Oct 14 06:48:51 prd-ubuntu1804-docker-4c-4g-6411 passwd[936]: password for 'ubuntu' changed by 'root' Oct 14 06:48:51 prd-ubuntu1804-docker-4c-4g-6411 systemd-logind[1027]: Watching system buttons on /dev/input/event0 (Power Button) Oct 14 06:48:51 prd-ubuntu1804-docker-4c-4g-6411 systemd-logind[1027]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 14 06:48:51 prd-ubuntu1804-docker-4c-4g-6411 systemd-logind[1027]: New seat seat0. Oct 14 06:48:52 prd-ubuntu1804-docker-4c-4g-6411 sshd[1121]: Server listening on 0.0.0.0 port 22. Oct 14 06:48:52 prd-ubuntu1804-docker-4c-4g-6411 sshd[1121]: Server listening on :: port 22. Oct 14 06:48:52 prd-ubuntu1804-docker-4c-4g-6411 sshd[1256]: Did not receive identification string from 10.32.4.5 port 33476 Oct 14 06:48:56 prd-ubuntu1804-docker-4c-4g-6411 sshd[1462]: Invalid user jenkins from 10.32.4.5 port 33478 Oct 14 06:48:56 prd-ubuntu1804-docker-4c-4g-6411 sshd[1462]: Received disconnect from 10.32.4.5 port 33478:11: Closed due to user request. [preauth] Oct 14 06:48:56 prd-ubuntu1804-docker-4c-4g-6411 sshd[1462]: Disconnected from invalid user jenkins 10.32.4.5 port 33478 [preauth] Oct 14 06:48:58 prd-ubuntu1804-docker-4c-4g-6411 sshd[1496]: Invalid user jenkins from 10.32.4.5 port 33480 Oct 14 06:48:58 prd-ubuntu1804-docker-4c-4g-6411 sshd[1496]: Received disconnect from 10.32.4.5 port 33480:11: Closed due to user request. [preauth] Oct 14 06:48:58 prd-ubuntu1804-docker-4c-4g-6411 sshd[1496]: Disconnected from invalid user jenkins 10.32.4.5 port 33480 [preauth] Oct 14 06:49:00 prd-ubuntu1804-docker-4c-4g-6411 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 33488 Oct 14 06:49:00 prd-ubuntu1804-docker-4c-4g-6411 sshd[1514]: Received disconnect from 10.32.4.5 port 33488:11: Closed due to user request. [preauth] Oct 14 06:49:00 prd-ubuntu1804-docker-4c-4g-6411 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 33488 [preauth] Oct 14 06:49:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[1517]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 14 06:49:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[1517]: pam_unix(cron:session): session closed for user root Oct 14 06:49:02 prd-ubuntu1804-docker-4c-4g-6411 sshd[1524]: Invalid user jenkins from 10.32.4.5 port 33490 Oct 14 06:49:02 prd-ubuntu1804-docker-4c-4g-6411 sshd[1524]: Received disconnect from 10.32.4.5 port 33490:11: Closed due to user request. [preauth] Oct 14 06:49:02 prd-ubuntu1804-docker-4c-4g-6411 sshd[1524]: Disconnected from invalid user jenkins 10.32.4.5 port 33490 [preauth] Oct 14 06:49:04 prd-ubuntu1804-docker-4c-4g-6411 sshd[1526]: Invalid user jenkins from 10.32.4.5 port 33494 Oct 14 06:49:04 prd-ubuntu1804-docker-4c-4g-6411 sshd[1526]: Received disconnect from 10.32.4.5 port 33494:11: Closed due to user request. [preauth] Oct 14 06:49:04 prd-ubuntu1804-docker-4c-4g-6411 sshd[1526]: Disconnected from invalid user jenkins 10.32.4.5 port 33494 [preauth] Oct 14 06:49:06 prd-ubuntu1804-docker-4c-4g-6411 sshd[1528]: Invalid user jenkins from 10.32.4.5 port 33498 Oct 14 06:49:06 prd-ubuntu1804-docker-4c-4g-6411 sshd[1528]: Received disconnect from 10.32.4.5 port 33498:11: Closed due to user request. [preauth] Oct 14 06:49:06 prd-ubuntu1804-docker-4c-4g-6411 sshd[1528]: Disconnected from invalid user jenkins 10.32.4.5 port 33498 [preauth] Oct 14 06:49:08 prd-ubuntu1804-docker-4c-4g-6411 sshd[1530]: Invalid user jenkins from 10.32.4.5 port 33502 Oct 14 06:49:09 prd-ubuntu1804-docker-4c-4g-6411 sshd[1530]: Received disconnect from 10.32.4.5 port 33502:11: Closed due to user request. [preauth] Oct 14 06:49:09 prd-ubuntu1804-docker-4c-4g-6411 sshd[1530]: Disconnected from invalid user jenkins 10.32.4.5 port 33502 [preauth] Oct 14 06:49:11 prd-ubuntu1804-docker-4c-4g-6411 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 33504 Oct 14 06:49:11 prd-ubuntu1804-docker-4c-4g-6411 sshd[1532]: Received disconnect from 10.32.4.5 port 33504:11: Closed due to user request. [preauth] Oct 14 06:49:11 prd-ubuntu1804-docker-4c-4g-6411 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 