Jun 23 09:54:11 prd-ubuntu18-04-docker-8c-8g-3788 passwd[1013]: password for 'ubuntu' changed by 'root' Jun 23 09:54:11 prd-ubuntu18-04-docker-8c-8g-3788 systemd-logind[1060]: Watching system buttons on /dev/input/event0 (Power Button) Jun 23 09:54:11 prd-ubuntu18-04-docker-8c-8g-3788 systemd-logind[1060]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 23 09:54:11 prd-ubuntu18-04-docker-8c-8g-3788 systemd-logind[1060]: New seat seat0. Jun 23 09:54:11 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1127]: Server listening on 0.0.0.0 port 22. Jun 23 09:54:11 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1127]: Server listening on :: port 22. Jun 23 09:54:13 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1402]: Did not receive identification string from 10.30.120.5 port 41298 Jun 23 09:54:21 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1434]: Invalid user jenkins from 10.30.120.5 port 41302 Jun 23 09:54:21 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1434]: Received disconnect from 10.30.120.5 port 41302:11: Closed due to user request. [preauth] Jun 23 09:54:21 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1434]: Disconnected from invalid user jenkins 10.30.120.5 port 41302 [preauth] Jun 23 09:54:23 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1438]: Invalid user jenkins from 10.30.120.5 port 41304 Jun 23 09:54:23 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1438]: Received disconnect from 10.30.120.5 port 41304:11: Closed due to user request. [preauth] Jun 23 09:54:23 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1438]: Disconnected from invalid user jenkins 10.30.120.5 port 41304 [preauth] Jun 23 09:54:25 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1440]: Invalid user jenkins from 10.30.120.5 port 41306 Jun 23 09:54:25 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1440]: Received disconnect from 10.30.120.5 port 41306:11: Closed due to user request. [preauth] Jun 23 09:54:25 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1440]: Disconnected from invalid user jenkins 10.30.120.5 port 41306 [preauth] Jun 23 09:54:27 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1442]: Invalid user jenkins from 10.30.120.5 port 41308 Jun 23 09:54:27 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1442]: Received disconnect from 10.30.120.5 port 41308:11: Closed due to user request. [preauth] Jun 23 09:54:27 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1442]: Disconnected from invalid user jenkins 10.30.120.5 port 41308 [preauth] Jun 23 09:54:30 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1588]: Invalid user jenkins from 10.30.120.5 port 41318 Jun 23 09:54:30 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1588]: Received disconnect from 10.30.120.5 port 41318:11: Closed due to user request. [preauth] Jun 23 09:54:30 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1588]: Disconnected from invalid user jenkins 10.30.120.5 port 41318 [preauth] Jun 23 09:54:32 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1707]: Invalid user jenkins from 10.30.120.5 port 41320 Jun 23 09:54:32 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1707]: Received disconnect from 10.30.120.5 port 41320:11: Closed due to user request. [preauth] Jun 23 09:54:32 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1707]: Disconnected from invalid user jenkins 10.30.120.5 port 41320 [preauth] Jun 23 09:54:34 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1711]: Invalid user jenkins from 10.30.120.5 port 41322 Jun 23 09:54:34 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1711]: Received disconnect from 10.30.120.5 port 41322:11: Closed due to user request. [preauth] Jun 23 09:54:34 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1711]: Disconnected from invalid user jenkins 10.30.120.5 port 41322 [preauth] Jun 23 09:54:36 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1722]: Invalid user jenkins from 10.30.120.5 port 41324 Jun 23 09:54:37 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1722]: Received disconnect from 10.30.120.5 port 41324:11: Closed due to user request. [preauth] Jun 23 09:54:37 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1722]: Disconnected from invalid user jenkins 10.30.120.5 port 41324 [preauth] Jun 23 09:54:37 prd-ubuntu18-04-docker-8c-8g-3788 useradd[1733]: new group: name=jenkins, GID=1001 Jun 23 09:54:37 prd-ubuntu18-04-docker-8c-8g-3788 useradd[1733]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 23 09:54:37 prd-ubuntu18-04-docker-8c-8g-3788 usermod[1746]: add 'jenkins' to group 'docker' Jun 23 09:54:37 prd-ubuntu18-04-docker-8c-8g-3788 usermod[1746]: add 'jenkins' to shadow group 'docker' Jun 23 09:54:39 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1781]: Accepted publickey for jenkins from 10.30.120.5 port 41326 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 23 09:54:39 prd-ubuntu18-04-docker-8c-8g-3788 sshd[1781]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 23 09:54:39 prd-ubuntu18-04-docker-8c-8g-3788 systemd-logind[1060]: New session 1 of user jenkins. Jun 23 09:54:39 prd-ubuntu18-04-docker-8c-8g-3788 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 23 09:55:03 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2047]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 09:55:03 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2047]: pam_unix(cron:session): session closed for user root Jun 23 09:56:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2645]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 09:56:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2645]: pam_unix(cron:session): session closed for user root Jun 23 09:57:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2792]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 09:57:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2792]: pam_unix(cron:session): session closed for user root Jun 23 09:58:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2802]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 09:58:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[2802]: pam_unix(cron:session): session closed for user root Jun 23 09:59:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[3001]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 09:59:01 prd-ubuntu18-04-docker-8c-8g-3788 CRON[3001]: pam_unix(cron:session): session closed for user root