Feb 14 04:36:09 prd-ubuntu1804-docker-4c-4g-6598 passwd[942]: password for 'ubuntu' changed by 'root' Feb 14 04:36:09 prd-ubuntu1804-docker-4c-4g-6598 systemd-logind[997]: Watching system buttons on /dev/input/event0 (Power Button) Feb 14 04:36:09 prd-ubuntu1804-docker-4c-4g-6598 systemd-logind[997]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 14 04:36:09 prd-ubuntu1804-docker-4c-4g-6598 systemd-logind[997]: New seat seat0. Feb 14 04:36:09 prd-ubuntu1804-docker-4c-4g-6598 sshd[1246]: Server listening on 0.0.0.0 port 22. Feb 14 04:36:09 prd-ubuntu1804-docker-4c-4g-6598 sshd[1246]: Server listening on :: port 22. Feb 14 04:36:11 prd-ubuntu1804-docker-4c-4g-6598 sshd[1298]: Did not receive identification string from 10.32.4.5 port 37558 Feb 14 04:36:12 prd-ubuntu1804-docker-4c-4g-6598 sshd[1420]: Invalid user jenkins from 10.32.4.5 port 37564 Feb 14 04:36:12 prd-ubuntu1804-docker-4c-4g-6598 sshd[1420]: Received disconnect from 10.32.4.5 port 37564:11: Closed due to user request. [preauth] Feb 14 04:36:12 prd-ubuntu1804-docker-4c-4g-6598 sshd[1420]: Disconnected from invalid user jenkins 10.32.4.5 port 37564 [preauth] Feb 14 04:36:14 prd-ubuntu1804-docker-4c-4g-6598 sshd[1465]: Invalid user jenkins from 10.32.4.5 port 37568 Feb 14 04:36:14 prd-ubuntu1804-docker-4c-4g-6598 sshd[1465]: Received disconnect from 10.32.4.5 port 37568:11: Closed due to user request. [preauth] Feb 14 04:36:14 prd-ubuntu1804-docker-4c-4g-6598 sshd[1465]: Disconnected from invalid user jenkins 10.32.4.5 port 37568 [preauth] Feb 14 04:36:16 prd-ubuntu1804-docker-4c-4g-6598 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 37578 Feb 14 04:36:16 prd-ubuntu1804-docker-4c-4g-6598 sshd[1502]: Received disconnect from 10.32.4.5 port 37578:11: Closed due to user request. [preauth] Feb 14 04:36:16 prd-ubuntu1804-docker-4c-4g-6598 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 37578 [preauth] Feb 14 04:36:18 prd-ubuntu1804-docker-4c-4g-6598 sshd[1519]: Invalid user jenkins from 10.32.4.5 port 37582 Feb 14 04:36:18 prd-ubuntu1804-docker-4c-4g-6598 sshd[1519]: Received disconnect from 10.32.4.5 port 37582:11: Closed due to user request. [preauth] Feb 14 04:36:18 prd-ubuntu1804-docker-4c-4g-6598 sshd[1519]: Disconnected from invalid user jenkins 10.32.4.5 port 37582 [preauth] Feb 14 04:36:20 prd-ubuntu1804-docker-4c-4g-6598 sshd[1521]: Invalid user jenkins from 10.32.4.5 port 37584 Feb 14 04:36:20 prd-ubuntu1804-docker-4c-4g-6598 sshd[1521]: Received disconnect from 10.32.4.5 port 37584:11: Closed due to user request. [preauth] Feb 14 04:36:20 prd-ubuntu1804-docker-4c-4g-6598 sshd[1521]: Disconnected from invalid user jenkins 10.32.4.5 port 37584 [preauth] Feb 14 04:36:22 prd-ubuntu1804-docker-4c-4g-6598 sshd[1541]: Invalid user jenkins from 10.32.4.5 port 37586 Feb 14 04:36:22 prd-ubuntu1804-docker-4c-4g-6598 sshd[1541]: Received disconnect from 10.32.4.5 port 37586:11: Closed due to user request. [preauth] Feb 14 04:36:22 prd-ubuntu1804-docker-4c-4g-6598 sshd[1541]: Disconnected from invalid user jenkins 10.32.4.5 port 37586 [preauth] Feb 14 04:36:24 prd-ubuntu1804-docker-4c-4g-6598 sshd[1543]: Invalid user jenkins from 10.32.4.5 port 37592 Feb 14 04:36:24 prd-ubuntu1804-docker-4c-4g-6598 sshd[1543]: Received disconnect from 10.32.4.5 port 37592:11: Closed due to user request. [preauth] Feb 14 04:36:24 prd-ubuntu1804-docker-4c-4g-6598 sshd[1543]: Disconnected from invalid user jenkins 10.32.4.5 port 37592 [preauth] Feb 14 04:36:26 prd-ubuntu1804-docker-4c-4g-6598 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 37596 Feb 14 04:36:27 prd-ubuntu1804-docker-4c-4g-6598 sshd[1545]: Received disconnect from 10.32.4.5 port 37596:11: Closed due to user request. [preauth] Feb 14 04:36:27 prd-ubuntu1804-docker-4c-4g-6598 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 37596 [preauth] Feb 14 04:36:29 prd-ubuntu1804-docker-4c-4g-6598 sshd[1547]: Invalid user jenkins from 10.32.4.5 port 37598 Feb 14 04:36:29 prd-ubuntu1804-docker-4c-4g-6598 sshd[1547]: Received disconnect from 10.32.4.5 port 37598:11: Closed due to user request. [preauth] Feb 14 04:36:29 prd-ubuntu1804-docker-4c-4g-6598 