Aug 2 02:15:49 prd-ubuntu1804-docker-4c-4g-1902 passwd[927]: password for 'ubuntu' changed by 'root' Aug 2 02:15:49 prd-ubuntu1804-docker-4c-4g-1902 systemd-logind[1125]: Watching system buttons on /dev/input/event0 (Power Button) Aug 2 02:15:49 prd-ubuntu1804-docker-4c-4g-1902 systemd-logind[1125]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 2 02:15:49 prd-ubuntu1804-docker-4c-4g-1902 systemd-logind[1125]: New seat seat0. Aug 2 02:15:49 prd-ubuntu1804-docker-4c-4g-1902 sshd[1297]: Server listening on 0.0.0.0 port 22. Aug 2 02:15:49 prd-ubuntu1804-docker-4c-4g-1902 sshd[1297]: Server listening on :: port 22. Aug 2 02:15:49 prd-ubuntu1804-docker-4c-4g-1902 sshd[1301]: Did not receive identification string from 10.32.4.5 port 41932 Aug 2 02:15:53 prd-ubuntu1804-docker-4c-4g-1902 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 41936 Aug 2 02:15:53 prd-ubuntu1804-docker-4c-4g-1902 sshd[1536]: Received disconnect from 10.32.4.5 port 41936:11: Closed due to user request. [preauth] Aug 2 02:15:53 prd-ubuntu1804-docker-4c-4g-1902 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 41936 [preauth] Aug 2 02:15:55 prd-ubuntu1804-docker-4c-4g-1902 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 41938 Aug 2 02:15:55 prd-ubuntu1804-docker-4c-4g-1902 sshd[1572]: Received disconnect from 10.32.4.5 port 41938:11: Closed due to user request. [preauth] Aug 2 02:15:55 prd-ubuntu1804-docker-4c-4g-1902 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 41938 [preauth] Aug 2 02:15:57 prd-ubuntu1804-docker-4c-4g-1902 sshd[1588]: Invalid user jenkins from 10.32.4.5 port 41940 Aug 2 02:15:57 prd-ubuntu1804-docker-4c-4g-1902 sshd[1588]: Received disconnect from 10.32.4.5 port 41940:11: Closed due to user request. [preauth] Aug 2 02:15:57 prd-ubuntu1804-docker-4c-4g-1902 sshd[1588]: Disconnected from invalid user jenkins 10.32.4.5 port 41940 [preauth] Aug 2 02:16:00 prd-ubuntu1804-docker-4c-4g-1902 sshd[1590]: Invalid user jenkins from 10.32.4.5 port 41948 Aug 2 02:16:00 prd-ubuntu1804-docker-4c-4g-1902 sshd[1590]: Received disconnect from 10.32.4.5 port 41948:11: Closed due to user request. [preauth] Aug 2 02:16:00 prd-ubuntu1804-docker-4c-4g-1902 sshd[1590]: Disconnected from invalid user jenkins 10.32.4.5 port 41948 [preauth] Aug 2 02:16:02 prd-ubuntu1804-docker-4c-4g-1902 CRON[1592]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 2 02:16:02 prd-ubuntu1804-docker-4c-4g-1902 CRON[1592]: pam_unix(cron:session): session closed for user root Aug 2 02:16:02 prd-ubuntu1804-docker-4c-4g-1902 sshd[1601]: Invalid user jenkins from 10.32.4.5 port 41950 Aug 2 02:16:02 prd-ubuntu1804-docker-4c-4g-1902 sshd[1601]: Received disconnect from 10.32.4.5 port 41950:11: Closed due to user request. [preauth] Aug 2 02:16:02 prd-ubuntu1804-docker-4c-4g-1902 sshd[1601]: Disconnected from invalid user jenkins 10.32.4.5 port 41950 [preauth] Aug 2 02:16:04 prd-ubuntu1804-docker-4c-4g-1902 sshd[1603]: Invalid user jenkins from 10.32.4.5 port 41954 Aug 2 02:16:04 prd-ubuntu1804-docker-4c-4g-1902 sshd[1603]: Received disconnect from 10.32.4.5 port 41954:11: Closed due to user request. [preauth] Aug 2 02:16:04 prd-ubuntu1804-docker-4c-4g-1902 sshd[1603]: Disconnected from invalid user jenkins 10.32.4.5 port 41954 [preauth] Aug 2 02:16:06 prd-ubuntu1804-docker-4c-4g-1902 sshd[1605]: Invalid user jenkins from 10.32.4.5 port 41956 Aug 2 02:16:06 prd-ubuntu1804-docker-4c-4g-1902 sshd[1605]: Received disconnect from 10.32.4.5 port 41956:11: Closed due to user request. [preauth] Aug 2 02:16:06 prd-ubuntu1804-docker-4c-4g-1902 sshd[1605]: Disconnected from invalid user jenkins 10.32.4.5 port 41956 [preauth] Aug 2 02:16:08 prd-ubuntu1804-docker-4c-4g-1902 sshd[1607]: Invalid user jenkins from 10.32.4.5 port 41960 Aug 2 02:16:08 prd-ubuntu1804-docker-4c-4g-1902 sshd[1607]: Received disconnect from 10.32.4.5 port 41960:11: Closed due to user request. [preauth] Aug 2 02:16:08 prd-ubuntu1804-docker-4c-4g-1902 sshd[1607]: Disconnected from invalid user jenkins 10.32.4.5 port 41960 [preauth] Aug 2 02:16:10 prd-ubuntu1804-docker-4c-4g-1902 sshd[1627]: Invalid user jenkins from 10.32.4.5 port 41962 Aug 2 02:16:10 prd-ubuntu1804-docker-4c-4g-1902 sshd[1627]: Received disconnect from 10.32.4.5 port 41962:11: Closed due to user request. [preauth] Aug 2 02:16:10 prd-ubuntu1804-docker-4c-4g-1902 sshd[1627]: Disconnected from invalid user jenkins 10.32.4.5 port 41962 [preauth] Aug 2 02:16:12 prd-ubuntu1804-docker-4c-4g-1902 sshd[1828]: Invalid user jenkins from 10.32.4.5 port 41964 Aug 2 02:16:12 prd-ubuntu1804-docker-4c-4g-1902 sshd[1828]: Received disconnect from 10.32.4.5 port 41964:11: Closed due to user request. [preauth] Aug 2 02:16:12 prd-ubuntu1804-docker-4c-4g-1902 sshd[1828]: Disconnected from invalid user jenkins 10.32.4.5 