Nov 23 23:49:17 prd-ubuntu1804-docker-8c-8g-3621 passwd[998]: password for 'ubuntu' changed by 'root'
Nov 23 23:49:17 prd-ubuntu1804-docker-8c-8g-3621 systemd-logind[1027]: Watching system buttons on /dev/input/event0 (Power Button)
Nov 23 23:49:17 prd-ubuntu1804-docker-8c-8g-3621 systemd-logind[1027]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Nov 23 23:49:17 prd-ubuntu1804-docker-8c-8g-3621 systemd-logind[1027]: New seat seat0.
Nov 23 23:49:17 prd-ubuntu1804-docker-8c-8g-3621 sshd[1152]: Server listening on 0.0.0.0 port 22.
Nov 23 23:49:17 prd-ubuntu1804-docker-8c-8g-3621 sshd[1152]: Server listening on :: port 22.
Nov 23 23:49:18 prd-ubuntu1804-docker-8c-8g-3621 sshd[1335]: Did not receive identification string from 10.30.104.4 port 40258
Nov 23 23:49:20 prd-ubuntu1804-docker-8c-8g-3621 sshd[1433]: Invalid user jenkins from 10.30.104.4 port 40262
Nov 23 23:49:20 prd-ubuntu1804-docker-8c-8g-3621 sshd[1433]: Received disconnect from 10.30.104.4 port 40262:11: Closed due to user request. [preauth]
Nov 23 23:49:20 prd-ubuntu1804-docker-8c-8g-3621 sshd[1433]: Disconnected from invalid user jenkins 10.30.104.4 port 40262 [preauth]
Nov 23 23:49:22 prd-ubuntu1804-docker-8c-8g-3621 sshd[1443]: Invalid user jenkins from 10.30.104.4 port 40266
Nov 23 23:49:22 prd-ubuntu1804-docker-8c-8g-3621 sshd[1443]: Received disconnect from 10.30.104.4 port 40266:11: Closed due to user request. [preauth]
Nov 23 23:49:22 prd-ubuntu1804-docker-8c-8g-3621 sshd[1443]: Disconnected from invalid user jenkins 10.30.104.4 port 40266 [preauth]
Nov 23 23:49:24 prd-ubuntu1804-docker-8c-8g-3621 sshd[1468]: Invalid user jenkins from 10.30.104.4 port 40268
Nov 23 23:49:24 prd-ubuntu1804-docker-8c-8g-3621 sshd[1468]: Received disconnect from 10.30.104.4 port 40268:11: Closed due to user request. [preauth]
Nov 23 23:49:24 prd-ubuntu1804-docker-8c-8g-3621 sshd[1468]: Disconnected from invalid user jenkins 10.30.104.4 port 40268 [preauth]
Nov 23 23:49:27 prd-ubuntu1804-docker-8c-8g-3621 sshd[1470]: Invalid user jenkins from 10.30.104.4 port 40270
Nov 23 23:49:27 prd-ubuntu1804-docker-8c-8g-3621 sshd[1470]: Received disconnect from 10.30.104.4 port 40270:11: Closed due to user request. [preauth]
Nov 23 23:49:27 prd-ubuntu1804-docker-8c-8g-3621 sshd[1470]: Disconnected from invalid user jenkins 10.30.104.4 port 40270 [preauth]
Nov 23 23:49:29 prd-ubuntu1804-docker-8c-8g-3621 sshd[1472]: Invalid user jenkins from 10.30.104.4 port 40276
Nov 23 23:49:29 prd-ubuntu1804-docker-8c-8g-3621 sshd[1472]: Received disconnect from 10.30.104.4 port 40276:11: Closed due to user request. [preauth]
Nov 23 23:49:29 prd-ubuntu1804-docker-8c-8g-3621 sshd[1472]: Disconnected from invalid user jenkins 10.30.104.4 port 40276 [preauth]
Nov 23 23:49:31 prd-ubuntu1804-docker-8c-8g-3621 sshd[1474]: Invalid user jenkins from 10.30.104.4 port 40278
Nov 23 23:49:33 prd-ubuntu1804-docker-8c-8g-3621 sshd[1474]: Received disconnect from 10.30.104.4 port 40278:11: Closed due to user request. [preauth]
Nov 23 23:49:33 prd-ubuntu1804-docker-8c-8g-3621 sshd[1474]: Disconnected from invalid user jenkins 10.30.104.4 port 40278 [preauth]
Nov 23 23:49:35 prd-ubuntu1804-docker-8c-8g-3621 sshd[1501]: Invalid user jenkins from 10.30.104.4 port 40280
Nov 23 23:49:35 prd-ubuntu1804-docker-8c-8g-3621 sshd[1501]: Received disconnect from 10.30.104.4 port 40280:11: Closed due to user request. [preauth]
Nov 23 23:49:35 prd-ubuntu1804-docker-8c-8g-3621 sshd[1501]: Disconnected from invalid user jenkins 10.30.104.4 port 40280 [preauth]
Nov 23 23:49:37 prd-ubuntu1804-docker-8c-8g-3621 sshd[1716]: Invalid user jenkins from 10.30.104.4 port 40284
Nov 23 23:49:37 prd-ubuntu1804-docker-8c-8g-3621 sshd[1716]: Received disconnect from 10.30.104.4 port 40284:11: Closed due to user request. [preauth]
Nov 23 23:49:37 prd-ubuntu1804-docker-8c-8g-3621 sshd[1716]: Disconnected from invalid user jenkins 10.30.104.4 port 40284 [preauth]
Nov 23 23:49:39 prd-ubuntu1804-docker-8c-8g-3621 sshd[1747]: Invalid user jenkins from 10.30.104.4 port 40286
Nov 23 23:49:39 prd-ubuntu1804-docker-8c-8g-3621 sshd[1747]: Received disconnect from 10.30.104.4 port 40286:11: Closed due to user request. [preauth]
Nov 23 23:49:39 prd-ubuntu1804-docker-8c-8g-3621 sshd[1747]: Disconnected from invalid user jenkins 10.30.104.4 port 40286 [preauth]
Nov 23 23:49:41 prd-ubuntu1804-docker-8c-8g-3621 sshd[1749]: Invalid user jenkins from 10.30.104.4 port 40288
Nov 23 23:49:41 prd-ubuntu1804-docker-8c-8g-3621 sshd[1749]: Received disconnect from 10.30.104.4 port 40288:11: Closed due to user request. [preauth]
Nov 23 23:49:41 prd-ubuntu1804-docker-8c-8g-3621 sshd[1749]: Disconnected from invalid user jenkins 10.30.104.4 port 40288 [preauth]
Nov 23 23:49:43 prd-ubuntu1804-docker-8c-8g-3621 sshd[1751]: Invalid user jenkins from 10.30.104.4 port 40290
Nov 23 23:49:44 prd-ubuntu1804-docker-8c-8g-3621 sshd[1751]: Received disconnect from 10.30.104.4 port 40290:11: Closed due to user request. [preauth]
