Jun 2 13:51:05 prd-ubuntu18-04-docker-8c-8g-12233 passwd[1017]: password for 'ubuntu' changed by 'root' Jun 2 13:51:05 prd-ubuntu18-04-docker-8c-8g-12233 systemd-logind[1112]: Watching system buttons on /dev/input/event0 (Power Button) Jun 2 13:51:05 prd-ubuntu18-04-docker-8c-8g-12233 systemd-logind[1112]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 2 13:51:05 prd-ubuntu18-04-docker-8c-8g-12233 systemd-logind[1112]: New seat seat0. Jun 2 13:51:05 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1150]: Server listening on 0.0.0.0 port 22. Jun 2 13:51:05 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1150]: Server listening on :: port 22. Jun 2 13:51:07 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1434]: Did not receive identification string from 10.30.120.5 port 43116 Jun 2 13:51:13 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1467]: Invalid user jenkins from 10.30.120.5 port 43126 Jun 2 13:51:13 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1467]: Received disconnect from 10.30.120.5 port 43126:11: Closed due to user request. [preauth] Jun 2 13:51:13 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1467]: Disconnected from invalid user jenkins 10.30.120.5 port 43126 [preauth] Jun 2 13:51:15 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1471]: Invalid user jenkins from 10.30.120.5 port 43130 Jun 2 13:51:15 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1471]: Received disconnect from 10.30.120.5 port 43130:11: Closed due to user request. [preauth] Jun 2 13:51:15 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1471]: Disconnected from invalid user jenkins 10.30.120.5 port 43130 [preauth] Jun 2 13:51:17 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1473]: Invalid user jenkins from 10.30.120.5 port 43136 Jun 2 13:51:17 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1473]: Received disconnect from 10.30.120.5 port 43136:11: Closed due to user request. [preauth] Jun 2 13:51:17 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1473]: Disconnected from invalid user jenkins 10.30.120.5 port 43136 [preauth] Jun 2 13:51:19 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1475]: Invalid user jenkins from 10.30.120.5 port 43140 Jun 2 13:51:19 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1475]: Received disconnect from 10.30.120.5 port 43140:11: Closed due to user request. [preauth] Jun 2 13:51:19 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1475]: Disconnected from invalid user jenkins 10.30.120.5 port 43140 [preauth] Jun 2 13:51:21 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1477]: Invalid user jenkins from 10.30.120.5 port 43142 Jun 2 13:51:21 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1477]: Received disconnect from 10.30.120.5 port 43142:11: Closed due to user request. [preauth] Jun 2 13:51:21 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1477]: Disconnected from invalid user jenkins 10.30.120.5 port 43142 [preauth] Jun 2 13:51:23 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1676]: Invalid user jenkins from 10.30.120.5 port 43148 Jun 2 13:51:23 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1676]: Received disconnect from 10.30.120.5 port 43148:11: Closed due to user request. [preauth] Jun 2 13:51:23 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1676]: Disconnected from invalid user jenkins 10.30.120.5 port 43148 [preauth] Jun 2 13:51:26 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1738]: Invalid user jenkins from 10.30.120.5 port 43152 Jun 2 13:51:26 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1738]: Received disconnect from 10.30.120.5 port 43152:11: Closed due to user request. [preauth] Jun 2 13:51:26 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1738]: Disconnected from invalid user jenkins 10.30.120.5 port 43152 [preauth] Jun 2 13:51:28 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1742]: Invalid user jenkins from 10.30.120.5 port 43158 Jun 2 13:51:28 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1742]: Received disconnect from 10.30.120.5 port 43158:11: Closed due to user request. [preauth] Jun 2 13:51:28 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1742]: Disconnected from invalid user jenkins 10.30.120.5 port 43158 [preauth] Jun 2 13:51:30 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1749]: Invalid user jenkins from 10.30.120.5 port 43164 Jun 2 13:51:30 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1749]: Received disconnect from 10.30.120.5 port 43164:11: Closed due to user request. [preauth] Jun 2 13:51:30 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1749]: Disconnected from invalid user jenkins 10.30.120.5 port 43164 [preauth] Jun 2 13:51:31 prd-ubuntu18-04-docker-8c-8g-12233 useradd[1756]: new group: name=jenkins, GID=1001 Jun 2 13:51:31 prd-ubuntu18-04-docker-8c-8g-12233 useradd[1756]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 2 13:51:31 prd-ubuntu18-04-docker-8c-8g-12233 usermod[1763]: add 'jenkins' to group 'docker' Jun 2 13:51:31 prd-ubuntu18-04-docker-8c-8g-12233 usermod[1763]: add 'jenkins' to shadow group 'docker' Jun 2 13:51:32 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1798]: Accepted publickey for jenkins from 10.30.120.5 port 43168 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 2 13:51:32 prd-ubuntu18-04-docker-8c-8g-12233 sshd[1798]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 2 13:51:32 prd-ubuntu18-04-docker-8c-8g-12233 systemd-logind[1112]: New session 1 of user jenkins. Jun 2 13:51:32 prd-ubuntu18-04-docker-8c-8g-12233 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 2 13:52:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[2141]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 13:52:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[2141]: pam_unix(cron:session): session closed for user root Jun 2 13:53:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[2779]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 13:53:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[2779]: pam_unix(cron:session): session closed for user root Jun 2 13:54:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[2977]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 13:54:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[2977]: pam_unix(cron:session): session closed for user root Jun 2 13:55:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[3277]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 13:55:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[3277]: pam_unix(cron:session): session closed for user root Jun 2 13:56:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[3551]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 13:56:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[3551]: pam_unix(cron:session): session closed for user root Jun 2 13:57:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[4091]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 13:57:01 prd-ubuntu18-04-docker-8c-8g-12233 CRON[4091]: pam_unix(cron:session): session closed for user root