Aug 10 19:14:46 prd-ubuntu1804-docker-4c-4g-8007 passwd[930]: password for 'ubuntu' changed by 'root' Aug 10 19:14:46 prd-ubuntu1804-docker-4c-4g-8007 systemd-logind[979]: Watching system buttons on /dev/input/event0 (Power Button) Aug 10 19:14:46 prd-ubuntu1804-docker-4c-4g-8007 systemd-logind[979]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 10 19:14:46 prd-ubuntu1804-docker-4c-4g-8007 systemd-logind[979]: New seat seat0. Aug 10 19:14:46 prd-ubuntu1804-docker-4c-4g-8007 sshd[1052]: Server listening on 0.0.0.0 port 22. Aug 10 19:14:46 prd-ubuntu1804-docker-4c-4g-8007 sshd[1052]: Server listening on :: port 22. Aug 10 19:14:48 prd-ubuntu1804-docker-4c-4g-8007 sshd[1307]: Did not receive identification string from 10.32.4.5 port 41002 Aug 10 19:14:53 prd-ubuntu1804-docker-4c-4g-8007 sshd[1404]: Invalid user jenkins from 10.32.4.5 port 41006 Aug 10 19:14:53 prd-ubuntu1804-docker-4c-4g-8007 sshd[1404]: Received disconnect from 10.32.4.5 port 41006:11: Closed due to user request. [preauth] Aug 10 19:14:53 prd-ubuntu1804-docker-4c-4g-8007 sshd[1404]: Disconnected from invalid user jenkins 10.32.4.5 port 41006 [preauth] Aug 10 19:14:55 prd-ubuntu1804-docker-4c-4g-8007 sshd[1414]: Invalid user jenkins from 10.32.4.5 port 41008 Aug 10 19:14:55 prd-ubuntu1804-docker-4c-4g-8007 sshd[1414]: Received disconnect from 10.32.4.5 port 41008:11: Closed due to user request. [preauth] Aug 10 19:14:55 prd-ubuntu1804-docker-4c-4g-8007 sshd[1414]: Disconnected from invalid user jenkins 10.32.4.5 port 41008 [preauth] Aug 10 19:14:57 prd-ubuntu1804-docker-4c-4g-8007 sshd[1416]: Invalid user jenkins from 10.32.4.5 port 41010 Aug 10 19:14:57 prd-ubuntu1804-docker-4c-4g-8007 sshd[1416]: Received disconnect from 10.32.4.5 port 41010:11: Closed due to user request. [preauth] Aug 10 19:14:57 prd-ubuntu1804-docker-4c-4g-8007 sshd[1416]: Disconnected from invalid user jenkins 10.32.4.5 port 41010 [preauth] Aug 10 19:14:59 prd-ubuntu1804-docker-4c-4g-8007 sshd[1418]: Invalid user jenkins from 10.32.4.5 port 41012 Aug 10 19:14:59 prd-ubuntu1804-docker-4c-4g-8007 sshd[1418]: Received disconnect from 10.32.4.5 port 41012:11: Closed due to user request. [preauth] Aug 10 19:14:59 prd-ubuntu1804-docker-4c-4g-8007 sshd[1418]: Disconnected from invalid user jenkins 10.32.4.5 port 41012 [preauth] Aug 10 19:15:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[1420]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 10 19:15:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[1420]: pam_unix(cron:session): session closed for user root Aug 10 19:15:01 prd-ubuntu1804-docker-4c-4g-8007 sshd[1429]: Invalid user jenkins from 10.32.4.5 port 41024 Aug 10 19:15:01 prd-ubuntu1804-docker-4c-4g-8007 sshd[1429]: Received disconnect from 10.32.4.5 port 41024:11: Closed due to user request. [preauth] Aug 10 19:15:01 prd-ubuntu1804-docker-4c-4g-8007 sshd[1429]: Disconnected from invalid user jenkins 10.32.4.5 port 41024 [preauth] Aug 10 19:15:04 prd-ubuntu1804-docker-4c-4g-8007 sshd[1431]: Invalid user jenkins from 10.32.4.5 port 41038 Aug 10 19:15:04 prd-ubuntu1804-docker-4c-4g-8007 sshd[1431]: Received disconnect from 10.32.4.5 port 41038:11: Closed due to user request. [preauth] Aug 10 19:15:04 prd-ubuntu1804-docker-4c-4g-8007 sshd[1431]: Disconnected from invalid user jenkins 10.32.4.5 port 41038 [preauth] Aug 10 19:15:06 prd-ubuntu1804-docker-4c-4g-8007 sshd[1433]: Invalid user jenkins from 10.32.4.5 port 41040 Aug 10 19:15:06 prd-ubuntu1804-docker-4c-4g-8007 sshd[1433]: Received disconnect from 10.32.4.5 port 41040:11: Closed due to user request. [preauth] Aug 10 19:15:06 prd-ubuntu1804-docker-4c-4g-8007 sshd[1433]: Disconnected from invalid user jenkins 10.32.4.5 port 41040 [preauth] Aug 10 19:15:08 prd-ubuntu1804-docker-4c-4g-8007 