Aug 31 05:45:53 prd-ubuntu1804-docker-4c-4g-2484 passwd[920]: password for 'ubuntu' changed by 'root' Aug 31 05:45:53 prd-ubuntu1804-docker-4c-4g-2484 systemd-logind[1051]: Watching system buttons on /dev/input/event0 (Power Button) Aug 31 05:45:53 prd-ubuntu1804-docker-4c-4g-2484 systemd-logind[1051]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 31 05:45:53 prd-ubuntu1804-docker-4c-4g-2484 systemd-logind[1051]: New seat seat0. Aug 31 05:45:53 prd-ubuntu1804-docker-4c-4g-2484 sshd[1246]: Server listening on 0.0.0.0 port 22. Aug 31 05:45:53 prd-ubuntu1804-docker-4c-4g-2484 sshd[1246]: Server listening on :: port 22. Aug 31 05:45:53 prd-ubuntu1804-docker-4c-4g-2484 sshd[1269]: Did not receive identification string from 10.32.4.5 port 60888 Aug 31 05:45:56 prd-ubuntu1804-docker-4c-4g-2484 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 60890 Aug 31 05:45:56 prd-ubuntu1804-docker-4c-4g-2484 sshd[1491]: Received disconnect from 10.32.4.5 port 60890:11: Closed due to user request. [preauth] Aug 31 05:45:56 prd-ubuntu1804-docker-4c-4g-2484 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 60890 [preauth] Aug 31 05:45:58 prd-ubuntu1804-docker-4c-4g-2484 sshd[1525]: Invalid user jenkins from 10.32.4.5 port 60892 Aug 31 05:45:58 prd-ubuntu1804-docker-4c-4g-2484 sshd[1525]: Received disconnect from 10.32.4.5 port 60892:11: Closed due to user request. [preauth] Aug 31 05:45:58 prd-ubuntu1804-docker-4c-4g-2484 sshd[1525]: Disconnected from invalid user jenkins 10.32.4.5 port 60892 [preauth] Aug 31 05:46:00 prd-ubuntu1804-docker-4c-4g-2484 sshd[1530]: Invalid user jenkins from 10.32.4.5 port 60900 Aug 31 05:46:00 prd-ubuntu1804-docker-4c-4g-2484 sshd[1530]: Received disconnect from 10.32.4.5 port 60900:11: Closed due to user request. [preauth] Aug 31 05:46:00 prd-ubuntu1804-docker-4c-4g-2484 sshd[1530]: Disconnected from invalid user jenkins 10.32.4.5 port 60900 [preauth] Aug 31 05:46:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[1535]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 31 05:46:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[1535]: pam_unix(cron:session): session closed for user root Aug 31 05:46:02 prd-ubuntu1804-docker-4c-4g-2484 sshd[1543]: Invalid user jenkins from 10.32.4.5 port 60902 Aug 31 05:46:02 prd-ubuntu1804-docker-4c-4g-2484 sshd[1543]: Received disconnect from 10.32.4.5 port 60902:11: Closed due to user request. [preauth] Aug 31 05:46:02 prd-ubuntu1804-docker-4c-4g-2484 sshd[1543]: Disconnected from invalid user jenkins 10.32.4.5 port 60902 [preauth] Aug 31 05:46:04 prd-ubuntu1804-docker-4c-4g-2484 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 60904 Aug 31 05:46:04 prd-ubuntu1804-docker-4c-4g-2484 sshd[1545]: Received disconnect from 10.32.4.5 port 60904:11: Closed due to user request. [preauth] Aug 31 05:46:04 prd-ubuntu1804-docker-4c-4g-2484 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 60904 [preauth] Aug 31 05:46:07 prd-ubuntu1804-docker-4c-4g-2484 sshd[1547]: Invalid user jenkins from 10.32.4.5 port 60906 Aug 31 05:46:07 prd-ubuntu1804-docker-4c-4g-2484 sshd[1547]: Received disconnect from 10.32.4.5 port 60906:11: Closed due to user request. [preauth] Aug 31 05:46:07 prd-ubuntu1804-docker-4c-4g-2484 sshd[1547]: Disconnected from invalid user jenkins 10.32.4.5 port 60906 [preauth] Aug 31 05:46:09 prd-ubuntu1804-docker-4c-4g-2484 sshd[1549]: Invalid user jenkins from 10.32.4.5 port 60910 Aug 31 05:46:09 prd-ubuntu1804-docker-4c-4g-2484 sshd[1549]: Received disconnect from 10.32.4.5 port 60910:11: Closed due to user request. [preauth] Aug 31 05:46:09 prd-ubuntu1804-docker-4c-4g-2484 sshd[1549]: Disconnected from invalid user jenkins 10.32.4.5 port 60910 [preauth] Aug 31 05:46:11 prd-ubuntu1804-docker-4c-4g-2484 sshd[1558]: Invalid user jenkins from 10.32.4.5 port 60912 Aug 31 05:46:11 prd-ubuntu1804-docker-4c-4g-2484 sshd[1558]: Received disconnect from 10.32.4.5 port 60912:11: Closed due to user request. [preauth] Aug 31 05:46:11 prd-ubuntu1804-docker-4c-4g-2484 sshd[1558]: Disconnected from invalid user jenkins 10.32.4.5 port 60912 [preauth] Aug 31 05:46:13 prd-ubuntu1804-docker-4c-4g-2484 sshd[1560]: