Apr 23 10:04:26 prd-ubuntu20-04-docker-2c-8g-8078 passwd[685]: password for 'ubuntu' changed by 'root' Apr 23 10:04:26 prd-ubuntu20-04-docker-2c-8g-8078 sshd[765]: Server listening on 0.0.0.0 port 22. Apr 23 10:04:26 prd-ubuntu20-04-docker-2c-8g-8078 sshd[765]: Server listening on :: port 22. Apr 23 10:04:26 prd-ubuntu20-04-docker-2c-8g-8078 systemd-logind[722]: New seat seat0. Apr 23 10:04:26 prd-ubuntu20-04-docker-2c-8g-8078 systemd-logind[722]: Watching system buttons on /dev/input/event0 (Power Button) Apr 23 10:04:26 prd-ubuntu20-04-docker-2c-8g-8078 systemd-logind[722]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 23 10:04:28 prd-ubuntu20-04-docker-2c-8g-8078 sshd[823]: error: kex_exchange_identification: Connection closed by remote host Apr 23 10:04:32 prd-ubuntu20-04-docker-2c-8g-8078 sshd[910]: Invalid user jenkins from 10.30.120.5 port 55288 Apr 23 10:04:33 prd-ubuntu20-04-docker-2c-8g-8078 sshd[910]: Received disconnect from 10.30.120.5 port 55288:11: Closed due to user request. [preauth] Apr 23 10:04:33 prd-ubuntu20-04-docker-2c-8g-8078 sshd[910]: Disconnected from invalid user jenkins 10.30.120.5 port 55288 [preauth] Apr 23 10:04:35 prd-ubuntu20-04-docker-2c-8g-8078 sshd[929]: Invalid user jenkins from 10.30.120.5 port 55290 Apr 23 10:04:35 prd-ubuntu20-04-docker-2c-8g-8078 sshd[929]: Received disconnect from 10.30.120.5 port 55290:11: Closed due to user request. [preauth] Apr 23 10:04:35 prd-ubuntu20-04-docker-2c-8g-8078 sshd[929]: Disconnected from invalid user jenkins 10.30.120.5 port 55290 [preauth] Apr 23 10:04:37 prd-ubuntu20-04-docker-2c-8g-8078 sshd[931]: Invalid user jenkins from 10.30.120.5 port 55292 Apr 23 10:04:37 prd-ubuntu20-04-docker-2c-8g-8078 sshd[931]: Received disconnect from 10.30.120.5 port 55292:11: Closed due to user request. [preauth] Apr 23 10:04:37 prd-ubuntu20-04-docker-2c-8g-8078 sshd[931]: Disconnected from invalid user jenkins 10.30.120.5 port 55292 [preauth] Apr 23 10:04:39 prd-ubuntu20-04-docker-2c-8g-8078 sshd[933]: Invalid user jenkins from 10.30.120.5 port 55296 Apr 23 10:04:39 prd-ubuntu20-04-docker-2c-8g-8078 sshd[933]: Received disconnect from 10.30.120.5 port 55296:11: Closed due to user request. [preauth] Apr 23 10:04:39 prd-ubuntu20-04-docker-2c-8g-8078 sshd[933]: Disconnected from invalid user jenkins 10.30.120.5 port 55296 [preauth] Apr 23 10:04:41 prd-ubuntu20-04-docker-2c-8g-8078 sshd[935]: Invalid user jenkins from 10.30.120.5 port 55298 Apr 23 10:04:41 prd-ubuntu20-04-docker-2c-8g-8078 sshd[935]: Received disconnect from 10.30.120.5 port 55298:11: Closed due to user request. [preauth] Apr 23 10:04:41 prd-ubuntu20-04-docker-2c-8g-8078 sshd[935]: Disconnected from invalid user jenkins 10.30.120.5 port 55298 [preauth] Apr 23 10:04:43 prd-ubuntu20-04-docker-2c-8g-8078 sshd[938]: Invalid user jenkins from 10.30.120.5 port 55300 Apr 23 10:04:43 prd-ubuntu20-04-docker-2c-8g-8078 sshd[938]: Received disconnect from 10.30.120.5 port 55300:11: Closed due to user request. [preauth] Apr 23 10:04:43 prd-ubuntu20-04-docker-2c-8g-8078 sshd[938]: Disconnected from invalid user jenkins 10.30.120.5 port 55300 [preauth] Apr 23 10:04:45 prd-ubuntu20-04-docker-2c-8g-8078 sshd[940]: Invalid user jenkins from 10.30.120.5 port 55302 Apr 23 10:04:45 prd-ubuntu20-04-docker-2c-8g-8078 sshd[940]: Received disconnect from 10.30.120.5 port 55302:11: Closed due to user request. [preauth] Apr 23 10:04:45 prd-ubuntu20-04-docker-2c-8g-8078 sshd[940]: Disconnected from invalid user jenkins 10.30.120.5 port 55302 [preauth] Apr 23 10:04:47 prd-ubuntu20-04-docker-2c-8g-8078 sshd[942]: Invalid user jenkins from 10.30.120.5 port 55304 Apr 23 10:04:47 prd-ubuntu20-04-docker-2c-8g-8078 sshd[942]: Received disconnect from 10.30.120.5 port 55304:11: Closed due to user request. [preauth] Apr 23 10:04:47 prd-ubuntu20-04-docker-2c-8g-8078 sshd[942]: Disconnected from invalid