Aug 12 03:08:00 prd-ubuntu20-04-docker-8c-8g-6772 passwd[761]: password for 'ubuntu' changed by 'root' Aug 12 03:08:00 prd-ubuntu20-04-docker-8c-8g-6772 sshd[864]: Server listening on 0.0.0.0 port 22. Aug 12 03:08:00 prd-ubuntu20-04-docker-8c-8g-6772 sshd[864]: Server listening on :: port 22. Aug 12 03:08:00 prd-ubuntu20-04-docker-8c-8g-6772 systemd-logind[830]: New seat seat0. Aug 12 03:08:00 prd-ubuntu20-04-docker-8c-8g-6772 systemd-logind[830]: Watching system buttons on /dev/input/event0 (Power Button) Aug 12 03:08:00 prd-ubuntu20-04-docker-8c-8g-6772 systemd-logind[830]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 12 03:08:02 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1044]: error: kex_exchange_identification: Connection closed by remote host Aug 12 03:08:12 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1060]: Invalid user jenkins from 10.30.120.5 port 33186 Aug 12 03:08:12 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1060]: Received disconnect from 10.30.120.5 port 33186:11: Closed due to user request. [preauth] Aug 12 03:08:12 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1060]: Disconnected from invalid user jenkins 10.30.120.5 port 33186 [preauth] Aug 12 03:08:14 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1064]: Invalid user jenkins from 10.30.120.5 port 33188 Aug 12 03:08:14 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1064]: Received disconnect from 10.30.120.5 port 33188:11: Closed due to user request. [preauth] Aug 12 03:08:14 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1064]: Disconnected from invalid user jenkins 10.30.120.5 port 33188 [preauth] Aug 12 03:08:16 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1066]: Invalid user jenkins from 10.30.120.5 port 33190 Aug 12 03:08:16 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1066]: Received disconnect from 10.30.120.5 port 33190:11: Closed due to user request. [preauth] Aug 12 03:08:16 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1066]: Disconnected from invalid user jenkins 10.30.120.5 port 33190 [preauth] Aug 12 03:08:18 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1291]: Invalid user jenkins from 10.30.120.5 port 33192 Aug 12 03:08:18 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1291]: Received disconnect from 10.30.120.5 port 33192:11: Closed due to user request. [preauth] Aug 12 03:08:18 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1291]: Disconnected from invalid user jenkins 10.30.120.5 port 33192 [preauth] Aug 12 03:08:20 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1386]: Invalid user jenkins from 10.30.120.5 port 33196 Aug 12 03:08:20 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1386]: Received disconnect from 10.30.120.5 port 33196:11: Closed due to user request. [preauth] Aug 12 03:08:20 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1386]: Disconnected from invalid user jenkins 10.30.120.5 port 33196 [preauth] Aug 12 03:08:22 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1390]: Invalid user jenkins from 10.30.120.5 port 33198 Aug 12 03:08:23 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1390]: Received disconnect from 10.30.120.5 port 33198:11: Closed due to user request. [preauth] Aug 12 03:08:23 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1390]: Disconnected from invalid user jenkins 10.30.120.5 port 33198 [preauth] Aug 12 03:08:23 prd-ubuntu20-04-docker-8c-8g-6772 useradd[1411]: new group: name=jenkins, GID=1001 Aug 12 03:08:23 prd-ubuntu20-04-docker-8c-8g-6772 useradd[1411]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 12 03:08:23 prd-ubuntu20-04-docker-8c-8g-6772 usermod[1421]: add 'jenkins' to group 'docker' Aug 12 03:08:23 prd-ubuntu20-04-docker-8c-8g-6772 usermod[1421]: add 'jenkins' to shadow group 'docker' Aug 12 03:08:25 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1468]: Accepted publickey for jenkins from 10.30.120.5 port 33202 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Aug 12 03:08:25 prd-ubuntu20-04-docker-8c-8g-6772 sshd[1468]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 12 03:08:25 prd-ubuntu20-04-docker-8c-8g-6772 systemd-logind[830]: New session 1 of user jenkins. Aug 12 03:08:25 prd-ubuntu20-04-docker-8c-8g-6772 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 12 03:08:48 prd-ubuntu20-04-docker-8c-8g-6772 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/1 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Aug 12 03:08:48 prd-ubuntu20-04-docker-8c-8g-6772 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 12 03:08:48 prd-ubuntu20-04-docker-8c-8g-6772 sudo: pam_unix(sudo:session): session closed for user root Aug 12 03:08:48 prd-ubuntu20-04-docker-8c-8g-6772 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/1 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Aug 12 03:08:48 prd-ubuntu20-04-docker-8c-8g-6772 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 12 03:08:48 prd-ubuntu20-04-docker-8c-8g-6772 sudo: pam_unix(sudo:session): session closed for user root Aug 12 03:09:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[2514]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:09:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[2514]: pam_unix(cron:session): session closed for user root Aug 12 03:09:09 prd-ubuntu20-04-docker-8c-8g-6772 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/1 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Aug 12 03:09:09 prd-ubuntu20-04-docker-8c-8g-6772 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 12 03:09:09 prd-ubuntu20-04-docker-8c-8g-6772 sudo: pam_unix(sudo:session): session closed for user root Aug 12 03:10:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[8965]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:10:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[8964]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:10:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[8965]: pam_unix(cron:session): session closed for user root Aug 12 03:10:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[8964]: pam_unix(cron:session): session closed for user root Aug 12 03:11:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[21883]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:11:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[21883]: pam_unix(cron:session): session closed for user root Aug 12 03:12:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[36716]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:12:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[36716]: pam_unix(cron:session): session closed for user root Aug 12 03:13:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[42789]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:13:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[42789]: pam_unix(cron:session): session closed for user root Aug 12 03:14:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[64131]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:14:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[64131]: pam_unix(cron:session): session closed for user root Aug 12 03:15:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[81298]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:15:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[81298]: pam_unix(cron:session): session closed for user root Aug 12 03:16:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[94682]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 12 03:16:01 prd-ubuntu20-04-docker-8c-8g-6772 CRON[94682]: pam_unix(cron:session): session closed for user root