Jan 18 13:49:42 prd-ubuntu18-04-docker-8c-8g-27455 passwd[992]: password for 'ubuntu' changed by 'root' Jan 18 13:49:42 prd-ubuntu18-04-docker-8c-8g-27455 systemd-logind[1048]: Watching system buttons on /dev/input/event0 (Power Button) Jan 18 13:49:42 prd-ubuntu18-04-docker-8c-8g-27455 systemd-logind[1048]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 18 13:49:42 prd-ubuntu18-04-docker-8c-8g-27455 systemd-logind[1048]: New seat seat0. Jan 18 13:49:42 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1085]: Server listening on 0.0.0.0 port 22. Jan 18 13:49:42 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1085]: Server listening on :: port 22. Jan 18 13:49:44 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1377]: Did not receive identification string from 10.30.120.5 port 53878 Jan 18 13:49:52 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1403]: Invalid user jenkins from 10.30.120.5 port 53916 Jan 18 13:49:52 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1403]: Received disconnect from 10.30.120.5 port 53916:11: Closed due to user request. [preauth] Jan 18 13:49:52 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1403]: Disconnected from invalid user jenkins 10.30.120.5 port 53916 [preauth] Jan 18 13:49:54 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1407]: Invalid user jenkins from 10.30.120.5 port 53928 Jan 18 13:49:55 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1407]: Received disconnect from 10.30.120.5 port 53928:11: Closed due to user request. [preauth] Jan 18 13:49:55 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1407]: Disconnected from invalid user jenkins 10.30.120.5 port 53928 [preauth] Jan 18 13:49:57 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1409]: Invalid user jenkins from 10.30.120.5 port 53950 Jan 18 13:49:57 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1409]: Received disconnect from 10.30.120.5 port 53950:11: Closed due to user request. [preauth] Jan 18 13:49:57 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1409]: Disconnected from invalid user jenkins 10.30.120.5 port 53950 [preauth] Jan 18 13:49:59 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1420]: Invalid user jenkins from 10.30.120.5 port 53962 Jan 18 13:49:59 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1420]: Received disconnect from 10.30.120.5 port 53962:11: Closed due to user request. [preauth] Jan 18 13:49:59 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1420]: Disconnected from invalid user jenkins 10.30.120.5 port 53962 [preauth] Jan 18 13:50:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[1633]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:50:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[1633]: pam_unix(cron:session): session closed for user root Jan 18 13:50:01 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1644]: Invalid user jenkins from 10.30.120.5 port 53970 Jan 18 13:50:01 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1644]: Received disconnect from 10.30.120.5 port 53970:11: Closed due to user request. [preauth] Jan 18 13:50:01 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1644]: Disconnected from invalid user jenkins 10.30.120.5 port 53970 [preauth] Jan 18 13:50:03 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1684]: Invalid user jenkins from 10.30.120.5 port 53996 Jan 18 13:50:03 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1684]: Received disconnect from 10.30.120.5 port 53996:11: Closed due to user request. [preauth] Jan 18 13:50:03 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1684]: Disconnected from invalid user jenkins 10.30.120.5 port 53996 [preauth] Jan 18 13:50:05 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1686]: Invalid user jenkins from 10.30.120.5 port 54012 Jan 18 13:50:05 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1686]: Received disconnect from 10.30.120.5 port 54012:11: Closed due to user request. [preauth] Jan 18 13:50:05 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1686]: Disconnected from invalid user jenkins 10.30.120.5 port 54012 [preauth] Jan 18 13:50:07 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1694]: Invalid user jenkins from 10.30.120.5 port 54030 Jan 18 13:50:07 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1694]: Received disconnect from 10.30.120.5 port 54030:11: Closed due to user request. [preauth] Jan 18 13:50:07 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1694]: Disconnected from invalid user jenkins 10.30.120.5 port 54030 [preauth] Jan 18 13:50:09 prd-ubuntu18-04-docker-8c-8g-27455 useradd[1714]: new group: name=jenkins, GID=1001 Jan 18 13:50:09 prd-ubuntu18-04-docker-8c-8g-27455 useradd[1714]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 18 13:50:09 prd-ubuntu18-04-docker-8c-8g-27455 usermod[1721]: add 'jenkins' to group 'docker' Jan 18 13:50:09 prd-ubuntu18-04-docker-8c-8g-27455 usermod[1721]: add 'jenkins' to shadow group 'docker' Jan 18 13:50:10 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1756]: Accepted publickey for jenkins from 10.30.120.5 port 54044 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 18 13:50:10 prd-ubuntu18-04-docker-8c-8g-27455 sshd[1756]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 18 13:50:10 prd-ubuntu18-04-docker-8c-8g-27455 systemd-logind[1048]: New session 2 of user jenkins. Jan 18 13:50:10 prd-ubuntu18-04-docker-8c-8g-27455 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 18 13:51:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[2459]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:51:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[2459]: pam_unix(cron:session): session closed for user root Jan 18 13:52:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[2838]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:52:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[2838]: pam_unix(cron:session): session closed for user root Jan 18 13:53:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[3019]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:53:01 prd-ubuntu18-04-docker-8c-8g-27455 CRON[3019]: pam_unix(cron:session): session closed for user root