Jan 22 22:11:52 prd-ubuntu1804-docker-8c-16g-14404 passwd[1081]: password for 'ubuntu' changed by 'root'
Jan 22 22:11:52 prd-ubuntu1804-docker-8c-16g-14404 systemd-logind[1125]: Watching system buttons on /dev/input/event0 (Power Button)
Jan 22 22:11:52 prd-ubuntu1804-docker-8c-16g-14404 systemd-logind[1125]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jan 22 22:11:52 prd-ubuntu1804-docker-8c-16g-14404 systemd-logind[1125]: New seat seat0.
Jan 22 22:11:52 prd-ubuntu1804-docker-8c-16g-14404 sshd[1310]: Server listening on 0.0.0.0 port 22.
Jan 22 22:11:52 prd-ubuntu1804-docker-8c-16g-14404 sshd[1310]: Server listening on :: port 22.
Jan 22 22:11:54 prd-ubuntu1804-docker-8c-16g-14404 sshd[1600]: Did not receive identification string from 10.30.104.4 port 45480
Jan 22 22:12:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[1629]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 22 22:12:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[1629]: pam_unix(cron:session): session closed for user root
Jan 22 22:12:01 prd-ubuntu1804-docker-8c-16g-14404 sshd[1638]: Invalid user jenkins from 10.30.104.4 port 45482
Jan 22 22:12:01 prd-ubuntu1804-docker-8c-16g-14404 sshd[1638]: Received disconnect from 10.30.104.4 port 45482:11: Closed due to user request. [preauth]
Jan 22 22:12:01 prd-ubuntu1804-docker-8c-16g-14404 sshd[1638]: Disconnected from invalid user jenkins 10.30.104.4 port 45482 [preauth]
Jan 22 22:12:03 prd-ubuntu1804-docker-8c-16g-14404 sshd[1642]: Invalid user jenkins from 10.30.104.4 port 45484
Jan 22 22:12:03 prd-ubuntu1804-docker-8c-16g-14404 sshd[1642]: Received disconnect from 10.30.104.4 port 45484:11: Closed due to user request. [preauth]
Jan 22 22:12:03 prd-ubuntu1804-docker-8c-16g-14404 sshd[1642]: Disconnected from invalid user jenkins 10.30.104.4 port 45484 [preauth]
Jan 22 22:12:05 prd-ubuntu1804-docker-8c-16g-14404 sshd[1644]: Invalid user jenkins from 10.30.104.4 port 45486
Jan 22 22:12:05 prd-ubuntu1804-docker-8c-16g-14404 sshd[1644]: Received disconnect from 10.30.104.4 port 45486:11: Closed due to user request. [preauth]
Jan 22 22:12:05 prd-ubuntu1804-docker-8c-16g-14404 sshd[1644]: Disconnected from invalid user jenkins 10.30.104.4 port 45486 [preauth]
Jan 22 22:12:07 prd-ubuntu1804-docker-8c-16g-14404 sshd[1646]: Invalid user jenkins from 10.30.104.4 port 45488
Jan 22 22:12:08 prd-ubuntu1804-docker-8c-16g-14404 sshd[1646]: Received disconnect from 10.30.104.4 port 45488:11: Closed due to user request. [preauth]
Jan 22 22:12:08 prd-ubuntu1804-docker-8c-16g-14404 sshd[1646]: Disconnected from invalid user jenkins 10.30.104.4 port 45488 [preauth]
Jan 22 22:12:10 prd-ubuntu1804-docker-8c-16g-14404 sshd[1773]: Invalid user jenkins from 10.30.104.4 port 45492
Jan 22 22:12:10 prd-ubuntu1804-docker-8c-16g-14404 sshd[1773]: Received disconnect from 10.30.104.4 port 45492:11: Closed due to user request. [preauth]
Jan 22 22:12:10 prd-ubuntu1804-docker-8c-16g-14404 sshd[1773]: Disconnected from invalid user jenkins 10.30.104.4 port 45492 [preauth]
Jan 22 22:12:12 prd-ubuntu1804-docker-8c-16g-14404 sshd[1894]: Invalid user jenkins from 10.30.104.4 port 45494
Jan 22 22:12:12 prd-ubuntu1804-docker-8c-16g-14404 sshd[1894]: Received disconnect from 10.30.104.4 port 45494:11: Closed due to user request. [preauth]
Jan 22 22:12:12 prd-ubuntu1804-docker-8c-16g-14404 sshd[1894]: Disconnected from invalid user jenkins 10.30.104.4 port 45494 [preauth]
Jan 22 22:12:14 prd-ubuntu1804-docker-8c-16g-14404 sshd[1916]: Invalid user jenkins from 10.30.104.4 port 45496
Jan 22 22:12:14 prd-ubuntu1804-docker-8c-16g-14404 sshd[1916]: Received disconnect from 10.30.104.4 port 45496:11: Closed due to user request. [preauth]
Jan 22 22:12:14 prd-ubuntu1804-docker-8c-16g-14404 sshd[1916]: Disconnected from invalid user jenkins 10.30.104.4 port 45496 [preauth]
Jan 22 22:12:17 prd-ubuntu1804-docker-8c-16g-14404 sshd[1925]: Invalid user jenkins from 10.30.104.4 port 45498
Jan 22 22:12:17 prd-ubuntu1804-docker-8c-16g-14404 sshd[1925]: Received disconnect from 10.30.104.4 port 45498:11: Closed due to user request. [preauth]
