Jan 8 10:39:03 prd-ubuntu18-04-docker-8c-8g-289 passwd[1026]: password for 'ubuntu' changed by 'root' Jan 8 10:39:03 prd-ubuntu18-04-docker-8c-8g-289 systemd-logind[1150]: Watching system buttons on /dev/input/event0 (Power Button) Jan 8 10:39:03 prd-ubuntu18-04-docker-8c-8g-289 systemd-logind[1150]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 8 10:39:03 prd-ubuntu18-04-docker-8c-8g-289 systemd-logind[1150]: New seat seat0. Jan 8 10:39:03 prd-ubuntu18-04-docker-8c-8g-289 sshd[1232]: Server listening on 0.0.0.0 port 22. Jan 8 10:39:03 prd-ubuntu18-04-docker-8c-8g-289 sshd[1232]: Server listening on :: port 22. Jan 8 10:39:09 prd-ubuntu18-04-docker-8c-8g-289 sshd[1530]: Did not receive identification string from 10.30.120.5 port 38042 Jan 8 10:39:12 prd-ubuntu18-04-docker-8c-8g-289 sshd[1536]: Invalid user jenkins from 10.30.120.5 port 38044 Jan 8 10:39:12 prd-ubuntu18-04-docker-8c-8g-289 sshd[1536]: Received disconnect from 10.30.120.5 port 38044:11: Closed due to user request. [preauth] Jan 8 10:39:12 prd-ubuntu18-04-docker-8c-8g-289 sshd[1536]: Disconnected from invalid user jenkins 10.30.120.5 port 38044 [preauth] Jan 8 10:39:14 prd-ubuntu18-04-docker-8c-8g-289 sshd[1540]: Invalid user jenkins from 10.30.120.5 port 38052 Jan 8 10:39:14 prd-ubuntu18-04-docker-8c-8g-289 sshd[1540]: Received disconnect from 10.30.120.5 port 38052:11: Closed due to user request. [preauth] Jan 8 10:39:14 prd-ubuntu18-04-docker-8c-8g-289 sshd[1540]: Disconnected from invalid user jenkins 10.30.120.5 port 38052 [preauth] Jan 8 10:39:16 prd-ubuntu18-04-docker-8c-8g-289 sshd[1542]: Invalid user jenkins from 10.30.120.5 port 38054 Jan 8 10:39:16 prd-ubuntu18-04-docker-8c-8g-289 sshd[1542]: Received disconnect from 10.30.120.5 port 38054:11: Closed due to user request. [preauth] Jan 8 10:39:16 prd-ubuntu18-04-docker-8c-8g-289 sshd[1542]: Disconnected from invalid user jenkins 10.30.120.5 port 38054 [preauth] Jan 8 10:39:18 prd-ubuntu18-04-docker-8c-8g-289 sshd[1544]: Invalid user jenkins from 10.30.120.5 port 38056 Jan 8 10:39:18 prd-ubuntu18-04-docker-8c-8g-289 sshd[1544]: Received disconnect from 10.30.120.5 port 38056:11: Closed due to user request. [preauth] Jan 8 10:39:18 prd-ubuntu18-04-docker-8c-8g-289 sshd[1544]: Disconnected from invalid user jenkins 10.30.120.5 port 38056 [preauth] Jan 8 10:39:20 prd-ubuntu18-04-docker-8c-8g-289 sshd[1546]: Invalid user jenkins from 10.30.120.5 port 38062 Jan 8 10:39:20 prd-ubuntu18-04-docker-8c-8g-289 sshd[1546]: Received disconnect from 10.30.120.5 port 38062:11: Closed due to user request. [preauth] Jan 8 10:39:20 prd-ubuntu18-04-docker-8c-8g-289 sshd[1546]: Disconnected from invalid user jenkins 10.30.120.5 port 38062 [preauth] Jan 8 10:39:23 prd-ubuntu18-04-docker-8c-8g-289 sshd[1757]: Invalid user jenkins from 10.30.120.5 port 38068 Jan 8 10:39:23 prd-ubuntu18-04-docker-8c-8g-289 sshd[1757]: Received disconnect from 10.30.120.5 port 38068:11: Closed due to user request. [preauth] Jan 8 10:39:23 prd-ubuntu18-04-docker-8c-8g-289 sshd[1757]: Disconnected from invalid user jenkins 10.30.120.5 port 38068 [preauth] Jan 8 10:39:25 prd-ubuntu18-04-docker-8c-8g-289 sshd[1811]: Invalid user jenkins from 10.30.120.5 port 38070 Jan 8 10:39:26 prd-ubuntu18-04-docker-8c-8g-289 sshd[1811]: Received disconnect from 10.30.120.5 port 38070:11: Closed due to user request. [preauth] Jan 8 10:39:26 prd-ubuntu18-04-docker-8c-8g-289 sshd[1811]: Disconnected from invalid user jenkins 10.30.120.5 port 38070 [preauth] Jan 8 10:39:28 prd-ubuntu18-04-docker-8c-8g-289 sshd[1821]: Invalid user jenkins from 10.30.120.5 port 38072 Jan 8 10:39:28 prd-ubuntu18-04-docker-8c-8g-289 sshd[1821]: Received disconnect from 10.30.120.5 