Jan 18 13:50:34 prd-ubuntu18-04-docker-8c-8g-2938 passwd[997]: password for 'ubuntu' changed by 'root' Jan 18 13:50:34 prd-ubuntu18-04-docker-8c-8g-2938 systemd-logind[1111]: Watching system buttons on /dev/input/event0 (Power Button) Jan 18 13:50:34 prd-ubuntu18-04-docker-8c-8g-2938 systemd-logind[1111]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 18 13:50:34 prd-ubuntu18-04-docker-8c-8g-2938 systemd-logind[1111]: New seat seat0. Jan 18 13:50:34 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1141]: Server listening on 0.0.0.0 port 22. Jan 18 13:50:34 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1141]: Server listening on :: port 22. Jan 18 13:50:37 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1427]: Did not receive identification string from 10.30.120.5 port 55208 Jan 18 13:50:39 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1433]: Invalid user jenkins from 10.30.120.5 port 55224 Jan 18 13:50:39 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1433]: Received disconnect from 10.30.120.5 port 55224:11: Closed due to user request. [preauth] Jan 18 13:50:39 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1433]: Disconnected from invalid user jenkins 10.30.120.5 port 55224 [preauth] Jan 18 13:50:41 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1459]: Invalid user jenkins from 10.30.120.5 port 55232 Jan 18 13:50:41 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1459]: Received disconnect from 10.30.120.5 port 55232:11: Closed due to user request. [preauth] Jan 18 13:50:41 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1459]: Disconnected from invalid user jenkins 10.30.120.5 port 55232 [preauth] Jan 18 13:50:43 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1461]: Invalid user jenkins from 10.30.120.5 port 55240 Jan 18 13:50:43 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1461]: Received disconnect from 10.30.120.5 port 55240:11: Closed due to user request. [preauth] Jan 18 13:50:43 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1461]: Disconnected from invalid user jenkins 10.30.120.5 port 55240 [preauth] Jan 18 13:50:45 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1463]: Invalid user jenkins from 10.30.120.5 port 55250 Jan 18 13:50:50 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1463]: Received disconnect from 10.30.120.5 port 55250:11: Closed due to user request. [preauth] Jan 18 13:50:50 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1463]: Disconnected from invalid user jenkins 10.30.120.5 port 55250 [preauth] Jan 18 13:50:54 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1683]: Invalid user jenkins from 10.30.120.5 port 55272 Jan 18 13:50:54 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1683]: Received disconnect from 10.30.120.5 port 55272:11: Closed due to user request. [preauth] Jan 18 13:50:54 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1683]: Disconnected from invalid user jenkins 10.30.120.5 port 55272 [preauth] Jan 18 13:50:56 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1729]: Invalid user jenkins from 10.30.120.5 port 55278 Jan 18 13:50:56 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1729]: Received disconnect from 10.30.120.5 port 55278:11: Closed due to user request. [preauth] Jan 18 13:50:56 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1729]: Disconnected from invalid user jenkins 10.30.120.5 port 55278 [preauth] Jan 18 13:50:58 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1731]: Invalid user jenkins from 10.30.120.5 port 55288 Jan 18 13:50:58 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1731]: Received disconnect from 10.30.120.5 port 55288:11: Closed due to user request. [preauth] Jan 18 13:50:58 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1731]: Disconnected from invalid user jenkins 10.30.120.5 port 55288 [preauth] Jan 18 13:51:00 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1739]: Invalid user jenkins from 10.30.120.5 port 55294 Jan 18 13:51:00 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1739]: Received disconnect from 10.30.120.5 port 55294:11: Closed due to user request. [preauth] Jan 18 13:51:00 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1739]: Disconnected from invalid user jenkins 10.30.120.5 port 55294 [preauth] Jan 18 13:51:02 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1746]: Invalid user jenkins from 10.30.120.5 port 55302 Jan 18 13:51:02 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1746]: Received disconnect from 10.30.120.5 port 55302:11: Closed due to user request. [preauth] Jan 18 13:51:02 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1746]: Disconnected from invalid user jenkins 10.30.120.5 port 55302 [preauth] Jan 18 13:51:03 prd-ubuntu18-04-docker-8c-8g-2938 CRON[1741]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:51:03 prd-ubuntu18-04-docker-8c-8g-2938 CRON[1741]: pam_unix(cron:session): session closed for user root Jan 18 13:51:04 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1752]: Invalid user jenkins from 10.30.120.5 port 55310 Jan 18 13:51:04 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1752]: Received disconnect from 10.30.120.5 port 55310:11: Closed due to user request. [preauth] Jan 18 13:51:04 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1752]: Disconnected from invalid user jenkins 10.30.120.5 port 55310 [preauth] Jan 18 13:51:05 prd-ubuntu18-04-docker-8c-8g-2938 useradd[1772]: new group: name=jenkins, GID=1001 Jan 18 13:51:05 prd-ubuntu18-04-docker-8c-8g-2938 useradd[1772]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 18 13:51:05 prd-ubuntu18-04-docker-8c-8g-2938 usermod[1781]: add 'jenkins' to group 'docker' Jan 18 13:51:05 prd-ubuntu18-04-docker-8c-8g-2938 usermod[1781]: add 'jenkins' to shadow group 'docker' Jan 18 13:51:06 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1834]: Accepted publickey for jenkins from 10.30.120.5 port 55316 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 18 13:51:06 prd-ubuntu18-04-docker-8c-8g-2938 sshd[1834]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 18 13:51:06 prd-ubuntu18-04-docker-8c-8g-2938 systemd-logind[1111]: New session 2 of user jenkins. Jan 18 13:51:06 prd-ubuntu18-04-docker-8c-8g-2938 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 18 13:52:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[2711]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:52:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[2711]: pam_unix(cron:session): session closed for user root Jan 18 13:53:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[2755]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:53:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[2755]: pam_unix(cron:session): session closed for user root Jan 18 13:54:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[2798]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:54:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[2798]: pam_unix(cron:session): session closed for user root Jan 18 13:55:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[3164]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 18 13:55:01 prd-ubuntu18-04-docker-8c-8g-2938 CRON[3164]: pam_unix(cron:session): session closed for user root