Apr 25 01:04:25 prd-ubuntu20-04-docker-2c-8g-8178 passwd[684]: password for 'ubuntu' changed by 'root'
Apr 25 01:04:25 prd-ubuntu20-04-docker-2c-8g-8178 sshd[774]: Server listening on 0.0.0.0 port 22.
Apr 25 01:04:25 prd-ubuntu20-04-docker-2c-8g-8178 sshd[774]: Server listening on :: port 22.
Apr 25 01:04:25 prd-ubuntu20-04-docker-2c-8g-8178 systemd-logind[721]: New seat seat0.
Apr 25 01:04:25 prd-ubuntu20-04-docker-2c-8g-8178 systemd-logind[721]: Watching system buttons on /dev/input/event0 (Power Button)
Apr 25 01:04:25 prd-ubuntu20-04-docker-2c-8g-8178 systemd-logind[721]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Apr 25 01:04:28 prd-ubuntu20-04-docker-2c-8g-8178 sshd[886]: error: kex_exchange_identification: Connection closed by remote host
Apr 25 01:04:32 prd-ubuntu20-04-docker-2c-8g-8178 sshd[923]: Invalid user jenkins from 10.30.120.5 port 43076
Apr 25 01:04:32 prd-ubuntu20-04-docker-2c-8g-8178 sshd[923]: Received disconnect from 10.30.120.5 port 43076:11: Closed due to user request. [preauth]
Apr 25 01:04:32 prd-ubuntu20-04-docker-2c-8g-8178 sshd[923]: Disconnected from invalid user jenkins 10.30.120.5 port 43076 [preauth]
Apr 25 01:04:34 prd-ubuntu20-04-docker-2c-8g-8178 sshd[929]: Invalid user jenkins from 10.30.120.5 port 43078
Apr 25 01:04:34 prd-ubuntu20-04-docker-2c-8g-8178 sshd[929]: Received disconnect from 10.30.120.5 port 43078:11: Closed due to user request. [preauth]
Apr 25 01:04:34 prd-ubuntu20-04-docker-2c-8g-8178 sshd[929]: Disconnected from invalid user jenkins 10.30.120.5 port 43078 [preauth]
Apr 25 01:04:36 prd-ubuntu20-04-docker-2c-8g-8178 sshd[931]: Invalid user jenkins from 10.30.120.5 port 43080
Apr 25 01:04:36 prd-ubuntu20-04-docker-2c-8g-8178 sshd[931]: Received disconnect from 10.30.120.5 port 43080:11: Closed due to user request. [preauth]
Apr 25 01:04:36 prd-ubuntu20-04-docker-2c-8g-8178 sshd[931]: Disconnected from invalid user jenkins 10.30.120.5 port 43080 [preauth]
Apr 25 01:04:38 prd-ubuntu20-04-docker-2c-8g-8178 sshd[933]: Invalid user jenkins from 10.30.120.5 port 43086
Apr 25 01:04:38 prd-ubuntu20-04-docker-2c-8g-8178 sshd[933]: Received disconnect from 10.30.120.5 port 43086:11: Closed due to user request. [preauth]
Apr 25 01:04:38 prd-ubuntu20-04-docker-2c-8g-8178 sshd[933]: Disconnected from invalid user jenkins 10.30.120.5 port 43086 [preauth]
Apr 25 01:04:40 prd-ubuntu20-04-docker-2c-8g-8178 sshd[936]: Invalid user jenkins from 10.30.120.5 port 43088
Apr 25 01:04:40 prd-ubuntu20-04-docker-2c-8g-8178 sshd[936]: Received disconnect from 10.30.120.5 port 43088:11: Closed due to user request. [preauth]
Apr 25 01:04:40 prd-ubuntu20-04-docker-2c-8g-8178 sshd[936]: Disconnected from invalid user jenkins 10.30.120.5 port 43088 [preauth]
Apr 25 01:04:42 prd-ubuntu20-04-docker-2c-8g-8178 sshd[938]: Invalid user jenkins from 10.30.120.5 port 43090
Apr 25 01:04:42 prd-ubuntu20-04-docker-2c-8g-8178 sshd[938]: Received disconnect from 10.30.120.5 port 43090:11: Closed due to user request. [preauth]
Apr 25 01:04:42 prd-ubuntu20-04-docker-2c-8g-8178 sshd[938]: Disconnected from invalid user jenkins 10.30.120.5 port 43090 [preauth]
Apr 25 01:04:44 prd-ubuntu20-04-docker-2c-8g-8178 sshd[940]: Invalid user jenkins from 10.30.120.5 port 43092
Apr 25 01:04:45 prd-ubuntu20-04-docker-2c-8g-8178 sshd[940]: Received disconnect from 10.30.120.5 port 43092:11: Closed due to user request. [preauth]
Apr 25 01:04:45 prd-ubuntu20-04-docker-2c-8g-8178 sshd[940]: Disconnected from invalid user jenkins 10.30.120.5 port 43092 [preauth]
Apr 25 01:04:47 prd-ubuntu20-04-docker-2c-8g-8178 sshd[953]: Invalid user jenkins from 10.30.120.5 port 43094
Apr 25 01:04:47 prd-ubuntu20-04-docker-2c-8g-8178 sshd[953]: Received disconnect from 10.30.120.5 port 43094:11: Closed due to user request. [preauth]
Apr 25 01:04:47 prd-ubuntu20-04-docker-2c-8g-8178 sshd[953]: Disconnected from invalid user jenkins 10.30.120.5 port 43094 [preauth]
Apr 25 01:04:49 prd-ubuntu20-04-docker-2c-8g-8178 sshd[972]: Invalid user jenkins from 10.30.120.5 port 43096
Apr 25 01:04:49 prd-ubuntu20-04-docker-2c-8g-8178 sshd[972]: Received disconnect from 10.30.120.5 port 43096:11: Closed due to user request. [preauth]
Apr 25 01:04:49 prd-ubuntu20-04-docker-2c-8g-8178 sshd[972]: Disconnected from invalid user jenkins 10.30.120.5 port 43096 [preauth]
Apr 25 01:04:52 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1220]: Invalid user jenkins from 10.30.120.5 port 43098
Apr 25 01:04:52 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1220]: Received disconnect from 10.30.120.5 port 43098:11: Closed due to user request. [preauth]
Apr 25 01:04:52 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1220]: Disconnected from invalid user jenkins 10.30.120.5 port 43098 [preauth]
Apr 25 01:04:54 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1250]: Invalid user jenkins from 10.30.120.5 port 43102
