Nov 13 05:03:26 prd-ubuntu20-04-docker-2c-8g-773027 passwd[649]: password for 'ubuntu' changed by 'root' Nov 13 05:03:27 prd-ubuntu20-04-docker-2c-8g-773027 sshd[731]: Server listening on 0.0.0.0 port 22. Nov 13 05:03:27 prd-ubuntu20-04-docker-2c-8g-773027 sshd[731]: Server listening on :: port 22. Nov 13 05:03:27 prd-ubuntu20-04-docker-2c-8g-773027 systemd-logind[684]: New seat seat0. Nov 13 05:03:27 prd-ubuntu20-04-docker-2c-8g-773027 systemd-logind[684]: Watching system buttons on /dev/input/event0 (Power Button) Nov 13 05:03:27 prd-ubuntu20-04-docker-2c-8g-773027 systemd-logind[684]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 13 05:03:30 prd-ubuntu20-04-docker-2c-8g-773027 sshd[816]: error: kex_exchange_identification: Connection closed by remote host Nov 13 05:03:32 prd-ubuntu20-04-docker-2c-8g-773027 sshd[831]: Invalid user jenkins from 10.30.120.5 port 56910 Nov 13 05:03:36 prd-ubuntu20-04-docker-2c-8g-773027 sshd[831]: Received disconnect from 10.30.120.5 port 56910:11: Closed due to user request. [preauth] Nov 13 05:03:36 prd-ubuntu20-04-docker-2c-8g-773027 sshd[831]: Disconnected from invalid user jenkins 10.30.120.5 port 56910 [preauth] Nov 13 05:03:36 prd-ubuntu20-04-docker-2c-8g-773027 sshd[839]: Invalid user jenkins from 10.30.120.5 port 56914 Nov 13 05:03:36 prd-ubuntu20-04-docker-2c-8g-773027 sshd[839]: Received disconnect from 10.30.120.5 port 56914:11: Closed due to user request. [preauth] Nov 13 05:03:36 prd-ubuntu20-04-docker-2c-8g-773027 sshd[839]: Disconnected from invalid user jenkins 10.30.120.5 port 56914 [preauth] Nov 13 05:03:38 prd-ubuntu20-04-docker-2c-8g-773027 sshd[865]: Invalid user jenkins from 10.30.120.5 port 56924 Nov 13 05:03:38 prd-ubuntu20-04-docker-2c-8g-773027 sshd[865]: Received disconnect from 10.30.120.5 port 56924:11: Closed due to user request. [preauth] Nov 13 05:03:38 prd-ubuntu20-04-docker-2c-8g-773027 sshd[865]: Disconnected from invalid user jenkins 10.30.120.5 port 56924 [preauth] Nov 13 05:03:40 prd-ubuntu20-04-docker-2c-8g-773027 sshd[867]: Invalid user jenkins from 10.30.120.5 port 56926 Nov 13 05:03:40 prd-ubuntu20-04-docker-2c-8g-773027 sshd[867]: Received disconnect from 10.30.120.5 port 56926:11: Closed due to user request. [preauth] Nov 13 05:03:40 prd-ubuntu20-04-docker-2c-8g-773027 sshd[867]: Disconnected from invalid user jenkins 10.30.120.5 port 56926 [preauth] Nov 13 05:03:42 prd-ubuntu20-04-docker-2c-8g-773027 sshd[870]: Invalid user jenkins from 10.30.120.5 port 56928 Nov 13 05:03:42 prd-ubuntu20-04-docker-2c-8g-773027 sshd[870]: Received disconnect from 10.30.120.5 port 56928:11: Closed due to user request. [preauth] Nov 13 05:03:42 prd-ubuntu20-04-docker-2c-8g-773027 sshd[870]: Disconnected from invalid user jenkins 10.30.120.5 port 56928 [preauth] Nov 13 05:03:44 prd-ubuntu20-04-docker-2c-8g-773027 sshd[881]: Invalid user jenkins from 10.30.120.5 port 56930 Nov 13 05:03:44 prd-ubuntu20-04-docker-2c-8g-773027 sshd[881]: Received disconnect from 10.30.120.5 port 56930:11: Closed due to user request. [preauth] Nov 13 05:03:44 prd-ubuntu20-04-docker-2c-8g-773027 sshd[881]: Disconnected from invalid user jenkins 10.30.120.5 port 56930 [preauth] Nov 13 05:03:46 prd-ubuntu20-04-docker-2c-8g-773027 sshd[898]: Invalid user jenkins from 10.30.120.5 port 56932 Nov 13 05:03:47 prd-ubuntu20-04-docker-2c-8g-773027 sshd[898]: Received disconnect from 10.30.120.5 port 56932:11: Closed due to user request. [preauth] Nov 13 05:03:47 prd-ubuntu20-04-docker-2c-8g-773027 sshd[898]: Disconnected from invalid user jenkins 10.30.120.5 port 56932 [preauth] Nov 13 05:03:49 prd-ubuntu20-04-docker-2c-8g-773027 sshd[900]: Invalid user jenkins from 10.30.120.5 port 56934 Nov 13 05:03:49 prd-ubuntu20-04-docker-2c-8g-773027 