Jun 5 21:11:43 prd-ubuntu18-04-docker-8c-8g-17890 passwd[981]: password for 'ubuntu' changed by 'root' Jun 5 21:11:43 prd-ubuntu18-04-docker-8c-8g-17890 systemd-logind[1026]: Watching system buttons on /dev/input/event0 (Power Button) Jun 5 21:11:43 prd-ubuntu18-04-docker-8c-8g-17890 systemd-logind[1026]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 5 21:11:43 prd-ubuntu18-04-docker-8c-8g-17890 systemd-logind[1026]: New seat seat0. Jun 5 21:11:43 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1160]: Server listening on 0.0.0.0 port 22. Jun 5 21:11:43 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1160]: Server listening on :: port 22. Jun 5 21:11:45 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1396]: Did not receive identification string from 10.30.120.5 port 60274 Jun 5 21:11:54 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1448]: Invalid user jenkins from 10.30.120.5 port 60276 Jun 5 21:11:54 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1448]: Received disconnect from 10.30.120.5 port 60276:11: Closed due to user request. [preauth] Jun 5 21:11:54 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1448]: Disconnected from invalid user jenkins 10.30.120.5 port 60276 [preauth] Jun 5 21:11:56 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1452]: Invalid user jenkins from 10.30.120.5 port 60280 Jun 5 21:11:56 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1452]: Received disconnect from 10.30.120.5 port 60280:11: Closed due to user request. [preauth] Jun 5 21:11:56 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1452]: Disconnected from invalid user jenkins 10.30.120.5 port 60280 [preauth] Jun 5 21:11:58 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1454]: Invalid user jenkins from 10.30.120.5 port 60282 Jun 5 21:11:58 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1454]: Received disconnect from 10.30.120.5 port 60282:11: Closed due to user request. [preauth] Jun 5 21:11:58 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1454]: Disconnected from invalid user jenkins 10.30.120.5 port 60282 [preauth] Jun 5 21:12:00 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1456]: Invalid user jenkins from 10.30.120.5 port 60286 Jun 5 21:12:00 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1456]: Received disconnect from 10.30.120.5 port 60286:11: Closed due to user request. [preauth] Jun 5 21:12:00 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1456]: Disconnected from invalid user jenkins 10.30.120.5 port 60286 [preauth] Jun 5 21:12:02 prd-ubuntu18-04-docker-8c-8g-17890 CRON[1643]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 5 21:12:02 prd-ubuntu18-04-docker-8c-8g-17890 CRON[1643]: pam_unix(cron:session): session closed for user root Jun 5 21:12:03 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1682]: Invalid user jenkins from 10.30.120.5 port 60288 Jun 5 21:12:03 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1682]: Received disconnect from 10.30.120.5 port 60288:11: Closed due to user request. [preauth] Jun 5 21:12:03 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1682]: Disconnected from invalid user jenkins 10.30.120.5 port 60288 [preauth] Jun 5 21:12:05 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1728]: Invalid user jenkins from 10.30.120.5 port 60290 Jun 5 21:12:05 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1728]: Received disconnect from 10.30.120.5 port 60290:11: Closed due to user request. [preauth] Jun 5 21:12:05 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1728]: Disconnected from invalid user jenkins 10.30.120.5 port 60290 [preauth] Jun 5 21:12:07 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1730]: Invalid user jenkins from 10.30.120.5 port 60292 Jun 5 21:12:07 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1730]: Received disconnect from 10.30.120.5 port 60292:11: Closed due to user request. [preauth] Jun 5 21:12:07 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1730]: Disconnected from invalid user jenkins 10.30.120.5 port 60292 [preauth] Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 useradd[1756]: new group: name=jenkins, GID=1001 Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 useradd[1756]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 usermod[1763]: add 'jenkins' to group 'docker' Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 usermod[1763]: add 'jenkins' to shadow group 'docker' Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1778]: Accepted publickey for jenkins from 10.30.120.5 port 60294 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 sshd[1778]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 systemd-logind[1026]: New session 2 of user jenkins. Jun 5 21:12:09 prd-ubuntu18-04-docker-8c-8g-17890 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 5 21:13:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2712]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 5 21:13:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2712]: pam_unix(cron:session): session closed for user root Jun 5 21:14:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2757]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 5 21:14:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2757]: pam_unix(cron:session): session closed for user root Jun 5 21:15:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2800]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 5 21:15:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2800]: pam_unix(cron:session): session closed for user root Jun 5 21:16:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2844]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 5 21:16:01 prd-ubuntu18-04-docker-8c-8g-17890 CRON[2844]: pam_unix(cron:session): session closed for user root