Feb 5 21:48:02 prd-ubuntu1804-docker-4c-4g-5142 passwd[951]: password for 'ubuntu' changed by 'root' Feb 5 21:48:02 prd-ubuntu1804-docker-4c-4g-5142 systemd-logind[1086]: Watching system buttons on /dev/input/event0 (Power Button) Feb 5 21:48:02 prd-ubuntu1804-docker-4c-4g-5142 systemd-logind[1086]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 5 21:48:02 prd-ubuntu1804-docker-4c-4g-5142 systemd-logind[1086]: New seat seat0. Feb 5 21:48:02 prd-ubuntu1804-docker-4c-4g-5142 sshd[1273]: Server listening on 0.0.0.0 port 22. Feb 5 21:48:02 prd-ubuntu1804-docker-4c-4g-5142 sshd[1273]: Server listening on :: port 22. Feb 5 21:48:06 prd-ubuntu1804-docker-4c-4g-5142 sshd[1502]: Did not receive identification string from 10.32.4.5 port 52260 Feb 5 21:48:11 prd-ubuntu1804-docker-4c-4g-5142 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 52262 Feb 5 21:48:11 prd-ubuntu1804-docker-4c-4g-5142 sshd[1536]: Received disconnect from 10.32.4.5 port 52262:11: Closed due to user request. [preauth] Feb 5 21:48:11 prd-ubuntu1804-docker-4c-4g-5142 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 52262 [preauth] Feb 5 21:48:13 prd-ubuntu1804-docker-4c-4g-5142 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 52264 Feb 5 21:48:13 prd-ubuntu1804-docker-4c-4g-5142 sshd[1540]: Received disconnect from 10.32.4.5 port 52264:11: Closed due to user request. [preauth] Feb 5 21:48:13 prd-ubuntu1804-docker-4c-4g-5142 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 52264 [preauth] Feb 5 21:48:15 prd-ubuntu1804-docker-4c-4g-5142 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 52266 Feb 5 21:48:15 prd-ubuntu1804-docker-4c-4g-5142 sshd[1542]: Received disconnect from 10.32.4.5 port 52266:11: Closed due to user request. [preauth] Feb 5 21:48:15 prd-ubuntu1804-docker-4c-4g-5142 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 52266 [preauth] Feb 5 21:48:17 prd-ubuntu1804-docker-4c-4g-5142 sshd[1544]: Invalid user jenkins from 10.32.4.5 port 52268 Feb 5 21:48:17 prd-ubuntu1804-docker-4c-4g-5142 sshd[1544]: Received disconnect from 10.32.4.5 port 52268:11: Closed due to user request. [preauth] Feb 5 21:48:17 prd-ubuntu1804-docker-4c-4g-5142 sshd[1544]: Disconnected from invalid user jenkins 10.32.4.5 port 52268 [preauth] Feb 5 21:48:19 prd-ubuntu1804-docker-4c-4g-5142 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 52272 Feb 5 21:48:19 prd-ubuntu1804-docker-4c-4g-5142 sshd[1546]: Received disconnect from 10.32.4.5 port 52272:11: Closed due to user request. [preauth] Feb 5 21:48:19 prd-ubuntu1804-docker-4c-4g-5142 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 52272 [preauth] Feb 5 21:48:21 prd-ubuntu1804-docker-4c-4g-5142 sshd[1548]: Invalid user jenkins from 10.32.4.5 port 52274 Feb 5 21:48:21 prd-ubuntu1804-docker-4c-4g-5142 sshd[1548]: Received disconnect from 10.32.4.5 port 52274:11: Closed due to user request. [preauth] Feb 5 21:48:21 prd-ubuntu1804-docker-4c-4g-5142 sshd[1548]: Disconnected from invalid user jenkins 10.32.4.5 port 52274 [preauth] Feb 5 21:48:23 prd-ubuntu1804-docker-4c-4g-5142 sshd[1560]: Invalid user jenkins from 10.32.4.5 port 52276 Feb 5 21:48:23 prd-ubuntu1804-docker-4c-4g-5142 sshd[1560]: Received disconnect from 10.32.4.5 port 52276:11: Closed due to user request. [preauth] Feb 5 21:48:23 prd-ubuntu1804-docker-4c-4g-5142 sshd[1560]: Disconnected from invalid user jenkins 10.32.4.5 port 52276 [preauth] Feb 5 21:48:27 prd-ubuntu1804-docker-4c-4g-5142 sshd[1779]: Invalid user jenkins from 10.32.4.5 port 52278 Feb 5 21:48:27 prd-ubuntu1804-docker-4c-4g-5142 sshd[1779]: Received disconnect from 10.32.4.5 port 52278:11: Closed due to user request. [preauth] Feb 5 21:48:27 prd-ubuntu1804-docker-4c-4g-5142 sshd[1779]: Disconnected from invalid user jenkins 10.32.4.5 port 52278 [preauth] Feb 5 21:48:29 prd-ubuntu1804-docker-4c-4g-5142 sshd[1816]: Invalid user jenkins from 10.32.4.5 port 52280 Feb 5 21:48:29 