May  9 14:53:54 prd-ubuntu20-04-docker-8c-8g-41820 passwd[739]: password for 'ubuntu' changed by 'root'
May  9 14:53:54 prd-ubuntu20-04-docker-8c-8g-41820 systemd-logind[801]: Watching system buttons on /dev/input/event0 (Power Button)
May  9 14:53:54 prd-ubuntu20-04-docker-8c-8g-41820 systemd-logind[801]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
May  9 14:53:54 prd-ubuntu20-04-docker-8c-8g-41820 systemd-logind[801]: New seat seat0.
May  9 14:53:54 prd-ubuntu20-04-docker-8c-8g-41820 sshd[824]: Server listening on 0.0.0.0 port 22.
May  9 14:53:54 prd-ubuntu20-04-docker-8c-8g-41820 sshd[824]: Server listening on :: port 22.
May  9 14:53:56 prd-ubuntu20-04-docker-8c-8g-41820 sshd[952]: error: kex_exchange_identification: Connection closed by remote host
May  9 14:54:01 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 38214
May  9 14:54:01 prd-ubuntu20-04-docker-8c-8g-41820 CRON[1036]: pam_unix(cron:session): session opened for user root by (uid=0)
May  9 14:54:01 prd-ubuntu20-04-docker-8c-8g-41820 CRON[1036]: pam_unix(cron:session): session closed for user root
May  9 14:54:01 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1034]: Received disconnect from 10.30.120.5 port 38214:11: Closed due to user request. [preauth]
May  9 14:54:01 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 38214 [preauth]
May  9 14:54:03 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1353]: Invalid user jenkins from 10.30.120.5 port 38216
May  9 14:54:03 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1353]: Received disconnect from 10.30.120.5 port 38216:11: Closed due to user request. [preauth]
May  9 14:54:03 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1353]: Disconnected from invalid user jenkins 10.30.120.5 port 38216 [preauth]
May  9 14:54:05 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1399]: Invalid user jenkins from 10.30.120.5 port 38218
May  9 14:54:05 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1399]: Received disconnect from 10.30.120.5 port 38218:11: Closed due to user request. [preauth]
May  9 14:54:05 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1399]: Disconnected from invalid user jenkins 10.30.120.5 port 38218 [preauth]
May  9 14:54:06 prd-ubuntu20-04-docker-8c-8g-41820 systemd-logind[801]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
May  9 14:54:06 prd-ubuntu20-04-docker-8c-8g-41820 systemd-logind[801]: Watching system buttons on /dev/input/event0 (Power Button)
May  9 14:54:07 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1597]: Invalid user jenkins from 10.30.120.5 port 38220
May  9 14:54:07 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1597]: Received disconnect from 10.30.120.5 port 38220:11: Closed due to user request. [preauth]
May  9 14:54:07 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1597]: Disconnected from invalid user jenkins 10.30.120.5 port 38220 [preauth]
May  9 14:54:10 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1604]: Invalid user jenkins from 10.30.120.5 port 38222
May  9 14:54:10 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1604]: Received disconnect from 10.30.120.5 port 38222:11: Closed due to user request. [preauth]
May  9 14:54:10 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1604]: Disconnected from invalid user jenkins 10.30.120.5 port 38222 [preauth]
May  9 14:54:12 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1611]: Invalid user jenkins from 10.30.120.5 port 38224
May  9 14:54:12 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1611]: Received disconnect from 10.30.120.5 port 38224:11: Closed due to user request. [preauth]
May  9 14:54:12 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1611]: Disconnected from invalid user jenkins 10.30.120.5 port 38224 [preauth]
May  9 14:54:14 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1937]: Invalid user jenkins from 10.30.120.5 port 38226
May  9 14:54:14 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1937]: Received disconnect from 10.30.120.5 port 38226:11: Closed due to user request. [preauth]
May  9 14:54:14 prd-ubuntu20-04-docker-8c-8g-41820 sshd[1937]: Disconnected from invalid user jenkins 10.30.120.5 port 38226 [preauth]
May  9 14:54:16 prd-ubuntu20-04-docker-8c-8g-41820 sshd[2023]: Invalid user jenkins from 10.30.120.5 port 38228
May  9 14:54:16 prd-ubuntu20-04-docker-8c-8g-41820 sshd[2023]: Received disconnect from 10.30.120.5 port 38228:11: Closed due to user request. [preauth]
May  9 14:54:16 prd-ubuntu20-04-docker-8c-8g-41820 sshd[2023]: Disconnected from invalid user jenkins 10.30.120.5 port 38228 [preauth]
May  9 14:54:17 prd-ubuntu20-04-docker-8c-8g-41820 useradd[2073]: new group: name=jenkins, GID=1001
May  9 14:54:17 prd-ubuntu20-04-docker-8c-8g-41820 useradd[2073]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
May  9 14:54:17 prd-ubuntu20-04-docker-8c-8g-41820 usermod[2083]: add 'jenkins' to group 'docker'
May  9 14:54:17 prd-ubuntu20-04-docker-8c-8g-41820 usermod[2083]: add 'jenkins' to shadow group 'docker'
May  9 14:54:18 prd-ubuntu20-04-docker-8c-8g-41820 sshd[2233]: Accepted publickey for jenkins from 10.30.120.5 port 38230 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
May  9 14:54:18 prd-ubuntu20-04-docker-8c-8g-41820 sshd[2233]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
May  9 14:54:18 prd-ubuntu20-04-docker-8c-8g-41820 systemd-logind[801]: New session 2 of user jenkins.
May  9 14:54:18 prd-ubuntu20-04-docker-8c-8g-41820 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)