Jul 4 06:15:51 prd-ubuntu2004-helm-2c-1g-25602 passwd[710]: password for 'ubuntu' changed by 'root' Jul 4 06:15:51 prd-ubuntu2004-helm-2c-1g-25602 sshd[789]: Server listening on 0.0.0.0 port 22. Jul 4 06:15:51 prd-ubuntu2004-helm-2c-1g-25602 sshd[789]: Server listening on :: port 22. Jul 4 06:15:51 prd-ubuntu2004-helm-2c-1g-25602 systemd-logind[755]: New seat seat0. Jul 4 06:15:51 prd-ubuntu2004-helm-2c-1g-25602 systemd-logind[755]: Watching system buttons on /dev/input/event0 (Power Button) Jul 4 06:15:51 prd-ubuntu2004-helm-2c-1g-25602 systemd-logind[755]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 4 06:15:53 prd-ubuntu2004-helm-2c-1g-25602 sshd[1767]: error: kex_exchange_identification: Connection closed by remote host Jul 4 06:16:00 prd-ubuntu2004-helm-2c-1g-25602 sshd[4594]: Invalid user jenkins from 10.30.104.4 port 48920 Jul 4 06:16:01 prd-ubuntu2004-helm-2c-1g-25602 sshd[4594]: Received disconnect from 10.30.104.4 port 48920:11: Closed due to user request. [preauth] Jul 4 06:16:01 prd-ubuntu2004-helm-2c-1g-25602 sshd[4594]: Disconnected from invalid user jenkins 10.30.104.4 port 48920 [preauth] Jul 4 06:16:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[4890]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:16:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[4890]: pam_unix(cron:session): session closed for user root Jul 4 06:16:03 prd-ubuntu2004-helm-2c-1g-25602 sshd[5353]: Invalid user jenkins from 10.30.104.4 port 48922 Jul 4 06:16:03 prd-ubuntu2004-helm-2c-1g-25602 sshd[5353]: Received disconnect from 10.30.104.4 port 48922:11: Closed due to user request. [preauth] Jul 4 06:16:03 prd-ubuntu2004-helm-2c-1g-25602 sshd[5353]: Disconnected from invalid user jenkins 10.30.104.4 port 48922 [preauth] Jul 4 06:16:05 prd-ubuntu2004-helm-2c-1g-25602 sshd[6083]: Invalid user jenkins from 10.30.104.4 port 48924 Jul 4 06:16:05 prd-ubuntu2004-helm-2c-1g-25602 sshd[6083]: Received disconnect from 10.30.104.4 port 48924:11: Closed due to user request. [preauth] Jul 4 06:16:05 prd-ubuntu2004-helm-2c-1g-25602 sshd[6083]: Disconnected from invalid user jenkins 10.30.104.4 port 48924 [preauth] Jul 4 06:16:07 prd-ubuntu2004-helm-2c-1g-25602 sshd[6903]: Invalid user jenkins from 10.30.104.4 port 48926 Jul 4 06:16:07 prd-ubuntu2004-helm-2c-1g-25602 sshd[6903]: Received disconnect from 10.30.104.4 port 48926:11: Closed due to user request. [preauth] Jul 4 06:16:07 prd-ubuntu2004-helm-2c-1g-25602 sshd[6903]: Disconnected from invalid user jenkins 10.30.104.4 port 48926 [preauth] Jul 4 06:16:10 prd-ubuntu2004-helm-2c-1g-25602 sshd[7918]: Invalid user jenkins from 10.30.104.4 port 48930 Jul 4 06:16:10 prd-ubuntu2004-helm-2c-1g-25602 sshd[7918]: Received disconnect from 10.30.104.4 port 48930:11: Closed due to user request. [preauth] Jul 4 06:16:10 prd-ubuntu2004-helm-2c-1g-25602 sshd[7918]: Disconnected from invalid user jenkins 10.30.104.4 port 48930 [preauth] Jul 4 06:16:12 prd-ubuntu2004-helm-2c-1g-25602 sshd[8761]: Invalid user jenkins from 10.30.104.4 port 48938 Jul 4 06:16:12 prd-ubuntu2004-helm-2c-1g-25602 sshd[8761]: Received disconnect from 10.30.104.4 port 48938:11: Closed due to user request. [preauth] Jul 4 06:16:12 prd-ubuntu2004-helm-2c-1g-25602 sshd[8761]: Disconnected from invalid user jenkins 10.30.104.4 port 48938 [preauth] Jul 4 06:16:15 prd-ubuntu2004-helm-2c-1g-25602 sshd[9304]: Invalid user jenkins from 10.30.104.4 port 48940 Jul 4 06:16:15 prd-ubuntu2004-helm-2c-1g-25602 sshd[9304]: Received disconnect from 10.30.104.4 port 48940:11: Closed due to user request. [preauth] Jul 4 06:16:15 prd-ubuntu2004-helm-2c-1g-25602 sshd[9304]: Disconnected from invalid user jenkins 10.30.104.4 port 48940 [preauth] Jul 4 06:16:16 prd-ubuntu2004-helm-2c-1g-25602 useradd[9806]: new group: name=jenkins, GID=1001 Jul 4 06:16:16 prd-ubuntu2004-helm-2c-1g-25602 useradd[9806]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jul 4 06:16:16 prd-ubuntu2004-helm-2c-1g-25602 usermod[9847]: add 'jenkins' to group 'docker' Jul 4 06:16:16 prd-ubuntu2004-helm-2c-1g-25602 usermod[9847]: add 'jenkins' to shadow group 'docker' Jul 4 06:16:17 prd-ubuntu2004-helm-2c-1g-25602 sshd[10060]: Accepted publickey for jenkins from 10.30.104.4 port 48942 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jul 4 06:16:17 prd-ubuntu2004-helm-2c-1g-25602 sshd[10060]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 4 06:16:17 prd-ubuntu2004-helm-2c-1g-25602 systemd-logind[755]: New session 2 of user jenkins. Jul 4 06:16:17 prd-ubuntu2004-helm-2c-1g-25602 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 4 06:17:02 prd-ubuntu2004-helm-2c-1g-25602 CRON[27030]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:17:02 prd-ubuntu2004-helm-2c-1g-25602 CRON[27031]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:17:02 prd-ubuntu2004-helm-2c-1g-25602 CRON[27030]: pam_unix(cron:session): session closed for user root Jul 4 06:17:02 prd-ubuntu2004-helm-2c-1g-25602 CRON[27031]: pam_unix(cron:session): session closed for user root Jul 4 06:18:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[29036]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:18:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[29036]: pam_unix(cron:session): session closed for user root Jul 4 06:19:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[29912]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:19:02 prd-ubuntu2004-helm-2c-1g-25602 CRON[29912]: pam_unix(cron:session): session closed for user root Jul 4 06:20:02 prd-ubuntu2004-helm-2c-1g-25602 CRON[31017]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:20:02 prd-ubuntu2004-helm-2c-1g-25602 CRON[31017]: pam_unix(cron:session): session closed for user root Jul 4 06:21:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[32026]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:21:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[32026]: pam_unix(cron:session): session closed for user root Jul 4 06:21:01 prd-ubuntu2004-helm-2c-1g-25602 systemd-logind[755]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 4 06:21:01 prd-ubuntu2004-helm-2c-1g-25602 systemd-logind[755]: Watching system buttons on /dev/input/event0 (Power Button) Jul 4 06:22:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[33894]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:22:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[33894]: pam_unix(cron:session): session closed for user root Jul 4 06:23:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35162]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:23:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35162]: pam_unix(cron:session): session closed for user root Jul 4 06:24:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35629]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:24:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35629]: pam_unix(cron:session): session closed for user root Jul 4 06:25:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35633]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:25:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35634]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:25:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35634]: pam_unix(cron:session): session closed for user root Jul 4 06:25:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35633]: pam_unix(cron:session): session closed for user root Jul 4 06:26:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35732]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:26:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[35732]: pam_unix(cron:session): session closed for user root Jul 4 06:27:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[36534]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:27:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[36534]: pam_unix(cron:session): session closed for user root Jul 4 06:28:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37052]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:28:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37052]: pam_unix(cron:session): session closed for user root Jul 4 06:29:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37088]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:29:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37088]: pam_unix(cron:session): session closed for user root Jul 4 06:30:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37092]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:30:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37092]: pam_unix(cron:session): session closed for user root Jul 4 06:31:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37096]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:31:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37096]: pam_unix(cron:session): session closed for user root Jul 4 06:32:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37120]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:32:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37120]: pam_unix(cron:session): session closed for user root Jul 4 06:33:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37124]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:33:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37124]: pam_unix(cron:session): session closed for user root Jul 4 06:34:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37128]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:34:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37128]: pam_unix(cron:session): session closed for user root Jul 4 06:35:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37131]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:35:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37131]: pam_unix(cron:session): session closed for user root Jul 4 06:36:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37211]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 06:36:01 prd-ubuntu2004-helm-2c-1g-25602 CRON[37211]: pam_unix(cron:session): session closed for user root Jul 4 06:36:41 prd-ubuntu2004-helm-2c-1g-25602 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jul 4 06:36:41 prd-ubuntu2004-helm-2c-1g-25602 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)