May 17 10:49:42 prd-ubuntu20-04-docker-8c-8g-63917 passwd[741]: password for 'ubuntu' changed by 'root' May 17 10:49:42 prd-ubuntu20-04-docker-8c-8g-63917 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) May 17 10:49:42 prd-ubuntu20-04-docker-8c-8g-63917 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 17 10:49:42 prd-ubuntu20-04-docker-8c-8g-63917 systemd-logind[800]: New seat seat0. May 17 10:49:43 prd-ubuntu20-04-docker-8c-8g-63917 sshd[835]: Server listening on 0.0.0.0 port 22. May 17 10:49:43 prd-ubuntu20-04-docker-8c-8g-63917 sshd[835]: Server listening on :: port 22. May 17 10:49:44 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1011]: error: kex_exchange_identification: Connection closed by remote host May 17 10:49:51 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1289]: Invalid user jenkins from 10.30.120.5 port 45458 May 17 10:49:51 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1289]: Received disconnect from 10.30.120.5 port 45458:11: Closed due to user request. [preauth] May 17 10:49:51 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1289]: Disconnected from invalid user jenkins 10.30.120.5 port 45458 [preauth] May 17 10:49:53 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1383]: Invalid user jenkins from 10.30.120.5 port 45460 May 17 10:49:53 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1383]: Received disconnect from 10.30.120.5 port 45460:11: Closed due to user request. [preauth] May 17 10:49:53 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1383]: Disconnected from invalid user jenkins 10.30.120.5 port 45460 [preauth] May 17 10:49:54 prd-ubuntu20-04-docker-8c-8g-63917 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 17 10:49:54 prd-ubuntu20-04-docker-8c-8g-63917 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) May 17 10:49:55 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1572]: Invalid user jenkins from 10.30.120.5 port 45462 May 17 10:49:55 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1572]: Received disconnect from 10.30.120.5 port 45462:11: Closed due to user request. [preauth] May 17 10:49:55 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1572]: Disconnected from invalid user jenkins 10.30.120.5 port 45462 [preauth] May 17 10:49:57 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1592]: Invalid user jenkins from 10.30.120.5 port 45464 May 17 10:49:57 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1592]: Received disconnect from 10.30.120.5 port 45464:11: Closed due to user request. [preauth] May 17 10:49:57 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1592]: Disconnected from invalid user jenkins 10.30.120.5 port 45464 [preauth] May 17 10:49:59 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1594]: Invalid user jenkins from 10.30.120.5 port 45466 May 17 10:49:59 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1594]: Received disconnect from 10.30.120.5 port 45466:11: Closed due to user request. [preauth] May 17 10:49:59 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1594]: Disconnected from invalid user jenkins 10.30.120.5 port 45466 [preauth] May 17 10:50:02 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1903]: Invalid user jenkins from 10.30.120.5 port 45472 May 17 10:50:02 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1903]: Received disconnect from 10.30.120.5 port 45472:11: Closed due to user request. [preauth] May 17 10:50:02 prd-ubuntu20-04-docker-8c-8g-63917 sshd[1903]: Disconnected from invalid user jenkins 10.30.120.5 port 45472 [preauth] May 17 10:50:02 prd-ubuntu20-04-docker-8c-8g-63917 CRON[1914]: pam_unix(cron:session): session opened for user root by (uid=0) May 17 10:50:02 prd-ubuntu20-04-docker-8c-8g-63917 CRON[1914]: pam_unix(cron:session): session closed for user root May 17 10:50:04 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2085]: Invalid user jenkins from 10.30.120.5 port 45476 May 17 10:50:04 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2085]: Received disconnect from 10.30.120.5 port 45476:11: Closed due to user request. [preauth] May 17 10:50:04 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2085]: Disconnected from invalid user jenkins 10.30.120.5 port 45476 [preauth] May 17 10:50:06 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2206]: Invalid user jenkins from 10.30.120.5 port 45478 May 17 10:50:06 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2206]: Received disconnect from 10.30.120.5 port 45478:11: Closed due to user request. [preauth] May 17 10:50:06 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2206]: Disconnected from invalid user jenkins 10.30.120.5 port 45478 [preauth] May 17 10:50:07 prd-ubuntu20-04-docker-8c-8g-63917 useradd[2336]: new group: name=jenkins, GID=1001 May 17 10:50:07 prd-ubuntu20-04-docker-8c-8g-63917 useradd[2336]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 17 10:50:07 prd-ubuntu20-04-docker-8c-8g-63917 usermod[2346]: add 'jenkins' to group 'docker' May 17 10:50:07 prd-ubuntu20-04-docker-8c-8g-63917 usermod[2346]: add 'jenkins' to shadow group 'docker' May 17 10:50:08 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2384]: Accepted publickey for jenkins from 10.30.120.5 port 45480 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU May 17 10:50:08 prd-ubuntu20-04-docker-8c-8g-63917 sshd[2384]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 17 10:50:08 prd-ubuntu20-04-docker-8c-8g-63917 systemd-logind[800]: New session 2 of user jenkins. May 17 10:50:08 prd-ubuntu20-04-docker-8c-8g-63917 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)