Jun 11 06:16:49 prd-ubuntu1804-docker-4c-4g-3108 passwd[918]: password for 'ubuntu' changed by 'root' Jun 11 06:16:49 prd-ubuntu1804-docker-4c-4g-3108 systemd-logind[1011]: Watching system buttons on /dev/input/event0 (Power Button) Jun 11 06:16:49 prd-ubuntu1804-docker-4c-4g-3108 systemd-logind[1011]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 11 06:16:49 prd-ubuntu1804-docker-4c-4g-3108 systemd-logind[1011]: New seat seat0. Jun 11 06:16:49 prd-ubuntu1804-docker-4c-4g-3108 sshd[1259]: Server listening on 0.0.0.0 port 22. Jun 11 06:16:49 prd-ubuntu1804-docker-4c-4g-3108 sshd[1259]: Server listening on :: port 22. Jun 11 06:16:52 prd-ubuntu1804-docker-4c-4g-3108 sshd[1459]: Did not receive identification string from 10.32.4.5 port 39436 Jun 11 06:16:52 prd-ubuntu1804-docker-4c-4g-3108 sshd[1477]: Invalid user jenkins from 10.32.4.5 port 39438 Jun 11 06:16:53 prd-ubuntu1804-docker-4c-4g-3108 sshd[1477]: Received disconnect from 10.32.4.5 port 39438:11: Closed due to user request. [preauth] Jun 11 06:16:53 prd-ubuntu1804-docker-4c-4g-3108 sshd[1477]: Disconnected from invalid user jenkins 10.32.4.5 port 39438 [preauth] Jun 11 06:16:55 prd-ubuntu1804-docker-4c-4g-3108 sshd[1518]: Invalid user jenkins from 10.32.4.5 port 39440 Jun 11 06:16:55 prd-ubuntu1804-docker-4c-4g-3108 sshd[1518]: Received disconnect from 10.32.4.5 port 39440:11: Closed due to user request. [preauth] Jun 11 06:16:55 prd-ubuntu1804-docker-4c-4g-3108 sshd[1518]: Disconnected from invalid user jenkins 10.32.4.5 port 39440 [preauth] Jun 11 06:16:57 prd-ubuntu1804-docker-4c-4g-3108 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 39442 Jun 11 06:16:57 prd-ubuntu1804-docker-4c-4g-3108 sshd[1532]: Received disconnect from 10.32.4.5 port 39442:11: Closed due to user request. [preauth] Jun 11 06:16:57 prd-ubuntu1804-docker-4c-4g-3108 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 39442 [preauth] Jun 11 06:16:59 prd-ubuntu1804-docker-4c-4g-3108 sshd[1537]: Invalid user jenkins from 10.32.4.5 port 39444 Jun 11 06:16:59 prd-ubuntu1804-docker-4c-4g-3108 sshd[1537]: Received disconnect from 10.32.4.5 port 39444:11: Closed due to user request. [preauth] Jun 11 06:16:59 prd-ubuntu1804-docker-4c-4g-3108 sshd[1537]: Disconnected from invalid user jenkins 10.32.4.5 port 39444 [preauth] Jun 11 06:17:01 prd-ubuntu1804-docker-4c-4g-3108 sshd[1539]: Invalid user jenkins from 10.32.4.5 port 39448 Jun 11 06:17:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[1542]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 11 06:17:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[1541]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 11 06:17:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[1541]: pam_unix(cron:session): session closed for user root Jun 11 06:17:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[1542]: pam_unix(cron:session): session closed for user root Jun 11 06:17:01 prd-ubuntu1804-docker-4c-4g-3108 sshd[1539]: Received disconnect from 10.32.4.5 port 39448:11: Closed due to user request. [preauth] Jun 11 06:17:01 prd-ubuntu1804-docker-4c-4g-3108 sshd[1539]: Disconnected from invalid user jenkins 10.32.4.5 port 39448 [preauth] Jun 11 06:17:03 prd-ubuntu1804-docker-4c-4g-3108 sshd[1552]: Invalid user jenkins from 10.32.4.5 port 39450 Jun 11 06:17:03 prd-ubuntu1804-docker-4c-4g-3108 sshd[1552]: Received disconnect from 10.32.4.5 port 39450:11: Closed due to user request. [preauth] Jun 11 06:17:03 prd-ubuntu1804-docker-4c-4g-3108 sshd[1552]: Disconnected from invalid user jenkins 10.32.4.5 port 39450 [preauth] Jun 11 06:17:05 prd-ubuntu1804-docker-4c-4g-3108 sshd[1554]: Invalid user jenkins from 10.32.4.5 port 39452 Jun 11 06:17:05 prd-ubuntu1804-docker-4c-4g-3108 sshd[1554]: Received disconnect from 10.32.4.5 port 39452:11: Closed due to user request. [preauth] Jun 11 06:17:05 prd-ubuntu1804-docker-4c-4g-3108 sshd[1554]: Disconnected from invalid user jenkins 10.32.4.5 port 39452 [preauth] Jun 11 06:17:07 prd-ubuntu1804-docker-4c-4g-3108 sshd[1556]: Invalid user jenkins from 10.32.4.5 port 39454 Jun 11 06:17:07 