Jan 13 01:57:33 prd-ubuntu20-04-docker-8c-8g-36591 passwd[748]: password for 'ubuntu' changed by 'root' Jan 13 01:57:33 prd-ubuntu20-04-docker-8c-8g-36591 systemd-logind[817]: New seat seat0. Jan 13 01:57:33 prd-ubuntu20-04-docker-8c-8g-36591 sshd[843]: Server listening on 0.0.0.0 port 22. Jan 13 01:57:33 prd-ubuntu20-04-docker-8c-8g-36591 sshd[843]: Server listening on :: port 22. Jan 13 01:57:33 prd-ubuntu20-04-docker-8c-8g-36591 systemd-logind[817]: Watching system buttons on /dev/input/event0 (Power Button) Jan 13 01:57:33 prd-ubuntu20-04-docker-8c-8g-36591 systemd-logind[817]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 13 01:57:36 prd-ubuntu20-04-docker-8c-8g-36591 sshd[994]: error: kex_exchange_identification: Connection closed by remote host Jan 13 01:57:44 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 52420 Jan 13 01:57:44 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1034]: Received disconnect from 10.30.120.5 port 52420:11: Closed due to user request. [preauth] Jan 13 01:57:44 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 52420 [preauth] Jan 13 01:57:46 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1037]: Invalid user jenkins from 10.30.120.5 port 52422 Jan 13 01:57:46 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1037]: Received disconnect from 10.30.120.5 port 52422:11: Closed due to user request. [preauth] Jan 13 01:57:46 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1037]: Disconnected from invalid user jenkins 10.30.120.5 port 52422 [preauth] Jan 13 01:57:48 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1039]: Invalid user jenkins from 10.30.120.5 port 52424 Jan 13 01:57:48 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1039]: Received disconnect from 10.30.120.5 port 52424:11: Closed due to user request. [preauth] Jan 13 01:57:48 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1039]: Disconnected from invalid user jenkins 10.30.120.5 port 52424 [preauth] Jan 13 01:57:50 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1041]: Invalid user jenkins from 10.30.120.5 port 52428 Jan 13 01:57:50 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1041]: Received disconnect from 10.30.120.5 port 52428:11: Closed due to user request. [preauth] Jan 13 01:57:50 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1041]: Disconnected from invalid user jenkins 10.30.120.5 port 52428 [preauth] Jan 13 01:57:52 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1043]: Invalid user jenkins from 10.30.120.5 port 52436 Jan 13 01:57:52 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1043]: Received disconnect from 10.30.120.5 port 52436:11: Closed due to user request. [preauth] Jan 13 01:57:52 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1043]: Disconnected from invalid user jenkins 10.30.120.5 port 52436 [preauth] Jan 13 01:57:54 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1045]: Invalid user jenkins from 10.30.120.5 port 52438 Jan 13 01:57:55 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1045]: Received disconnect from 10.30.120.5 port 52438:11: Closed due to user request. [preauth] Jan 13 01:57:55 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1045]: Disconnected from invalid user jenkins 10.30.120.5 port 52438 [preauth] Jan 13 01:57:57 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1047]: Invalid user jenkins from 10.30.120.5 port 52440 Jan 13 01:57:57 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1047]: Received disconnect from 10.30.120.5 port 52440:11: Closed due to user request. [preauth] Jan 13 01:57:57 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1047]: Disconnected from invalid user jenkins 10.30.120.5 port 52440 [preauth] Jan 13 01:58:00 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1221]: Invalid user jenkins from 10.30.120.5 port 52442 Jan 13 01:58:00 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1221]: Received disconnect from 10.30.120.5 port 52442:11: Closed due to user request. [preauth] Jan 13 01:58:00 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1221]: Disconnected from invalid user jenkins 10.30.120.5 port 52442 [preauth] Jan 13 01:58:02 prd-ubuntu20-04-docker-8c-8g-36591 CRON[1261]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:58:02 prd-ubuntu20-04-docker-8c-8g-36591 CRON[1261]: pam_unix(cron:session): session closed for user root Jan 13 01:58:02 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1264]: Invalid user jenkins from 10.30.120.5 port 52444 Jan 13 01:58:02 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1264]: Received disconnect from 10.30.120.5 port 52444:11: Closed due to user request. [preauth] Jan 13 01:58:02 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1264]: Disconnected from invalid user jenkins 10.30.120.5 port 52444 [preauth] Jan 13 01:58:04 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1266]: Invalid user jenkins from 10.30.120.5 port 52446 Jan 13 01:58:04 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1266]: Received disconnect from 10.30.120.5 port 52446:11: Closed due to user request. [preauth] Jan 13 01:58:04 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1266]: Disconnected from invalid user jenkins 10.30.120.5 port 52446 [preauth] Jan 13 01:58:06 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1285]: Invalid user jenkins from 10.30.120.5 port 52450 Jan 13 01:58:06 prd-ubuntu20-04-docker-8c-8g-36591 useradd[1292]: new group: name=jenkins, GID=1001 Jan 13 01:58:06 prd-ubuntu20-04-docker-8c-8g-36591 useradd[1292]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 13 01:58:06 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1285]: Received disconnect from 10.30.120.5 port 52450:11: Closed due to user request. [preauth] Jan 13 01:58:06 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1285]: Disconnected from invalid user jenkins 10.30.120.5 port 52450 [preauth] Jan 13 01:58:06 prd-ubuntu20-04-docker-8c-8g-36591 usermod[1302]: add 'jenkins' to group 'docker' Jan 13 01:58:06 prd-ubuntu20-04-docker-8c-8g-36591 usermod[1302]: add 'jenkins' to shadow group 'docker' Jan 13 01:58:08 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1339]: Accepted publickey for jenkins from 10.30.120.5 port 52452 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 13 01:58:08 prd-ubuntu20-04-docker-8c-8g-36591 sshd[1339]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 13 01:58:08 prd-ubuntu20-04-docker-8c-8g-36591 systemd-logind[817]: New session 2 of user jenkins. Jan 13 01:58:08 prd-ubuntu20-04-docker-8c-8g-36591 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)