jenkins 10.30.104.4 port 54460 [preauth]
Apr 23 08:25:52 prd-ubuntu1804-docker-8c-8g-5086 sshd[1606]: Invalid user jenkins from 10.30.104.4 port 54472
Apr 23 08:25:52 prd-ubuntu1804-docker-8c-8g-5086 sshd[1606]: Received disconnect from 10.30.104.4 port 54472:11: Closed due to user request. [preauth]
Apr 23 08:25:52 prd-ubuntu1804-docker-8c-8g-5086 sshd[1606]: Disconnected from invalid user jenkins 10.30.104.4 port 54472 [preauth]
Apr 23 08:25:54 prd-ubuntu1804-docker-8c-8g-5086 sshd[1608]: Invalid user jenkins from 10.30.104.4 port 54556
Apr 23 08:25:54 prd-ubuntu1804-docker-8c-8g-5086 sshd[1608]: Received disconnect from 10.30.104.4 port 54556:11: Closed due to user request. [preauth]
Apr 23 08:25:54 prd-ubuntu1804-docker-8c-8g-5086 sshd[1608]: Disconnected from invalid user jenkins 10.30.104.4 port 54556 [preauth]
Apr 23 08:25:56 prd-ubuntu1804-docker-8c-8g-5086 sshd[1735]: Invalid user jenkins from 10.30.104.4 port 54564
Apr 23 08:25:57 prd-ubuntu1804-docker-8c-8g-5086 sshd[1735]: Received disconnect from 10.30.104.4 port 54564:11: Closed due to user request. [preauth]
Apr 23 08:25:57 prd-ubuntu1804-docker-8c-8g-5086 sshd[1735]: Disconnected from invalid user jenkins 10.30.104.4 port 54564 [preauth]
Apr 23 08:25:59 prd-ubuntu1804-docker-8c-8g-5086 sshd[1866]: Invalid user jenkins from 10.30.104.4 port 54578
Apr 23 08:25:59 prd-ubuntu1804-docker-8c-8g-5086 sshd[1866]: Received disconnect from 10.30.104.4 port 54578:11: Closed due to user request. [preauth]
Apr 23 08:25:59 prd-ubuntu1804-docker-8c-8g-5086 sshd[1866]: Disconnected from invalid user jenkins 10.30.104.4 port 54578 [preauth]
Apr 23 08:26:01 prd-ubuntu1804-docker-8c-8g-5086 sshd[1886]: Invalid user jenkins from 10.30.104.4 port 54584
Apr 23 08:26:01 prd-ubuntu1804-docker-8c-8g-5086 sshd[1886]: Received disconnect from 10.30.104.4 port 54584:11: Closed due to user request. [preauth]
Apr 23 08:26:01 prd-ubuntu1804-docker-8c-8g-5086 sshd[1886]: Disconnected from invalid user jenkins 10.30.104.4 port 54584 [preauth]
Apr 23 08:26:01 prd-ubuntu1804-docker-8c-8g-5086 CRON[1889]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 23 08:26:01 prd-ubuntu1804-docker-8c-8g-5086 CRON[1889]: pam_unix(cron:session): session closed for user root
Apr 23 08:26:03 prd-ubuntu1804-docker-8c-8g-5086 sshd[1897]: Invalid user jenkins from 10.30.104.4 port 54594
Apr 23 08:26:03 prd-ubuntu1804-docker-8c-8g-5086 sshd[1897]: Received disconnect from 10.30.104.4 port 54594:11: Closed due to user request. [preauth]
Apr 23 08:26:03 prd-ubuntu1804-docker-8c-8g-5086 sshd[1897]: Disconnected from invalid user jenkins 10.30.104.4 port 54594 [preauth]
Apr 23 08:26:05 prd-ubuntu1804-docker-8c-8g-5086 sshd[1899]: Invalid user jenkins from 10.30.104.4 port 54600
Apr 23 08:26:05 prd-ubuntu1804-docker-8c-8g-5086 sshd[1899]: Received disconnect from 10.30.104.4 port 54600:11: Closed due to user request. [preauth]
Apr 23 08:26:05 prd-ubuntu1804-docker-8c-8g-5086 sshd[1899]: Disconnected from invalid user jenkins 10.30.104.4 port 54600 [preauth]
Apr 23 08:26:05 prd-ubuntu1804-docker-8c-8g-5086 useradd[1906]: new group: name=jenkins, GID=1001
Apr 23 08:26:05 prd-ubuntu1804-docker-8c-8g-5086 useradd[1906]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Apr 23 08:26:06 prd-ubuntu1804-docker-8c-8g-5086 usermod[1913]: add 'jenkins' to group 'docker'
Apr 23 08:26:06 prd-ubuntu1804-docker-8c-8g-5086 usermod[1913]: add 'jenkins' to shadow group 'docker'
Apr 23 08:26:07 prd-ubuntu1804-docker-8c-8g-5086 sshd[1974]: Accepted publickey for jenkins from 10.30.104.4 port 54606 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Apr 23 08:26:07 prd-ubuntu1804-docker-8c-8g-5086 sshd[1974]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Apr 23 08:26:07 prd-ubuntu1804-docker-8c-8g-5086 systemd-logind[1154]: New session 2 of user jenkins.
Apr 23 08:26:07 prd-ubuntu1804-docker-8c-8g-5086 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Apr 23 08:27:01 prd-ubuntu1804-docker-8c-8g-5086 CRON[2548]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 23 08:27:01 prd-ubuntu1804-docker-8c-8g-5086 CRON[2548]: pam_unix(cron:session): session closed for user root
Apr 23 08:28:01 prd-ubuntu1804-docker-8c-8g-5086 CRON[3490]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 23 08:28:01 prd-ubuntu1804-docker-8c-8g-5086 CRON[3490]: pam_unix(cron:session): session closed for user root
Apr 23 08:28:52 prd-ubuntu1804-docker-8c-8g-5086 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-history-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Apr 23 08:28:52 prd-ubuntu1804-docker-8c-8g-5086 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)