Jun 6 15:03:24 prd-ubuntu20-04-docker-2c-8g-2888 passwd[677]: password for 'ubuntu' changed by 'root' Jun 6 15:03:24 prd-ubuntu20-04-docker-2c-8g-2888 sshd[762]: Server listening on 0.0.0.0 port 22. Jun 6 15:03:24 prd-ubuntu20-04-docker-2c-8g-2888 sshd[762]: Server listening on :: port 22. Jun 6 15:03:24 prd-ubuntu20-04-docker-2c-8g-2888 systemd-logind[715]: New seat seat0. Jun 6 15:03:24 prd-ubuntu20-04-docker-2c-8g-2888 systemd-logind[715]: Watching system buttons on /dev/input/event0 (Power Button) Jun 6 15:03:24 prd-ubuntu20-04-docker-2c-8g-2888 systemd-logind[715]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 6 15:03:27 prd-ubuntu20-04-docker-2c-8g-2888 sshd[912]: error: kex_exchange_identification: Connection closed by remote host Jun 6 15:03:31 prd-ubuntu20-04-docker-2c-8g-2888 sshd[920]: Invalid user jenkins from 10.30.120.5 port 32868 Jun 6 15:03:31 prd-ubuntu20-04-docker-2c-8g-2888 sshd[920]: Received disconnect from 10.30.120.5 port 32868:11: Closed due to user request. [preauth] Jun 6 15:03:31 prd-ubuntu20-04-docker-2c-8g-2888 sshd[920]: Disconnected from invalid user jenkins 10.30.120.5 port 32868 [preauth] Jun 6 15:03:33 prd-ubuntu20-04-docker-2c-8g-2888 sshd[922]: Invalid user jenkins from 10.30.120.5 port 32870 Jun 6 15:03:33 prd-ubuntu20-04-docker-2c-8g-2888 sshd[922]: Received disconnect from 10.30.120.5 port 32870:11: Closed due to user request. [preauth] Jun 6 15:03:33 prd-ubuntu20-04-docker-2c-8g-2888 sshd[922]: Disconnected from invalid user jenkins 10.30.120.5 port 32870 [preauth] Jun 6 15:03:36 prd-ubuntu20-04-docker-2c-8g-2888 sshd[924]: Invalid user jenkins from 10.30.120.5 port 32872 Jun 6 15:03:36 prd-ubuntu20-04-docker-2c-8g-2888 sshd[924]: Received disconnect from 10.30.120.5 port 32872:11: Closed due to user request. [preauth] Jun 6 15:03:36 prd-ubuntu20-04-docker-2c-8g-2888 sshd[924]: Disconnected from invalid user jenkins 10.30.120.5 port 32872 [preauth] Jun 6 15:03:38 prd-ubuntu20-04-docker-2c-8g-2888 sshd[926]: Invalid user jenkins from 10.30.120.5 port 32874 Jun 6 15:03:38 prd-ubuntu20-04-docker-2c-8g-2888 sshd[926]: Received disconnect from 10.30.120.5 port 32874:11: Closed due to user request. [preauth] Jun 6 15:03:38 prd-ubuntu20-04-docker-2c-8g-2888 sshd[926]: Disconnected from invalid user jenkins 10.30.120.5 port 32874 [preauth] Jun 6 15:03:40 prd-ubuntu20-04-docker-2c-8g-2888 sshd[928]: Invalid user jenkins from 10.30.120.5 port 32878 Jun 6 15:03:40 prd-ubuntu20-04-docker-2c-8g-2888 sshd[928]: Received disconnect from 10.30.120.5 port 32878:11: Closed due to user request. [preauth] Jun 6 15:03:40 prd-ubuntu20-04-docker-2c-8g-2888 sshd[928]: Disconnected from invalid user jenkins 10.30.120.5 port 32878 [preauth] Jun 6 15:03:42 prd-ubuntu20-04-docker-2c-8g-2888 sshd[930]: Invalid user jenkins from 10.30.120.5 port 32880 Jun 6 15:03:42 prd-ubuntu20-04-docker-2c-8g-2888 sshd[930]: Received disconnect from 10.30.120.5 port 32880:11: Closed due to user request. [preauth] Jun 6 15:03:42 prd-ubuntu20-04-docker-2c-8g-2888 sshd[930]: Disconnected from invalid user jenkins 10.30.120.5 port 32880 [preauth] Jun 6 15:03:44 prd-ubuntu20-04-docker-2c-8g-2888 sshd[934]: Invalid user jenkins from 10.30.120.5 port 32882 Jun 6 15:03:44 prd-ubuntu20-04-docker-2c-8g-2888 sshd[934]: Received disconnect from 10.30.120.5 port 32882:11: Closed due to user request. [preauth] Jun 6 15:03:44 prd-ubuntu20-04-docker-2c-8g-2888 sshd[934]: Disconnected from invalid user jenkins 10.30.120.5 port 32882 [preauth] Jun 6 15:03:46 prd-ubuntu20-04-docker-2c-8g-2888 sshd[936]: Invalid user jenkins from 10.30.120.5 port 32886 Jun 6 15:03:46 