Jul 29 02:04:19 prd-ubuntu20-04-docker-2c-8g-15958 passwd[683]: password for 'ubuntu' changed by 'root'
Jul 29 02:04:19 prd-ubuntu20-04-docker-2c-8g-15958 sshd[773]: Server listening on 0.0.0.0 port 22.
Jul 29 02:04:19 prd-ubuntu20-04-docker-2c-8g-15958 sshd[773]: Server listening on :: port 22.
Jul 29 02:04:19 prd-ubuntu20-04-docker-2c-8g-15958 systemd-logind[746]: New seat seat0.
Jul 29 02:04:19 prd-ubuntu20-04-docker-2c-8g-15958 systemd-logind[746]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 29 02:04:19 prd-ubuntu20-04-docker-2c-8g-15958 systemd-logind[746]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 29 02:04:19 prd-ubuntu20-04-docker-2c-8g-15958 sshd[780]: error: kex_exchange_identification: Connection closed by remote host
Jul 29 02:04:23 prd-ubuntu20-04-docker-2c-8g-15958 sshd[885]: Invalid user jenkins from 10.30.120.5 port 56490
Jul 29 02:04:25 prd-ubuntu20-04-docker-2c-8g-15958 sshd[895]: Invalid user jenkins from 10.30.120.5 port 56494
Jul 29 02:04:26 prd-ubuntu20-04-docker-2c-8g-15958 sshd[885]: Received disconnect from 10.30.120.5 port 56490:11: Closed due to user request. [preauth]
Jul 29 02:04:26 prd-ubuntu20-04-docker-2c-8g-15958 sshd[885]: Disconnected from invalid user jenkins 10.30.120.5 port 56490 [preauth]
Jul 29 02:04:26 prd-ubuntu20-04-docker-2c-8g-15958 sshd[895]: Received disconnect from 10.30.120.5 port 56494:11: Closed due to user request. [preauth]
Jul 29 02:04:26 prd-ubuntu20-04-docker-2c-8g-15958 sshd[895]: Disconnected from invalid user jenkins 10.30.120.5 port 56494 [preauth]
Jul 29 02:04:28 prd-ubuntu20-04-docker-2c-8g-15958 sshd[905]: Invalid user jenkins from 10.30.120.5 port 56496
Jul 29 02:04:28 prd-ubuntu20-04-docker-2c-8g-15958 sshd[905]: Received disconnect from 10.30.120.5 port 56496:11: Closed due to user request. [preauth]
Jul 29 02:04:28 prd-ubuntu20-04-docker-2c-8g-15958 sshd[905]: Disconnected from invalid user jenkins 10.30.120.5 port 56496 [preauth]
Jul 29 02:04:30 prd-ubuntu20-04-docker-2c-8g-15958 sshd[908]: Invalid user jenkins from 10.30.120.5 port 56498
Jul 29 02:04:30 prd-ubuntu20-04-docker-2c-8g-15958 sshd[908]: Received disconnect from 10.30.120.5 port 56498:11: Closed due to user request. [preauth]
Jul 29 02:04:30 prd-ubuntu20-04-docker-2c-8g-15958 sshd[908]: Disconnected from invalid user jenkins 10.30.120.5 port 56498 [preauth]
Jul 29 02:04:32 prd-ubuntu20-04-docker-2c-8g-15958 sshd[917]: Invalid user jenkins from 10.30.120.5 port 56500
Jul 29 02:04:32 prd-ubuntu20-04-docker-2c-8g-15958 sshd[917]: Received disconnect from 10.30.120.5 port 56500:11: Closed due to user request. [preauth]
Jul 29 02:04:32 prd-ubuntu20-04-docker-2c-8g-15958 sshd[917]: Disconnected from invalid user jenkins 10.30.120.5 port 56500 [preauth]
Jul 29 02:04:34 prd-ubuntu20-04-docker-2c-8g-15958 sshd[927]: Invalid user jenkins from 10.30.120.5 port 56506
Jul 29 02:04:34 prd-ubuntu20-04-docker-2c-8g-15958 sshd[927]: Received disconnect from 10.30.120.5 port 56506:11: Closed due to user request. [preauth]
Jul 29 02:04:34 prd-ubuntu20-04-docker-2c-8g-15958 sshd[927]: Disconnected from invalid user jenkins 10.30.120.5 port 56506 [preauth]
Jul 29 02:04:37 prd-ubuntu20-04-docker-2c-8g-15958 sshd[981]: Invalid user jenkins from 10.30.120.5 port 56508
Jul 29 02:04:37 prd-ubuntu20-04-docker-2c-8g-15958 sshd[981]: Received disconnect from 10.30.120.5 port 56508:11: Closed due to user request. [preauth]
Jul 29 02:04:37 prd-ubuntu20-04-docker-2c-8g-15958 sshd[981]: Disconnected from invalid user jenkins 10.30.120.5 port 56508 [preauth]
Jul 29 02:04:39 prd-ubuntu20-04-docker-2c-8g-15958 sshd[983]: Invalid user jenkins from 10.30.120.5 port 56510
Jul 29 02:04:39 prd-ubuntu20-04-docker-2c-8g-15958 sshd[983]: Received disconnect from 10.30.120.5 port 56510:11: Closed due to user request. [preauth]
Jul 29 02:04:39 prd-ubuntu20-04-docker-2c-8g-15958 sshd[983]: Disconnected from invalid user jenkins 10.30.120.5 port 56510 [preauth]
Jul 29 02:04:42 prd-ubuntu20-04-docker-2c-8g-15958 sshd[985]: Invalid user jenkins from 10.30.120.5 port 56514
Jul 29 02:04:42 prd-ubuntu20-04-docker-2c-8g-15958 sshd[985]: Received disconnect from 10.30.120.5 port 56514:11: Closed due to user request. [preauth]
Jul 29 02:04:42 prd-ubuntu20-04-docker-2c-8g-15958 sshd[985]: Disconnected from invalid user jenkins 10.30.120.5 port 56514 [preauth]
