Oct 17 11:59:50 prd-ubuntu18-04-docker-8c-8g-8301 passwd[978]: password for 'ubuntu' changed by 'root' Oct 17 11:59:50 prd-ubuntu18-04-docker-8c-8g-8301 systemd-logind[1064]: Watching system buttons on /dev/input/event0 (Power Button) Oct 17 11:59:50 prd-ubuntu18-04-docker-8c-8g-8301 systemd-logind[1064]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 17 11:59:50 prd-ubuntu18-04-docker-8c-8g-8301 systemd-logind[1064]: New seat seat0. Oct 17 11:59:50 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1084]: Server listening on 0.0.0.0 port 22. Oct 17 11:59:50 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1084]: Server listening on :: port 22. Oct 17 11:59:50 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1357]: Did not receive identification string from 10.30.120.5 port 58418 Oct 17 11:59:54 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1404]: Invalid user jenkins from 10.30.120.5 port 58420 Oct 17 11:59:54 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1404]: Received disconnect from 10.30.120.5 port 58420:11: Closed due to user request. [preauth] Oct 17 11:59:54 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1404]: Disconnected from invalid user jenkins 10.30.120.5 port 58420 [preauth] Oct 17 11:59:56 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1425]: Invalid user jenkins from 10.30.120.5 port 58422 Oct 17 11:59:56 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1425]: Received disconnect from 10.30.120.5 port 58422:11: Closed due to user request. [preauth] Oct 17 11:59:56 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1425]: Disconnected from invalid user jenkins 10.30.120.5 port 58422 [preauth] Oct 17 11:59:58 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1427]: Invalid user jenkins from 10.30.120.5 port 58426 Oct 17 11:59:58 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1427]: Received disconnect from 10.30.120.5 port 58426:11: Closed due to user request. [preauth] Oct 17 11:59:58 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1427]: Disconnected from invalid user jenkins 10.30.120.5 port 58426 [preauth] Oct 17 12:00:00 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1429]: Invalid user jenkins from 10.30.120.5 port 58434 Oct 17 12:00:00 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1429]: Received disconnect from 10.30.120.5 port 58434:11: Closed due to user request. [preauth] Oct 17 12:00:00 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1429]: Disconnected from invalid user jenkins 10.30.120.5 port 58434 [preauth] Oct 17 12:00:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[1431]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 17 12:00:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[1431]: pam_unix(cron:session): session closed for user root Oct 17 12:00:03 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1440]: Invalid user jenkins from 10.30.120.5 port 58438 Oct 17 12:00:03 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1440]: Received disconnect from 10.30.120.5 port 58438:11: Closed due to user request. [preauth] Oct 17 12:00:03 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1440]: Disconnected from invalid user jenkins 10.30.120.5 port 58438 [preauth] Oct 17 12:00:05 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1442]: Invalid user jenkins from 10.30.120.5 port 58446 Oct 17 12:00:05 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1442]: Received disconnect from 10.30.120.5 port 58446:11: Closed due to user request. [preauth] Oct 17 12:00:05 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1442]: Disconnected from invalid user jenkins 10.30.120.5 port 58446 [preauth] Oct 17 12:00:07 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1452]: Invalid user jenkins from 10.30.120.5 port 58448 Oct 17 12:00:07 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1452]: Received disconnect from 10.30.120.5 port 58448:11: Closed due to user request. [preauth] Oct 17 12:00:07 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1452]: Disconnected from invalid user jenkins 10.30.120.5 port 58448 [preauth] Oct 17 12:00:10 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1675]: Invalid user jenkins from 10.30.120.5 port 58450 Oct 17 12:00:10 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1675]: Received disconnect from 10.30.120.5 port 58450:11: Closed due to user request. [preauth] Oct 17 12:00:10 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1675]: Disconnected from invalid user jenkins 10.30.120.5 port 58450 [preauth] Oct 17 12:00:12 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1714]: Invalid user jenkins from 10.30.120.5 port 58452 Oct 17 12:00:12 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1714]: Received disconnect from 10.30.120.5 port 58452:11: Closed due to user request. [preauth] Oct 17 12:00:12 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1714]: Disconnected from invalid user jenkins 10.30.120.5 port 58452 [preauth] Oct 17 12:00:13 prd-ubuntu18-04-docker-8c-8g-8301 useradd[1734]: new group: name=jenkins, GID=1001 Oct 17 12:00:13 prd-ubuntu18-04-docker-8c-8g-8301 useradd[1734]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 17 12:00:13 prd-ubuntu18-04-docker-8c-8g-8301 usermod[1741]: add 'jenkins' to group 'docker' Oct 17 12:00:13 prd-ubuntu18-04-docker-8c-8g-8301 usermod[1741]: add 'jenkins' to shadow group 'docker' Oct 17 12:00:14 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1782]: Accepted publickey for jenkins from 10.30.120.5 port 58456 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Oct 17 12:00:14 prd-ubuntu18-04-docker-8c-8g-8301 sshd[1782]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 17 12:00:14 prd-ubuntu18-04-docker-8c-8g-8301 systemd-logind[1064]: New session 2 of user jenkins. Oct 17 12:00:14 prd-ubuntu18-04-docker-8c-8g-8301 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 17 12:01:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2700]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 17 12:01:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2700]: pam_unix(cron:session): session closed for user root Oct 17 12:02:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2744]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 17 12:02:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2744]: pam_unix(cron:session): session closed for user root Oct 17 12:03:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2787]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 17 12:03:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2787]: pam_unix(cron:session): session closed for user root Oct 17 12:04:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2865]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 17 12:04:01 prd-ubuntu18-04-docker-8c-8g-8301 CRON[2865]: pam_unix(cron:session): session closed for user root