prd-ubuntu20-04-docker-2c-8g-2888 sshd[936]: Received disconnect from 10.30.120.5 port 32886:11: Closed due to user request. [preauth] Jun 6 15:03:46 prd-ubuntu20-04-docker-2c-8g-2888 sshd[936]: Disconnected from invalid user jenkins 10.30.120.5 port 32886 [preauth] Jun 6 15:03:48 prd-ubuntu20-04-docker-2c-8g-2888 sshd[938]: Invalid user jenkins from 10.30.120.5 port 32894 Jun 6 15:03:48 prd-ubuntu20-04-docker-2c-8g-2888 sshd[938]: Received disconnect from 10.30.120.5 port 32894:11: Closed due to user request. [preauth] Jun 6 15:03:48 prd-ubuntu20-04-docker-2c-8g-2888 sshd[938]: Disconnected from invalid user jenkins 10.30.120.5 port 32894 [preauth] Jun 6 15:03:50 prd-ubuntu20-04-docker-2c-8g-2888 sshd[951]: Invalid user jenkins from 10.30.120.5 port 32896 Jun 6 15:03:51 prd-ubuntu20-04-docker-2c-8g-2888 sshd[951]: Received disconnect from 10.30.120.5 port 32896:11: Closed due to user request. [preauth] Jun 6 15:03:51 prd-ubuntu20-04-docker-2c-8g-2888 sshd[951]: Disconnected from invalid user jenkins 10.30.120.5 port 32896 [preauth] Jun 6 15:03:53 prd-ubuntu20-04-docker-2c-8g-2888 sshd[953]: Invalid user jenkins from 10.30.120.5 port 32898 Jun 6 15:03:53 prd-ubuntu20-04-docker-2c-8g-2888 sshd[953]: Received disconnect from 10.30.120.5 port 32898:11: Closed due to user request. [preauth] Jun 6 15:03:53 prd-ubuntu20-04-docker-2c-8g-2888 sshd[953]: Disconnected from invalid user jenkins 10.30.120.5 port 32898 [preauth] Jun 6 15:03:57 prd-ubuntu20-04-docker-2c-8g-2888 sshd[978]: Invalid user jenkins from 10.30.120.5 port 32900 Jun 6 15:03:57 prd-ubuntu20-04-docker-2c-8g-2888 sshd[978]: Received disconnect from 10.30.120.5 port 32900:11: Closed due to user request. [preauth] Jun 6 15:03:57 prd-ubuntu20-04-docker-2c-8g-2888 sshd[978]: Disconnected from invalid user jenkins 10.30.120.5 port 32900 [preauth] Jun 6 15:04:00 prd-ubuntu20-04-docker-2c-8g-2888 sshd[982]: Invalid user jenkins from 10.30.120.5 port 32902 Jun 6 15:04:00 prd-ubuntu20-04-docker-2c-8g-2888 sshd[982]: Received disconnect from 10.30.120.5 port 32902:11: Closed due to user request. [preauth] Jun 6 15:04:00 prd-ubuntu20-04-docker-2c-8g-2888 sshd[982]: Disconnected from invalid user jenkins 10.30.120.5 port 32902 [preauth] Jun 6 15:04:02 prd-ubuntu20-04-docker-2c-8g-2888 sshd[992]: Invalid user jenkins from 10.30.120.5 port 32906 Jun 6 15:04:02 prd-ubuntu20-04-docker-2c-8g-2888 sshd[992]: Received disconnect from 10.30.120.5 port 32906:11: Closed due to user request. [preauth] Jun 6 15:04:02 prd-ubuntu20-04-docker-2c-8g-2888 sshd[992]: Disconnected from invalid user jenkins 10.30.120.5 port 32906 [preauth] Jun 6 15:04:04 prd-ubuntu20-04-docker-2c-8g-2888 sshd[994]: Invalid user jenkins from 10.30.120.5 port 32908 Jun 6 15:04:04 prd-ubuntu20-04-docker-2c-8g-2888 sshd[994]: Received disconnect from 10.30.120.5 port 32908:11: Closed due to user request. [preauth] Jun 6 15:04:04 prd-ubuntu20-04-docker-2c-8g-2888 sshd[994]: Disconnected from invalid user jenkins 10.30.120.5 port 32908 [preauth] Jun 6 15:04:06 prd-ubuntu20-04-docker-2c-8g-2888 sshd[996]: Invalid user jenkins from 10.30.120.5 port 32910 Jun 6 15:04:06 prd-ubuntu20-04-docker-2c-8g-2888 sshd[996]: Received disconnect from 10.30.120.5 port 32910:11: Closed due to user request. [preauth] Jun 6 15:04:06 prd-ubuntu20-04-docker-2c-8g-2888 sshd[996]: Disconnected from invalid user jenkins 10.30.120.5 port 32910 [preauth] Jun 6 15:04:08 prd-ubuntu20-04-docker-2c-8g-2888 sshd[998]: Invalid user jenkins from 10.30.120.5 port 32912 Jun 6 15:04:09 prd-ubuntu20-04-docker-2c-8g-2888 sshd[998]: Received disconnect from 10.30.120.5 port 32912:11: Closed due to user