May 12 02:33:27 prd-ubuntu20-04-docker-8c-8g-63354 passwd[732]: password for 'ubuntu' changed by 'root'
May 12 02:33:27 prd-ubuntu20-04-docker-8c-8g-63354 systemd-logind[795]: Watching system buttons on /dev/input/event0 (Power Button)
May 12 02:33:27 prd-ubuntu20-04-docker-8c-8g-63354 systemd-logind[795]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
May 12 02:33:27 prd-ubuntu20-04-docker-8c-8g-63354 systemd-logind[795]: New seat seat0.
May 12 02:33:27 prd-ubuntu20-04-docker-8c-8g-63354 sshd[833]: Server listening on 0.0.0.0 port 22.
May 12 02:33:27 prd-ubuntu20-04-docker-8c-8g-63354 sshd[833]: Server listening on :: port 22.
May 12 02:33:29 prd-ubuntu20-04-docker-8c-8g-63354 sshd[911]: error: kex_exchange_identification: Connection closed by remote host
May 12 02:33:32 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1025]: Invalid user jenkins from 10.30.120.5 port 56712
May 12 02:33:32 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1025]: Received disconnect from 10.30.120.5 port 56712:11: Closed due to user request. [preauth]
May 12 02:33:32 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1025]: Disconnected from invalid user jenkins 10.30.120.5 port 56712 [preauth]
May 12 02:33:34 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1032]: Invalid user jenkins from 10.30.120.5 port 56734
May 12 02:33:34 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1032]: Received disconnect from 10.30.120.5 port 56734:11: Closed due to user request. [preauth]
May 12 02:33:34 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1032]: Disconnected from invalid user jenkins 10.30.120.5 port 56734 [preauth]
May 12 02:33:36 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1171]: Invalid user jenkins from 10.30.120.5 port 56744
May 12 02:33:36 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1171]: Received disconnect from 10.30.120.5 port 56744:11: Closed due to user request. [preauth]
May 12 02:33:36 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1171]: Disconnected from invalid user jenkins 10.30.120.5 port 56744 [preauth]
May 12 02:33:38 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1375]: Invalid user jenkins from 10.30.120.5 port 56760
May 12 02:33:38 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1375]: Received disconnect from 10.30.120.5 port 56760:11: Closed due to user request. [preauth]
May 12 02:33:38 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1375]: Disconnected from invalid user jenkins 10.30.120.5 port 56760 [preauth]
May 12 02:33:40 prd-ubuntu20-04-docker-8c-8g-63354 systemd-logind[795]: Watching system buttons on /dev/input/event0 (Power Button)
May 12 02:33:40 prd-ubuntu20-04-docker-8c-8g-63354 systemd-logind[795]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
May 12 02:33:40 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1568]: Invalid user jenkins from 10.30.120.5 port 56770
May 12 02:33:40 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1568]: Received disconnect from 10.30.120.5 port 56770:11: Closed due to user request. [preauth]
May 12 02:33:40 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1568]: Disconnected from invalid user jenkins 10.30.120.5 port 56770 [preauth]
May 12 02:33:42 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1599]: Invalid user jenkins from 10.30.120.5 port 56794
May 12 02:33:43 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1599]: Received disconnect from 10.30.120.5 port 56794:11: Closed due to user request. [preauth]
May 12 02:33:43 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1599]: Disconnected from invalid user jenkins 10.30.120.5 port 56794 [preauth]
May 12 02:33:45 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1602]: Invalid user jenkins from 10.30.120.5 port 56808
May 12 02:33:45 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1602]: Received disconnect from 10.30.120.5 port 56808:11: Closed due to user request. [preauth]
May 12 02:33:45 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1602]: Disconnected from invalid user jenkins 10.30.120.5 port 56808 [preauth]
May 12 02:33:47 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1894]: Invalid user jenkins from 10.30.120.5 port 56820
May 12 02:33:47 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1894]: Received disconnect from 10.30.120.5 port 56820:11: Closed due to user request. [preauth]
May 12 02:33:47 prd-ubuntu20-04-docker-8c-8g-63354 sshd[1894]: Disconnected from invalid user jenkins 10.30.120.5 port 56820 [preauth]
May 12 02:33:49 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2036]: Invalid user jenkins from 10.30.120.5 port 56832
May 12 02:33:49 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2036]: Received disconnect from 10.30.120.5 port 56832:11: Closed due to user request. [preauth]
May 12 02:33:49 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2036]: Disconnected from invalid user jenkins 10.30.120.5 port 56832 [preauth]
May 12 02:33:51 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2059]: Invalid user jenkins from 10.30.120.5 port 56854
May 12 02:33:51 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2059]: Received disconnect from 10.30.120.5 port 56854:11: Closed due to user request. [preauth]
May 12 02:33:51 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2059]: Disconnected from invalid user jenkins 10.30.120.5 port 56854 [preauth]
May 12 02:33:51 prd-ubuntu20-04-docker-8c-8g-63354 useradd[2117]: new group: name=jenkins, GID=1001
May 12 02:33:51 prd-ubuntu20-04-docker-8c-8g-63354 useradd[2117]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
May 12 02:33:51 prd-ubuntu20-04-docker-8c-8g-63354 usermod[2132]: add 'jenkins' to group 'docker'
May 12 02:33:51 prd-ubuntu20-04-docker-8c-8g-63354 usermod[2132]: add 'jenkins' to shadow group 'docker'
May 12 02:33:53 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2360]: Accepted publickey for jenkins from 10.30.120.5 port 56876 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
May 12 02:33:53 prd-ubuntu20-04-docker-8c-8g-63354 sshd[2360]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
May 12 02:33:53 prd-ubuntu20-04-docker-8c-8g-63354 systemd-logind[795]: New session 1 of user jenkins.
May 12 02:33:53 prd-ubuntu20-04-docker-8c-8g-63354 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
May 12 02:34:01 prd-ubuntu20-04-docker-8c-8g-63354 CRON[2593]: pam_unix(cron:session): session opened for user root by (uid=0)
May 12 02:34:01 prd-ubuntu20-04-docker-8c-8g-63354 CRON[2593]: pam_unix(cron:session): session closed for user root