Sep 24 19:07:56 prd-ubuntu20-04-docker-2c-8g-9460 passwd[648]: password for 'ubuntu' changed by 'root' Sep 24 19:07:57 prd-ubuntu20-04-docker-2c-8g-9460 sshd[735]: Server listening on 0.0.0.0 port 22. Sep 24 19:07:57 prd-ubuntu20-04-docker-2c-8g-9460 sshd[735]: Server listening on :: port 22. Sep 24 19:07:57 prd-ubuntu20-04-docker-2c-8g-9460 systemd-logind[684]: New seat seat0. Sep 24 19:07:57 prd-ubuntu20-04-docker-2c-8g-9460 systemd-logind[684]: Watching system buttons on /dev/input/event0 (Power Button) Sep 24 19:07:57 prd-ubuntu20-04-docker-2c-8g-9460 systemd-logind[684]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 24 19:08:06 prd-ubuntu20-04-docker-2c-8g-9460 CRON[825]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 19:08:06 prd-ubuntu20-04-docker-2c-8g-9460 CRON[825]: pam_unix(cron:session): session closed for user root Sep 24 19:08:06 prd-ubuntu20-04-docker-2c-8g-9460 sshd[838]: error: kex_exchange_identification: Connection closed by remote host Sep 24 19:08:11 prd-ubuntu20-04-docker-2c-8g-9460 sshd[877]: Invalid user jenkins from 10.30.120.5 port 33928 Sep 24 19:08:11 prd-ubuntu20-04-docker-2c-8g-9460 sshd[877]: Received disconnect from 10.30.120.5 port 33928:11: Closed due to user request. [preauth] Sep 24 19:08:11 prd-ubuntu20-04-docker-2c-8g-9460 sshd[877]: Disconnected from invalid user jenkins 10.30.120.5 port 33928 [preauth] Sep 24 19:08:13 prd-ubuntu20-04-docker-2c-8g-9460 sshd[888]: Invalid user jenkins from 10.30.120.5 port 33930 Sep 24 19:08:13 prd-ubuntu20-04-docker-2c-8g-9460 sshd[888]: Received disconnect from 10.30.120.5 port 33930:11: Closed due to user request. [preauth] Sep 24 19:08:13 prd-ubuntu20-04-docker-2c-8g-9460 sshd[888]: Disconnected from invalid user jenkins 10.30.120.5 port 33930 [preauth] Sep 24 19:08:15 prd-ubuntu20-04-docker-2c-8g-9460 sshd[891]: Invalid user jenkins from 10.30.120.5 port 33932 Sep 24 19:08:15 prd-ubuntu20-04-docker-2c-8g-9460 sshd[891]: Received disconnect from 10.30.120.5 port 33932:11: Closed due to user request. [preauth] Sep 24 19:08:15 prd-ubuntu20-04-docker-2c-8g-9460 sshd[891]: Disconnected from invalid user jenkins 10.30.120.5 port 33932 [preauth] Sep 24 19:08:17 prd-ubuntu20-04-docker-2c-8g-9460 sshd[893]: Invalid user jenkins from 10.30.120.5 port 33934 Sep 24 19:08:18 prd-ubuntu20-04-docker-2c-8g-9460 sshd[893]: Received disconnect from 10.30.120.5 port 33934:11: Closed due to user request. [preauth] Sep 24 19:08:18 prd-ubuntu20-04-docker-2c-8g-9460 sshd[893]: Disconnected from invalid user jenkins 10.30.120.5 port 33934 [preauth] Sep 24 19:08:20 prd-ubuntu20-04-docker-2c-8g-9460 sshd[910]: Invalid user jenkins from 10.30.120.5 port 33936 Sep 24 19:08:20 prd-ubuntu20-04-docker-2c-8g-9460 sshd[910]: Received disconnect from 10.30.120.5 port 33936:11: Closed due to user request. [preauth] Sep 24 19:08:20 prd-ubuntu20-04-docker-2c-8g-9460 sshd[910]: Disconnected from invalid user jenkins 10.30.120.5 port 33936 [preauth] Sep 24 19:08:22 prd-ubuntu20-04-docker-2c-8g-9460 sshd[912]: Invalid user jenkins from 10.30.120.5 port 33938 Sep 24 19:08:22 prd-ubuntu20-04-docker-2c-8g-9460 sshd[912]: Received disconnect from 10.30.120.5 port 33938:11: Closed due to user request. [preauth] Sep 24 19:08:22 prd-ubuntu20-04-docker-2c-8g-9460 sshd[912]: Disconnected from invalid user jenkins 10.30.120.5 port 33938 [preauth] Sep 24 19:08:24 prd-ubuntu20-04-docker-2c-8g-9460 sshd[933]: Invalid user jenkins from 10.30.120.5 port 33942 Sep 24 19:08:24 prd-ubuntu20-04-docker-2c-8g-9460 sshd[933]: Received disconnect from 10.30.120.5 port 33942:11: Closed due to user request. [preauth] Sep 24 19:08:24 prd-ubuntu20-04-docker-2c-8g-9460 sshd[933]: Disconnected from invalid user jenkins 10.30.120.5 