Sep 10 13:50:00 prd-ubuntu18-04-docker-8c-8g-10024 passwd[985]: password for 'ubuntu' changed by 'root' Sep 10 13:50:00 prd-ubuntu18-04-docker-8c-8g-10024 systemd-logind[1091]: Watching system buttons on /dev/input/event0 (Power Button) Sep 10 13:50:00 prd-ubuntu18-04-docker-8c-8g-10024 systemd-logind[1091]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 10 13:50:00 prd-ubuntu18-04-docker-8c-8g-10024 systemd-logind[1091]: New seat seat0. Sep 10 13:50:00 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1208]: Server listening on 0.0.0.0 port 22. Sep 10 13:50:00 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1208]: Server listening on :: port 22. Sep 10 13:50:02 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1445]: Did not receive identification string from 10.30.120.5 port 42236 Sep 10 13:50:02 prd-ubuntu18-04-docker-8c-8g-10024 CRON[1439]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 13:50:02 prd-ubuntu18-04-docker-8c-8g-10024 CRON[1439]: pam_unix(cron:session): session closed for user root Sep 10 13:50:04 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1463]: Invalid user jenkins from 10.30.120.5 port 42250 Sep 10 13:50:04 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1463]: Received disconnect from 10.30.120.5 port 42250:11: Closed due to user request. [preauth] Sep 10 13:50:04 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1463]: Disconnected from invalid user jenkins 10.30.120.5 port 42250 [preauth] Sep 10 13:50:06 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1491]: Invalid user jenkins from 10.30.120.5 port 42268 Sep 10 13:50:06 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1491]: Received disconnect from 10.30.120.5 port 42268:11: Closed due to user request. [preauth] Sep 10 13:50:06 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1491]: Disconnected from invalid user jenkins 10.30.120.5 port 42268 [preauth] Sep 10 13:50:08 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1493]: Invalid user jenkins from 10.30.120.5 port 42282 Sep 10 13:50:08 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1493]: Received disconnect from 10.30.120.5 port 42282:11: Closed due to user request. [preauth] Sep 10 13:50:08 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1493]: Disconnected from invalid user jenkins 10.30.120.5 port 42282 [preauth] Sep 10 13:50:10 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1512]: Invalid user jenkins from 10.30.120.5 port 42290 Sep 10 13:50:10 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1512]: Received disconnect from 10.30.120.5 port 42290:11: Closed due to user request. [preauth] Sep 10 13:50:10 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1512]: Disconnected from invalid user jenkins 10.30.120.5 port 42290 [preauth] Sep 10 13:50:12 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1514]: Invalid user jenkins from 10.30.120.5 port 42310 Sep 10 13:50:12 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1514]: Received disconnect from 10.30.120.5 port 42310:11: Closed due to user request. [preauth] Sep 10 13:50:12 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1514]: Disconnected from invalid user jenkins 10.30.120.5 port 42310 [preauth] Sep 10 13:50:14 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1516]: Invalid user jenkins from 10.30.120.5 port 42316 Sep 10 13:50:14 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1516]: Received disconnect from 10.30.120.5 port 42316:11: Closed due to user request. [preauth] Sep 10 13:50:14 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1516]: Disconnected from invalid user jenkins 10.30.120.5 port 42316 [preauth] Sep 10 13:50:16 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1526]: Invalid user jenkins from 10.30.120.5 port 42320 Sep 10 13:50:17 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1526]: Received disconnect from 10.30.120.5 port 42320:11: Closed due to user request. [preauth] Sep 10 13:50:17 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1526]: Disconnected from invalid user jenkins 10.30.120.5 port 42320 [preauth] Sep 10 13:50:20 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1747]: Invalid user jenkins from 10.30.120.5 port 42334 Sep 10 13:50:20 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1747]: Received disconnect from 10.30.120.5 port 42334:11: Closed due to user request. [preauth] Sep 10 13:50:20 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1747]: Disconnected from invalid user jenkins 10.30.120.5 port 42334 [preauth] Sep 10 13:50:22 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1787]: Invalid user jenkins from 10.30.120.5 port 42336 Sep 10 13:50:22 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1787]: Received disconnect from 10.30.120.5 port 42336:11: Closed due to user request. [preauth] Sep 10 13:50:22 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1787]: Disconnected from invalid user jenkins 10.30.120.5 port 42336 [preauth] Sep 10 13:50:24 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1789]: Invalid user jenkins from 10.30.120.5 port 42346 Sep 10 13:50:24 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1789]: Received disconnect from 10.30.120.5 port 42346:11: Closed due to user request. [preauth] Sep 10 13:50:24 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1789]: Disconnected from invalid user jenkins 10.30.120.5 port 42346 [preauth] Sep 10 13:50:26 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1791]: Invalid user jenkins from 10.30.120.5 port 42372 Sep 10 13:50:26 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1791]: Received disconnect from 10.30.120.5 port 42372:11: Closed due to user request. [preauth] Sep 10 13:50:26 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1791]: Disconnected from invalid user jenkins 10.30.120.5 port 42372 [preauth] Sep 10 13:50:28 prd-ubuntu18-04-docker-8c-8g-10024 useradd[1811]: new group: name=jenkins, GID=1001 Sep 10 13:50:28 prd-ubuntu18-04-docker-8c-8g-10024 useradd[1811]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 10 13:50:28 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1812]: Received disconnect from 10.30.120.5 port 42388:11: Closed due to user request. [preauth] Sep 10 13:50:28 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1812]: Disconnected from authenticating user jenkins 10.30.120.5 port 42388 [preauth] Sep 10 13:50:28 prd-ubuntu18-04-docker-8c-8g-10024 usermod[1820]: add 'jenkins' to group 'docker' Sep 10 13:50:28 prd-ubuntu18-04-docker-8c-8g-10024 usermod[1820]: add 'jenkins' to shadow group 'docker' Sep 10 13:50:30 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1855]: Accepted publickey for jenkins from 10.30.120.5 port 42400 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Sep 10 13:50:30 prd-ubuntu18-04-docker-8c-8g-10024 sshd[1855]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 10 13:50:30 prd-ubuntu18-04-docker-8c-8g-10024 systemd-logind[1091]: New session 2 of user jenkins. Sep 10 13:50:30 prd-ubuntu18-04-docker-8c-8g-10024 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 10 13:51:02 prd-ubuntu18-04-docker-8c-8g-10024 CRON[2206]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 13:51:02 prd-ubuntu18-04-docker-8c-8g-10024 CRON[2206]: pam_unix(cron:session): session closed for user root Sep 10 13:52:01 prd-ubuntu18-04-docker-8c-8g-10024 CRON[2784]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 13:52:01 prd-ubuntu18-04-docker-8c-8g-10024 CRON[2784]: pam_unix(cron:session): session closed for user root Sep 10 13:53:01 prd-ubuntu18-04-docker-8c-8g-10024 CRON[2968]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 13:53:01 prd-ubuntu18-04-docker-8c-8g-10024 CRON[2968]: pam_unix(cron:session): session closed for user root