Nov 26 21:46:15 prd-ubuntu1804-docker-4c-4g-10307 passwd[952]: password for 'ubuntu' changed by 'root' Nov 26 21:46:15 prd-ubuntu1804-docker-4c-4g-10307 systemd-logind[996]: Watching system buttons on /dev/input/event0 (Power Button) Nov 26 21:46:15 prd-ubuntu1804-docker-4c-4g-10307 systemd-logind[996]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 26 21:46:15 prd-ubuntu1804-docker-4c-4g-10307 systemd-logind[996]: New seat seat0. Nov 26 21:46:16 prd-ubuntu1804-docker-4c-4g-10307 sshd[1239]: Server listening on 0.0.0.0 port 22. Nov 26 21:46:16 prd-ubuntu1804-docker-4c-4g-10307 sshd[1239]: Server listening on :: port 22. Nov 26 21:46:18 prd-ubuntu1804-docker-4c-4g-10307 sshd[1418]: Did not receive identification string from 10.32.4.5 port 42402 Nov 26 21:46:25 prd-ubuntu1804-docker-4c-4g-10307 sshd[1481]: Invalid user jenkins from 10.32.4.5 port 42412 Nov 26 21:46:25 prd-ubuntu1804-docker-4c-4g-10307 sshd[1481]: Received disconnect from 10.32.4.5 port 42412:11: Closed due to user request. [preauth] Nov 26 21:46:25 prd-ubuntu1804-docker-4c-4g-10307 sshd[1481]: Disconnected from invalid user jenkins 10.32.4.5 port 42412 [preauth] Nov 26 21:46:28 prd-ubuntu1804-docker-4c-4g-10307 sshd[1485]: Invalid user jenkins from 10.32.4.5 port 42414 Nov 26 21:46:28 prd-ubuntu1804-docker-4c-4g-10307 sshd[1485]: Received disconnect from 10.32.4.5 port 42414:11: Closed due to user request. [preauth] Nov 26 21:46:28 prd-ubuntu1804-docker-4c-4g-10307 sshd[1485]: Disconnected from invalid user jenkins 10.32.4.5 port 42414 [preauth] Nov 26 21:46:30 prd-ubuntu1804-docker-4c-4g-10307 sshd[1487]: Invalid user jenkins from 10.32.4.5 port 42422 Nov 26 21:46:30 prd-ubuntu1804-docker-4c-4g-10307 sshd[1487]: Received disconnect from 10.32.4.5 port 42422:11: Closed due to user request. [preauth] Nov 26 21:46:30 prd-ubuntu1804-docker-4c-4g-10307 sshd[1487]: Disconnected from invalid user jenkins 10.32.4.5 port 42422 [preauth] Nov 26 21:46:32 prd-ubuntu1804-docker-4c-4g-10307 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 42424 Nov 26 21:46:32 prd-ubuntu1804-docker-4c-4g-10307 sshd[1489]: Received disconnect from 10.32.4.5 port 42424:11: Closed due to user request. [preauth] Nov 26 21:46:32 prd-ubuntu1804-docker-4c-4g-10307 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 42424 [preauth] Nov 26 21:46:34 prd-ubuntu1804-docker-4c-4g-10307 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 42426 Nov 26 21:46:34 prd-ubuntu1804-docker-4c-4g-10307 sshd[1491]: Received disconnect from 10.32.4.5 port 42426:11: Closed due to user request. [preauth] Nov 26 21:46:34 prd-ubuntu1804-docker-4c-4g-10307 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 42426 [preauth] Nov 26 21:46:36 prd-ubuntu1804-docker-4c-4g-10307 sshd[1493]: Invalid user jenkins from 10.32.4.5 port 42428 Nov 26 21:46:36 prd-ubuntu1804-docker-4c-4g-10307 sshd[1493]: Received disconnect from 10.32.4.5 port 42428:11: Closed due to user request. [preauth] Nov 26 21:46:36 prd-ubuntu1804-docker-4c-4g-10307 sshd[1493]: Disconnected from invalid user jenkins 10.32.4.5 port 42428 [preauth] Nov 26 21:46:39 prd-ubuntu1804-docker-4c-4g-10307 sshd[1709]: Invalid user jenkins from 10.32.4.5 port 42432 Nov 26 21:46:39 prd-ubuntu1804-docker-4c-4g-10307 sshd[1709]: Received disconnect from 10.32.4.5 port 42432:11: Closed due to user request. [preauth] Nov 26 21:46:39 prd-ubuntu1804-docker-4c-4g-10307 sshd[1709]: Disconnected from invalid user jenkins 10.32.4.5 port 42432 [preauth] Nov 26 21:46:41 prd-ubuntu1804-docker-4c-4g-10307 sshd[1741]: Invalid user jenkins from 10.32.4.5 port 42434 Nov 26 21:46:41 prd-ubuntu1804-docker-4c-4g-10307 sshd[1741]: Received disconnect from 10.32.4.5 port 42434:11: Closed due to user request. [preauth] Nov 26 21:46:41 prd-ubuntu1804-docker-4c-4g-10307 sshd[1741]: Disconnected from invalid user jenkins 10.32.4.5 port 42434 [preauth] Nov 26 21:46:43 prd-ubuntu1804-docker-4c-4g-10307 sshd[1775]: Invalid user jenkins from 10.32.4.5 port 42436 Nov 26 21:46:43 prd-ubuntu1804-docker-4c-4g-10307 sshd[1775]: Received disconnect from 10.32.4.5 port 42436:11: Closed due to user request. [preauth] Nov 26 21:46:43 prd-ubuntu1804-docker-4c-4g-10307 sshd[1775]: Disconnected from invalid user jenkins 10.32.4.5 port 42436 [preauth] Nov 26 21:46:45 prd-ubuntu1804-docker-4c-4g-10307 sshd[1779]: Invalid user jenkins from 10.32.4.5 port 42438 Nov 26 21:46:45 prd-ubuntu1804-docker-4c-4g-10307 sshd[1779]: Received disconnect from 10.32.4.5 port 42438:11: Closed due to user request. [preauth] Nov 26 21:46:45 prd-ubuntu1804-docker-4c-4g-10307 sshd[1779]: Disconnected from invalid user jenkins 10.32.4.5 port 42438 [preauth] Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 useradd[1795]: new group: name=jenkins, GID=1001 Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 useradd[1795]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 usermod[1802]: add 'jenkins' to group 'docker' Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 usermod[1802]: add 'jenkins' to shadow group 'docker' Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 sshd[1846]: Accepted publickey for jenkins from 10.32.4.5 port 42440 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 sshd[1846]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 systemd-logind[996]: New session 1 of user jenkins. Nov 26 21:46:47 prd-ubuntu1804-docker-4c-4g-10307 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 26 21:47:02 prd-ubuntu1804-docker-4c-4g-10307 CRON[2073]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 26 21:47:02 prd-ubuntu1804-docker-4c-4g-10307 CRON[2073]: pam_unix(cron:session): session closed for user root Nov 26 21:48:01 prd-ubuntu1804-docker-4c-4g-10307 CRON[2416]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 26 21:48:01 prd-ubuntu1804-docker-4c-4g-10307 CRON[2416]: pam_unix(cron:session): session closed for user root Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session closed for user root Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session closed for user root Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session closed for user root Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session closed for user root Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session closed for user root Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 26 21:48:42 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session closed for user root Nov 26 21:49:01 prd-ubuntu1804-docker-4c-4g-10307 CRON[3062]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 26 21:49:01 prd-ubuntu1804-docker-4c-4g-10307 CRON[3062]: pam_unix(cron:session): session closed for user root Nov 26 21:50:01 prd-ubuntu1804-docker-4c-4g-10307 CRON[5349]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 26 21:50:01 prd-ubuntu1804-docker-4c-4g-10307 CRON[5349]: pam_unix(cron:session): session closed for user root Nov 26 21:50:02 prd-ubuntu1804-docker-4c-4g-10307 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Nov 26 21:50:02 prd-ubuntu1804-docker-4c-4g-10307 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)