Invalid user jenkins from 10.32.4.5 port 60914 Aug 31 05:46:13 prd-ubuntu1804-docker-4c-4g-2484 sshd[1560]: Received disconnect from 10.32.4.5 port 60914:11: Closed due to user request. [preauth] Aug 31 05:46:13 prd-ubuntu1804-docker-4c-4g-2484 sshd[1560]: Disconnected from invalid user jenkins 10.32.4.5 port 60914 [preauth] Aug 31 05:46:15 prd-ubuntu1804-docker-4c-4g-2484 sshd[1654]: Invalid user jenkins from 10.32.4.5 port 60916 Aug 31 05:46:15 prd-ubuntu1804-docker-4c-4g-2484 sshd[1654]: Received disconnect from 10.32.4.5 port 60916:11: Closed due to user request. [preauth] Aug 31 05:46:15 prd-ubuntu1804-docker-4c-4g-2484 sshd[1654]: Disconnected from invalid user jenkins 10.32.4.5 port 60916 [preauth] Aug 31 05:46:17 prd-ubuntu1804-docker-4c-4g-2484 sshd[1795]: Invalid user jenkins from 10.32.4.5 port 60918 Aug 31 05:46:17 prd-ubuntu1804-docker-4c-4g-2484 sshd[1795]: Received disconnect from 10.32.4.5 port 60918:11: Closed due to user request. [preauth] Aug 31 05:46:17 prd-ubuntu1804-docker-4c-4g-2484 sshd[1795]: Disconnected from invalid user jenkins 10.32.4.5 port 60918 [preauth] Aug 31 05:46:19 prd-ubuntu1804-docker-4c-4g-2484 sshd[1823]: Invalid user jenkins from 10.32.4.5 port 60920 Aug 31 05:46:19 prd-ubuntu1804-docker-4c-4g-2484 sshd[1823]: Received disconnect from 10.32.4.5 port 60920:11: Closed due to user request. [preauth] Aug 31 05:46:19 prd-ubuntu1804-docker-4c-4g-2484 sshd[1823]: Disconnected from invalid user jenkins 10.32.4.5 port 60920 [preauth] Aug 31 05:46:22 prd-ubuntu1804-docker-4c-4g-2484 sshd[1841]: Invalid user jenkins from 10.32.4.5 port 60922 Aug 31 05:46:22 prd-ubuntu1804-docker-4c-4g-2484 sshd[1841]: Received disconnect from 10.32.4.5 port 60922:11: Closed due to user request. [preauth] Aug 31 05:46:22 prd-ubuntu1804-docker-4c-4g-2484 sshd[1841]: Disconnected from invalid user jenkins 10.32.4.5 port 60922 [preauth] Aug 31 05:46:24 prd-ubuntu1804-docker-4c-4g-2484 sshd[1855]: Invalid user jenkins from 10.32.4.5 port 60926 Aug 31 05:46:24 prd-ubuntu1804-docker-4c-4g-2484 sshd[1855]: Received disconnect from 10.32.4.5 port 60926:11: Closed due to user request. [preauth] Aug 31 05:46:24 prd-ubuntu1804-docker-4c-4g-2484 sshd[1855]: Disconnected from invalid user jenkins 10.32.4.5 port 60926 [preauth] Aug 31 05:46:25 prd-ubuntu1804-docker-4c-4g-2484 useradd[1882]: new group: name=jenkins, GID=1001 Aug 31 05:46:25 prd-ubuntu1804-docker-4c-4g-2484 useradd[1882]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 31 05:46:25 prd-ubuntu1804-docker-4c-4g-2484 usermod[1889]: add 'jenkins' to group 'docker' Aug 31 05:46:25 prd-ubuntu1804-docker-4c-4g-2484 usermod[1889]: add 'jenkins' to shadow group 'docker' Aug 31 05:46:26 prd-ubuntu1804-docker-4c-4g-2484 sshd[1923]: Accepted publickey for jenkins from 10.32.4.5 port 60928 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 31 05:46:26 prd-ubuntu1804-docker-4c-4g-2484 sshd[1923]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 31 05:46:26 prd-ubuntu1804-docker-4c-4g-2484 systemd-logind[1051]: New session 2 of user jenkins. Aug 31 05:46:26 prd-ubuntu1804-docker-4c-4g-2484 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 31 05:47:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[2417]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 31 05:47:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[2417]: pam_unix(cron:session): session closed for user root Aug 31 05:48:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[2476]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 31 05:48:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[2476]: pam_unix(cron:session): session closed for user root Aug 31 05:49:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[2964]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 31 05:49:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[2964]: pam_unix(cron:session): session closed for user root Aug 31 05:50:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[3541]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 31 05:50:01 prd-ubuntu1804-docker-4c-4g-2484 CRON[3541]: pam_unix(cron:session): session closed for user root