sshd[900]: Received disconnect from 10.30.120.5 port 56934:11: Closed due to user request. [preauth] Nov 13 05:03:49 prd-ubuntu20-04-docker-2c-8g-773027 sshd[900]: Disconnected from invalid user jenkins 10.30.120.5 port 56934 [preauth] Nov 13 05:03:51 prd-ubuntu20-04-docker-2c-8g-773027 sshd[917]: Invalid user jenkins from 10.30.120.5 port 56936 Nov 13 05:03:51 prd-ubuntu20-04-docker-2c-8g-773027 sshd[917]: Received disconnect from 10.30.120.5 port 56936:11: Closed due to user request. [preauth] Nov 13 05:03:51 prd-ubuntu20-04-docker-2c-8g-773027 sshd[917]: Disconnected from invalid user jenkins 10.30.120.5 port 56936 [preauth] Nov 13 05:03:53 prd-ubuntu20-04-docker-2c-8g-773027 sshd[919]: Invalid user jenkins from 10.30.120.5 port 56940 Nov 13 05:03:53 prd-ubuntu20-04-docker-2c-8g-773027 sshd[919]: Received disconnect from 10.30.120.5 port 56940:11: Closed due to user request. [preauth] Nov 13 05:03:53 prd-ubuntu20-04-docker-2c-8g-773027 sshd[919]: Disconnected from invalid user jenkins 10.30.120.5 port 56940 [preauth] Nov 13 05:03:56 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1188]: Invalid user jenkins from 10.30.120.5 port 56942 Nov 13 05:03:56 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1188]: Received disconnect from 10.30.120.5 port 56942:11: Closed due to user request. [preauth] Nov 13 05:03:56 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1188]: Disconnected from invalid user jenkins 10.30.120.5 port 56942 [preauth] Nov 13 05:03:58 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1222]: Invalid user jenkins from 10.30.120.5 port 56944 Nov 13 05:03:58 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1222]: Received disconnect from 10.30.120.5 port 56944:11: Closed due to user request. [preauth] Nov 13 05:03:58 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1222]: Disconnected from invalid user jenkins 10.30.120.5 port 56944 [preauth] Nov 13 05:03:58 prd-ubuntu20-04-docker-2c-8g-773027 useradd[1245]: new group: name=jenkins, GID=1001 Nov 13 05:03:58 prd-ubuntu20-04-docker-2c-8g-773027 useradd[1245]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 13 05:03:58 prd-ubuntu20-04-docker-2c-8g-773027 usermod[1255]: add 'jenkins' to group 'docker' Nov 13 05:03:58 prd-ubuntu20-04-docker-2c-8g-773027 usermod[1255]: add 'jenkins' to shadow group 'docker' Nov 13 05:04:00 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1290]: Accepted publickey for jenkins from 10.30.120.5 port 56946 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 13 05:04:00 prd-ubuntu20-04-docker-2c-8g-773027 sshd[1290]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 13 05:04:00 prd-ubuntu20-04-docker-2c-8g-773027 systemd-logind[684]: New session 1 of user jenkins. Nov 13 05:04:00 prd-ubuntu20-04-docker-2c-8g-773027 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 13 05:04:02 prd-ubuntu20-04-docker-2c-8g-773027 CRON[1433]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 05:04:02 prd-ubuntu20-04-docker-2c-8g-773027 CRON[1433]: pam_unix(cron:session): session closed for user root Nov 13 05:05:01 prd-ubuntu20-04-docker-2c-8g-773027 CRON[2192]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 05:05:01 prd-ubuntu20-04-docker-2c-8g-773027 CRON[2192]: pam_unix(cron:session): session closed for user root Nov 13 05:06:01 prd-ubuntu20-04-docker-2c-8g-773027 CRON[2909]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 13 05:06:01 prd-ubuntu20-04-docker-2c-8g-773027 CRON[2909]: pam_unix(cron:session): session closed for user root Nov 13 05:06:19 prd-ubuntu20-04-docker-2c-8g-773027 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 13 05:06:19 prd-ubuntu20-04-docker-2c-8g-773027 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)