Aug 27 01:26:41 prd-ubuntu20-04-docker-8c-8g-7665 passwd[765]: password for 'ubuntu' changed by 'root' Aug 27 01:26:41 prd-ubuntu20-04-docker-8c-8g-7665 systemd-logind[834]: New seat seat0. Aug 27 01:26:41 prd-ubuntu20-04-docker-8c-8g-7665 systemd-logind[834]: Watching system buttons on /dev/input/event0 (Power Button) Aug 27 01:26:41 prd-ubuntu20-04-docker-8c-8g-7665 systemd-logind[834]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 27 01:26:41 prd-ubuntu20-04-docker-8c-8g-7665 sshd[879]: Server listening on 0.0.0.0 port 22. Aug 27 01:26:41 prd-ubuntu20-04-docker-8c-8g-7665 sshd[879]: Server listening on :: port 22. Aug 27 01:26:44 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1047]: error: kex_exchange_identification: Connection closed by remote host Aug 27 01:26:51 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1054]: Invalid user jenkins from 10.30.120.5 port 37266 Aug 27 01:26:51 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1054]: Received disconnect from 10.30.120.5 port 37266:11: Closed due to user request. [preauth] Aug 27 01:26:51 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1054]: Disconnected from invalid user jenkins 10.30.120.5 port 37266 [preauth] Aug 27 01:26:53 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1058]: Invalid user jenkins from 10.30.120.5 port 37278 Aug 27 01:26:53 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1058]: Received disconnect from 10.30.120.5 port 37278:11: Closed due to user request. [preauth] Aug 27 01:26:53 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1058]: Disconnected from invalid user jenkins 10.30.120.5 port 37278 [preauth] Aug 27 01:26:55 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1060]: Invalid user jenkins from 10.30.120.5 port 37284 Aug 27 01:26:55 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1060]: Received disconnect from 10.30.120.5 port 37284:11: Closed due to user request. [preauth] Aug 27 01:26:55 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1060]: Disconnected from invalid user jenkins 10.30.120.5 port 37284 [preauth] Aug 27 01:26:57 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1062]: Invalid user jenkins from 10.30.120.5 port 37290 Aug 27 01:26:58 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1062]: Received disconnect from 10.30.120.5 port 37290:11: Closed due to user request. [preauth] Aug 27 01:26:58 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1062]: Disconnected from invalid user jenkins 10.30.120.5 port 37290 [preauth] Aug 27 01:27:00 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1265]: Invalid user jenkins from 10.30.120.5 port 37306 Aug 27 01:27:00 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1265]: Received disconnect from 10.30.120.5 port 37306:11: Closed due to user request. [preauth] Aug 27 01:27:00 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1265]: Disconnected from invalid user jenkins 10.30.120.5 port 37306 [preauth] Aug 27 01:27:02 prd-ubuntu20-04-docker-8c-8g-7665 CRON[1356]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:27:02 prd-ubuntu20-04-docker-8c-8g-7665 CRON[1356]: pam_unix(cron:session): session closed for user root Aug 27 01:27:02 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1386]: Invalid user jenkins from 10.30.120.5 port 37314 Aug 27 01:27:02 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1386]: Received disconnect from 10.30.120.5 port 37314:11: Closed due to user request. [preauth] Aug 27 01:27:02 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1386]: Disconnected from invalid user jenkins 10.30.120.5 port 37314 [preauth] Aug 27 01:27:05 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1392]: Invalid user jenkins from 10.30.120.5 port 37316 Aug 27 01:27:05 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1392]: Received disconnect from 10.30.120.5 port 37316:11: Closed due to user request. [preauth] Aug 27 01:27:05 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1392]: Disconnected from invalid user jenkins 10.30.120.5 port 37316 [preauth] Aug 27 01:27:07 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1395]: Invalid user jenkins from 10.30.120.5 port 37326 Aug 27 01:27:07 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1395]: Received disconnect from 10.30.120.5 port 37326:11: Closed due to user request. [preauth] Aug 27 01:27:07 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1395]: Disconnected from invalid user jenkins 10.30.120.5 port 37326 [preauth] Aug 27 01:27:07 prd-ubuntu20-04-docker-8c-8g-7665 useradd[1415]: new group: name=jenkins, GID=1001 Aug 27 01:27:07 prd-ubuntu20-04-docker-8c-8g-7665 useradd[1415]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 27 01:27:07 prd-ubuntu20-04-docker-8c-8g-7665 usermod[1425]: add 'jenkins' to group 'docker' Aug 27 01:27:07 prd-ubuntu20-04-docker-8c-8g-7665 usermod[1425]: add 'jenkins' to shadow group 'docker' Aug 27 01:27:09 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1460]: Accepted publickey for jenkins from 10.30.120.5 port 37328 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Aug 27 01:27:09 prd-ubuntu20-04-docker-8c-8g-7665 sshd[1460]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 27 01:27:09 prd-ubuntu20-04-docker-8c-8g-7665 systemd-logind[834]: New session 2 of user jenkins. Aug 27 01:27:09 prd-ubuntu20-04-docker-8c-8g-7665 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 27 01:27:34 prd-ubuntu20-04-docker-8c-8g-7665 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/3 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Aug 27 01:27:34 prd-ubuntu20-04-docker-8c-8g-7665 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 27 01:27:34 prd-ubuntu20-04-docker-8c-8g-7665 sudo: pam_unix(sudo:session): session closed for user root Aug 27 01:27:34 prd-ubuntu20-04-docker-8c-8g-7665 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/3 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Aug 27 01:27:34 prd-ubuntu20-04-docker-8c-8g-7665 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 27 01:27:34 prd-ubuntu20-04-docker-8c-8g-7665 sudo: pam_unix(sudo:session): session closed for user root Aug 27 01:27:55 prd-ubuntu20-04-docker-8c-8g-7665 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/edgex-go/3 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Aug 27 01:27:55 prd-ubuntu20-04-docker-8c-8g-7665 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 27 01:27:55 prd-ubuntu20-04-docker-8c-8g-7665 sudo: pam_unix(sudo:session): session closed for user root Aug 27 01:28:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[2888]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:28:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[2888]: pam_unix(cron:session): session closed for user root Aug 27 01:29:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[14654]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:29:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[14654]: pam_unix(cron:session): session closed for user root Aug 27 01:30:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[25762]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:30:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[25762]: pam_unix(cron:session): session closed for user root Aug 27 01:31:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[40020]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:31:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[40020]: pam_unix(cron:session): session closed for user root Aug 27 01:32:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[42389]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:32:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[42389]: pam_unix(cron:session): session closed for user root Aug 27 01:33:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[49834]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:33:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[49834]: pam_unix(cron:session): session closed for user root Aug 27 01:34:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[74758]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:34:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[74758]: pam_unix(cron:session): session closed for user root Aug 27 01:35:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[91640]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 01:35:01 prd-ubuntu20-04-docker-8c-8g-7665 CRON[91640]: pam_unix(cron:session): session closed for user root