sshd[1452]: Invalid user jenkins from 10.32.4.5 port 41042 Aug 10 19:15:08 prd-ubuntu1804-docker-4c-4g-8007 sshd[1452]: Received disconnect from 10.32.4.5 port 41042:11: Closed due to user request. [preauth] Aug 10 19:15:08 prd-ubuntu1804-docker-4c-4g-8007 sshd[1452]: Disconnected from invalid user jenkins 10.32.4.5 port 41042 [preauth] Aug 10 19:15:10 prd-ubuntu1804-docker-4c-4g-8007 sshd[1659]: Invalid user jenkins from 10.32.4.5 port 41046 Aug 10 19:15:10 prd-ubuntu1804-docker-4c-4g-8007 sshd[1659]: Received disconnect from 10.32.4.5 port 41046:11: Closed due to user request. [preauth] Aug 10 19:15:10 prd-ubuntu1804-docker-4c-4g-8007 sshd[1659]: Disconnected from invalid user jenkins 10.32.4.5 port 41046 [preauth] Aug 10 19:15:12 prd-ubuntu1804-docker-4c-4g-8007 sshd[1695]: Invalid user jenkins from 10.32.4.5 port 41048 Aug 10 19:15:12 prd-ubuntu1804-docker-4c-4g-8007 sshd[1695]: Received disconnect from 10.32.4.5 port 41048:11: Closed due to user request. [preauth] Aug 10 19:15:12 prd-ubuntu1804-docker-4c-4g-8007 sshd[1695]: Disconnected from invalid user jenkins 10.32.4.5 port 41048 [preauth] Aug 10 19:15:14 prd-ubuntu1804-docker-4c-4g-8007 sshd[1713]: Invalid user jenkins from 10.32.4.5 port 41050 Aug 10 19:15:14 prd-ubuntu1804-docker-4c-4g-8007 sshd[1713]: Received disconnect from 10.32.4.5 port 41050:11: Closed due to user request. [preauth] Aug 10 19:15:14 prd-ubuntu1804-docker-4c-4g-8007 sshd[1713]: Disconnected from invalid user jenkins 10.32.4.5 port 41050 [preauth] Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 useradd[1720]: new group: name=jenkins, GID=1001 Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 useradd[1720]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 usermod[1727]: add 'jenkins' to group 'docker' Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 usermod[1727]: add 'jenkins' to shadow group 'docker' Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 sshd[1734]: Accepted publickey for jenkins from 10.32.4.5 port 41054 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 sshd[1734]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 systemd-logind[979]: New session 2 of user jenkins. Aug 10 19:15:16 prd-ubuntu1804-docker-4c-4g-8007 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 10 19:16:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[2303]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 10 19:16:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[2303]: pam_unix(cron:session): session closed for user root Aug 10 19:17:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[2335]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 10 19:17:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[2336]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 10 19:17:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[2336]: pam_unix(cron:session): session closed for user root Aug 10 19:17:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[2335]: pam_unix(cron:session): session closed for user root Aug 10 19:18:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[3921]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 10 19:18:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[3921]: pam_unix(cron:session): session closed for user root Aug 10 19:19:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[4243]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 10 19:19:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[4243]: pam_unix(cron:session): session closed for user root Aug 10 19:20:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[4613]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 10 19:20:01 prd-ubuntu1804-docker-4c-4g-8007 CRON[4613]: pam_unix(cron:session): session closed for user root