request. [preauth] Jun 6 15:04:09 prd-ubuntu20-04-docker-2c-8g-2888 sshd[998]: Disconnected from invalid user jenkins 10.30.120.5 port 32912 [preauth] Jun 6 15:04:11 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1000]: Invalid user jenkins from 10.30.120.5 port 32914 Jun 6 15:04:11 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1000]: Received disconnect from 10.30.120.5 port 32914:11: Closed due to user request. [preauth] Jun 6 15:04:11 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1000]: Disconnected from invalid user jenkins 10.30.120.5 port 32914 [preauth] Jun 6 15:04:12 prd-ubuntu20-04-docker-2c-8g-2888 CRON[984]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 15:04:12 prd-ubuntu20-04-docker-2c-8g-2888 CRON[984]: pam_unix(cron:session): session closed for user root Jun 6 15:04:13 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1021]: Invalid user jenkins from 10.30.120.5 port 32916 Jun 6 15:04:13 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1021]: Received disconnect from 10.30.120.5 port 32916:11: Closed due to user request. [preauth] Jun 6 15:04:13 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1021]: Disconnected from invalid user jenkins 10.30.120.5 port 32916 [preauth] Jun 6 15:04:15 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1187]: Invalid user jenkins from 10.30.120.5 port 32918 Jun 6 15:04:15 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1187]: Received disconnect from 10.30.120.5 port 32918:11: Closed due to user request. [preauth] Jun 6 15:04:15 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1187]: Disconnected from invalid user jenkins 10.30.120.5 port 32918 [preauth] Jun 6 15:04:17 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1218]: Invalid user jenkins from 10.30.120.5 port 32922 Jun 6 15:04:17 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1218]: Received disconnect from 10.30.120.5 port 32922:11: Closed due to user request. [preauth] Jun 6 15:04:17 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1218]: Disconnected from invalid user jenkins 10.30.120.5 port 32922 [preauth] Jun 6 15:04:19 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1236]: Invalid user jenkins from 10.30.120.5 port 32930 Jun 6 15:04:19 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1236]: Received disconnect from 10.30.120.5 port 32930:11: Closed due to user request. [preauth] Jun 6 15:04:19 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1236]: Disconnected from invalid user jenkins 10.30.120.5 port 32930 [preauth] Jun 6 15:04:21 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1238]: Invalid user jenkins from 10.30.120.5 port 32932 Jun 6 15:04:21 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1238]: Received disconnect from 10.30.120.5 port 32932:11: Closed due to user request. [preauth] Jun 6 15:04:21 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1238]: Disconnected from invalid user jenkins 10.30.120.5 port 32932 [preauth] Jun 6 15:04:23 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1240]: Invalid user jenkins from 10.30.120.5 port 32934 Jun 6 15:04:24 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1240]: Received disconnect from 10.30.120.5 port 32934:11: Closed due to user request. [preauth] Jun 6 15:04:24 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1240]: Disconnected from invalid user jenkins 10.30.120.5 port 32934 [preauth] Jun 6 15:04:26 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1242]: Invalid user jenkins from 10.30.120.5 port 32936 Jun 6 15:04:26 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1242]: Received