Jul 29 02:04:44 prd-ubuntu20-04-docker-2c-8g-15958 sshd[989]: Invalid user jenkins from 10.30.120.5 port 56516
Jul 29 02:04:44 prd-ubuntu20-04-docker-2c-8g-15958 sshd[989]: Received disconnect from 10.30.120.5 port 56516:11: Closed due to user request. [preauth]
Jul 29 02:04:44 prd-ubuntu20-04-docker-2c-8g-15958 sshd[989]: Disconnected from invalid user jenkins 10.30.120.5 port 56516 [preauth]
Jul 29 02:04:46 prd-ubuntu20-04-docker-2c-8g-15958 sshd[992]: Invalid user jenkins from 10.30.120.5 port 56518
Jul 29 02:04:46 prd-ubuntu20-04-docker-2c-8g-15958 sshd[992]: Received disconnect from 10.30.120.5 port 56518:11: Closed due to user request. [preauth]
Jul 29 02:04:46 prd-ubuntu20-04-docker-2c-8g-15958 sshd[992]: Disconnected from invalid user jenkins 10.30.120.5 port 56518 [preauth]
Jul 29 02:04:48 prd-ubuntu20-04-docker-2c-8g-15958 sshd[994]: Invalid user jenkins from 10.30.120.5 port 56520
Jul 29 02:04:48 prd-ubuntu20-04-docker-2c-8g-15958 sshd[994]: Received disconnect from 10.30.120.5 port 56520:11: Closed due to user request. [preauth]
Jul 29 02:04:48 prd-ubuntu20-04-docker-2c-8g-15958 sshd[994]: Disconnected from invalid user jenkins 10.30.120.5 port 56520 [preauth]
Jul 29 02:04:50 prd-ubuntu20-04-docker-2c-8g-15958 sshd[996]: Invalid user jenkins from 10.30.120.5 port 56522
Jul 29 02:04:50 prd-ubuntu20-04-docker-2c-8g-15958 sshd[996]: Received disconnect from 10.30.120.5 port 56522:11: Closed due to user request. [preauth]
Jul 29 02:04:50 prd-ubuntu20-04-docker-2c-8g-15958 sshd[996]: Disconnected from invalid user jenkins 10.30.120.5 port 56522 [preauth]
Jul 29 02:04:52 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1021]: Invalid user jenkins from 10.30.120.5 port 56524
Jul 29 02:04:52 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1021]: Received disconnect from 10.30.120.5 port 56524:11: Closed due to user request. [preauth]
Jul 29 02:04:52 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1021]: Disconnected from invalid user jenkins 10.30.120.5 port 56524 [preauth]
Jul 29 02:04:55 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1285]: Invalid user jenkins from 10.30.120.5 port 56526
Jul 29 02:04:55 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1285]: Received disconnect from 10.30.120.5 port 56526:11: Closed due to user request. [preauth]
Jul 29 02:04:55 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1285]: Disconnected from invalid user jenkins 10.30.120.5 port 56526 [preauth]
Jul 29 02:04:57 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1323]: Invalid user jenkins from 10.30.120.5 port 56530
Jul 29 02:04:57 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1323]: Received disconnect from 10.30.120.5 port 56530:11: Closed due to user request. [preauth]
Jul 29 02:04:57 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1323]: Disconnected from invalid user jenkins 10.30.120.5 port 56530 [preauth]
Jul 29 02:04:59 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1325]: Invalid user jenkins from 10.30.120.5 port 56532
Jul 29 02:04:59 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1325]: Received disconnect from 10.30.120.5 port 56532:11: Closed due to user request. [preauth]
Jul 29 02:04:59 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1325]: Disconnected from invalid user jenkins 10.30.120.5 port 56532 [preauth]
Jul 29 02:05:01 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1327]: Invalid user jenkins from 10.30.120.5 port 56534
Jul 29 02:05:01 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1327]: Received disconnect from 10.30.120.5 port 56534:11: Closed due to user request. [preauth]
Jul 29 02:05:01 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1327]: Disconnected from invalid user jenkins 10.30.120.5 port 56534 [preauth]
Jul 29 02:05:03 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1337]: Invalid user jenkins from 10.30.120.5 port 56542
Jul 29 02:05:03 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1337]: Received disconnect from 10.30.120.5 port 56542:11: Closed due to user request. [preauth]
Jul 29 02:05:03 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1337]: Disconnected from invalid user jenkins 10.30.120.5 port 56542 [preauth]
