Apr 27 16:04:53 prd-ubuntu20-04-docker-8c-8g-33499 passwd[743]: password for 'ubuntu' changed by 'root' Apr 27 16:04:53 prd-ubuntu20-04-docker-8c-8g-33499 systemd-logind[789]: Watching system buttons on /dev/input/event0 (Power Button) Apr 27 16:04:53 prd-ubuntu20-04-docker-8c-8g-33499 systemd-logind[789]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 27 16:04:53 prd-ubuntu20-04-docker-8c-8g-33499 systemd-logind[789]: New seat seat0. Apr 27 16:04:53 prd-ubuntu20-04-docker-8c-8g-33499 sshd[821]: Server listening on 0.0.0.0 port 22. Apr 27 16:04:53 prd-ubuntu20-04-docker-8c-8g-33499 sshd[821]: Server listening on :: port 22. Apr 27 16:04:53 prd-ubuntu20-04-docker-8c-8g-33499 sshd[870]: error: kex_exchange_identification: Connection closed by remote host Apr 27 16:05:00 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1236]: Invalid user jenkins from 10.30.120.5 port 52836 Apr 27 16:05:00 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1236]: Received disconnect from 10.30.120.5 port 52836:11: Closed due to user request. [preauth] Apr 27 16:05:00 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1236]: Disconnected from invalid user jenkins 10.30.120.5 port 52836 [preauth] Apr 27 16:05:01 prd-ubuntu20-04-docker-8c-8g-33499 CRON[1257]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 27 16:05:01 prd-ubuntu20-04-docker-8c-8g-33499 CRON[1257]: pam_unix(cron:session): session closed for user root Apr 27 16:05:02 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1380]: Invalid user jenkins from 10.30.120.5 port 52846 Apr 27 16:05:03 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1380]: Received disconnect from 10.30.120.5 port 52846:11: Closed due to user request. [preauth] Apr 27 16:05:03 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1380]: Disconnected from invalid user jenkins 10.30.120.5 port 52846 [preauth] Apr 27 16:05:04 prd-ubuntu20-04-docker-8c-8g-33499 systemd-logind[789]: Watching system buttons on /dev/input/event0 (Power Button) Apr 27 16:05:04 prd-ubuntu20-04-docker-8c-8g-33499 systemd-logind[789]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 27 16:05:05 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1576]: Invalid user jenkins from 10.30.120.5 port 52852 Apr 27 16:05:05 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1576]: Received disconnect from 10.30.120.5 port 52852:11: Closed due to user request. [preauth] Apr 27 16:05:05 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1576]: Disconnected from invalid user jenkins 10.30.120.5 port 52852 [preauth] Apr 27 16:05:07 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1608]: Invalid user jenkins from 10.30.120.5 port 52858 Apr 27 16:05:07 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1608]: Received disconnect from 10.30.120.5 port 52858:11: Closed due to user request. [preauth] Apr 27 16:05:07 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1608]: Disconnected from invalid user jenkins 10.30.120.5 port 52858 [preauth] Apr 27 16:05:09 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1610]: Invalid user jenkins from 10.30.120.5 port 52860 Apr 27 16:05:09 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1610]: Received disconnect from 10.30.120.5 port 52860:11: Closed due to user request. [preauth] Apr 27 16:05:09 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1610]: Disconnected from invalid user jenkins 10.30.120.5 port 52860 [preauth] Apr 27 16:05:12 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1749]: Invalid user jenkins from 10.30.120.5 port 52864 Apr 27 16:05:12 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1749]: Received disconnect from 10.30.120.5 port 52864:11: Closed due to user request. [preauth] Apr 27 16:05:12 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1749]: Disconnected from invalid user jenkins 10.30.120.5 port 52864 [preauth] Apr 27 16:05:14 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1988]: Invalid user jenkins from 10.30.120.5 port 52868 Apr 27 16:05:14 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1988]: Received disconnect from 10.30.120.5 port 52868:11: Closed due to user request. [preauth] Apr 27 16:05:14 prd-ubuntu20-04-docker-8c-8g-33499 sshd[1988]: Disconnected from invalid user jenkins 10.30.120.5 port 52868 [preauth] Apr 27 16:05:16 prd-ubuntu20-04-docker-8c-8g-33499 sshd[2085]: Invalid user jenkins from 10.30.120.5 port 52872 Apr 27 16:05:16 prd-ubuntu20-04-docker-8c-8g-33499 useradd[2088]: new group: name=jenkins, GID=1001 Apr 27 16:05:16 prd-ubuntu20-04-docker-8c-8g-33499 useradd[2088]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 27 16:05:16 prd-ubuntu20-04-docker-8c-8g-33499 sshd[2085]: Received disconnect from 10.30.120.5 port 52872:11: Closed due to user request. [preauth] Apr 27 16:05:16 prd-ubuntu20-04-docker-8c-8g-33499 sshd[2085]: Disconnected from invalid user jenkins 10.30.120.5 port 52872 [preauth] Apr 27 16:05:16 prd-ubuntu20-04-docker-8c-8g-33499 usermod[2098]: add 'jenkins' to group 'docker' Apr 27 16:05:16 prd-ubuntu20-04-docker-8c-8g-33499 usermod[2098]: add 'jenkins' to shadow group 'docker' Apr 27 16:05:18 prd-ubuntu20-04-docker-8c-8g-33499 sshd[2378]: Accepted publickey for jenkins from 10.30.120.5 port 52876 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 27 16:05:18 prd-ubuntu20-04-docker-8c-8g-33499 sshd[2378]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 27 16:05:18 prd-ubuntu20-04-docker-8c-8g-33499 systemd-logind[789]: New session 2 of user jenkins. Apr 27 16:05:18 prd-ubuntu20-04-docker-8c-8g-33499 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)