sshd[1547]: Disconnected from invalid user jenkins 10.32.4.5 port 37598 [preauth] Feb 14 04:36:31 prd-ubuntu1804-docker-4c-4g-6598 sshd[1564]: Invalid user jenkins from 10.32.4.5 port 37604 Feb 14 04:36:31 prd-ubuntu1804-docker-4c-4g-6598 sshd[1564]: Received disconnect from 10.32.4.5 port 37604:11: Closed due to user request. [preauth] Feb 14 04:36:31 prd-ubuntu1804-docker-4c-4g-6598 sshd[1564]: Disconnected from invalid user jenkins 10.32.4.5 port 37604 [preauth] Feb 14 04:36:33 prd-ubuntu1804-docker-4c-4g-6598 sshd[1764]: Invalid user jenkins from 10.32.4.5 port 37606 Feb 14 04:36:33 prd-ubuntu1804-docker-4c-4g-6598 sshd[1764]: Received disconnect from 10.32.4.5 port 37606:11: Closed due to user request. [preauth] Feb 14 04:36:33 prd-ubuntu1804-docker-4c-4g-6598 sshd[1764]: Disconnected from invalid user jenkins 10.32.4.5 port 37606 [preauth] Feb 14 04:36:36 prd-ubuntu1804-docker-4c-4g-6598 sshd[1806]: Invalid user jenkins from 10.32.4.5 port 37608 Feb 14 04:36:36 prd-ubuntu1804-docker-4c-4g-6598 sshd[1806]: Received disconnect from 10.32.4.5 port 37608:11: Closed due to user request. [preauth] Feb 14 04:36:36 prd-ubuntu1804-docker-4c-4g-6598 sshd[1806]: Disconnected from invalid user jenkins 10.32.4.5 port 37608 [preauth] Feb 14 04:36:38 prd-ubuntu1804-docker-4c-4g-6598 sshd[1824]: Invalid user jenkins from 10.32.4.5 port 37614 Feb 14 04:36:38 prd-ubuntu1804-docker-4c-4g-6598 sshd[1824]: Received disconnect from 10.32.4.5 port 37614:11: Closed due to user request. [preauth] Feb 14 04:36:38 prd-ubuntu1804-docker-4c-4g-6598 sshd[1824]: Disconnected from invalid user jenkins 10.32.4.5 port 37614 [preauth] Feb 14 04:36:40 prd-ubuntu1804-docker-4c-4g-6598 sshd[1828]: Invalid user jenkins from 10.32.4.5 port 37616 Feb 14 04:36:40 prd-ubuntu1804-docker-4c-4g-6598 sshd[1828]: Received disconnect from 10.32.4.5 port 37616:11: Closed due to user request. [preauth] Feb 14 04:36:40 prd-ubuntu1804-docker-4c-4g-6598 sshd[1828]: Disconnected from invalid user jenkins 10.32.4.5 port 37616 [preauth] Feb 14 04:36:41 prd-ubuntu1804-docker-4c-4g-6598 useradd[1853]: new group: name=jenkins, GID=1001 Feb 14 04:36:41 prd-ubuntu1804-docker-4c-4g-6598 useradd[1853]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 14 04:36:41 prd-ubuntu1804-docker-4c-4g-6598 usermod[1861]: add 'jenkins' to group 'docker' Feb 14 04:36:41 prd-ubuntu1804-docker-4c-4g-6598 usermod[1861]: add 'jenkins' to shadow group 'docker' Feb 14 04:36:42 prd-ubuntu1804-docker-4c-4g-6598 sshd[1912]: Accepted publickey for jenkins from 10.32.4.5 port 37620 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 14 04:36:42 prd-ubuntu1804-docker-4c-4g-6598 sshd[1912]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 14 04:36:42 prd-ubuntu1804-docker-4c-4g-6598 systemd-logind[997]: New session 1 of user jenkins. Feb 14 04:36:42 prd-ubuntu1804-docker-4c-4g-6598 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 14 04:37:02 prd-ubuntu1804-docker-4c-4g-6598 CRON[2393]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 14 04:37:02 prd-ubuntu1804-docker-4c-4g-6598 CRON[2393]: pam_unix(cron:session): session closed for user root Feb 14 04:38:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[2452]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 14 04:38:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[2452]: pam_unix(cron:session): session closed for user root Feb 14 04:39:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[3180]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 14 04:39:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[3180]: pam_unix(cron:session): session closed for user root Feb 14 04:40:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[4170]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 14 04:40:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[4170]: pam_unix(cron:session): session closed for user root Feb 14 04:41:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[4239]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 14 04:41:01 prd-ubuntu1804-docker-4c-4g-6598 CRON[4239]: pam_unix(cron:session): session closed for user root