Jul 29 02:05:04 prd-ubuntu20-04-docker-2c-8g-15958 CRON[1329]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 29 02:05:04 prd-ubuntu20-04-docker-2c-8g-15958 CRON[1329]: pam_unix(cron:session): session closed for user root
Jul 29 02:05:06 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1341]: Invalid user jenkins from 10.30.120.5 port 56544
Jul 29 02:05:08 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1341]: Received disconnect from 10.30.120.5 port 56544:11: Closed due to user request. [preauth]
Jul 29 02:05:08 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1341]: Disconnected from invalid user jenkins 10.30.120.5 port 56544 [preauth]
Jul 29 02:05:08 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1352]: Invalid user jenkins from 10.30.120.5 port 56548
Jul 29 02:05:08 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1352]: Received disconnect from 10.30.120.5 port 56548:11: Closed due to user request. [preauth]
Jul 29 02:05:08 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1352]: Disconnected from invalid user jenkins 10.30.120.5 port 56548 [preauth]
Jul 29 02:05:09 prd-ubuntu20-04-docker-2c-8g-15958 useradd[1359]: new group: name=jenkins, GID=1001
Jul 29 02:05:09 prd-ubuntu20-04-docker-2c-8g-15958 useradd[1359]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jul 29 02:05:11 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1361]: Received disconnect from 10.30.120.5 port 56552:11: Closed due to user request. [preauth]
Jul 29 02:05:11 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1361]: Disconnected from authenticating user jenkins 10.30.120.5 port 56552 [preauth]
Jul 29 02:05:12 prd-ubuntu20-04-docker-2c-8g-15958 usermod[1371]: add 'jenkins' to group 'docker'
Jul 29 02:05:12 prd-ubuntu20-04-docker-2c-8g-15958 usermod[1371]: add 'jenkins' to shadow group 'docker'
Jul 29 02:05:13 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1372]: Received disconnect from 10.30.120.5 port 56554:11: Closed due to user request. [preauth]
Jul 29 02:05:13 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1372]: Disconnected from authenticating user jenkins 10.30.120.5 port 56554 [preauth]
Jul 29 02:05:15 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1408]: Accepted publickey for jenkins from 10.30.120.5 port 56556 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
Jul 29 02:05:15 prd-ubuntu20-04-docker-2c-8g-15958 sshd[1408]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jul 29 02:05:15 prd-ubuntu20-04-docker-2c-8g-15958 systemd-logind[746]: New session 2 of user jenkins.
Jul 29 02:05:15 prd-ubuntu20-04-docker-2c-8g-15958 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jul 29 02:06:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2134]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 29 02:06:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2134]: pam_unix(cron:session): session closed for user root
Jul 29 02:07:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2167]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 29 02:07:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2167]: pam_unix(cron:session): session closed for user root
Jul 29 02:08:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2195]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 29 02:08:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2195]: pam_unix(cron:session): session closed for user root
Jul 29 02:09:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2502]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 29 02:09:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2502]: pam_unix(cron:session): session closed for user root
Jul 29 02:10:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2649]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 29 02:10:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[2649]: pam_unix(cron:session): session closed for user root
Jul 29 02:11:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[3333]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 29 02:11:01 prd-ubuntu20-04-docker-2c-8g-15958 CRON[3333]: pam_unix(cron:session): session closed for user root
Jul 29 02:11:37 prd-ubuntu20-04-docker-2c-8g-15958 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Jul 29 02:11:37 prd-ubuntu20-04-docker-2c-8g-15958 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)