Jun 18 07:30:14 prd-ubuntu2004-helm-2c-1g-21989 passwd[703]: password for 'ubuntu' changed by 'root'
Jun 18 07:30:14 prd-ubuntu2004-helm-2c-1g-21989 sshd[790]: Server listening on 0.0.0.0 port 22.
Jun 18 07:30:14 prd-ubuntu2004-helm-2c-1g-21989 sshd[790]: Server listening on :: port 22.
Jun 18 07:30:14 prd-ubuntu2004-helm-2c-1g-21989 systemd-logind[747]: New seat seat0.
Jun 18 07:30:14 prd-ubuntu2004-helm-2c-1g-21989 systemd-logind[747]: Watching system buttons on /dev/input/event0 (Power Button)
Jun 18 07:30:14 prd-ubuntu2004-helm-2c-1g-21989 systemd-logind[747]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jun 18 07:30:18 prd-ubuntu2004-helm-2c-1g-21989 sshd[2026]: error: kex_exchange_identification: Connection closed by remote host
Jun 18 07:30:22 prd-ubuntu2004-helm-2c-1g-21989 sshd[3299]: Invalid user jenkins from 10.30.104.4 port 45196
Jun 18 07:30:22 prd-ubuntu2004-helm-2c-1g-21989 sshd[3299]: Received disconnect from 10.30.104.4 port 45196:11: Closed due to user request. [preauth]
Jun 18 07:30:22 prd-ubuntu2004-helm-2c-1g-21989 sshd[3299]: Disconnected from invalid user jenkins 10.30.104.4 port 45196 [preauth]
Jun 18 07:30:24 prd-ubuntu2004-helm-2c-1g-21989 sshd[3989]: Invalid user jenkins from 10.30.104.4 port 45198
Jun 18 07:30:24 prd-ubuntu2004-helm-2c-1g-21989 sshd[3989]: Received disconnect from 10.30.104.4 port 45198:11: Closed due to user request. [preauth]
Jun 18 07:30:24 prd-ubuntu2004-helm-2c-1g-21989 sshd[3989]: Disconnected from invalid user jenkins 10.30.104.4 port 45198 [preauth]
Jun 18 07:30:26 prd-ubuntu2004-helm-2c-1g-21989 sshd[4641]: Invalid user jenkins from 10.30.104.4 port 45206
Jun 18 07:30:26 prd-ubuntu2004-helm-2c-1g-21989 sshd[4641]: Received disconnect from 10.30.104.4 port 45206:11: Closed due to user request. [preauth]
Jun 18 07:30:26 prd-ubuntu2004-helm-2c-1g-21989 sshd[4641]: Disconnected from invalid user jenkins 10.30.104.4 port 45206 [preauth]
Jun 18 07:30:28 prd-ubuntu2004-helm-2c-1g-21989 sshd[5284]: Invalid user jenkins from 10.30.104.4 port 45208
Jun 18 07:30:28 prd-ubuntu2004-helm-2c-1g-21989 sshd[5284]: Received disconnect from 10.30.104.4 port 45208:11: Closed due to user request. [preauth]
Jun 18 07:30:28 prd-ubuntu2004-helm-2c-1g-21989 sshd[5284]: Disconnected from invalid user jenkins 10.30.104.4 port 45208 [preauth]
Jun 18 07:30:30 prd-ubuntu2004-helm-2c-1g-21989 sshd[5935]: Invalid user jenkins from 10.30.104.4 port 45210
Jun 18 07:30:30 prd-ubuntu2004-helm-2c-1g-21989 sshd[5935]: Received disconnect from 10.30.104.4 port 45210:11: Closed due to user request. [preauth]
Jun 18 07:30:30 prd-ubuntu2004-helm-2c-1g-21989 sshd[5935]: Disconnected from invalid user jenkins 10.30.104.4 port 45210 [preauth]
Jun 18 07:30:32 prd-ubuntu2004-helm-2c-1g-21989 sshd[6821]: Invalid user jenkins from 10.30.104.4 port 45214
Jun 18 07:30:33 prd-ubuntu2004-helm-2c-1g-21989 sshd[6821]: Received disconnect from 10.30.104.4 port 45214:11: Closed due to user request. [preauth]
Jun 18 07:30:33 prd-ubuntu2004-helm-2c-1g-21989 sshd[6821]: Disconnected from invalid user jenkins 10.30.104.4 port 45214 [preauth]
Jun 18 07:30:35 prd-ubuntu2004-helm-2c-1g-21989 sshd[7669]: Invalid user jenkins from 10.30.104.4 port 45218
Jun 18 07:30:35 prd-ubuntu2004-helm-2c-1g-21989 sshd[7669]: Received disconnect from 10.30.104.4 port 45218:11: Closed due to user request. [preauth]
Jun 18 07:30:35 prd-ubuntu2004-helm-2c-1g-21989 sshd[7669]: Disconnected from invalid user jenkins 10.30.104.4 port 45218 [preauth]
Jun 18 07:30:37 prd-ubuntu2004-helm-2c-1g-21989 sshd[8249]: Invalid user jenkins from 10.30.104.4 port 45220
Jun 18 07:30:37 prd-ubuntu2004-helm-2c-1g-21989 sshd[8249]: Received disconnect from 10.30.104.4 port 45220:11: Closed due to user request. [preauth]
Jun 18 07:30:37 prd-ubuntu2004-helm-2c-1g-21989 sshd[8249]: Disconnected from invalid user jenkins 10.30.104.4 port 45220 [preauth]
Jun 18 07:30:39 prd-ubuntu2004-helm-2c-1g-21989 sshd[8771]: Invalid user jenkins from 10.30.104.4 port 45224
Jun 18 07:30:39 prd-ubuntu2004-helm-2c-1g-21989 sshd[8771]: Received disconnect from 10.30.104.4 port 45224:11: Closed due to user request. [preauth]
Jun 18 07:30:39 prd-ubuntu2004-helm-2c-1g-21989 sshd[8771]: Disconnected from invalid user jenkins 10.30.104.4 port 45224 [preauth]
Jun 18 07:30:39 prd-ubuntu2004-helm-2c-1g-21989 useradd[9012]: new group: name=jenkins, GID=1001
Jun 18 07:30:39 prd-ubuntu2004-helm-2c-1g-21989 useradd[9012]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jun 18 07:30:39 prd-ubuntu2004-helm-2c-1g-21989 usermod[9052]: add 'jenkins' to group 'docker'
Jun 18 07:30:39 prd-ubuntu2004-helm-2c-1g-21989 usermod[9052]: add 'jenkins' to shadow group 'docker'
Jun 18 07:30:41 prd-ubuntu2004-helm-2c-1g-21989 sshd[9674]: Accepted publickey for jenkins from 10.30.104.4 port 45228 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Jun 18 07:30:41 prd-ubuntu2004-helm-2c-1g-21989 sshd[9674]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jun 18 07:30:41 prd-ubuntu2004-helm-2c-1g-21989 systemd-logind[747]: New session 1 of user jenkins.
Jun 18 07:30:41 prd-ubuntu2004-helm-2c-1g-21989 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jun 18 07:31:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[16948]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:31:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[16948]: pam_unix(cron:session): session closed for user root