prd-ubuntu1804-docker-4c-4g-5142 sshd[1816]: Received disconnect from 10.32.4.5 port 52280:11: Closed due to user request. [preauth] Feb 5 21:48:29 prd-ubuntu1804-docker-4c-4g-5142 sshd[1816]: Disconnected from invalid user jenkins 10.32.4.5 port 52280 [preauth] Feb 5 21:48:31 prd-ubuntu1804-docker-4c-4g-5142 sshd[1834]: Invalid user jenkins from 10.32.4.5 port 52282 Feb 5 21:48:31 prd-ubuntu1804-docker-4c-4g-5142 sshd[1834]: Received disconnect from 10.32.4.5 port 52282:11: Closed due to user request. [preauth] Feb 5 21:48:31 prd-ubuntu1804-docker-4c-4g-5142 sshd[1834]: Disconnected from invalid user jenkins 10.32.4.5 port 52282 [preauth] Feb 5 21:48:33 prd-ubuntu1804-docker-4c-4g-5142 sshd[1844]: Invalid user jenkins from 10.32.4.5 port 52284 Feb 5 21:48:33 prd-ubuntu1804-docker-4c-4g-5142 sshd[1844]: Received disconnect from 10.32.4.5 port 52284:11: Closed due to user request. [preauth] Feb 5 21:48:33 prd-ubuntu1804-docker-4c-4g-5142 sshd[1844]: Disconnected from invalid user jenkins 10.32.4.5 port 52284 [preauth] Feb 5 21:48:34 prd-ubuntu1804-docker-4c-4g-5142 useradd[1854]: new group: name=jenkins, GID=1001 Feb 5 21:48:34 prd-ubuntu1804-docker-4c-4g-5142 useradd[1854]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 5 21:48:34 prd-ubuntu1804-docker-4c-4g-5142 usermod[1863]: add 'jenkins' to group 'docker' Feb 5 21:48:34 prd-ubuntu1804-docker-4c-4g-5142 usermod[1863]: add 'jenkins' to shadow group 'docker' Feb 5 21:48:35 prd-ubuntu1804-docker-4c-4g-5142 sshd[1919]: Accepted publickey for jenkins from 10.32.4.5 port 52288 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 5 21:48:35 prd-ubuntu1804-docker-4c-4g-5142 sshd[1919]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 5 21:48:35 prd-ubuntu1804-docker-4c-4g-5142 systemd-logind[1086]: New session 1 of user jenkins. Feb 5 21:48:35 prd-ubuntu1804-docker-4c-4g-5142 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 5 21:49:03 prd-ubuntu1804-docker-4c-4g-5142 CRON[2410]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 5 21:49:03 prd-ubuntu1804-docker-4c-4g-5142 CRON[2410]: pam_unix(cron:session): session closed for user root Feb 5 21:50:01 prd-ubuntu1804-docker-4c-4g-5142 CRON[2483]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 5 21:50:01 prd-ubuntu1804-docker-4c-4g-5142 CRON[2483]: pam_unix(cron:session): session closed for user root Feb 5 21:50:16 prd-ubuntu1804-docker-4c-4g-5142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Feb 5 21:50:16 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 5 21:50:16 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session closed for user root Feb 5 21:50:16 prd-ubuntu1804-docker-4c-4g-5142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Feb 5 21:50:16 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session closed for user root Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session closed for user root Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session closed for user root Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session closed for user root Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 5 21:50:17 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session closed for user root Feb 5 21:51:01 prd-ubuntu1804-docker-4c-4g-5142 CRON[5247]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 5 21:51:01 prd-ubuntu1804-docker-4c-4g-5142 CRON[5247]: pam_unix(cron:session): session closed for user root Feb 5 21:52:01 prd-ubuntu1804-docker-4c-4g-5142 CRON[5420]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 5 21:52:01 prd-ubuntu1804-docker-4c-4g-5142 CRON[5420]: pam_unix(cron:session): session closed for user root Feb 5 21:52:05 prd-ubuntu1804-docker-4c-4g-5142 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ric-plt-vespamgr-sonar-prescan-script ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 5 21:52:05 prd-ubuntu1804-docker-4c-4g-5142 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)