Nov 27 05:17:25 prd-ubuntu20-04-docker-8c-8g-773892 passwd[760]: password for 'ubuntu' changed by 'root' Nov 27 05:17:25 prd-ubuntu20-04-docker-8c-8g-773892 systemd-logind[818]: New seat seat0. Nov 27 05:17:25 prd-ubuntu20-04-docker-8c-8g-773892 systemd-logind[818]: Watching system buttons on /dev/input/event0 (Power Button) Nov 27 05:17:25 prd-ubuntu20-04-docker-8c-8g-773892 systemd-logind[818]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 27 05:17:25 prd-ubuntu20-04-docker-8c-8g-773892 sshd[864]: Server listening on 0.0.0.0 port 22. Nov 27 05:17:25 prd-ubuntu20-04-docker-8c-8g-773892 sshd[864]: Server listening on :: port 22. Nov 27 05:17:28 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1045]: error: kex_exchange_identification: Connection closed by remote host Nov 27 05:17:32 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1052]: Invalid user jenkins from 10.30.120.5 port 48644 Nov 27 05:17:32 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1052]: Received disconnect from 10.30.120.5 port 48644:11: Closed due to user request. [preauth] Nov 27 05:17:32 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1052]: Disconnected from invalid user jenkins 10.30.120.5 port 48644 [preauth] Nov 27 05:17:34 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1054]: Invalid user jenkins from 10.30.120.5 port 48652 Nov 27 05:17:34 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1054]: Received disconnect from 10.30.120.5 port 48652:11: Closed due to user request. [preauth] Nov 27 05:17:34 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1054]: Disconnected from invalid user jenkins 10.30.120.5 port 48652 [preauth] Nov 27 05:17:36 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1056]: Invalid user jenkins from 10.30.120.5 port 48658 Nov 27 05:17:36 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1056]: Received disconnect from 10.30.120.5 port 48658:11: Closed due to user request. [preauth] Nov 27 05:17:36 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1056]: Disconnected from invalid user jenkins 10.30.120.5 port 48658 [preauth] Nov 27 05:17:38 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1059]: Invalid user jenkins from 10.30.120.5 port 48660 Nov 27 05:17:38 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1059]: Received disconnect from 10.30.120.5 port 48660:11: Closed due to user request. [preauth] Nov 27 05:17:38 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1059]: Disconnected from invalid user jenkins 10.30.120.5 port 48660 [preauth] Nov 27 05:17:40 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1061]: Invalid user jenkins from 10.30.120.5 port 48662 Nov 27 05:17:41 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1061]: Received disconnect from 10.30.120.5 port 48662:11: Closed due to user request. [preauth] Nov 27 05:17:41 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1061]: Disconnected from invalid user jenkins 10.30.120.5 port 48662 [preauth] Nov 27 05:17:43 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1063]: Invalid user jenkins from 10.30.120.5 port 48668 Nov 27 05:17:43 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1063]: Received disconnect from 10.30.120.5 port 48668:11: Closed due to user request. [preauth] Nov 27 05:17:43 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1063]: Disconnected from invalid user jenkins 10.30.120.5 port 48668 [preauth] Nov 27 05:17:45 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1065]: Invalid user jenkins from 10.30.120.5 port 48670 Nov 27 05:17:45 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1065]: Received disconnect from 10.30.120.5 port 48670:11: Closed due to user request. [preauth] Nov 27 05:17:45 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1065]: Disconnected from invalid user jenkins 10.30.120.5 port 48670 [preauth] Nov 27 05:17:47 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1067]: Invalid user jenkins from 10.30.120.5 port 48674 Nov 27 05:17:47 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1067]: Received disconnect from 10.30.120.5 port 48674:11: Closed due to user request. [preauth] Nov 27 05:17:47 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1067]: Disconnected from invalid user jenkins 10.30.120.5 port 48674 [preauth] Nov 27 05:17:49 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1337]: Invalid user jenkins from 10.30.120.5 port 48680 Nov 27 05:17:49 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1337]: Received disconnect from 10.30.120.5 port 48680:11: Closed due to user request. [preauth] Nov 27 05:17:49 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1337]: Disconnected from invalid user jenkins 10.30.120.5 port 48680 [preauth] Nov 27 05:17:51 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1385]: Invalid user jenkins from 10.30.120.5 port 48682 Nov 27 05:17:51 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1385]: Received disconnect from 10.30.120.5 port 48682:11: Closed due to user request. [preauth] Nov 27 05:17:51 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1385]: Disconnected from invalid user jenkins 10.30.120.5 port 48682 [preauth] Nov 27 05:17:53 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1389]: Invalid user jenkins from 10.30.120.5 port 48686 Nov 27 05:17:53 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1389]: Received disconnect from 10.30.120.5 port 48686:11: Closed due to user request. [preauth] Nov 27 05:17:53 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1389]: Disconnected from invalid user jenkins 10.30.120.5 port 48686 [preauth] Nov 27 05:17:54 prd-ubuntu20-04-docker-8c-8g-773892 useradd[1410]: new group: name=jenkins, GID=1001 Nov 27 05:17:54 prd-ubuntu20-04-docker-8c-8g-773892 useradd[1410]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 27 05:17:54 prd-ubuntu20-04-docker-8c-8g-773892 usermod[1420]: add 'jenkins' to group 'docker' Nov 27 05:17:54 prd-ubuntu20-04-docker-8c-8g-773892 usermod[1420]: add 'jenkins' to shadow group 'docker' Nov 27 05:17:55 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1461]: Accepted publickey for jenkins from 10.30.120.5 port 48690 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 27 05:17:55 prd-ubuntu20-04-docker-8c-8g-773892 sshd[1461]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 27 05:17:55 prd-ubuntu20-04-docker-8c-8g-773892 systemd-logind[818]: New session 1 of user jenkins. Nov 27 05:17:55 prd-ubuntu20-04-docker-8c-8g-773892 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 27 05:18:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[1656]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:18:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[1656]: pam_unix(cron:session): session closed for user root Nov 27 05:19:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4239]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:19:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4239]: pam_unix(cron:session): session closed for user root Nov 27 05:20:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4618]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:20:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4618]: pam_unix(cron:session): session closed for user root Nov 27 05:21:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4622]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:21:02 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4622]: pam_unix(cron:session): session closed for user root Nov 27 05:22:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4627]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:22:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[4627]: pam_unix(cron:session): session closed for user root Nov 27 05:23:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[5625]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:23:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[5625]: pam_unix(cron:session): session closed for user root Nov 27 05:24:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[5688]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:24:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[5688]: pam_unix(cron:session): session closed for user root Nov 27 05:25:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[5691]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 05:25:01 prd-ubuntu20-04-docker-8c-8g-773892 CRON[5691]: pam_unix(cron:session): session closed for user root