port 41964 [preauth] Aug 2 02:16:14 prd-ubuntu1804-docker-4c-4g-1902 sshd[1870]: Invalid user jenkins from 10.32.4.5 port 41966 Aug 2 02:16:15 prd-ubuntu1804-docker-4c-4g-1902 sshd[1870]: Received disconnect from 10.32.4.5 port 41966:11: Closed due to user request. [preauth] Aug 2 02:16:15 prd-ubuntu1804-docker-4c-4g-1902 sshd[1870]: Disconnected from invalid user jenkins 10.32.4.5 port 41966 [preauth] Aug 2 02:16:17 prd-ubuntu1804-docker-4c-4g-1902 sshd[1888]: Invalid user jenkins from 10.32.4.5 port 41968 Aug 2 02:16:17 prd-ubuntu1804-docker-4c-4g-1902 sshd[1888]: Received disconnect from 10.32.4.5 port 41968:11: Closed due to user request. [preauth] Aug 2 02:16:17 prd-ubuntu1804-docker-4c-4g-1902 sshd[1888]: Disconnected from invalid user jenkins 10.32.4.5 port 41968 [preauth] Aug 2 02:16:19 prd-ubuntu1804-docker-4c-4g-1902 sshd[1898]: Invalid user jenkins from 10.32.4.5 port 41970 Aug 2 02:16:19 prd-ubuntu1804-docker-4c-4g-1902 sshd[1898]: Received disconnect from 10.32.4.5 port 41970:11: Closed due to user request. [preauth] Aug 2 02:16:19 prd-ubuntu1804-docker-4c-4g-1902 sshd[1898]: Disconnected from invalid user jenkins 10.32.4.5 port 41970 [preauth] Aug 2 02:16:19 prd-ubuntu1804-docker-4c-4g-1902 useradd[1908]: new group: name=jenkins, GID=1001 Aug 2 02:16:19 prd-ubuntu1804-docker-4c-4g-1902 useradd[1908]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 2 02:16:19 prd-ubuntu1804-docker-4c-4g-1902 usermod[1915]: add 'jenkins' to group 'docker' Aug 2 02:16:19 prd-ubuntu1804-docker-4c-4g-1902 usermod[1915]: add 'jenkins' to shadow group 'docker' Aug 2 02:16:21 prd-ubuntu1804-docker-4c-4g-1902 sshd[1959]: Accepted publickey for jenkins from 10.32.4.5 port 41972 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 2 02:16:21 prd-ubuntu1804-docker-4c-4g-1902 sshd[1959]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 2 02:16:21 prd-ubuntu1804-docker-4c-4g-1902 systemd-logind[1125]: New session 2 of user jenkins. Aug 2 02:16:21 prd-ubuntu1804-docker-4c-4g-1902 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 2 02:17:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2477]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 2 02:17:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2478]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 2 02:17:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2478]: pam_unix(cron:session): session closed for user root Aug 2 02:17:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2477]: pam_unix(cron:session): session closed for user root Aug 2 02:18:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2532]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 2 02:18:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2532]: pam_unix(cron:session): session closed for user root Aug 2 02:18:17 prd-ubuntu1804-docker-4c-4g-1902 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-datafilecollector-maven-clm-i-release ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Aug 2 02:18:17 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session closed for user root Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-datafilecollector-maven-clm-i-release ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session closed for user root Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-datafilecollector-maven-clm-i-release ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session closed for user root Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-datafilecollector-maven-clm-i-release ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session closed for user root Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-datafilecollector-maven-clm-i-release ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session closed for user root Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-datafilecollector-maven-clm-i-release ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 2 02:18:18 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session closed for user root Aug 2 02:19:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2777]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 2 02:19:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[2777]: pam_unix(cron:session): session closed for user root Aug 2 02:20:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[3268]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 2 02:20:01 prd-ubuntu1804-docker-4c-4g-1902 CRON[3268]: pam_unix(cron:session): session closed for user root Aug 2 02:20:11 prd-ubuntu1804-docker-4c-4g-1902 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-ranpm-datafilecollector-maven-clm-i-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 2 02:20:11 prd-ubuntu1804-docker-4c-4g-1902 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)