user jenkins 10.30.120.5 port 55304 [preauth] Apr 23 10:04:50 prd-ubuntu20-04-docker-2c-8g-8078 sshd[944]: Invalid user jenkins from 10.30.120.5 port 55306 Apr 23 10:04:50 prd-ubuntu20-04-docker-2c-8g-8078 sshd[944]: Received disconnect from 10.30.120.5 port 55306:11: Closed due to user request. [preauth] Apr 23 10:04:50 prd-ubuntu20-04-docker-2c-8g-8078 sshd[944]: Disconnected from invalid user jenkins 10.30.120.5 port 55306 [preauth] Apr 23 10:04:52 prd-ubuntu20-04-docker-2c-8g-8078 sshd[965]: Invalid user jenkins from 10.30.120.5 port 55308 Apr 23 10:04:52 prd-ubuntu20-04-docker-2c-8g-8078 sshd[965]: Received disconnect from 10.30.120.5 port 55308:11: Closed due to user request. [preauth] Apr 23 10:04:52 prd-ubuntu20-04-docker-2c-8g-8078 sshd[965]: Disconnected from invalid user jenkins 10.30.120.5 port 55308 [preauth] Apr 23 10:04:54 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1229]: Invalid user jenkins from 10.30.120.5 port 55312 Apr 23 10:04:54 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1229]: Received disconnect from 10.30.120.5 port 55312:11: Closed due to user request. [preauth] Apr 23 10:04:54 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1229]: Disconnected from invalid user jenkins 10.30.120.5 port 55312 [preauth] Apr 23 10:04:56 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1266]: Invalid user jenkins from 10.30.120.5 port 55316 Apr 23 10:04:56 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1266]: Received disconnect from 10.30.120.5 port 55316:11: Closed due to user request. [preauth] Apr 23 10:04:56 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1266]: Disconnected from invalid user jenkins 10.30.120.5 port 55316 [preauth] Apr 23 10:04:58 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1275]: Invalid user jenkins from 10.30.120.5 port 55318 Apr 23 10:04:59 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1275]: Received disconnect from 10.30.120.5 port 55318:11: Closed due to user request. [preauth] Apr 23 10:04:59 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1275]: Disconnected from invalid user jenkins 10.30.120.5 port 55318 [preauth] Apr 23 10:05:01 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1277]: Invalid user jenkins from 10.30.120.5 port 55320 Apr 23 10:05:01 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1277]: Received disconnect from 10.30.120.5 port 55320:11: Closed due to user request. [preauth] Apr 23 10:05:01 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1277]: Disconnected from invalid user jenkins 10.30.120.5 port 55320 [preauth] Apr 23 10:05:03 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1287]: Invalid user jenkins from 10.30.120.5 port 55328 Apr 23 10:05:03 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1287]: Received disconnect from 10.30.120.5 port 55328:11: Closed due to user request. [preauth] Apr 23 10:05:03 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1287]: Disconnected from invalid user jenkins 10.30.120.5 port 55328 [preauth] Apr 23 10:05:04 prd-ubuntu20-04-docker-2c-8g-8078 CRON[1279]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:05:04 prd-ubuntu20-04-docker-2c-8g-8078 CRON[1279]: pam_unix(cron:session): session closed for user root Apr 23 10:05:05 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1303]: Invalid user jenkins from 10.30.120.5 port 55330 Apr 23 10:05:05 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1303]: Received disconnect from 10.30.120.5 port 55330:11: Closed due to user request. [preauth] Apr 23 10:05:05 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1303]: Disconnected from invalid user jenkins 10.30.120.5 port 55330 [preauth] Apr 23 10:05:07 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1305]: Invalid user jenkins from 10.30.120.5 port 55334 Apr 23 10:05:07 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1305]: