Oct 22 00:55:37 prd-ubuntu1804-docker-8c-8g-4315 passwd[995]: password for 'ubuntu' changed by 'root'
Oct 22 00:55:37 prd-ubuntu1804-docker-8c-8g-4315 systemd-logind[1057]: Watching system buttons on /dev/input/event0 (Power Button)
Oct 22 00:55:37 prd-ubuntu1804-docker-8c-8g-4315 systemd-logind[1057]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Oct 22 00:55:37 prd-ubuntu1804-docker-8c-8g-4315 systemd-logind[1057]: New seat seat0.
Oct 22 00:55:37 prd-ubuntu1804-docker-8c-8g-4315 sshd[1248]: Server listening on 0.0.0.0 port 22.
Oct 22 00:55:37 prd-ubuntu1804-docker-8c-8g-4315 sshd[1248]: Server listening on :: port 22.
Oct 22 00:55:38 prd-ubuntu1804-docker-8c-8g-4315 sshd[1472]: Did not receive identification string from 10.30.104.4 port 60134
Oct 22 00:55:43 prd-ubuntu1804-docker-8c-8g-4315 sshd[1568]: Invalid user jenkins from 10.30.104.4 port 60136
Oct 22 00:55:43 prd-ubuntu1804-docker-8c-8g-4315 sshd[1568]: Received disconnect from 10.30.104.4 port 60136:11: Closed due to user request. [preauth]
Oct 22 00:55:43 prd-ubuntu1804-docker-8c-8g-4315 sshd[1568]: Disconnected from invalid user jenkins 10.30.104.4 port 60136 [preauth]
Oct 22 00:55:45 prd-ubuntu1804-docker-8c-8g-4315 sshd[1581]: Invalid user jenkins from 10.30.104.4 port 60142
Oct 22 00:55:45 prd-ubuntu1804-docker-8c-8g-4315 sshd[1581]: Received disconnect from 10.30.104.4 port 60142:11: Closed due to user request. [preauth]
Oct 22 00:55:45 prd-ubuntu1804-docker-8c-8g-4315 sshd[1581]: Disconnected from invalid user jenkins 10.30.104.4 port 60142 [preauth]
Oct 22 00:55:48 prd-ubuntu1804-docker-8c-8g-4315 sshd[1583]: Invalid user jenkins from 10.30.104.4 port 60144
Oct 22 00:55:48 prd-ubuntu1804-docker-8c-8g-4315 sshd[1583]: Received disconnect from 10.30.104.4 port 60144:11: Closed due to user request. [preauth]
Oct 22 00:55:48 prd-ubuntu1804-docker-8c-8g-4315 sshd[1583]: Disconnected from invalid user jenkins 10.30.104.4 port 60144 [preauth]
Oct 22 00:55:50 prd-ubuntu1804-docker-8c-8g-4315 sshd[1585]: Invalid user jenkins from 10.30.104.4 port 60146
Oct 22 00:55:50 prd-ubuntu1804-docker-8c-8g-4315 sshd[1585]: Received disconnect from 10.30.104.4 port 60146:11: Closed due to user request. [preauth]
Oct 22 00:55:50 prd-ubuntu1804-docker-8c-8g-4315 sshd[1585]: Disconnected from invalid user jenkins 10.30.104.4 port 60146 [preauth]
Oct 22 00:55:52 prd-ubuntu1804-docker-8c-8g-4315 sshd[1587]: Invalid user jenkins from 10.30.104.4 port 60148
Oct 22 00:55:52 prd-ubuntu1804-docker-8c-8g-4315 sshd[1587]: Received disconnect from 10.30.104.4 port 60148:11: Closed due to user request. [preauth]
Oct 22 00:55:52 prd-ubuntu1804-docker-8c-8g-4315 sshd[1587]: Disconnected from invalid user jenkins 10.30.104.4 port 60148 [preauth]
Oct 22 00:55:54 prd-ubuntu1804-docker-8c-8g-4315 sshd[1589]: Invalid user jenkins from 10.30.104.4 port 60150
Oct 22 00:55:54 prd-ubuntu1804-docker-8c-8g-4315 sshd[1589]: Received disconnect from 10.30.104.4 port 60150:11: Closed due to user request. [preauth]
Oct 22 00:55:54 prd-ubuntu1804-docker-8c-8g-4315 sshd[1589]: Disconnected from invalid user jenkins 10.30.104.4 port 60150 [preauth]
Oct 22 00:55:56 prd-ubuntu1804-docker-8c-8g-4315 sshd[1743]: Invalid user jenkins from 10.30.104.4 port 60152
Oct 22 00:55:56 prd-ubuntu1804-docker-8c-8g-4315 sshd[1743]: Received disconnect from 10.30.104.4 port 60152:11: Closed due to user request. [preauth]
Oct 22 00:55:56 prd-ubuntu1804-docker-8c-8g-4315 sshd[1743]: Disconnected from invalid user jenkins 10.30.104.4 port 60152 [preauth]
Oct 22 00:55:58 prd-ubuntu1804-docker-8c-8g-4315 sshd[1856]: Invalid user jenkins from 10.30.104.4 port 60154
Oct 22 00:55:58 prd-ubuntu1804-docker-8c-8g-4315 sshd[1856]: Received disconnect from 10.30.104.4 port 60154:11: Closed due to user request. [preauth]
