Oct 22 13:07:05 prd-ubuntu2004-helm-2c-1g-4460 passwd[709]: password for 'ubuntu' changed by 'root' Oct 22 13:07:05 prd-ubuntu2004-helm-2c-1g-4460 sshd[787]: Server listening on 0.0.0.0 port 22. Oct 22 13:07:05 prd-ubuntu2004-helm-2c-1g-4460 sshd[787]: Server listening on :: port 22. Oct 22 13:07:05 prd-ubuntu2004-helm-2c-1g-4460 systemd-logind[758]: New seat seat0. Oct 22 13:07:05 prd-ubuntu2004-helm-2c-1g-4460 systemd-logind[758]: Watching system buttons on /dev/input/event0 (Power Button) Oct 22 13:07:05 prd-ubuntu2004-helm-2c-1g-4460 systemd-logind[758]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 22 13:07:13 prd-ubuntu2004-helm-2c-1g-4460 sshd[4266]: Invalid user jenkins from 10.30.104.4 port 44496 Oct 22 13:07:13 prd-ubuntu2004-helm-2c-1g-4460 sshd[4266]: Received disconnect from 10.30.104.4 port 44496:11: Closed due to user request. [preauth] Oct 22 13:07:13 prd-ubuntu2004-helm-2c-1g-4460 sshd[4266]: Disconnected from invalid user jenkins 10.30.104.4 port 44496 [preauth] Oct 22 13:07:15 prd-ubuntu2004-helm-2c-1g-4460 sshd[4923]: Invalid user jenkins from 10.30.104.4 port 44498 Oct 22 13:07:15 prd-ubuntu2004-helm-2c-1g-4460 sshd[4923]: Received disconnect from 10.30.104.4 port 44498:11: Closed due to user request. [preauth] Oct 22 13:07:15 prd-ubuntu2004-helm-2c-1g-4460 sshd[4923]: Disconnected from invalid user jenkins 10.30.104.4 port 44498 [preauth] Oct 22 13:07:18 prd-ubuntu2004-helm-2c-1g-4460 sshd[5561]: Invalid user jenkins from 10.30.104.4 port 44504 Oct 22 13:07:18 prd-ubuntu2004-helm-2c-1g-4460 sshd[5561]: Received disconnect from 10.30.104.4 port 44504:11: Closed due to user request. [preauth] Oct 22 13:07:18 prd-ubuntu2004-helm-2c-1g-4460 sshd[5561]: Disconnected from invalid user jenkins 10.30.104.4 port 44504 [preauth] Oct 22 13:07:24 prd-ubuntu2004-helm-2c-1g-4460 sshd[6800]: Invalid user jenkins from 10.30.104.4 port 44510 Oct 22 13:07:24 prd-ubuntu2004-helm-2c-1g-4460 sshd[6800]: Received disconnect from 10.30.104.4 port 44510:11: Closed due to user request. [preauth] Oct 22 13:07:24 prd-ubuntu2004-helm-2c-1g-4460 sshd[6800]: Disconnected from invalid user jenkins 10.30.104.4 port 44510 [preauth] Oct 22 13:07:27 prd-ubuntu2004-helm-2c-1g-4460 sshd[7903]: Invalid user jenkins from 10.30.104.4 port 44512 Oct 22 13:07:27 prd-ubuntu2004-helm-2c-1g-4460 sshd[7903]: Received disconnect from 10.30.104.4 port 44512:11: Closed due to user request. [preauth] Oct 22 13:07:27 prd-ubuntu2004-helm-2c-1g-4460 sshd[7903]: Disconnected from invalid user jenkins 10.30.104.4 port 44512 [preauth] Oct 22 13:07:33 prd-ubuntu2004-helm-2c-1g-4460 sshd[8551]: Invalid user jenkins from 10.30.104.4 port 44514 Oct 22 13:07:34 prd-ubuntu2004-helm-2c-1g-4460 sshd[8551]: Received disconnect from 10.30.104.4 port 44514:11: Closed due to user request. [preauth] Oct 22 13:07:34 prd-ubuntu2004-helm-2c-1g-4460 sshd[8551]: Disconnected from invalid user jenkins 10.30.104.4 port 44514 [preauth] Oct 22 13:07:36 prd-ubuntu2004-helm-2c-1g-4460 useradd[9023]: new group: name=jenkins, GID=1001 Oct 22 13:07:36 prd-ubuntu2004-helm-2c-1g-4460 useradd[9023]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 22 13:07:36 prd-ubuntu2004-helm-2c-1g-4460 sshd[9013]: Invalid user jenkins from 10.30.104.4 port 44532 Oct 22 13:07:36 prd-ubuntu2004-helm-2c-1g-4460 usermod[9056]: add 'jenkins' to group 'docker' Oct 22 13:07:36 prd-ubuntu2004-helm-2c-1g-4460 usermod[9056]: add 'jenkins' to shadow group 'docker' Oct 22 13:07:36 prd-ubuntu2004-helm-2c-1g-4460 sshd[9013]: Received disconnect from 10.30.104.4 port 44532:11: Closed due to user request. [preauth] Oct 22 13:07:36 prd-ubuntu2004-helm-2c-1g-4460 sshd[9013]: Disconnected from invalid user jenkins 10.30.104.4 port 44532 [preauth] Oct 22 13:07:38 prd-ubuntu2004-helm-2c-1g-4460 sshd[9907]: Accepted publickey for jenkins from 10.30.104.4 port 44534 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Oct 22 13:07:38 prd-ubuntu2004-helm-2c-1g-4460 sshd[9907]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 22 13:07:38 prd-ubuntu2004-helm-2c-1g-4460 systemd-logind[758]: New session 1 of user jenkins. Oct 22 13:07:38 prd-ubuntu2004-helm-2c-1g-4460 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 22 13:08:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[16980]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:08:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[16980]: pam_unix(cron:session): session closed for user root Oct 22 13:09:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[28230]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:09:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[28230]: pam_unix(cron:session): session closed for user root Oct 22 13:10:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[28933]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:10:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[28933]: pam_unix(cron:session): session closed for user root Oct 22 