Received disconnect from 10.30.120.5 port 55334:11: Closed due to user request. [preauth] Apr 23 10:05:07 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1305]: Disconnected from invalid user jenkins 10.30.120.5 port 55334 [preauth] Apr 23 10:05:09 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1307]: Invalid user jenkins from 10.30.120.5 port 55340 Apr 23 10:05:09 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1307]: Received disconnect from 10.30.120.5 port 55340:11: Closed due to user request. [preauth] Apr 23 10:05:09 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1307]: Disconnected from invalid user jenkins 10.30.120.5 port 55340 [preauth] Apr 23 10:05:11 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1309]: Invalid user jenkins from 10.30.120.5 port 55342 Apr 23 10:05:11 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1309]: Received disconnect from 10.30.120.5 port 55342:11: Closed due to user request. [preauth] Apr 23 10:05:11 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1309]: Disconnected from invalid user jenkins 10.30.120.5 port 55342 [preauth] Apr 23 10:05:13 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1311]: Invalid user jenkins from 10.30.120.5 port 55344 Apr 23 10:05:14 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1311]: Received disconnect from 10.30.120.5 port 55344:11: Closed due to user request. [preauth] Apr 23 10:05:14 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1311]: Disconnected from invalid user jenkins 10.30.120.5 port 55344 [preauth] Apr 23 10:05:14 prd-ubuntu20-04-docker-2c-8g-8078 useradd[1318]: new group: name=jenkins, GID=1001 Apr 23 10:05:14 prd-ubuntu20-04-docker-2c-8g-8078 useradd[1318]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 23 10:05:15 prd-ubuntu20-04-docker-2c-8g-8078 usermod[1328]: add 'jenkins' to group 'docker' Apr 23 10:05:15 prd-ubuntu20-04-docker-2c-8g-8078 usermod[1328]: add 'jenkins' to shadow group 'docker' Apr 23 10:05:16 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1329]: Received disconnect from 10.30.120.5 port 55346:11: Closed due to user request. [preauth] Apr 23 10:05:16 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1329]: Disconnected from authenticating user jenkins 10.30.120.5 port 55346 [preauth] Apr 23 10:05:18 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1385]: Accepted publickey for jenkins from 10.30.120.5 port 55348 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 23 10:05:18 prd-ubuntu20-04-docker-2c-8g-8078 sshd[1385]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 23 10:05:18 prd-ubuntu20-04-docker-2c-8g-8078 systemd-logind[722]: New session 2 of user jenkins. Apr 23 10:05:18 prd-ubuntu20-04-docker-2c-8g-8078 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 23 10:06:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2091]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:06:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2091]: pam_unix(cron:session): session closed for user root Apr 23 10:07:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2148]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:07:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2148]: pam_unix(cron:session): session closed for user root Apr 23 10:08:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2453]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:08:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2453]: pam_unix(cron:session): session closed for user root Apr 23 10:09:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2842]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 23 10:09:01 prd-ubuntu20-04-docker-2c-8g-8078 CRON[2842]: pam_unix(cron:session): session closed for user root Apr 23 10:09:24 prd-ubuntu20-04-docker-2c-8g-8078 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp