Nov 26 10:03:26 prd-ubuntu20-04-docker-2c-8g-773852 passwd[646]: password for 'ubuntu' changed by 'root' Nov 26 10:03:26 prd-ubuntu20-04-docker-2c-8g-773852 sshd[732]: Server listening on 0.0.0.0 port 22. Nov 26 10:03:26 prd-ubuntu20-04-docker-2c-8g-773852 sshd[732]: Server listening on :: port 22. Nov 26 10:03:26 prd-ubuntu20-04-docker-2c-8g-773852 sshd[761]: error: kex_exchange_identification: Connection closed by remote host Nov 26 10:03:26 prd-ubuntu20-04-docker-2c-8g-773852 systemd-logind[682]: New seat seat0. Nov 26 10:03:26 prd-ubuntu20-04-docker-2c-8g-773852 systemd-logind[682]: Watching system buttons on /dev/input/event0 (Power Button) Nov 26 10:03:26 prd-ubuntu20-04-docker-2c-8g-773852 systemd-logind[682]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 26 10:03:31 prd-ubuntu20-04-docker-2c-8g-773852 sshd[871]: Invalid user jenkins from 10.30.120.5 port 52692 Nov 26 10:03:31 prd-ubuntu20-04-docker-2c-8g-773852 sshd[871]: Received disconnect from 10.30.120.5 port 52692:11: Closed due to user request. [preauth] Nov 26 10:03:31 prd-ubuntu20-04-docker-2c-8g-773852 sshd[871]: Disconnected from invalid user jenkins 10.30.120.5 port 52692 [preauth] Nov 26 10:03:33 prd-ubuntu20-04-docker-2c-8g-773852 sshd[884]: Invalid user jenkins from 10.30.120.5 port 52694 Nov 26 10:03:33 prd-ubuntu20-04-docker-2c-8g-773852 sshd[884]: Received disconnect from 10.30.120.5 port 52694:11: Closed due to user request. [preauth] Nov 26 10:03:33 prd-ubuntu20-04-docker-2c-8g-773852 sshd[884]: Disconnected from invalid user jenkins 10.30.120.5 port 52694 [preauth] Nov 26 10:03:35 prd-ubuntu20-04-docker-2c-8g-773852 sshd[887]: Invalid user jenkins from 10.30.120.5 port 52696 Nov 26 10:03:35 prd-ubuntu20-04-docker-2c-8g-773852 sshd[887]: Received disconnect from 10.30.120.5 port 52696:11: Closed due to user request. [preauth] Nov 26 10:03:35 prd-ubuntu20-04-docker-2c-8g-773852 sshd[887]: Disconnected from invalid user jenkins 10.30.120.5 port 52696 [preauth] Nov 26 10:03:37 prd-ubuntu20-04-docker-2c-8g-773852 sshd[889]: Invalid user jenkins from 10.30.120.5 port 52698 Nov 26 10:03:37 prd-ubuntu20-04-docker-2c-8g-773852 sshd[889]: Received disconnect from 10.30.120.5 port 52698:11: Closed due to user request. [preauth] Nov 26 10:03:37 prd-ubuntu20-04-docker-2c-8g-773852 sshd[889]: Disconnected from invalid user jenkins 10.30.120.5 port 52698 [preauth] Nov 26 10:03:39 prd-ubuntu20-04-docker-2c-8g-773852 sshd[891]: Invalid user jenkins from 10.30.120.5 port 52702 Nov 26 10:03:39 prd-ubuntu20-04-docker-2c-8g-773852 sshd[891]: Received disconnect from 10.30.120.5 port 52702:11: Closed due to user request. [preauth] Nov 26 10:03:39 prd-ubuntu20-04-docker-2c-8g-773852 sshd[891]: Disconnected from invalid user jenkins 10.30.120.5 port 52702 [preauth] Nov 26 10:03:42 prd-ubuntu20-04-docker-2c-8g-773852 sshd[893]: Invalid user jenkins from 10.30.120.5 port 52704 Nov 26 10:03:42 prd-ubuntu20-04-docker-2c-8g-773852 sshd[893]: Received disconnect from 10.30.120.5 port 52704:11: Closed due to user request. [preauth] Nov 26 10:03:42 prd-ubuntu20-04-docker-2c-8g-773852 sshd[893]: Disconnected from invalid user jenkins 10.30.120.5 port 52704 [preauth] Nov 26 10:03:44 prd-ubuntu20-04-docker-2c-8g-773852 sshd[895]: Invalid user jenkins from 10.30.120.5 port 52706 Nov 26 10:03:44 prd-ubuntu20-04-docker-2c-8g-773852 sshd[895]: Received disconnect from 10.30.120.5 port 52706:11: Closed due to user request. [preauth] Nov 26 10:03:44 prd-ubuntu20-04-docker-2c-8g-773852 sshd[895]: Disconnected from invalid user jenkins 10.30.120.5 port 52706 [preauth] Nov 26 10:03:47 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1177]: Invalid user jenkins from 10.30.120.5 port 52708 Nov 26 10:03:47 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1177]: Received disconnect from 10.30.120.5 port 52708:11: Closed due to user request. [preauth] Nov 26 10:03:47 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1177]: Disconnected from invalid user jenkins 10.30.120.5 port 52708 [preauth] Nov 26 10:03:49 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1209]: Invalid user jenkins from 10.30.120.5 port 52710 Nov 26 10:03:49 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1209]: Received disconnect from 10.30.120.5 port 52710:11: Closed due to user