Jan 22 22:12:17 prd-ubuntu1804-docker-8c-16g-14404 sshd[1925]: Disconnected from invalid user jenkins 10.30.104.4 port 45498 [preauth]
Jan 22 22:12:19 prd-ubuntu1804-docker-8c-16g-14404 sshd[1927]: Invalid user jenkins from 10.30.104.4 port 45502
Jan 22 22:12:19 prd-ubuntu1804-docker-8c-16g-14404 sshd[1927]: Received disconnect from 10.30.104.4 port 45502:11: Closed due to user request. [preauth]
Jan 22 22:12:19 prd-ubuntu1804-docker-8c-16g-14404 sshd[1927]: Disconnected from invalid user jenkins 10.30.104.4 port 45502 [preauth]
Jan 22 22:12:21 prd-ubuntu1804-docker-8c-16g-14404 useradd[1947]: new group: name=jenkins, GID=1001
Jan 22 22:12:21 prd-ubuntu1804-docker-8c-16g-14404 useradd[1947]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Jan 22 22:12:21 prd-ubuntu1804-docker-8c-16g-14404 sshd[1948]: Invalid user jenkins from 10.30.104.4 port 45506
Jan 22 22:12:21 prd-ubuntu1804-docker-8c-16g-14404 sshd[1948]: Received disconnect from 10.30.104.4 port 45506:11: Closed due to user request. [preauth]
Jan 22 22:12:21 prd-ubuntu1804-docker-8c-16g-14404 sshd[1948]: Disconnected from invalid user jenkins 10.30.104.4 port 45506 [preauth]
Jan 22 22:12:21 prd-ubuntu1804-docker-8c-16g-14404 usermod[1956]: add 'jenkins' to group 'docker'
Jan 22 22:12:21 prd-ubuntu1804-docker-8c-16g-14404 usermod[1956]: add 'jenkins' to shadow group 'docker'
Jan 22 22:12:23 prd-ubuntu1804-docker-8c-16g-14404 sshd[2031]: Accepted publickey for jenkins from 10.30.104.4 port 45508 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Jan 22 22:12:23 prd-ubuntu1804-docker-8c-16g-14404 sshd[2031]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jan 22 22:12:23 prd-ubuntu1804-docker-8c-16g-14404 systemd-logind[1125]: New session 2 of user jenkins.
Jan 22 22:12:23 prd-ubuntu1804-docker-8c-16g-14404 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jan 22 22:13:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[2637]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 22 22:13:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[2637]: pam_unix(cron:session): session closed for user root
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session closed for user root
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session closed for user root
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session closed for user root
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session closed for user root
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session closed for user root
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jan 22 22:13:50 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session closed for user root
Jan 22 22:14:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[3021]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 22 22:14:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[3021]: pam_unix(cron:session): session closed for user root
Jan 22 22:15:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[3543]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 22 22:15:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[3543]: pam_unix(cron:session): session closed for user root
Jan 22 22:16:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[4087]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 22 22:16:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[4087]: pam_unix(cron:session): session closed for user root
Jan 22 22:17:01 prd-ubuntu1804-docker-8c-16g-14404 CRON[4628]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 22 22:17:02 prd-ubuntu1804-docker-8c-16g-14404 CRON[4629]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 22 22:17:02 prd-ubuntu1804-docker-8c-16g-14404 CRON[4628]: pam_unix(cron:session): session closed for user root
Jan 22 22:17:02 prd-ubuntu1804-docker-8c-16g-14404 CRON[4629]: pam_unix(cron:session): session closed for user root
Jan 22 22:18:01 prd-ubuntu1804-docker-8c-16g-14404 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Jan 22 22:18:01 prd-ubuntu1804-docker-8c-16g-14404 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)