Oct 22 00:55:58 prd-ubuntu1804-docker-8c-8g-4315 sshd[1856]: Disconnected from invalid user jenkins 10.30.104.4 port 60154 [preauth]
Oct 22 00:56:00 prd-ubuntu1804-docker-8c-8g-4315 sshd[1860]: Invalid user jenkins from 10.30.104.4 port 60164
Oct 22 00:56:00 prd-ubuntu1804-docker-8c-8g-4315 sshd[1860]: Received disconnect from 10.30.104.4 port 60164:11: Closed due to user request. [preauth]
Oct 22 00:56:00 prd-ubuntu1804-docker-8c-8g-4315 sshd[1860]: Disconnected from invalid user jenkins 10.30.104.4 port 60164 [preauth]
Oct 22 00:56:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[1863]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 00:56:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[1863]: pam_unix(cron:session): session closed for user root
Oct 22 00:56:02 prd-ubuntu1804-docker-8c-8g-4315 sshd[1876]: Invalid user jenkins from 10.30.104.4 port 60166
Oct 22 00:56:03 prd-ubuntu1804-docker-8c-8g-4315 sshd[1876]: Received disconnect from 10.30.104.4 port 60166:11: Closed due to user request. [preauth]
Oct 22 00:56:03 prd-ubuntu1804-docker-8c-8g-4315 sshd[1876]: Disconnected from invalid user jenkins 10.30.104.4 port 60166 [preauth]
Oct 22 00:56:05 prd-ubuntu1804-docker-8c-8g-4315 sshd[1878]: Invalid user jenkins from 10.30.104.4 port 60168
Oct 22 00:56:05 prd-ubuntu1804-docker-8c-8g-4315 sshd[1878]: Received disconnect from 10.30.104.4 port 60168:11: Closed due to user request. [preauth]
Oct 22 00:56:05 prd-ubuntu1804-docker-8c-8g-4315 sshd[1878]: Disconnected from invalid user jenkins 10.30.104.4 port 60168 [preauth]
Oct 22 00:56:06 prd-ubuntu1804-docker-8c-8g-4315 useradd[1898]: new group: name=jenkins, GID=1001
Oct 22 00:56:06 prd-ubuntu1804-docker-8c-8g-4315 useradd[1898]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Oct 22 00:56:06 prd-ubuntu1804-docker-8c-8g-4315 usermod[1905]: add 'jenkins' to group 'docker'
Oct 22 00:56:06 prd-ubuntu1804-docker-8c-8g-4315 usermod[1905]: add 'jenkins' to shadow group 'docker'
Oct 22 00:56:07 prd-ubuntu1804-docker-8c-8g-4315 sshd[1944]: Accepted publickey for jenkins from 10.30.104.4 port 60170 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Oct 22 00:56:07 prd-ubuntu1804-docker-8c-8g-4315 sshd[1944]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Oct 22 00:56:07 prd-ubuntu1804-docker-8c-8g-4315 systemd-logind[1057]: New session 2 of user jenkins.
Oct 22 00:56:07 prd-ubuntu1804-docker-8c-8g-4315 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Oct 22 00:57:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[2574]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 00:57:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[2574]: pam_unix(cron:session): session closed for user root
Oct 22 00:58:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[3352]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 00:58:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[3352]: pam_unix(cron:session): session closed for user root
Oct 22 00:59:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[3506]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 00:59:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[3506]: pam_unix(cron:session): session closed for user root
Oct 22 01:00:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[4441]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 22 01:00:01 prd-ubuntu1804-docker-8c-8g-4315 CRON[4441]: pam_unix(cron:session): session closed for user root
Oct 22 01:00:08 prd-ubuntu1804-docker-8c-8g-4315 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/portal-ng-ui-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Oct 22 01:00:08 prd-ubuntu1804-docker-8c-8g-4315 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)