port 33942 [preauth] Sep 24 19:08:27 prd-ubuntu20-04-docker-2c-8g-9460 sshd[935]: Invalid user jenkins from 10.30.120.5 port 33944 Sep 24 19:08:27 prd-ubuntu20-04-docker-2c-8g-9460 sshd[935]: Received disconnect from 10.30.120.5 port 33944:11: Closed due to user request. [preauth] Sep 24 19:08:27 prd-ubuntu20-04-docker-2c-8g-9460 sshd[935]: Disconnected from invalid user jenkins 10.30.120.5 port 33944 [preauth] Sep 24 19:08:29 prd-ubuntu20-04-docker-2c-8g-9460 sshd[947]: Invalid user jenkins from 10.30.120.5 port 33946 Sep 24 19:08:29 prd-ubuntu20-04-docker-2c-8g-9460 sshd[947]: Received disconnect from 10.30.120.5 port 33946:11: Closed due to user request. [preauth] Sep 24 19:08:29 prd-ubuntu20-04-docker-2c-8g-9460 sshd[947]: Disconnected from invalid user jenkins 10.30.120.5 port 33946 [preauth] Sep 24 19:08:31 prd-ubuntu20-04-docker-2c-8g-9460 sshd[949]: Invalid user jenkins from 10.30.120.5 port 33948 Sep 24 19:08:31 prd-ubuntu20-04-docker-2c-8g-9460 sshd[949]: Received disconnect from 10.30.120.5 port 33948:11: Closed due to user request. [preauth] Sep 24 19:08:31 prd-ubuntu20-04-docker-2c-8g-9460 sshd[949]: Disconnected from invalid user jenkins 10.30.120.5 port 33948 [preauth] Sep 24 19:08:33 prd-ubuntu20-04-docker-2c-8g-9460 sshd[951]: Invalid user jenkins from 10.30.120.5 port 33950 Sep 24 19:08:33 prd-ubuntu20-04-docker-2c-8g-9460 sshd[951]: Received disconnect from 10.30.120.5 port 33950:11: Closed due to user request. [preauth] Sep 24 19:08:33 prd-ubuntu20-04-docker-2c-8g-9460 sshd[951]: Disconnected from invalid user jenkins 10.30.120.5 port 33950 [preauth] Sep 24 19:08:35 prd-ubuntu20-04-docker-2c-8g-9460 sshd[953]: Invalid user jenkins from 10.30.120.5 port 33952 Sep 24 19:08:35 prd-ubuntu20-04-docker-2c-8g-9460 sshd[953]: Received disconnect from 10.30.120.5 port 33952:11: Closed due to user request. [preauth] Sep 24 19:08:35 prd-ubuntu20-04-docker-2c-8g-9460 sshd[953]: Disconnected from invalid user jenkins 10.30.120.5 port 33952 [preauth] Sep 24 19:08:37 prd-ubuntu20-04-docker-2c-8g-9460 sshd[955]: Invalid user jenkins from 10.30.120.5 port 33954 Sep 24 19:08:37 prd-ubuntu20-04-docker-2c-8g-9460 sshd[955]: Received disconnect from 10.30.120.5 port 33954:11: Closed due to user request. [preauth] Sep 24 19:08:37 prd-ubuntu20-04-docker-2c-8g-9460 sshd[955]: Disconnected from invalid user jenkins 10.30.120.5 port 33954 [preauth] Sep 24 19:08:39 prd-ubuntu20-04-docker-2c-8g-9460 sshd[957]: Invalid user jenkins from 10.30.120.5 port 33958 Sep 24 19:08:40 prd-ubuntu20-04-docker-2c-8g-9460 sshd[957]: Received disconnect from 10.30.120.5 port 33958:11: Closed due to user request. [preauth] Sep 24 19:08:40 prd-ubuntu20-04-docker-2c-8g-9460 sshd[957]: Disconnected from invalid user jenkins 10.30.120.5 port 33958 [preauth] Sep 24 19:08:42 prd-ubuntu20-04-docker-2c-8g-9460 sshd[959]: Invalid user jenkins from 10.30.120.5 port 33966 Sep 24 19:08:42 prd-ubuntu20-04-docker-2c-8g-9460 sshd[959]: Received disconnect from 10.30.120.5 port 33966:11: Closed due to user request. [preauth] Sep 24 19:08:42 prd-ubuntu20-04-docker-2c-8g-9460 sshd[959]: Disconnected from invalid user jenkins 10.30.120.5 port 33966 [preauth] Sep 24 19:08:44 prd-ubuntu20-04-docker-2c-8g-9460 sshd[978]: Invalid user jenkins from 10.30.120.5 port 33968 Sep 24 19:08:44 prd-ubuntu20-04-docker-2c-8g-9460 sshd[978]: Received disconnect from 10.30.120.5 port 33968:11: Closed due to user request. [preauth] Sep 24 19:08:44 prd-ubuntu20-04-docker-2c-8g-9460 sshd[978]: Disconnected from invalid user jenkins 10.30.120.5 port 33968 [preauth] Sep 24 19:08:46 prd-ubuntu20-04-docker-2c-8g-9460 sshd[980]: Invalid user jenkins from 10.30.120.5 port 33970 Sep 24 19:08:46 