May 25 05:44:54 prd-ubuntu20-04-docker-8c-8g-10697 passwd[769]: password for 'ubuntu' changed by 'root' May 25 05:44:54 prd-ubuntu20-04-docker-8c-8g-10697 systemd-logind[839]: New seat seat0. May 25 05:44:54 prd-ubuntu20-04-docker-8c-8g-10697 systemd-logind[839]: Watching system buttons on /dev/input/event0 (Power Button) May 25 05:44:54 prd-ubuntu20-04-docker-8c-8g-10697 systemd-logind[839]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 25 05:44:54 prd-ubuntu20-04-docker-8c-8g-10697 sshd[886]: Server listening on 0.0.0.0 port 22. May 25 05:44:54 prd-ubuntu20-04-docker-8c-8g-10697 sshd[886]: Server listening on :: port 22. May 25 05:44:54 prd-ubuntu20-04-docker-8c-8g-10697 sshd[967]: error: kex_exchange_identification: Connection closed by remote host May 25 05:45:01 prd-ubuntu20-04-docker-8c-8g-10697 CRON[1057]: pam_unix(cron:session): session opened for user root by (uid=0) May 25 05:45:01 prd-ubuntu20-04-docker-8c-8g-10697 CRON[1057]: pam_unix(cron:session): session closed for user root May 25 05:45:02 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1060]: Invalid user jenkins from 10.30.120.5 port 36896 May 25 05:45:02 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1060]: Received disconnect from 10.30.120.5 port 36896:11: Closed due to user request. [preauth] May 25 05:45:02 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1060]: Disconnected from invalid user jenkins 10.30.120.5 port 36896 [preauth] May 25 05:45:04 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1062]: Invalid user jenkins from 10.30.120.5 port 36914 May 25 05:45:05 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1062]: Received disconnect from 10.30.120.5 port 36914:11: Closed due to user request. [preauth] May 25 05:45:05 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1062]: Disconnected from invalid user jenkins 10.30.120.5 port 36914 [preauth] May 25 05:45:07 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1064]: Invalid user jenkins from 10.30.120.5 port 36942 May 25 05:45:07 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1064]: Received disconnect from 10.30.120.5 port 36942:11: Closed due to user request. [preauth] May 25 05:45:07 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1064]: Disconnected from invalid user jenkins 10.30.120.5 port 36942 [preauth] May 25 05:45:09 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1066]: Invalid user jenkins from 10.30.120.5 port 36948 May 25 05:45:09 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1066]: Received disconnect from 10.30.120.5 port 36948:11: Closed due to user request. [preauth] May 25 05:45:09 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1066]: Disconnected from invalid user jenkins 10.30.120.5 port 36948 [preauth] May 25 05:45:11 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1068]: Invalid user jenkins from 10.30.120.5 port 36958 May 25 05:45:11 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1068]: Received disconnect from 10.30.120.5 port 36958:11: Closed due to user request. [preauth] May 25 05:45:11 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1068]: Disconnected from invalid user jenkins 10.30.120.5 port 36958 [preauth] May 25 05:45:14 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1352]: Invalid user jenkins from 10.30.120.5 port 36970 May 25 05:45:14 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1352]: Received disconnect from 10.30.120.5 port 36970:11: Closed due to user request. [preauth] May 25 05:45:14 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1352]: Disconnected from invalid user jenkins 10.30.120.5 port 36970 [preauth] May 25 05:45:16 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1391]: Invalid user jenkins from 10.30.120.5 port 36984 May 25 05:45:16 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1391]: Received disconnect from 10.30.120.5 port 36984:11: Closed due to user request. [preauth] May 25 05:45:16 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1391]: Disconnected from invalid user jenkins 10.30.120.5 port 36984 [preauth] May 25 05:45:17 prd-ubuntu20-04-docker-8c-8g-10697 useradd[1398]: new group: name=jenkins, GID=1001 May 25 05:45:17 prd-ubuntu20-04-docker-8c-8g-10697 useradd[1398]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 25 05:45:17 prd-ubuntu20-04-docker-8c-8g-10697 usermod[1408]: add 'jenkins' to group 'docker' May 25 05:45:17 prd-ubuntu20-04-docker-8c-8g-10697 usermod[1408]: add 'jenkins' to shadow group 'docker' May 25 05:45:18 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1443]: Accepted publickey for jenkins from 10.30.120.5 port 36994 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU May 25 05:45:18 prd-ubuntu20-04-docker-8c-8g-10697 sshd[1443]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 25 05:45:18 prd-ubuntu20-04-docker-8c-8g-10697 systemd-logind[839]: New session 2 of user jenkins. May 25 05:45:18 prd-ubuntu20-04-docker-8c-8g-10697 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 25 05:46:01 prd-ubuntu20-04-docker-8c-8g-10697 CRON[2157]: pam_unix(cron:session): session opened for user root by (uid=0) May 25 05:46:01 prd-ubuntu20-04-docker-8c-8g-10697 CRON[2157]: pam_unix(cron:session): session closed for user root