request. [preauth] Nov 26 10:03:49 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1209]: Disconnected from invalid user jenkins 10.30.120.5 port 52710 [preauth] Nov 26 10:03:51 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1228]: Invalid user jenkins from 10.30.120.5 port 52712 Nov 26 10:03:51 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1228]: Received disconnect from 10.30.120.5 port 52712:11: Closed due to user request. [preauth] Nov 26 10:03:51 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1228]: Disconnected from invalid user jenkins 10.30.120.5 port 52712 [preauth] Nov 26 10:03:53 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1230]: Invalid user jenkins from 10.30.120.5 port 52714 Nov 26 10:03:53 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1230]: Received disconnect from 10.30.120.5 port 52714:11: Closed due to user request. [preauth] Nov 26 10:03:53 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1230]: Disconnected from invalid user jenkins 10.30.120.5 port 52714 [preauth] Nov 26 10:03:55 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1232]: Invalid user jenkins from 10.30.120.5 port 52718 Nov 26 10:03:55 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1232]: Received disconnect from 10.30.120.5 port 52718:11: Closed due to user request. [preauth] Nov 26 10:03:55 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1232]: Disconnected from invalid user jenkins 10.30.120.5 port 52718 [preauth] Nov 26 10:03:57 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1234]: Invalid user jenkins from 10.30.120.5 port 52726 Nov 26 10:03:58 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1234]: Received disconnect from 10.30.120.5 port 52726:11: Closed due to user request. [preauth] Nov 26 10:03:58 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1234]: Disconnected from invalid user jenkins 10.30.120.5 port 52726 [preauth] Nov 26 10:04:00 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1253]: Invalid user jenkins from 10.30.120.5 port 52728 Nov 26 10:04:00 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1253]: Received disconnect from 10.30.120.5 port 52728:11: Closed due to user request. [preauth] Nov 26 10:04:00 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1253]: Disconnected from invalid user jenkins 10.30.120.5 port 52728 [preauth] Nov 26 10:04:02 prd-ubuntu20-04-docker-2c-8g-773852 CRON[1255]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 26 10:04:02 prd-ubuntu20-04-docker-2c-8g-773852 CRON[1255]: pam_unix(cron:session): session closed for user root Nov 26 10:04:02 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1269]: Invalid user jenkins from 10.30.120.5 port 52730 Nov 26 10:04:02 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1269]: Received disconnect from 10.30.120.5 port 52730:11: Closed due to user request. [preauth] Nov 26 10:04:02 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1269]: Disconnected from invalid user jenkins 10.30.120.5 port 52730 [preauth] Nov 26 10:04:04 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1277]: Invalid user jenkins from 10.30.120.5 port 52732 Nov 26 10:04:04 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1277]: Received disconnect from 10.30.120.5 port 52732:11: Closed due to user request. [preauth] Nov 26 10:04:04 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1277]: Disconnected from invalid user jenkins 10.30.120.5 port 52732 [preauth] Nov 26 10:04:06 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1279]: Invalid user jenkins from 10.30.120.5 port 52734 Nov 26 10:04:06 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1279]: Received disconnect from 10.30.120.5 port 52734:11: Closed due to user request. [preauth] Nov 26 10:04:06 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1279]: Disconnected from invalid user jenkins 10.30.120.5 port 52734 [preauth] Nov 26 10:04:08 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1281]: Invalid user jenkins from 10.30.120.5 port 52736 Nov 26 10:04:08 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1281]: Received disconnect from 10.30.120.5 port 52736:11: Closed due to user request. [preauth] Nov 26 10:04:08 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1281]: Disconnected