May 12 14:37:26 prd-ubuntu1804-docker-4c-4g-674 passwd[950]: password for 'ubuntu' changed by 'root' May 12 14:37:26 prd-ubuntu1804-docker-4c-4g-674 systemd-logind[1005]: Watching system buttons on /dev/input/event0 (Power Button) May 12 14:37:26 prd-ubuntu1804-docker-4c-4g-674 systemd-logind[1005]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 12 14:37:26 prd-ubuntu1804-docker-4c-4g-674 systemd-logind[1005]: New seat seat0. May 12 14:37:26 prd-ubuntu1804-docker-4c-4g-674 sshd[1249]: Server listening on 0.0.0.0 port 22. May 12 14:37:26 prd-ubuntu1804-docker-4c-4g-674 sshd[1249]: Server listening on :: port 22. May 12 14:37:27 prd-ubuntu1804-docker-4c-4g-674 sshd[1293]: Did not receive identification string from 10.32.4.5 port 34348 May 12 14:37:33 prd-ubuntu1804-docker-4c-4g-674 sshd[1507]: Invalid user jenkins from 10.32.4.5 port 34352 May 12 14:37:33 prd-ubuntu1804-docker-4c-4g-674 sshd[1507]: Received disconnect from 10.32.4.5 port 34352:11: Closed due to user request. [preauth] May 12 14:37:33 prd-ubuntu1804-docker-4c-4g-674 sshd[1507]: Disconnected from invalid user jenkins 10.32.4.5 port 34352 [preauth] May 12 14:37:35 prd-ubuntu1804-docker-4c-4g-674 sshd[1524]: Invalid user jenkins from 10.32.4.5 port 34354 May 12 14:37:35 prd-ubuntu1804-docker-4c-4g-674 sshd[1524]: Received disconnect from 10.32.4.5 port 34354:11: Closed due to user request. [preauth] May 12 14:37:35 prd-ubuntu1804-docker-4c-4g-674 sshd[1524]: Disconnected from invalid user jenkins 10.32.4.5 port 34354 [preauth] May 12 14:37:37 prd-ubuntu1804-docker-4c-4g-674 sshd[1526]: Invalid user jenkins from 10.32.4.5 port 34356 May 12 14:37:37 prd-ubuntu1804-docker-4c-4g-674 sshd[1526]: Received disconnect from 10.32.4.5 port 34356:11: Closed due to user request. [preauth] May 12 14:37:37 prd-ubuntu1804-docker-4c-4g-674 sshd[1526]: Disconnected from invalid user jenkins 10.32.4.5 port 34356 [preauth] May 12 14:37:39 prd-ubuntu1804-docker-4c-4g-674 sshd[1528]: Invalid user jenkins from 10.32.4.5 port 34358 May 12 14:37:39 prd-ubuntu1804-docker-4c-4g-674 sshd[1528]: Received disconnect from 10.32.4.5 port 34358:11: Closed due to user request. [preauth] May 12 14:37:39 prd-ubuntu1804-docker-4c-4g-674 sshd[1528]: Disconnected from invalid user jenkins 10.32.4.5 port 34358 [preauth] May 12 14:37:41 prd-ubuntu1804-docker-4c-4g-674 sshd[1530]: Invalid user jenkins from 10.32.4.5 port 34360 May 12 14:37:42 prd-ubuntu1804-docker-4c-4g-674 sshd[1530]: Received disconnect from 10.32.4.5 port 34360:11: Closed due to user request. [preauth] May 12 14:37:42 prd-ubuntu1804-docker-4c-4g-674 sshd[1530]: Disconnected from invalid user jenkins 10.32.4.5 port 34360 [preauth] May 12 14:37:44 prd-ubuntu1804-docker-4c-4g-674 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 34362 May 12 14:37:44 prd-ubuntu1804-docker-4c-4g-674 sshd[1532]: Received disconnect from 10.32.4.5 port 34362:11: Closed due to user request. [preauth] May 12 14:37:44 prd-ubuntu1804-docker-4c-4g-674 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 34362 [preauth] May 12 14:37:46 prd-ubuntu1804-docker-4c-4g-674 sshd[1534]: Invalid user jenkins from 10.32.4.5 port 34366 May 12 14:37:46 prd-ubuntu1804-docker-4c-4g-674 sshd[1534]: Received disconnect from 10.32.4.5 port 34366:11: Closed due to user request. [preauth] May 12 14:37:46 prd-ubuntu1804-docker-4c-4g-674 sshd[1534]: Disconnected from invalid user jenkins 10.32.4.5 port 34366 [preauth] May 12 14:37:48 prd-ubuntu1804-docker-4c-4g-674 sshd[1574]: Invalid user jenkins from 10.32.4.5 port 34368 May 12 14:37:48 prd-ubuntu1804-docker-4c-4g-674 sshd[1574]: Received disconnect from 10.32.4.5 port 34368:11: Closed due to user request. [preauth] May 12 14:37:48 prd-ubuntu1804-docker-4c-4g-674 sshd[1574]: Disconnected from invalid user jenkins 10.32.4.5 port 34368 [preauth] May 12 14:37:50 prd-ubuntu1804-docker-4c-4g-674 sshd[1775]: Invalid user jenkins from 10.32.4.5 port 34370 May 12 14:37:50 prd-ubuntu1804-docker-4c-4g-674 sshd[1775]: Received disconnect from 10.32.4.5 port 34370:11: Closed due to user request. [preauth] May 12 14:37:50 prd-ubuntu1804-docker-4c-4g-674 sshd[1775]: Disconnected from invalid user jenkins 10.32.4.5 port 34370 [preauth] May 12 14:37:52 prd-ubuntu1804-docker-4c-4g-674 sshd[1815]: Invalid user jenkins from 10.32.4.5 port 34372 May 12 14:37:52 prd-ubuntu1804-docker-4c-4g-674 sshd[1815]: Received disconnect from 10.32.4.5 port 34372:11: Closed due to user request. [preauth] May 12 14:37:52 prd-ubuntu1804-docker-4c-4g-674 sshd[1815]: Disconnected from invalid user jenkins 10.32.4.5 port 34372 [preauth] May 12 14:37:54 prd-ubuntu1804-docker-4c-4g-674 sshd[1819]: Invalid user jenkins from 10.32.4.5 port 34374 May 12 14:37:54 prd-ubuntu1804-docker-4c-4g-674 sshd[1819]: Received disconnect from 10.32.4.5 port 34374:11: Closed due to user request. [preauth] May 12 14:37:54 prd-ubuntu1804-docker-4c-4g-674 sshd[1819]: Disconnected from invalid user jenkins 10.32.4.5 port 34374 [preauth] May 12 14:37:56 prd-ubuntu1804-docker-4c-4g-674 useradd[1826]: new group: name=jenkins, GID=1001 May 12 14:37:56 prd-ubuntu1804-docker-4c-4g-674 useradd[1826]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash May 12 14:37:56 prd-ubuntu1804-docker-4c-4g-674 usermod[1833]: add 'jenkins' to group 'docker' May 12 14:37:56 prd-ubuntu1804-docker-4c-4g-674 usermod[1833]: add 'jenkins' to shadow group 'docker' May 12 14:37:57 prd-ubuntu1804-docker-4c-4g-674 sshd[1867]: Accepted publickey for jenkins from 10.32.4.5 port 34376 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI May 12 14:37:57 prd-ubuntu1804-docker-4c-4g-674 sshd[1867]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 12 14:37:57 prd-ubuntu1804-docker-4c-4g-674 systemd-logind[1005]: New session 1 of user jenkins. May 12 14:37:57 prd-ubuntu1804-docker-4c-4g-674 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 12 14:38:01 prd-ubuntu1804-docker-4c-4g-674 CRON[2076]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 14:38:01 prd-ubuntu1804-docker-4c-4g-674 CRON[2076]: pam_unix(cron:session): session closed for user root May 12 14:39:01 prd-ubuntu1804-docker-4c-4g-674 CRON[2413]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 14:39:01 prd-ubuntu1804-docker-4c-4g-674 CRON[2413]: pam_unix(cron:session): session closed for user root May 12 14:40:01 prd-ubuntu1804-docker-4c-4g-674 CRON[2893]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 14:40:01 prd-ubuntu1804-docker-4c-4g-674 CRON[2893]: pam_unix(cron:session): session closed for user root May 12 14:41:01 prd-ubuntu1804-docker-4c-4g-674 CRON[4166]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 14:41:01 prd-ubuntu1804-docker-4c-4g-674 CRON[4166]: pam_unix(cron:session): session closed for user root May 12 14:42:01 prd-ubuntu1804-docker-4c-4g-674 CRON[4248]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 14:42:01 prd-ubuntu1804-docker-4c-4g-674 CRON[4248]: pam_unix(cron:session): session closed for user root May 12 14:43:01 prd-ubuntu1804-docker-4c-4g-674 CRON[4521]: pam_unix(cron:session): session opened for user root by (uid=0) May 12 14:43:01 prd-ubuntu1804-docker-4c-4g-674 CRON[4521]: pam_unix(cron:session): session closed for user root