Nov 27 03:52:08 prd-ubuntu1804-docker-8c-8g-15620 passwd[991]: password for 'ubuntu' changed by 'root' Nov 27 03:52:08 prd-ubuntu1804-docker-8c-8g-15620 systemd-logind[1069]: Watching system buttons on /dev/input/event0 (Power Button) Nov 27 03:52:08 prd-ubuntu1804-docker-8c-8g-15620 systemd-logind[1069]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 27 03:52:08 prd-ubuntu1804-docker-8c-8g-15620 systemd-logind[1069]: New seat seat0. Nov 27 03:52:08 prd-ubuntu1804-docker-8c-8g-15620 sshd[1115]: Server listening on 0.0.0.0 port 22. Nov 27 03:52:08 prd-ubuntu1804-docker-8c-8g-15620 sshd[1115]: Server listening on :: port 22. Nov 27 03:52:10 prd-ubuntu1804-docker-8c-8g-15620 sshd[1434]: Did not receive identification string from 10.30.104.4 port 35112 Nov 27 03:52:13 prd-ubuntu1804-docker-8c-8g-15620 sshd[1464]: Invalid user jenkins from 10.30.104.4 port 35170 Nov 27 03:52:13 prd-ubuntu1804-docker-8c-8g-15620 sshd[1464]: Received disconnect from 10.30.104.4 port 35170:11: Closed due to user request. [preauth] Nov 27 03:52:13 prd-ubuntu1804-docker-8c-8g-15620 sshd[1464]: Disconnected from invalid user jenkins 10.30.104.4 port 35170 [preauth] Nov 27 03:52:15 prd-ubuntu1804-docker-8c-8g-15620 sshd[1468]: Invalid user jenkins from 10.30.104.4 port 35230 Nov 27 03:52:15 prd-ubuntu1804-docker-8c-8g-15620 sshd[1468]: Received disconnect from 10.30.104.4 port 35230:11: Closed due to user request. [preauth] Nov 27 03:52:15 prd-ubuntu1804-docker-8c-8g-15620 sshd[1468]: Disconnected from invalid user jenkins 10.30.104.4 port 35230 [preauth] Nov 27 03:52:17 prd-ubuntu1804-docker-8c-8g-15620 sshd[1470]: Invalid user jenkins from 10.30.104.4 port 35278 Nov 27 03:52:17 prd-ubuntu1804-docker-8c-8g-15620 sshd[1470]: Received disconnect from 10.30.104.4 port 35278:11: Closed due to user request. [preauth] Nov 27 03:52:17 prd-ubuntu1804-docker-8c-8g-15620 sshd[1470]: Disconnected from invalid user jenkins 10.30.104.4 port 35278 [preauth] Nov 27 03:52:19 prd-ubuntu1804-docker-8c-8g-15620 sshd[1472]: Invalid user jenkins from 10.30.104.4 port 35320 Nov 27 03:52:20 prd-ubuntu1804-docker-8c-8g-15620 sshd[1472]: Received disconnect from 10.30.104.4 port 35320:11: Closed due to user request. [preauth] Nov 27 03:52:20 prd-ubuntu1804-docker-8c-8g-15620 sshd[1472]: Disconnected from invalid user jenkins 10.30.104.4 port 35320 [preauth] Nov 27 03:52:22 prd-ubuntu1804-docker-8c-8g-15620 sshd[1474]: Invalid user jenkins from 10.30.104.4 port 35354 Nov 27 03:52:22 prd-ubuntu1804-docker-8c-8g-15620 sshd[1474]: Received disconnect from 10.30.104.4 port 35354:11: Closed due to user request. [preauth] Nov 27 03:52:22 prd-ubuntu1804-docker-8c-8g-15620 sshd[1474]: Disconnected from invalid user jenkins 10.30.104.4 port 35354 [preauth] Nov 27 03:52:24 prd-ubuntu1804-docker-8c-8g-15620 sshd[1476]: Invalid user jenkins from 10.30.104.4 port 35396 Nov 27 03:52:24 prd-ubuntu1804-docker-8c-8g-15620 sshd[1476]: Received disconnect from 10.30.104.4 port 35396:11: Closed due to user request. [preauth] Nov 27 03:52:24 prd-ubuntu1804-docker-8c-8g-15620 sshd[1476]: Disconnected from invalid user jenkins 10.30.104.4 port 35396 [preauth] Nov 27 03:52:26 prd-ubuntu1804-docker-8c-8g-15620 sshd[1665]: Invalid user jenkins from 10.30.104.4 port 35460 Nov 27 03:52:26 prd-ubuntu1804-docker-8c-8g-15620 sshd[1665]: Received disconnect from 10.30.104.4 port 35460:11: Closed due to user request. [preauth] Nov 27 03:52:26 prd-ubuntu1804-docker-8c-8g-15620 sshd[1665]: Disconnected from invalid user jenkins 10.30.104.4 port 35460 [preauth] Nov 27 03:52:28 prd-ubuntu1804-docker-8c-8g-15620 sshd[1720]: Invalid user jenkins from 10.30.104.4 port 35520 Nov 27 03:52:28 prd-ubuntu1804-docker-8c-8g-15620 sshd[1720]: Received disconnect from 10.30.104.4 port 35520:11: Closed due to user request. [preauth] Nov 27 03:52:28 prd-ubuntu1804-docker-8c-8g-15620 sshd[1720]: Disconnected from invalid user jenkins 10.30.104.4 port 35520 [preauth] Nov 27 03:52:30 prd-ubuntu1804-docker-8c-8g-15620 sshd[1743]: Invalid user jenkins from 10.30.104.4 port 35570 Nov 27 03:52:30 prd-ubuntu1804-docker-8c-8g-15620 sshd[1743]: Received disconnect from 10.30.104.4 port 35570:11: Closed due to user request. [preauth] Nov 27 03:52:30 prd-ubuntu1804-docker-8c-8g-15620 sshd[1743]: Disconnected from invalid user jenkins 10.30.104.4 port 35570 [preauth] Nov 27 03:52:33 prd-ubuntu1804-docker-8c-8g-15620 sshd[1752]: Invalid user jenkins from 10.30.104.4 port 35618 Nov 27 03:52:33 prd-ubuntu1804-docker-8c-8g-15620 