Apr 25 01:04:54 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1250]: Received disconnect from 10.30.120.5 port 43102:11: Closed due to user request. [preauth]
Apr 25 01:04:54 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1250]: Disconnected from invalid user jenkins 10.30.120.5 port 43102 [preauth]
Apr 25 01:04:56 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1268]: Invalid user jenkins from 10.30.120.5 port 43104
Apr 25 01:04:57 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1268]: Received disconnect from 10.30.120.5 port 43104:11: Closed due to user request. [preauth]
Apr 25 01:04:57 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1268]: Disconnected from invalid user jenkins 10.30.120.5 port 43104 [preauth]
Apr 25 01:04:59 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1273]: Invalid user jenkins from 10.30.120.5 port 43108
Apr 25 01:04:59 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1273]: Received disconnect from 10.30.120.5 port 43108:11: Closed due to user request. [preauth]
Apr 25 01:04:59 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1273]: Disconnected from invalid user jenkins 10.30.120.5 port 43108 [preauth]
Apr 25 01:05:01 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1292]: Invalid user jenkins from 10.30.120.5 port 43110
Apr 25 01:05:01 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1292]: Received disconnect from 10.30.120.5 port 43110:11: Closed due to user request. [preauth]
Apr 25 01:05:01 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1292]: Disconnected from invalid user jenkins 10.30.120.5 port 43110 [preauth]
Apr 25 01:05:03 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1295]: Invalid user jenkins from 10.30.120.5 port 43118
Apr 25 01:05:03 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1295]: Received disconnect from 10.30.120.5 port 43118:11: Closed due to user request. [preauth]
Apr 25 01:05:03 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1295]: Disconnected from invalid user jenkins 10.30.120.5 port 43118 [preauth]
Apr 25 01:05:05 prd-ubuntu20-04-docker-2c-8g-8178 CRON[1294]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 25 01:05:05 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1303]: Invalid user jenkins from 10.30.120.5 port 43120
Apr 25 01:05:05 prd-ubuntu20-04-docker-2c-8g-8178 CRON[1294]: pam_unix(cron:session): session closed for user root
Apr 25 01:05:05 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1303]: Received disconnect from 10.30.120.5 port 43120:11: Closed due to user request. [preauth]
Apr 25 01:05:05 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1303]: Disconnected from invalid user jenkins 10.30.120.5 port 43120 [preauth]
Apr 25 01:05:06 prd-ubuntu20-04-docker-2c-8g-8178 useradd[1312]: new group: name=jenkins, GID=1001
Apr 25 01:05:06 prd-ubuntu20-04-docker-2c-8g-8178 useradd[1312]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Apr 25 01:05:06 prd-ubuntu20-04-docker-2c-8g-8178 usermod[1322]: add 'jenkins' to group 'docker'
Apr 25 01:05:06 prd-ubuntu20-04-docker-2c-8g-8178 usermod[1322]: add 'jenkins' to shadow group 'docker'
Apr 25 01:05:07 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1357]: Accepted publickey for jenkins from 10.30.120.5 port 43122 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
Apr 25 01:05:07 prd-ubuntu20-04-docker-2c-8g-8178 sshd[1357]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Apr 25 01:05:07 prd-ubuntu20-04-docker-2c-8g-8178 systemd-logind[721]: New session 2 of user jenkins.
Apr 25 01:05:07 prd-ubuntu20-04-docker-2c-8g-8178 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Apr 25 01:06:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2089]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 25 01:06:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2089]: pam_unix(cron:session): session closed for user root
Apr 25 01:07:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2118]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 25 01:07:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2118]: pam_unix(cron:session): session closed for user root
Apr 25 01:08:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2422]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 25 01:08:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2422]: pam_unix(cron:session): session closed for user root
Apr 25 01:09:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2848]: pam_unix(cron:session): session opened for user root by (uid=0)
Apr 25 01:09:01 prd-ubuntu20-04-docker-2c-8g-8178 CRON[2848]: pam_unix(cron:session): session closed for user root
Apr 25 01:09:31 prd-ubuntu20-04-docker-2c-8g-8178 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp