Jul 2 08:03:32 prd-ubuntu20-04-docker-2c-8g-14170 passwd[685]: password for 'ubuntu' changed by 'root' Jul 2 08:03:32 prd-ubuntu20-04-docker-2c-8g-14170 systemd-logind[751]: New seat seat0. Jul 2 08:03:32 prd-ubuntu20-04-docker-2c-8g-14170 systemd-logind[751]: Watching system buttons on /dev/input/event0 (Power Button) Jul 2 08:03:32 prd-ubuntu20-04-docker-2c-8g-14170 systemd-logind[751]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 2 08:03:32 prd-ubuntu20-04-docker-2c-8g-14170 sshd[791]: Server listening on 0.0.0.0 port 22. Jul 2 08:03:32 prd-ubuntu20-04-docker-2c-8g-14170 sshd[791]: Server listening on :: port 22. Jul 2 08:03:32 prd-ubuntu20-04-docker-2c-8g-14170 sshd[812]: error: kex_exchange_identification: Connection closed by remote host Jul 2 08:03:33 prd-ubuntu20-04-docker-2c-8g-14170 sshd[828]: Invalid user jenkins from 10.30.120.5 port 40150 Jul 2 08:03:33 prd-ubuntu20-04-docker-2c-8g-14170 sshd[828]: Received disconnect from 10.30.120.5 port 40150:11: Closed due to user request. [preauth] Jul 2 08:03:33 prd-ubuntu20-04-docker-2c-8g-14170 sshd[828]: Disconnected from invalid user jenkins 10.30.120.5 port 40150 [preauth] Jul 2 08:03:35 prd-ubuntu20-04-docker-2c-8g-14170 sshd[872]: Invalid user jenkins from 10.30.120.5 port 40152 Jul 2 08:03:35 prd-ubuntu20-04-docker-2c-8g-14170 sshd[872]: Received disconnect from 10.30.120.5 port 40152:11: Closed due to user request. [preauth] Jul 2 08:03:35 prd-ubuntu20-04-docker-2c-8g-14170 sshd[872]: Disconnected from invalid user jenkins 10.30.120.5 port 40152 [preauth] Jul 2 08:03:37 prd-ubuntu20-04-docker-2c-8g-14170 sshd[952]: Invalid user jenkins from 10.30.120.5 port 40156 Jul 2 08:03:37 prd-ubuntu20-04-docker-2c-8g-14170 sshd[952]: Received disconnect from 10.30.120.5 port 40156:11: Closed due to user request. [preauth] Jul 2 08:03:37 prd-ubuntu20-04-docker-2c-8g-14170 sshd[952]: Disconnected from invalid user jenkins 10.30.120.5 port 40156 [preauth] Jul 2 08:03:39 prd-ubuntu20-04-docker-2c-8g-14170 sshd[955]: Invalid user jenkins from 10.30.120.5 port 40158 Jul 2 08:03:39 prd-ubuntu20-04-docker-2c-8g-14170 sshd[955]: Received disconnect from 10.30.120.5 port 40158:11: Closed due to user request. [preauth] Jul 2 08:03:39 prd-ubuntu20-04-docker-2c-8g-14170 sshd[955]: Disconnected from invalid user jenkins 10.30.120.5 port 40158 [preauth] Jul 2 08:03:41 prd-ubuntu20-04-docker-2c-8g-14170 sshd[958]: Invalid user jenkins from 10.30.120.5 port 40160 Jul 2 08:03:41 prd-ubuntu20-04-docker-2c-8g-14170 sshd[958]: Received disconnect from 10.30.120.5 port 40160:11: Closed due to user request. [preauth] Jul 2 08:03:41 prd-ubuntu20-04-docker-2c-8g-14170 sshd[958]: Disconnected from invalid user jenkins 10.30.120.5 port 40160 [preauth] Jul 2 08:03:43 prd-ubuntu20-04-docker-2c-8g-14170 sshd[960]: Invalid user jenkins from 10.30.120.5 port 40162 Jul 2 08:03:44 prd-ubuntu20-04-docker-2c-8g-14170 sshd[960]: Received disconnect from 10.30.120.5 port 40162:11: Closed due to user request. [preauth] Jul 2 08:03:44 prd-ubuntu20-04-docker-2c-8g-14170 sshd[960]: Disconnected from invalid user jenkins 10.30.120.5 port 40162 [preauth] Jul 2 08:03:46 prd-ubuntu20-04-docker-2c-8g-14170 sshd[962]: Invalid user jenkins from 10.30.120.5 port 40164 Jul 2 08:03:46 prd-ubuntu20-04-docker-2c-8g-14170 sshd[962]: Received disconnect from 10.30.120.5 port 40164:11: Closed due to user request. [preauth] Jul 2 08:03:46 prd-ubuntu20-04-docker-2c-8g-14170 sshd[962]: Disconnected from invalid user jenkins 10.30.120.5 port 40164 [preauth] Jul 2 08:03:48 prd-ubuntu20-04-docker-2c-8g-14170 sshd[978]: Invalid user jenkins from 10.30.120.5 port 40166 Jul 2 08:03:48 prd-ubuntu20-04-docker-2c-8g-14170 sshd[978]: Received disconnect from 10.30.120.5 port 40166:11: Closed due to user request. [preauth] Jul 2 08:03:48 prd-ubuntu20-04-docker-2c-8g-14170 sshd[978]: Disconnected from invalid user jenkins 10.30.120.5 port 40166 [preauth] Jul 2 08:03:50 prd-ubuntu20-04-docker-2c-8g-14170 sshd[980]: Invalid user jenkins from 10.30.120.5 port 40168 Jul 2 08:03:50 prd-ubuntu20-04-docker-2c-8g-14170 sshd[980]: Received disconnect from 10.30.120.5 port 40168:11: Closed due to user request. [preauth] Jul 2 08:03:50 prd-ubuntu20-04-docker-2c-8g-14170 sshd[980]: Disconnected from invalid user jenkins 10.30.120.5 port 40168 [preauth] Jul 2 08:03:52 prd-ubuntu20-04-docker-2c-8g-14170 sshd[982]: Invalid user jenkins from 10.30.120.5 port 40172 Jul 2 08:03:52 prd-ubuntu20-04-docker-2c-8g-14170 sshd[982]: Received disconnect from 10.30.120.5 port 40172:11: Closed due to user request. [preauth] Jul 2 08:03:52 prd-ubuntu20-04-docker-2c-8g-14170 sshd[982]: Disconnected from invalid user jenkins 10.30.120.5 port 40172 [preauth] Jul 2 08:03:54 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1006]: Invalid user jenkins from 10.30.120.5 port 40174 Jul 2 08:03:54 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1006]: Received disconnect from 10.30.120.5 port 40174:11: Closed due to user request. [preauth] Jul 2 08:03:54 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1006]: Disconnected from invalid user jenkins 10.30.120.5 port 40174 [preauth] Jul 2 08:03:56 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1221]: Invalid user jenkins from 10.30.120.5 port 40176 Jul 2 08:03:57 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1221]: Received disconnect from 10.30.120.5 port 40176:11: Closed due to user request. [preauth] Jul 2 08:03:57 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1221]: Disconnected from invalid user jenkins 10.30.120.5 port 40176 [preauth] Jul 2 08:03:59 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1271]: Invalid user jenkins from 10.30.120.5 port 40178 Jul 2 08:03:59 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1271]: Received disconnect from 10.30.120.5 port 40178:11: Closed due to user request. [preauth] Jul 2 08:03:59 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1271]: Disconnected from invalid user jenkins 10.30.120.5 port 40178 [preauth] Jul 2 08:04:01 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1307]: Invalid user jenkins from 10.30.120.5 port 40180 Jul 2 08:04:01 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1307]: Received disconnect from 10.30.120.5 port 40180:11: Closed due to user request. [preauth] Jul 2 08:04:01 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1307]: Disconnected from invalid user jenkins 10.30.120.5 port 40180 [preauth] Jul 2 08:04:02 prd-ubuntu20-04-docker-2c-8g-14170 CRON[1311]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 08:04:02 prd-ubuntu20-04-docker-2c-8g-14170 CRON[1311]: pam_unix(cron:session): session closed for user root Jul 2 08:04:03 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1316]: Invalid user jenkins from 10.30.120.5 port 40182 Jul 2 08:04:03 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1316]: Received disconnect from 10.30.120.5 port 40182:11: Closed due to user request. [preauth] Jul 2 08:04:03 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1316]: Disconnected from invalid user jenkins 10.30.120.5 port 40182 [preauth] Jul 2 08:04:05 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1318]: Invalid user jenkins from 10.30.120.5 port 40190 Jul 2 08:04:05 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1318]: Received disconnect from 10.30.120.5 port 40190:11: Closed due to user request. [preauth] Jul 2 08:04:05 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1318]: Disconnected from invalid user jenkins 10.30.120.5 port 40190 [preauth] Jul 2 08:04:07 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1336]: Invalid user jenkins from 10.30.120.5 port 40196 Jul 2 08:04:07 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1336]: Received disconnect from 10.30.120.5 port 40196:11: Closed due to user request. [preauth] Jul 2 08:04:07 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1336]: Disconnected from invalid user jenkins 10.30.120.5 port 40196 [preauth] Jul 2 08:04:09 prd-ubuntu20-04-docker-2c-8g-14170 useradd[1343]: new group: name=jenkins, GID=1001 Jul 2 08:04:09 prd-ubuntu20-04-docker-2c-8g-14170 useradd[1343]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jul 2 08:04:09 prd-ubuntu20-04-docker-2c-8g-14170 usermod[1353]: add 'jenkins' to group 'docker' Jul 2 08:04:09 prd-ubuntu20-04-docker-2c-8g-14170 usermod[1353]: add 'jenkins' to shadow group 'docker' Jul 2 08:04:10 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1388]: Accepted publickey for jenkins from 10.30.120.5 port 40198 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jul 2 08:04:10 prd-ubuntu20-04-docker-2c-8g-14170 sshd[1388]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 2 08:04:10 prd-ubuntu20-04-docker-2c-8g-14170 systemd-logind[751]: New session 2 of user jenkins. Jul 2 08:04:10 prd-ubuntu20-04-docker-2c-8g-14170 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 2 08:05:01 prd-ubuntu20-04-docker-2c-8g-14170 CRON[2151]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 08:05:01 prd-ubuntu20-04-docker-2c-8g-14170 CRON[2151]: pam_unix(cron:session): session closed for user root Jul 2 08:06:01 prd-ubuntu20-04-docker-2c-8g-14170 CRON[2608]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 2 08:06:01 prd-ubuntu20-04-docker-2c-8g-14170 CRON[2608]: pam_unix(cron:session): session closed for user root Jul 2 08:06:40 prd-ubuntu20-04-docker-2c-8g-14170 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jul 2 08:06:40 prd-ubuntu20-04-docker-2c-8g-14170 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)