prd-ubuntu20-04-docker-2c-8g-9460 sshd[980]: Received disconnect from 10.30.120.5 port 33970:11: Closed due to user request. [preauth] Sep 24 19:08:46 prd-ubuntu20-04-docker-2c-8g-9460 sshd[980]: Disconnected from invalid user jenkins 10.30.120.5 port 33970 [preauth] Sep 24 19:08:48 prd-ubuntu20-04-docker-2c-8g-9460 sshd[982]: Invalid user jenkins from 10.30.120.5 port 33972 Sep 24 19:08:48 prd-ubuntu20-04-docker-2c-8g-9460 sshd[982]: Received disconnect from 10.30.120.5 port 33972:11: Closed due to user request. [preauth] Sep 24 19:08:48 prd-ubuntu20-04-docker-2c-8g-9460 sshd[982]: Disconnected from invalid user jenkins 10.30.120.5 port 33972 [preauth] Sep 24 19:08:50 prd-ubuntu20-04-docker-2c-8g-9460 sshd[984]: Invalid user jenkins from 10.30.120.5 port 33974 Sep 24 19:08:50 prd-ubuntu20-04-docker-2c-8g-9460 sshd[984]: Received disconnect from 10.30.120.5 port 33974:11: Closed due to user request. [preauth] Sep 24 19:08:50 prd-ubuntu20-04-docker-2c-8g-9460 sshd[984]: Disconnected from invalid user jenkins 10.30.120.5 port 33974 [preauth] Sep 24 19:08:52 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1251]: Invalid user jenkins from 10.30.120.5 port 33978 Sep 24 19:08:52 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1251]: Received disconnect from 10.30.120.5 port 33978:11: Closed due to user request. [preauth] Sep 24 19:08:52 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1251]: Disconnected from invalid user jenkins 10.30.120.5 port 33978 [preauth] Sep 24 19:08:54 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1285]: Invalid user jenkins from 10.30.120.5 port 33982 Sep 24 19:08:54 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1285]: Received disconnect from 10.30.120.5 port 33982:11: Closed due to user request. [preauth] Sep 24 19:08:54 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1285]: Disconnected from invalid user jenkins 10.30.120.5 port 33982 [preauth] Sep 24 19:08:55 prd-ubuntu20-04-docker-2c-8g-9460 useradd[1306]: new group: name=jenkins, GID=1001 Sep 24 19:08:55 prd-ubuntu20-04-docker-2c-8g-9460 useradd[1306]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Sep 24 19:08:55 prd-ubuntu20-04-docker-2c-8g-9460 usermod[1316]: add 'jenkins' to group 'docker' Sep 24 19:08:55 prd-ubuntu20-04-docker-2c-8g-9460 usermod[1316]: add 'jenkins' to shadow group 'docker' Sep 24 19:08:57 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1366]: Accepted publickey for jenkins from 10.30.120.5 port 33984 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Sep 24 19:08:57 prd-ubuntu20-04-docker-2c-8g-9460 sshd[1366]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 24 19:08:57 prd-ubuntu20-04-docker-2c-8g-9460 systemd-logind[684]: New session 2 of user jenkins. Sep 24 19:08:57 prd-ubuntu20-04-docker-2c-8g-9460 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 24 19:09:01 prd-ubuntu20-04-docker-2c-8g-9460 CRON[1523]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 19:09:01 prd-ubuntu20-04-docker-2c-8g-9460 CRON[1523]: pam_unix(cron:session): session closed for user root Sep 24 19:10:01 prd-ubuntu20-04-docker-2c-8g-9460 CRON[2105]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 19:10:01 prd-ubuntu20-04-docker-2c-8g-9460 CRON[2105]: pam_unix(cron:session): session closed for user root Sep 24 19:11:01 prd-ubuntu20-04-docker-2c-8g-9460 CRON[2807]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 24 19:11:01 prd-ubuntu20-04-docker-2c-8g-9460 CRON[2807]: pam_unix(cron:session): session closed for user root Sep 24 19:11:25 prd-ubuntu20-04-docker-2c-8g-9460 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Sep 24 19:11:25 prd-ubuntu20-04-docker-2c-8g-9460 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)