port 38072:11: Closed due to user request. [preauth] Jan 8 10:39:28 prd-ubuntu18-04-docker-8c-8g-289 sshd[1821]: Disconnected from invalid user jenkins 10.30.120.5 port 38072 [preauth] Jan 8 10:39:30 prd-ubuntu18-04-docker-8c-8g-289 sshd[1823]: Invalid user jenkins from 10.30.120.5 port 38074 Jan 8 10:39:31 prd-ubuntu18-04-docker-8c-8g-289 sshd[1823]: Received disconnect from 10.30.120.5 port 38074:11: Closed due to user request. [preauth] Jan 8 10:39:31 prd-ubuntu18-04-docker-8c-8g-289 sshd[1823]: Disconnected from invalid user jenkins 10.30.120.5 port 38074 [preauth] Jan 8 10:39:32 prd-ubuntu18-04-docker-8c-8g-289 sshd[1825]: Invalid user jenkins from 10.30.120.5 port 38076 Jan 8 10:39:32 prd-ubuntu18-04-docker-8c-8g-289 sshd[1825]: Received disconnect from 10.30.120.5 port 38076:11: Closed due to user request. [preauth] Jan 8 10:39:32 prd-ubuntu18-04-docker-8c-8g-289 sshd[1825]: Disconnected from invalid user jenkins 10.30.120.5 port 38076 [preauth] Jan 8 10:39:34 prd-ubuntu18-04-docker-8c-8g-289 sshd[1827]: Invalid user jenkins from 10.30.120.5 port 38078 Jan 8 10:39:34 prd-ubuntu18-04-docker-8c-8g-289 sshd[1827]: Received disconnect from 10.30.120.5 port 38078:11: Closed due to user request. [preauth] Jan 8 10:39:34 prd-ubuntu18-04-docker-8c-8g-289 sshd[1827]: Disconnected from invalid user jenkins 10.30.120.5 port 38078 [preauth] Jan 8 10:39:36 prd-ubuntu18-04-docker-8c-8g-289 sshd[1853]: Invalid user jenkins from 10.30.120.5 port 38080 Jan 8 10:39:36 prd-ubuntu18-04-docker-8c-8g-289 sshd[1853]: Received disconnect from 10.30.120.5 port 38080:11: Closed due to user request. [preauth] Jan 8 10:39:36 prd-ubuntu18-04-docker-8c-8g-289 sshd[1853]: Disconnected from invalid user jenkins 10.30.120.5 port 38080 [preauth] Jan 8 10:39:38 prd-ubuntu18-04-docker-8c-8g-289 sshd[1871]: Invalid user jenkins from 10.30.120.5 port 38084 Jan 8 10:39:38 prd-ubuntu18-04-docker-8c-8g-289 sshd[1871]: Received disconnect from 10.30.120.5 port 38084:11: Closed due to user request. [preauth] Jan 8 10:39:38 prd-ubuntu18-04-docker-8c-8g-289 sshd[1871]: Disconnected from invalid user jenkins 10.30.120.5 port 38084 [preauth] Jan 8 10:39:38 prd-ubuntu18-04-docker-8c-8g-289 useradd[1875]: new group: name=jenkins, GID=1001 Jan 8 10:39:38 prd-ubuntu18-04-docker-8c-8g-289 useradd[1875]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 8 10:39:38 prd-ubuntu18-04-docker-8c-8g-289 usermod[1882]: add 'jenkins' to group 'docker' Jan 8 10:39:38 prd-ubuntu18-04-docker-8c-8g-289 usermod[1882]: add 'jenkins' to shadow group 'docker' Jan 8 10:39:40 prd-ubuntu18-04-docker-8c-8g-289 sshd[1917]: Accepted publickey for jenkins from 10.30.120.5 port 38086 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 8 10:39:40 prd-ubuntu18-04-docker-8c-8g-289 sshd[1917]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 8 10:39:40 prd-ubuntu18-04-docker-8c-8g-289 systemd-logind[1150]: New session 1 of user jenkins. Jan 8 10:39:40 prd-ubuntu18-04-docker-8c-8g-289 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 8 10:40:02 prd-ubuntu18-04-docker-8c-8g-289 CRON[2343]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 8 10:40:02 prd-ubuntu18-04-docker-8c-8g-289 CRON[2343]: pam_unix(cron:session): session closed for user root Jan 8 10:41:01 prd-ubuntu18-04-docker-8c-8g-289 CRON[2647]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 8 10:41:01 prd-ubuntu18-04-docker-8c-8g-289 CRON[2647]: pam_unix(cron:session): session closed for user root Jan 8 10:42:01 prd-ubuntu18-04-docker-8c-8g-289 CRON[3475]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 8 10:42:01 prd-ubuntu18-04-docker-8c-8g-289 CRON[3475]: pam_unix(cron:session): session closed for user root