Nov 23 23:49:44 prd-ubuntu1804-docker-8c-8g-3621 sshd[1751]: Disconnected from invalid user jenkins 10.30.104.4 port 40290 [preauth]
Nov 23 23:49:44 prd-ubuntu1804-docker-8c-8g-3621 useradd[1771]: new group: name=jenkins, GID=1001
Nov 23 23:49:44 prd-ubuntu1804-docker-8c-8g-3621 useradd[1771]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Nov 23 23:49:44 prd-ubuntu1804-docker-8c-8g-3621 usermod[1778]: add 'jenkins' to group 'docker'
Nov 23 23:49:44 prd-ubuntu1804-docker-8c-8g-3621 usermod[1778]: add 'jenkins' to shadow group 'docker'
Nov 23 23:49:46 prd-ubuntu1804-docker-8c-8g-3621 sshd[1846]: Accepted publickey for jenkins from 10.30.104.4 port 40298 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Nov 23 23:49:46 prd-ubuntu1804-docker-8c-8g-3621 sshd[1846]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Nov 23 23:49:46 prd-ubuntu1804-docker-8c-8g-3621 systemd-logind[1027]: New session 1 of user jenkins.
Nov 23 23:49:46 prd-ubuntu1804-docker-8c-8g-3621 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Nov 23 23:50:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2098]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:50:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2098]: pam_unix(cron:session): session closed for user root
Nov 23 23:51:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2107]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:51:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2107]: pam_unix(cron:session): session closed for user root
Nov 23 23:52:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2112]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:52:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2112]: pam_unix(cron:session): session closed for user root
Nov 23 23:53:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2115]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:53:02 prd-ubuntu1804-docker-8c-8g-3621 CRON[2115]: pam_unix(cron:session): session closed for user root
Nov 23 23:54:02 prd-ubuntu1804-docker-8c-8g-3621 CRON[2120]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:54:02 prd-ubuntu1804-docker-8c-8g-3621 CRON[2120]: pam_unix(cron:session): session closed for user root
Nov 23 23:55:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2125]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:55:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2125]: pam_unix(cron:session): session closed for user root
Nov 23 23:56:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2129]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:56:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2129]: pam_unix(cron:session): session closed for user root
Nov 23 23:57:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2135]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:57:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2135]: pam_unix(cron:session): session closed for user root
Nov 23 23:58:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2139]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:58:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2139]: pam_unix(cron:session): session closed for user root
Nov 23 23:59:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2142]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:59:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2143]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 23 23:59:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2143]: pam_unix(cron:session): session closed for user root
Nov 24 00:00:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2151]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 24 00:00:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2142]: pam_unix(cron:session): session closed for user root
Nov 24 00:00:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2151]: pam_unix(cron:session): session closed for user root
Nov 24 00:01:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2154]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 24 00:01:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2154]: pam_unix(cron:session): session closed for user root
Nov 24 00:02:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2178]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 24 00:02:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2178]: pam_unix(cron:session): session closed for user root
Nov 24 00:03:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2902]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 24 00:03:01 prd-ubuntu1804-docker-8c-8g-3621 CRON[2902]: pam_unix(cron:session): session closed for user root
Nov 24 00:03:32 prd-ubuntu1804-docker-8c-8g-3621 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/so-Custom_Workflow-csit-integration-etsi-testing ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Nov 24 00:03:32 prd-ubuntu1804-docker-8c-8g-3621 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)