Jan 24 19:27:54 prd-ubuntu20-04-docker-8c-8g-37595 passwd[757]: password for 'ubuntu' changed by 'root' Jan 24 19:27:54 prd-ubuntu20-04-docker-8c-8g-37595 systemd-logind[812]: New seat seat0. Jan 24 19:27:54 prd-ubuntu20-04-docker-8c-8g-37595 systemd-logind[812]: Watching system buttons on /dev/input/event0 (Power Button) Jan 24 19:27:54 prd-ubuntu20-04-docker-8c-8g-37595 sshd[844]: Server listening on 0.0.0.0 port 22. Jan 24 19:27:54 prd-ubuntu20-04-docker-8c-8g-37595 systemd-logind[812]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 24 19:27:54 prd-ubuntu20-04-docker-8c-8g-37595 sshd[844]: Server listening on :: port 22. Jan 24 19:27:56 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1004]: error: kex_exchange_identification: Connection closed by remote host Jan 24 19:28:35 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1007]: Invalid user jenkins from 10.30.120.5 port 40918 Jan 24 19:28:37 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1007]: Received disconnect from 10.30.120.5 port 40918:11: Closed due to user request. [preauth] Jan 24 19:28:37 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1007]: Disconnected from invalid user jenkins 10.30.120.5 port 40918 [preauth] Jan 24 19:28:37 prd-ubuntu20-04-docker-8c-8g-37595 CRON[1006]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:28:37 prd-ubuntu20-04-docker-8c-8g-37595 CRON[1006]: pam_unix(cron:session): session closed for user root Jan 24 19:28:37 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1065]: Invalid user jenkins from 10.30.120.5 port 40930 Jan 24 19:28:37 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1065]: Received disconnect from 10.30.120.5 port 40930:11: Closed due to user request. [preauth] Jan 24 19:28:37 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1065]: Disconnected from invalid user jenkins 10.30.120.5 port 40930 [preauth] Jan 24 19:28:40 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1085]: Invalid user jenkins from 10.30.120.5 port 40938 Jan 24 19:28:40 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1085]: Received disconnect from 10.30.120.5 port 40938:11: Closed due to user request. [preauth] Jan 24 19:28:40 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1085]: Disconnected from invalid user jenkins 10.30.120.5 port 40938 [preauth] Jan 24 19:28:42 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1087]: Invalid user jenkins from 10.30.120.5 port 40942 Jan 24 19:28:42 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1087]: Received disconnect from 10.30.120.5 port 40942:11: Closed due to user request. [preauth] Jan 24 19:28:42 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1087]: Disconnected from invalid user jenkins 10.30.120.5 port 40942 [preauth] Jan 24 19:28:44 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1259]: Invalid user jenkins from 10.30.120.5 port 40944 Jan 24 19:28:44 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1259]: Received disconnect from 10.30.120.5 port 40944:11: Closed due to user request. [preauth] Jan 24 19:28:44 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1259]: Disconnected from invalid user jenkins 10.30.120.5 port 40944 [preauth] Jan 24 19:28:46 prd-ubuntu20-04-docker-8c-8g-37595 systemd-logind[812]: Watching system buttons on /dev/input/event0 (Power Button) Jan 24 19:28:46 prd-ubuntu20-04-docker-8c-8g-37595 systemd-logind[812]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 24 19:28:46 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1487]: Invalid user jenkins from 10.30.120.5 port 40954 Jan 24 19:28:46 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1487]: Received disconnect from 10.30.120.5 port 40954:11: Closed due to user request. [preauth] Jan 24 19:28:46 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1487]: Disconnected from invalid user jenkins 10.30.120.5 port 40954 [preauth] Jan 24 19:28:48 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1612]: Invalid user jenkins from 10.30.120.5 port 40956 Jan 24 19:28:48 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1612]: Received disconnect from 10.30.120.5 port 40956:11: Closed due to user request. [preauth] Jan 24 19:28:48 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1612]: Disconnected from invalid user jenkins 10.30.120.5 port 40956 [preauth] Jan 24 19:28:50 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1654]: Invalid user jenkins from 10.30.120.5 port 40958 Jan 24 19:28:50 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1654]: Received disconnect from 10.30.120.5 port 40958:11: Closed due to user request. [preauth] Jan 24 19:28:50 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1654]: Disconnected from invalid user jenkins 10.30.120.5 port 40958 [preauth] Jan 24 19:28:52 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1801]: Invalid user jenkins from 10.30.120.5 port 40960 Jan 24 19:28:52 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1801]: Received disconnect from 10.30.120.5 port 40960:11: Closed due to user request. [preauth] Jan 24 19:28:52 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1801]: Disconnected from invalid user jenkins 10.30.120.5 port 40960 [preauth] Jan 24 19:28:55 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1807]: Invalid user jenkins from 10.30.120.5 port 40962 Jan 24 19:28:55 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1807]: Received disconnect from 10.30.120.5 port 40962:11: Closed due to user request. [preauth] Jan 24 19:28:55 prd-ubuntu20-04-docker-8c-8g-37595 sshd[1807]: Disconnected from invalid user jenkins 10.30.120.5 port 40962 [preauth] Jan 24 19:28:57 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2162]: Invalid user jenkins from 10.30.120.5 port 40966 Jan 24 19:28:57 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2162]: Received disconnect from 10.30.120.5 port 40966:11: Closed due to user request. [preauth] Jan 24 19:28:57 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2162]: Disconnected from invalid user jenkins 10.30.120.5 port 40966 [preauth] Jan 24 19:28:59 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2341]: Invalid user jenkins from 10.30.120.5 port 40968 Jan 24 19:28:59 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2341]: Received disconnect from 10.30.120.5 port 40968:11: Closed due to user request. [preauth] Jan 24 19:28:59 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2341]: Disconnected from invalid user jenkins 10.30.120.5 port 40968 [preauth] Jan 24 19:29:01 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2398]: Invalid user jenkins from 10.30.120.5 port 40970 Jan 24 19:29:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[2400]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:29:01 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2398]: Received disconnect from 10.30.120.5 port 40970:11: Closed due to user request. [preauth] Jan 24 19:29:01 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2398]: Disconnected from invalid user jenkins 10.30.120.5 port 40970 [preauth] Jan 24 19:29:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[2400]: pam_unix(cron:session): session closed for user root Jan 24 19:29:03 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2404]: Invalid user jenkins from 10.30.120.5 port 40972 Jan 24 19:29:03 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2404]: Received disconnect from 10.30.120.5 port 40972:11: Closed due to user request. [preauth] Jan 24 19:29:03 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2404]: Disconnected from invalid user jenkins 10.30.120.5 port 40972 [preauth] Jan 24 19:29:05 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2406]: Invalid user jenkins from 10.30.120.5 port 40974 Jan 24 19:29:05 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2406]: Received disconnect from 10.30.120.5 port 40974:11: Closed due to user request. [preauth] Jan 24 19:29:05 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2406]: Disconnected from invalid user jenkins 10.30.120.5 port 40974 [preauth] Jan 24 19:29:07 prd-ubuntu20-04-docker-8c-8g-37595 useradd[2515]: new group: name=jenkins, GID=1001 Jan 24 19:29:07 prd-ubuntu20-04-docker-8c-8g-37595 useradd[2515]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 24 19:29:08 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2563]: Received disconnect from 10.30.120.5 port 40976:11: Closed due to user request. [preauth] Jan 24 19:29:08 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2563]: Disconnected from authenticating user jenkins 10.30.120.5 port 40976 [preauth] Jan 24 19:29:08 prd-ubuntu20-04-docker-8c-8g-37595 usermod[2624]: add 'jenkins' to group 'docker' Jan 24 19:29:08 prd-ubuntu20-04-docker-8c-8g-37595 usermod[2624]: add 'jenkins' to shadow group 'docker' Jan 24 19:29:10 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2661]: Accepted publickey for jenkins from 10.30.120.5 port 40984 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 24 19:29:10 prd-ubuntu20-04-docker-8c-8g-37595 sshd[2661]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 24 19:29:10 prd-ubuntu20-04-docker-8c-8g-37595 systemd-logind[812]: New session 3 of user jenkins. Jan 24 19:29:10 prd-ubuntu20-04-docker-8c-8g-37595 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 24 19:29:39 prd-ubuntu20-04-docker-8c-8g-37595 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/1 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jan 24 19:29:39 prd-ubuntu20-04-docker-8c-8g-37595 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 24 19:29:39 prd-ubuntu20-04-docker-8c-8g-37595 sudo: pam_unix(sudo:session): session closed for user root Jan 24 19:29:39 prd-ubuntu20-04-docker-8c-8g-37595 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/1 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jan 24 19:29:39 prd-ubuntu20-04-docker-8c-8g-37595 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 24 19:29:39 prd-ubuntu20-04-docker-8c-8g-37595 sudo: pam_unix(sudo:session): session closed for user root Jan 24 19:30:00 prd-ubuntu20-04-docker-8c-8g-37595 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/1 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jan 24 19:30:00 prd-ubuntu20-04-docker-8c-8g-37595 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 24 19:30:00 prd-ubuntu20-04-docker-8c-8g-37595 sudo: pam_unix(sudo:session): session closed for user root Jan 24 19:30:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[4177]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:30:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[4177]: pam_unix(cron:session): session closed for user root Jan 24 19:31:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[6094]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:31:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[6094]: pam_unix(cron:session): session closed for user root Jan 24 19:32:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[19598]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:32:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[19598]: pam_unix(cron:session): session closed for user root Jan 24 19:33:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[34377]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:33:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[34377]: pam_unix(cron:session): session closed for user root Jan 24 19:34:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[43251]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:34:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[43251]: pam_unix(cron:session): session closed for user root Jan 24 19:35:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[46022]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:35:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[46022]: pam_unix(cron:session): session closed for user root Jan 24 19:36:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[46157]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:36:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[46157]: pam_unix(cron:session): session closed for user root Jan 24 19:37:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[70461]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:37:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[70461]: pam_unix(cron:session): session closed for user root Jan 24 19:38:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[84929]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:38:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[84929]: pam_unix(cron:session): session closed for user root Jan 24 19:39:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[93090]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 24 19:39:01 prd-ubuntu20-04-docker-8c-8g-37595 CRON[93090]: pam_unix(cron:session): session closed for user root