33504 [preauth] Oct 14 06:49:13 prd-ubuntu1804-docker-4c-4g-6411 sshd[1534]: Invalid user jenkins from 10.32.4.5 port 33506 Oct 14 06:49:13 prd-ubuntu1804-docker-4c-4g-6411 sshd[1534]: Received disconnect from 10.32.4.5 port 33506:11: Closed due to user request. [preauth] Oct 14 06:49:13 prd-ubuntu1804-docker-4c-4g-6411 sshd[1534]: Disconnected from invalid user jenkins 10.32.4.5 port 33506 [preauth] Oct 14 06:49:15 prd-ubuntu1804-docker-4c-4g-6411 sshd[1718]: Invalid user jenkins from 10.32.4.5 port 33510 Oct 14 06:49:15 prd-ubuntu1804-docker-4c-4g-6411 sshd[1718]: Received disconnect from 10.32.4.5 port 33510:11: Closed due to user request. [preauth] Oct 14 06:49:15 prd-ubuntu1804-docker-4c-4g-6411 sshd[1718]: Disconnected from invalid user jenkins 10.32.4.5 port 33510 [preauth] Oct 14 06:49:18 prd-ubuntu1804-docker-4c-4g-6411 sshd[1778]: Invalid user jenkins from 10.32.4.5 port 33520 Oct 14 06:49:18 prd-ubuntu1804-docker-4c-4g-6411 sshd[1778]: Received disconnect from 10.32.4.5 port 33520:11: Closed due to user request. [preauth] Oct 14 06:49:18 prd-ubuntu1804-docker-4c-4g-6411 sshd[1778]: Disconnected from invalid user jenkins 10.32.4.5 port 33520 [preauth] Oct 14 06:49:20 prd-ubuntu1804-docker-4c-4g-6411 sshd[1812]: Invalid user jenkins from 10.32.4.5 port 33526 Oct 14 06:49:20 prd-ubuntu1804-docker-4c-4g-6411 sshd[1812]: Received disconnect from 10.32.4.5 port 33526:11: Closed due to user request. [preauth] Oct 14 06:49:20 prd-ubuntu1804-docker-4c-4g-6411 sshd[1812]: Disconnected from invalid user jenkins 10.32.4.5 port 33526 [preauth] Oct 14 06:49:22 prd-ubuntu1804-docker-4c-4g-6411 sshd[1816]: Invalid user jenkins from 10.32.4.5 port 33530 Oct 14 06:49:22 prd-ubuntu1804-docker-4c-4g-6411 sshd[1816]: Received disconnect from 10.32.4.5 port 33530:11: Closed due to user request. [preauth] Oct 14 06:49:22 prd-ubuntu1804-docker-4c-4g-6411 sshd[1816]: Disconnected from invalid user jenkins 10.32.4.5 port 33530 [preauth] Oct 14 06:49:23 prd-ubuntu1804-docker-4c-4g-6411 useradd[1843]: new group: name=jenkins, GID=1001 Oct 14 06:49:23 prd-ubuntu1804-docker-4c-4g-6411 useradd[1843]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 14 06:49:23 prd-ubuntu1804-docker-4c-4g-6411 usermod[1850]: add 'jenkins' to group 'docker' Oct 14 06:49:23 prd-ubuntu1804-docker-4c-4g-6411 usermod[1850]: add 'jenkins' to shadow group 'docker' Oct 14 06:49:24 prd-ubuntu1804-docker-4c-4g-6411 sshd[1891]: Accepted publickey for jenkins from 10.32.4.5 port 33538 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Oct 14 06:49:24 prd-ubuntu1804-docker-4c-4g-6411 sshd[1891]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 14 06:49:24 prd-ubuntu1804-docker-4c-4g-6411 systemd-logind[1027]: New session 2 of user jenkins. Oct 14 06:49:24 prd-ubuntu1804-docker-4c-4g-6411 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 14 06:50:02 prd-ubuntu1804-docker-4c-4g-6411 CRON[2410]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 14 06:50:02 prd-ubuntu1804-docker-4c-4g-6411 CRON[2410]: pam_unix(cron:session): session closed for user root Oct 14 06:51:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[2482]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 14 06:51:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[2482]: pam_unix(cron:session): session closed for user root Oct 14 06:52:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[2992]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 14 06:52:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[2992]: pam_unix(cron:session): session closed for user root Oct 14 06:53:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[3930]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 14 06:53:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[3930]: pam_unix(cron:session): session closed for user root Oct 14 06:54:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[6046]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 14 06:54:01 prd-ubuntu1804-docker-4c-4g-6411 CRON[6046]: pam_unix(cron:session): session closed for user root