from invalid user jenkins 10.30.120.5 port 52736 [preauth] Nov 26 10:04:10 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1283]: Invalid user jenkins from 10.30.120.5 port 52740 Nov 26 10:04:10 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1283]: Received disconnect from 10.30.120.5 port 52740:11: Closed due to user request. [preauth] Nov 26 10:04:10 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1283]: Disconnected from invalid user jenkins 10.30.120.5 port 52740 [preauth] Nov 26 10:04:12 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1285]: Invalid user jenkins from 10.30.120.5 port 52742 Nov 26 10:04:13 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1285]: Received disconnect from 10.30.120.5 port 52742:11: Closed due to user request. [preauth] Nov 26 10:04:13 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1285]: Disconnected from invalid user jenkins 10.30.120.5 port 52742 [preauth] Nov 26 10:04:15 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1287]: Invalid user jenkins from 10.30.120.5 port 52744 Nov 26 10:04:15 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1287]: Received disconnect from 10.30.120.5 port 52744:11: Closed due to user request. [preauth] Nov 26 10:04:15 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1287]: Disconnected from invalid user jenkins 10.30.120.5 port 52744 [preauth] Nov 26 10:04:17 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1289]: Invalid user jenkins from 10.30.120.5 port 52746 Nov 26 10:04:17 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1289]: Received disconnect from 10.30.120.5 port 52746:11: Closed due to user request. [preauth] Nov 26 10:04:17 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1289]: Disconnected from invalid user jenkins 10.30.120.5 port 52746 [preauth] Nov 26 10:04:19 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1291]: Invalid user jenkins from 10.30.120.5 port 52748 Nov 26 10:04:19 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1291]: Received disconnect from 10.30.120.5 port 52748:11: Closed due to user request. [preauth] Nov 26 10:04:19 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1291]: Disconnected from invalid user jenkins 10.30.120.5 port 52748 [preauth] Nov 26 10:04:21 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1307]: Invalid user jenkins from 10.30.120.5 port 52752 Nov 26 10:04:21 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1307]: Received disconnect from 10.30.120.5 port 52752:11: Closed due to user request. [preauth] Nov 26 10:04:21 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1307]: Disconnected from invalid user jenkins 10.30.120.5 port 52752 [preauth] Nov 26 10:04:21 prd-ubuntu20-04-docker-2c-8g-773852 useradd[1314]: new group: name=jenkins, GID=1001 Nov 26 10:04:21 prd-ubuntu20-04-docker-2c-8g-773852 useradd[1314]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 26 10:04:21 prd-ubuntu20-04-docker-2c-8g-773852 usermod[1324]: add 'jenkins' to group 'docker' Nov 26 10:04:21 prd-ubuntu20-04-docker-2c-8g-773852 usermod[1324]: add 'jenkins' to shadow group 'docker' Nov 26 10:04:23 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1374]: Accepted publickey for jenkins from 10.30.120.5 port 52754 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 26 10:04:23 prd-ubuntu20-04-docker-2c-8g-773852 sshd[1374]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 26 10:04:23 prd-ubuntu20-04-docker-2c-8g-773852 systemd-logind[682]: New session 2 of user jenkins. Nov 26 10:04:23 prd-ubuntu20-04-docker-2c-8g-773852 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 26 10:05:01 prd-ubuntu20-04-docker-2c-8g-773852 CRON[2087]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 26 10:05:01 prd-ubuntu20-04-docker-2c-8g-773852 CRON[2087]: pam_unix(cron:session): session closed for user root Nov 26 10:06:01 prd-ubuntu20-04-docker-2c-8g-773852 CRON[2566]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 26 10:06:01 prd-ubuntu20-04-docker-2c-8g-773852 CRON[2566]: pam_unix(cron:session): session closed for user root Nov 26 10:06:48 prd-ubuntu20-04-docker-2c-8g-773852 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 26 10:06:48 prd-ubuntu20-04-docker-2c-8g-773852 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)