13:11:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[29771]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:11:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[29771]: pam_unix(cron:session): session closed for user root Oct 22 13:12:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[30952]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:12:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[30952]: pam_unix(cron:session): session closed for user root Oct 22 13:13:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[32181]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:13:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[32181]: pam_unix(cron:session): session closed for user root Oct 22 13:14:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[33148]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:14:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[33148]: pam_unix(cron:session): session closed for user root Oct 22 13:15:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[34531]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:15:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[34531]: pam_unix(cron:session): session closed for user root Oct 22 13:16:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35022]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:16:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35022]: pam_unix(cron:session): session closed for user root Oct 22 13:17:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35026]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:17:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35025]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:17:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35025]: pam_unix(cron:session): session closed for user root Oct 22 13:17:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35026]: pam_unix(cron:session): session closed for user root Oct 22 13:18:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35036]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:18:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35036]: pam_unix(cron:session): session closed for user root Oct 22 13:19:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35532]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:19:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[35532]: pam_unix(cron:session): session closed for user root Oct 22 13:20:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36281]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:20:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36281]: pam_unix(cron:session): session closed for user root Oct 22 13:21:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36448]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:21:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36448]: pam_unix(cron:session): session closed for user root Oct 22 13:22:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36452]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:22:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36452]: pam_unix(cron:session): session closed for user root Oct 22 13:23:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36477]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:23:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36477]: pam_unix(cron:session): session closed for user root Oct 22 13:24:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36482]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:24:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36482]: pam_unix(cron:session): session closed for user root Oct 22 13:25:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36487]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:25:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36487]: pam_unix(cron:session): session closed for user root Oct 22 13:26:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36492]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:26:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36492]: pam_unix(cron:session): session closed for user root Oct 22 13:27:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36497]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:27:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36497]: pam_unix(cron:session): session closed for user root Oct 22 13:28:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36502]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:28:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36502]: pam_unix(cron:session): session closed for user root Oct 22 13:29:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36566]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 22 13:29:01 prd-ubuntu2004-helm-2c-1g-4460 CRON[36566]: pam_unix(cron:session): session closed for user root Oct 22 13:29:51 prd-ubuntu2004-helm-2c-1g-4460 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Oct 22 13:29:51 prd-ubuntu2004-helm-2c-1g-4460 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)