sshd[1752]: Received disconnect from 10.30.104.4 port 35618:11: Closed due to user request. [preauth] Nov 27 03:52:33 prd-ubuntu1804-docker-8c-8g-15620 sshd[1752]: Disconnected from invalid user jenkins 10.30.104.4 port 35618 [preauth] Nov 27 03:52:35 prd-ubuntu1804-docker-8c-8g-15620 sshd[1754]: Invalid user jenkins from 10.30.104.4 port 35692 Nov 27 03:52:35 prd-ubuntu1804-docker-8c-8g-15620 sshd[1754]: Received disconnect from 10.30.104.4 port 35692:11: Closed due to user request. [preauth] Nov 27 03:52:35 prd-ubuntu1804-docker-8c-8g-15620 sshd[1754]: Disconnected from invalid user jenkins 10.30.104.4 port 35692 [preauth] Nov 27 03:52:37 prd-ubuntu1804-docker-8c-8g-15620 sshd[1756]: Invalid user jenkins from 10.30.104.4 port 35770 Nov 27 03:52:37 prd-ubuntu1804-docker-8c-8g-15620 sshd[1756]: Received disconnect from 10.30.104.4 port 35770:11: Closed due to user request. [preauth] Nov 27 03:52:37 prd-ubuntu1804-docker-8c-8g-15620 sshd[1756]: Disconnected from invalid user jenkins 10.30.104.4 port 35770 [preauth] Nov 27 03:52:39 prd-ubuntu1804-docker-8c-8g-15620 sshd[1785]: Invalid user jenkins from 10.30.104.4 port 35830 Nov 27 03:52:39 prd-ubuntu1804-docker-8c-8g-15620 sshd[1785]: Received disconnect from 10.30.104.4 port 35830:11: Closed due to user request. [preauth] Nov 27 03:52:39 prd-ubuntu1804-docker-8c-8g-15620 sshd[1785]: Disconnected from invalid user jenkins 10.30.104.4 port 35830 [preauth] Nov 27 03:52:41 prd-ubuntu1804-docker-8c-8g-15620 sshd[1787]: Invalid user jenkins from 10.30.104.4 port 35880 Nov 27 03:52:41 prd-ubuntu1804-docker-8c-8g-15620 sshd[1787]: Received disconnect from 10.30.104.4 port 35880:11: Closed due to user request. [preauth] Nov 27 03:52:41 prd-ubuntu1804-docker-8c-8g-15620 sshd[1787]: Disconnected from invalid user jenkins 10.30.104.4 port 35880 [preauth] Nov 27 03:52:43 prd-ubuntu1804-docker-8c-8g-15620 sshd[1789]: Invalid user jenkins from 10.30.104.4 port 35926 Nov 27 03:52:43 prd-ubuntu1804-docker-8c-8g-15620 sshd[1789]: Received disconnect from 10.30.104.4 port 35926:11: Closed due to user request. [preauth] Nov 27 03:52:43 prd-ubuntu1804-docker-8c-8g-15620 sshd[1789]: Disconnected from invalid user jenkins 10.30.104.4 port 35926 [preauth] Nov 27 03:52:46 prd-ubuntu1804-docker-8c-8g-15620 sshd[1792]: Invalid user jenkins from 10.30.104.4 port 35996 Nov 27 03:52:46 prd-ubuntu1804-docker-8c-8g-15620 sshd[1792]: Received disconnect from 10.30.104.4 port 35996:11: Closed due to user request. [preauth] Nov 27 03:52:46 prd-ubuntu1804-docker-8c-8g-15620 sshd[1792]: Disconnected from invalid user jenkins 10.30.104.4 port 35996 [preauth] Nov 27 03:52:46 prd-ubuntu1804-docker-8c-8g-15620 useradd[1811]: new group: name=jenkins, GID=1001 Nov 27 03:52:46 prd-ubuntu1804-docker-8c-8g-15620 useradd[1811]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 27 03:52:46 prd-ubuntu1804-docker-8c-8g-15620 usermod[1818]: add 'jenkins' to group 'docker' Nov 27 03:52:46 prd-ubuntu1804-docker-8c-8g-15620 usermod[1818]: add 'jenkins' to shadow group 'docker' Nov 27 03:52:48 prd-ubuntu1804-docker-8c-8g-15620 sshd[1879]: Accepted publickey for jenkins from 10.30.104.4 port 36026 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 27 03:52:48 prd-ubuntu1804-docker-8c-8g-15620 sshd[1879]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 27 03:52:48 prd-ubuntu1804-docker-8c-8g-15620 systemd-logind[1069]: New session 1 of user jenkins. Nov 27 03:52:48 prd-ubuntu1804-docker-8c-8g-15620 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 27 03:53:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[2291]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 03:53:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[2291]: pam_unix(cron:session): session closed for user root Nov 27 03:54:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[2619]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 03:54:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[2619]: pam_unix(cron:session): session closed for user root Nov 27 03:55:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[3561]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 03:55:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[3561]: pam_unix(cron:session): session closed for user root Nov 27 03:56:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[4079]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 03:56:01 prd-ubuntu1804-docker-8c-8g-15620 CRON[4079]: pam_unix(cron:session): session closed for user root