Jan 26 10:40:19 prd-ubuntu18-04-docker-8c-8g-37750 passwd[996]: password for 'ubuntu' changed by 'root' Jan 26 10:40:19 prd-ubuntu18-04-docker-8c-8g-37750 systemd-logind[1028]: Watching system buttons on /dev/input/event0 (Power Button) Jan 26 10:40:19 prd-ubuntu18-04-docker-8c-8g-37750 systemd-logind[1028]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 26 10:40:19 prd-ubuntu18-04-docker-8c-8g-37750 systemd-logind[1028]: New seat seat0. Jan 26 10:40:19 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1156]: Server listening on 0.0.0.0 port 22. Jan 26 10:40:19 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1156]: Server listening on :: port 22. Jan 26 10:40:21 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1437]: Did not receive identification string from 10.30.120.5 port 56368 Jan 26 10:40:24 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1441]: Invalid user jenkins from 10.30.120.5 port 56370 Jan 26 10:40:24 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1441]: Received disconnect from 10.30.120.5 port 56370:11: Closed due to user request. [preauth] Jan 26 10:40:24 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1441]: Disconnected from invalid user jenkins 10.30.120.5 port 56370 [preauth] Jan 26 10:40:26 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1466]: Invalid user jenkins from 10.30.120.5 port 56372 Jan 26 10:40:26 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1466]: Received disconnect from 10.30.120.5 port 56372:11: Closed due to user request. [preauth] Jan 26 10:40:26 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1466]: Disconnected from invalid user jenkins 10.30.120.5 port 56372 [preauth] Jan 26 10:40:28 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1468]: Invalid user jenkins from 10.30.120.5 port 56374 Jan 26 10:40:28 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1468]: Received disconnect from 10.30.120.5 port 56374:11: Closed due to user request. [preauth] Jan 26 10:40:28 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1468]: Disconnected from invalid user jenkins 10.30.120.5 port 56374 [preauth] Jan 26 10:40:31 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1470]: Invalid user jenkins from 10.30.120.5 port 56384 Jan 26 10:40:31 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1470]: Received disconnect from 10.30.120.5 port 56384:11: Closed due to user request. [preauth] Jan 26 10:40:31 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1470]: Disconnected from invalid user jenkins 10.30.120.5 port 56384 [preauth] Jan 26 10:40:33 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1472]: Invalid user jenkins from 10.30.120.5 port 56386 Jan 26 10:40:33 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1472]: Received disconnect from 10.30.120.5 port 56386:11: Closed due to user request. [preauth] Jan 26 10:40:33 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1472]: Disconnected from invalid user jenkins 10.30.120.5 port 56386 [preauth] Jan 26 10:40:35 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1474]: Invalid user jenkins from 10.30.120.5 port 56388 Jan 26 10:40:35 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1474]: Received disconnect from 10.30.120.5 port 56388:11: Closed due to user request. [preauth] Jan 26 10:40:35 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1474]: Disconnected from invalid user jenkins 10.30.120.5 port 56388 [preauth] Jan 26 10:40:38 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1681]: Invalid user jenkins from 10.30.120.5 port 56392 Jan 26 10:40:39 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1681]: Received disconnect from 10.30.120.5 port 56392:11: Closed due to user request. [preauth] Jan 26 10:40:39 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1681]: Disconnected from invalid user jenkins 10.30.120.5 port 56392 [preauth] Jan 26 10:40:41 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1735]: Invalid user jenkins from 10.30.120.5 port 56394 Jan 26 10:40:41 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1735]: Received disconnect from 10.30.120.5 port 56394:11: Closed due to user request. [preauth] Jan 26 10:40:41 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1735]: Disconnected from invalid user jenkins 10.30.120.5 port 56394 [preauth] Jan 26 10:40:43 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1739]: Invalid user jenkins from 10.30.120.5 port 56396 Jan 26 10:40:43 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1739]: Received disconnect from 10.30.120.5 port 56396:11: Closed due to user request. [preauth] Jan 26 10:40:43 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1739]: Disconnected from invalid user jenkins 10.30.120.5 port 56396 [preauth] Jan 26 10:40:45 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1741]: Invalid user jenkins from 10.30.120.5 port 56398 Jan 26 10:40:45 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1741]: Received disconnect from 10.30.120.5 port 56398:11: Closed due to user request. [preauth] Jan 26 10:40:45 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1741]: Disconnected from invalid user jenkins 10.30.120.5 port 56398 [preauth] Jan 26 10:40:45 prd-ubuntu18-04-docker-8c-8g-37750 useradd[1767]: new group: name=jenkins, GID=1001 Jan 26 10:40:45 prd-ubuntu18-04-docker-8c-8g-37750 useradd[1767]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 26 10:40:46 prd-ubuntu18-04-docker-8c-8g-37750 usermod[1774]: add 'jenkins' to group 'docker' Jan 26 10:40:46 prd-ubuntu18-04-docker-8c-8g-37750 usermod[1774]: add 'jenkins' to shadow group 'docker' Jan 26 10:40:47 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1809]: Accepted publickey for jenkins from 10.30.120.5 port 56400 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 26 10:40:47 prd-ubuntu18-04-docker-8c-8g-37750 sshd[1809]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 26 10:40:47 prd-ubuntu18-04-docker-8c-8g-37750 systemd-logind[1028]: New session 1 of user jenkins. Jan 26 10:40:47 prd-ubuntu18-04-docker-8c-8g-37750 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 26 10:41:02 prd-ubuntu18-04-docker-8c-8g-37750 CRON[2181]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 10:41:02 prd-ubuntu18-04-docker-8c-8g-37750 CRON[2181]: pam_unix(cron:session): session closed for user root Jan 26 10:42:01 prd-ubuntu18-04-docker-8c-8g-37750 CRON[2548]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 10:42:01 prd-ubuntu18-04-docker-8c-8g-37750 CRON[2548]: pam_unix(cron:session): session closed for user root Jan 26 10:43:01 prd-ubuntu18-04-docker-8c-8g-37750 CRON[3609]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 10:43:01 prd-ubuntu18-04-docker-8c-8g-37750 CRON[3609]: pam_unix(cron:session): session closed for user root