Jun 18 07:32:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[28612]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:32:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[28612]: pam_unix(cron:session): session closed for user root
Jun 18 07:33:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[29477]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:33:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[29477]: pam_unix(cron:session): session closed for user root
Jun 18 07:34:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[30666]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:34:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[30666]: pam_unix(cron:session): session closed for user root
Jun 18 07:35:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[31435]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:35:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[31435]: pam_unix(cron:session): session closed for user root
Jun 18 07:35:24 prd-ubuntu2004-helm-2c-1g-21989 systemd-logind[747]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jun 18 07:35:24 prd-ubuntu2004-helm-2c-1g-21989 systemd-logind[747]: Watching system buttons on /dev/input/event0 (Power Button)
Jun 18 07:36:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[33090]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:36:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[33090]: pam_unix(cron:session): session closed for user root
Jun 18 07:37:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[34805]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:37:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[34805]: pam_unix(cron:session): session closed for user root
Jun 18 07:38:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35538]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:38:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35538]: pam_unix(cron:session): session closed for user root
Jun 18 07:39:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35559]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:39:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35559]: pam_unix(cron:session): session closed for user root
Jun 18 07:40:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35562]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:40:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35562]: pam_unix(cron:session): session closed for user root
Jun 18 07:41:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35971]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:41:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[35971]: pam_unix(cron:session): session closed for user root
Jun 18 07:42:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36920]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:42:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36920]: pam_unix(cron:session): session closed for user root
Jun 18 07:43:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36979]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:43:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36979]: pam_unix(cron:session): session closed for user root
Jun 18 07:44:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36982]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:44:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36982]: pam_unix(cron:session): session closed for user root
Jun 18 07:45:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36987]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:45:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[36987]: pam_unix(cron:session): session closed for user root
Jun 18 07:46:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37009]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:46:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37009]: pam_unix(cron:session): session closed for user root
Jun 18 07:47:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37014]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:47:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37014]: pam_unix(cron:session): session closed for user root
Jun 18 07:48:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37017]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:48:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37017]: pam_unix(cron:session): session closed for user root
Jun 18 07:49:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37021]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:49:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37021]: pam_unix(cron:session): session closed for user root
Jun 18 07:50:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37025]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:50:01 prd-ubuntu2004-helm-2c-1g-21989 CRON[37025]: pam_unix(cron:session): session closed for user root
Jun 18 07:51:02 prd-ubuntu2004-helm-2c-1g-21989 CRON[37122]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 18 07:51:02 prd-ubuntu2004-helm-2c-1g-21989 CRON[37122]: pam_unix(cron:session): session closed for user root
Jun 18 07:51:34 prd-ubuntu2004-helm-2c-1g-21989 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Jun 18 07:51:34 prd-ubuntu2004-helm-2c-1g-21989 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)