Apr 27 21:35:57 prd-ubuntu20-04-docker-8c-8g-33531 passwd[740]: password for 'ubuntu' changed by 'root' Apr 27 21:35:57 prd-ubuntu20-04-docker-8c-8g-33531 systemd-logind[801]: Watching system buttons on /dev/input/event0 (Power Button) Apr 27 21:35:57 prd-ubuntu20-04-docker-8c-8g-33531 systemd-logind[801]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 27 21:35:57 prd-ubuntu20-04-docker-8c-8g-33531 systemd-logind[801]: New seat seat0. Apr 27 21:35:57 prd-ubuntu20-04-docker-8c-8g-33531 sshd[833]: Server listening on 0.0.0.0 port 22. Apr 27 21:35:57 prd-ubuntu20-04-docker-8c-8g-33531 sshd[833]: Server listening on :: port 22. Apr 27 21:35:57 prd-ubuntu20-04-docker-8c-8g-33531 sshd[881]: error: kex_exchange_identification: Connection closed by remote host Apr 27 21:36:01 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1024]: Invalid user jenkins from 10.30.120.5 port 43320 Apr 27 21:36:01 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1024]: Received disconnect from 10.30.120.5 port 43320:11: Closed due to user request. [preauth] Apr 27 21:36:01 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1024]: Disconnected from invalid user jenkins 10.30.120.5 port 43320 [preauth] Apr 27 21:36:02 prd-ubuntu20-04-docker-8c-8g-33531 CRON[1030]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 27 21:36:02 prd-ubuntu20-04-docker-8c-8g-33531 CRON[1030]: pam_unix(cron:session): session closed for user root Apr 27 21:36:03 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 43330 Apr 27 21:36:03 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1042]: Received disconnect from 10.30.120.5 port 43330:11: Closed due to user request. [preauth] Apr 27 21:36:03 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 43330 [preauth] Apr 27 21:36:05 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1048]: Invalid user jenkins from 10.30.120.5 port 43336 Apr 27 21:36:05 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1048]: Received disconnect from 10.30.120.5 port 43336:11: Closed due to user request. [preauth] Apr 27 21:36:05 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1048]: Disconnected from invalid user jenkins 10.30.120.5 port 43336 [preauth] Apr 27 21:36:07 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1207]: Invalid user jenkins from 10.30.120.5 port 43342 Apr 27 21:36:08 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1207]: Received disconnect from 10.30.120.5 port 43342:11: Closed due to user request. [preauth] Apr 27 21:36:08 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1207]: Disconnected from invalid user jenkins 10.30.120.5 port 43342 [preauth] Apr 27 21:36:10 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1213]: Invalid user jenkins from 10.30.120.5 port 43350 Apr 27 21:36:10 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1213]: Received disconnect from 10.30.120.5 port 43350:11: Closed due to user request. [preauth] Apr 27 21:36:10 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1213]: Disconnected from invalid user jenkins 10.30.120.5 port 43350 [preauth] Apr 27 21:36:12 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1393]: Invalid user jenkins from 10.30.120.5 port 43362 Apr 27 21:36:12 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1393]: Received disconnect from 10.30.120.5 port 43362:11: Closed due to user request. [preauth] Apr 27 21:36:12 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1393]: Disconnected from invalid user jenkins 10.30.120.5 port 43362 [preauth] Apr 27 21:36:14 prd-ubuntu20-04-docker-8c-8g-33531 systemd-logind[801]: Watching system buttons on /dev/input/event0 (Power Button) Apr 27 21:36:14 prd-ubuntu20-04-docker-8c-8g-33531 systemd-logind[801]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 27 21:36:14 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1580]: Invalid user jenkins from 10.30.120.5 port 43372 Apr 27 21:36:14 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1580]: Received disconnect from 10.30.120.5 port 43372:11: Closed due to user request. [preauth] Apr 27 21:36:14 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1580]: Disconnected from invalid user jenkins 10.30.120.5 port 43372 [preauth] Apr 27 21:36:16 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1613]: Invalid user jenkins from 10.30.120.5 port 43382 Apr 27 21:36:16 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1613]: Received disconnect from 10.30.120.5 port 43382:11: Closed due to user request. [preauth] Apr 27 21:36:16 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1613]: Disconnected from invalid user jenkins 10.30.120.5 port 43382 [preauth] Apr 27 21:36:18 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1759]: Invalid user jenkins from 10.30.120.5 port 43390 Apr 27 21:36:18 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1759]: Received disconnect from 10.30.120.5 port 43390:11: Closed due to user request. [preauth] Apr 27 21:36:18 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1759]: Disconnected from invalid user jenkins 10.30.120.5 port 43390 [preauth] Apr 27 21:36:20 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1810]: Invalid user jenkins from 10.30.120.5 port 43410 Apr 27 21:36:20 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1810]: Received disconnect from 10.30.120.5 port 43410:11: Closed due to user request. [preauth] Apr 27 21:36:20 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1810]: Disconnected from invalid user jenkins 10.30.120.5 port 43410 [preauth] Apr 27 21:36:22 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1814]: Invalid user jenkins from 10.30.120.5 port 43414 Apr 27 21:36:23 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1814]: Received disconnect from 10.30.120.5 port 43414:11: Closed due to user request. [preauth] Apr 27 21:36:23 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1814]: Disconnected from invalid user jenkins 10.30.120.5 port 43414 [preauth] Apr 27 21:36:25 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1930]: Invalid user jenkins from 10.30.120.5 port 43424 Apr 27 21:36:25 prd-ubuntu20-04-docker-8c-8g-33531 useradd[1929]: new group: name=jenkins, GID=1001 Apr 27 21:36:25 prd-ubuntu20-04-docker-8c-8g-33531 useradd[1929]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 27 21:36:25 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1930]: Received disconnect from 10.30.120.5 port 43424:11: Closed due to user request. [preauth] Apr 27 21:36:25 prd-ubuntu20-04-docker-8c-8g-33531 sshd[1930]: Disconnected from invalid user jenkins 10.30.120.5 port 43424 [preauth] Apr 27 21:36:25 prd-ubuntu20-04-docker-8c-8g-33531 usermod[1987]: add 'jenkins' to group 'docker' Apr 27 21:36:25 prd-ubuntu20-04-docker-8c-8g-33531 usermod[1987]: add 'jenkins' to shadow group 'docker' Apr 27 21:36:27 prd-ubuntu20-04-docker-8c-8g-33531 sshd[2087]: Accepted publickey for jenkins from 10.30.120.5 port 43434 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 27 21:36:27 prd-ubuntu20-04-docker-8c-8g-33531 sshd[2087]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 27 21:36:27 prd-ubuntu20-04-docker-8c-8g-33531 systemd-logind[801]: New session 2 of user jenkins. Apr 27 21:36:27 prd-ubuntu20-04-docker-8c-8g-33531 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 27 21:37:01 prd-ubuntu20-04-docker-8c-8g-33531 CRON[3238]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 27 21:37:01 prd-ubuntu20-04-docker-8c-8g-33531 CRON[3238]: pam_unix(cron:session): session closed for user root