disconnect from 10.30.120.5 port 32936:11: Closed due to user request. [preauth] Jun 6 15:04:26 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1242]: Disconnected from invalid user jenkins 10.30.120.5 port 32936 [preauth] Jun 6 15:04:28 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1244]: Invalid user jenkins from 10.30.120.5 port 32938 Jun 6 15:04:32 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1244]: Received disconnect from 10.30.120.5 port 32938:11: Closed due to user request. [preauth] Jun 6 15:04:32 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1244]: Disconnected from invalid user jenkins 10.30.120.5 port 32938 [preauth] Jun 6 15:04:34 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1246]: Invalid user jenkins from 10.30.120.5 port 32942 Jun 6 15:04:36 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1246]: Received disconnect from 10.30.120.5 port 32942:11: Closed due to user request. [preauth] Jun 6 15:04:36 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1246]: Disconnected from invalid user jenkins 10.30.120.5 port 32942 [preauth] Jun 6 15:04:38 prd-ubuntu20-04-docker-2c-8g-2888 useradd[1267]: new group: name=jenkins, GID=1001 Jun 6 15:04:38 prd-ubuntu20-04-docker-2c-8g-2888 useradd[1267]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jun 6 15:04:38 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1268]: Invalid user jenkins from 10.30.120.5 port 32944 Jun 6 15:04:38 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1268]: Received disconnect from 10.30.120.5 port 32944:11: Closed due to user request. [preauth] Jun 6 15:04:38 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1268]: Disconnected from invalid user jenkins 10.30.120.5 port 32944 [preauth] Jun 6 15:04:40 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1271]: Received disconnect from 10.30.120.5 port 32948:11: Closed due to user request. [preauth] Jun 6 15:04:40 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1271]: Disconnected from authenticating user jenkins 10.30.120.5 port 32948 [preauth] Jun 6 15:04:41 prd-ubuntu20-04-docker-2c-8g-2888 usermod[1281]: add 'jenkins' to group 'docker' Jun 6 15:04:41 prd-ubuntu20-04-docker-2c-8g-2888 usermod[1281]: add 'jenkins' to shadow group 'docker' Jun 6 15:04:42 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1318]: Accepted publickey for jenkins from 10.30.120.5 port 32950 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 6 15:04:42 prd-ubuntu20-04-docker-2c-8g-2888 sshd[1318]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 6 15:04:43 prd-ubuntu20-04-docker-2c-8g-2888 systemd-logind[715]: New session 2 of user jenkins. Jun 6 15:04:43 prd-ubuntu20-04-docker-2c-8g-2888 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 6 15:05:01 prd-ubuntu20-04-docker-2c-8g-2888 CRON[1839]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 15:05:01 prd-ubuntu20-04-docker-2c-8g-2888 CRON[1839]: pam_unix(cron:session): session closed for user root Jun 6 15:06:01 prd-ubuntu20-04-docker-2c-8g-2888 CRON[2283]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 15:06:01 prd-ubuntu20-04-docker-2c-8g-2888 CRON[2283]: pam_unix(cron:session): session closed for user root Jun 6 15:07:01 prd-ubuntu20-04-docker-2c-8g-2888 CRON[2850]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 6 15:07:01 prd-ubuntu20-04-docker-2c-8g-2888 CRON[2850]: pam_unix(cron:session): session closed for user root Jun 6 15:07:23 prd-ubuntu20-04-docker-2c-8g-2888 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jun 6 15:07:23 prd-ubuntu20-04-docker-2c-8g-2888 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)