prd-ubuntu1804-docker-4c-4g-3108 sshd[1556]: Received disconnect from 10.32.4.5 port 39454:11: Closed due to user request. [preauth] Jun 11 06:17:07 prd-ubuntu1804-docker-4c-4g-3108 sshd[1556]: Disconnected from invalid user jenkins 10.32.4.5 port 39454 [preauth] Jun 11 06:17:09 prd-ubuntu1804-docker-4c-4g-3108 sshd[1558]: Invalid user jenkins from 10.32.4.5 port 39462 Jun 11 06:17:09 prd-ubuntu1804-docker-4c-4g-3108 sshd[1558]: Received disconnect from 10.32.4.5 port 39462:11: Closed due to user request. [preauth] Jun 11 06:17:09 prd-ubuntu1804-docker-4c-4g-3108 sshd[1558]: Disconnected from invalid user jenkins 10.32.4.5 port 39462 [preauth] Jun 11 06:17:12 prd-ubuntu1804-docker-4c-4g-3108 sshd[1646]: Invalid user jenkins from 10.32.4.5 port 39468 Jun 11 06:17:12 prd-ubuntu1804-docker-4c-4g-3108 sshd[1646]: Received disconnect from 10.32.4.5 port 39468:11: Closed due to user request. [preauth] Jun 11 06:17:12 prd-ubuntu1804-docker-4c-4g-3108 sshd[1646]: Disconnected from invalid user jenkins 10.32.4.5 port 39468 [preauth] Jun 11 06:17:14 prd-ubuntu1804-docker-4c-4g-3108 sshd[1802]: Invalid user jenkins from 10.32.4.5 port 39470 Jun 11 06:17:14 prd-ubuntu1804-docker-4c-4g-3108 sshd[1802]: Received disconnect from 10.32.4.5 port 39470:11: Closed due to user request. [preauth] Jun 11 06:17:14 prd-ubuntu1804-docker-4c-4g-3108 sshd[1802]: Disconnected from invalid user jenkins 10.32.4.5 port 39470 [preauth] Jun 11 06:17:16 prd-ubuntu1804-docker-4c-4g-3108 sshd[1841]: Invalid user jenkins from 10.32.4.5 port 39474 Jun 11 06:17:17 prd-ubuntu1804-docker-4c-4g-3108 sshd[1841]: Received disconnect from 10.32.4.5 port 39474:11: Closed due to user request. [preauth] Jun 11 06:17:17 prd-ubuntu1804-docker-4c-4g-3108 sshd[1841]: Disconnected from invalid user jenkins 10.32.4.5 port 39474 [preauth] Jun 11 06:17:19 prd-ubuntu1804-docker-4c-4g-3108 sshd[1845]: Invalid user jenkins from 10.32.4.5 port 39476 Jun 11 06:17:19 prd-ubuntu1804-docker-4c-4g-3108 sshd[1845]: Received disconnect from 10.32.4.5 port 39476:11: Closed due to user request. [preauth] Jun 11 06:17:19 prd-ubuntu1804-docker-4c-4g-3108 sshd[1845]: Disconnected from invalid user jenkins 10.32.4.5 port 39476 [preauth] Jun 11 06:17:19 prd-ubuntu1804-docker-4c-4g-3108 useradd[1852]: new group: name=jenkins, GID=1001 Jun 11 06:17:19 prd-ubuntu1804-docker-4c-4g-3108 useradd[1852]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 11 06:17:20 prd-ubuntu1804-docker-4c-4g-3108 usermod[1859]: add 'jenkins' to group 'docker' Jun 11 06:17:20 prd-ubuntu1804-docker-4c-4g-3108 usermod[1859]: add 'jenkins' to shadow group 'docker' Jun 11 06:17:21 prd-ubuntu1804-docker-4c-4g-3108 sshd[1895]: Accepted publickey for jenkins from 10.32.4.5 port 39478 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 11 06:17:21 prd-ubuntu1804-docker-4c-4g-3108 sshd[1895]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 11 06:17:21 prd-ubuntu1804-docker-4c-4g-3108 systemd-logind[1011]: New session 3 of user jenkins. Jun 11 06:17:21 prd-ubuntu1804-docker-4c-4g-3108 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 11 06:18:02 prd-ubuntu1804-docker-4c-4g-3108 CRON[2423]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 11 06:18:02 prd-ubuntu1804-docker-4c-4g-3108 CRON[2423]: pam_unix(cron:session): session closed for user root Jun 11 06:19:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[2462]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 11 06:19:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[2462]: pam_unix(cron:session): session closed for user root Jun 11 06:20:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[3380]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 11 06:20:01 prd-ubuntu1804-docker-4c-4g-3108 CRON[3380]: pam_unix(cron:session): session closed for user root Jun 11 06:20:14 prd-ubuntu1804-docker-4c-4g-3108 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/sim-o1-interface-ntsim-ng-manager-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 11 06:20:14 prd-ubuntu1804-docker-4c-4g-3108 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)