Nov 13 14:25:38 prd-ubuntu2004-helm-2c-1g-12478 passwd[710]: password for 'ubuntu' changed by 'root'
Nov 13 14:25:39 prd-ubuntu2004-helm-2c-1g-12478 sshd[795]: Server listening on 0.0.0.0 port 22.
Nov 13 14:25:39 prd-ubuntu2004-helm-2c-1g-12478 sshd[795]: Server listening on :: port 22.
Nov 13 14:25:39 prd-ubuntu2004-helm-2c-1g-12478 systemd-logind[756]: New seat seat0.
Nov 13 14:25:39 prd-ubuntu2004-helm-2c-1g-12478 systemd-logind[756]: Watching system buttons on /dev/input/event0 (Power Button)
Nov 13 14:25:39 prd-ubuntu2004-helm-2c-1g-12478 systemd-logind[756]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Nov 13 14:25:42 prd-ubuntu2004-helm-2c-1g-12478 sshd[2121]: error: kex_exchange_identification: Connection closed by remote host
Nov 13 14:25:43 prd-ubuntu2004-helm-2c-1g-12478 sshd[2321]: Invalid user jenkins from 10.30.104.4 port 36998
Nov 13 14:25:43 prd-ubuntu2004-helm-2c-1g-12478 sshd[2321]: Received disconnect from 10.30.104.4 port 36998:11: Closed due to user request. [preauth]
Nov 13 14:25:43 prd-ubuntu2004-helm-2c-1g-12478 sshd[2321]: Disconnected from invalid user jenkins 10.30.104.4 port 36998 [preauth]
Nov 13 14:25:45 prd-ubuntu2004-helm-2c-1g-12478 sshd[3099]: Invalid user jenkins from 10.30.104.4 port 37002
Nov 13 14:25:45 prd-ubuntu2004-helm-2c-1g-12478 sshd[3099]: Received disconnect from 10.30.104.4 port 37002:11: Closed due to user request. [preauth]
Nov 13 14:25:45 prd-ubuntu2004-helm-2c-1g-12478 sshd[3099]: Disconnected from invalid user jenkins 10.30.104.4 port 37002 [preauth]
Nov 13 14:25:47 prd-ubuntu2004-helm-2c-1g-12478 sshd[3878]: Invalid user jenkins from 10.30.104.4 port 37004
Nov 13 14:25:47 prd-ubuntu2004-helm-2c-1g-12478 sshd[3878]: Received disconnect from 10.30.104.4 port 37004:11: Closed due to user request. [preauth]
Nov 13 14:25:47 prd-ubuntu2004-helm-2c-1g-12478 sshd[3878]: Disconnected from invalid user jenkins 10.30.104.4 port 37004 [preauth]
Nov 13 14:25:49 prd-ubuntu2004-helm-2c-1g-12478 sshd[4566]: Invalid user jenkins from 10.30.104.4 port 37006
Nov 13 14:25:49 prd-ubuntu2004-helm-2c-1g-12478 sshd[4566]: Received disconnect from 10.30.104.4 port 37006:11: Closed due to user request. [preauth]
Nov 13 14:25:49 prd-ubuntu2004-helm-2c-1g-12478 sshd[4566]: Disconnected from invalid user jenkins 10.30.104.4 port 37006 [preauth]
Nov 13 14:25:51 prd-ubuntu2004-helm-2c-1g-12478 sshd[5281]: Invalid user jenkins from 10.30.104.4 port 37008
Nov 13 14:25:51 prd-ubuntu2004-helm-2c-1g-12478 sshd[5281]: Received disconnect from 10.30.104.4 port 37008:11: Closed due to user request. [preauth]
Nov 13 14:25:51 prd-ubuntu2004-helm-2c-1g-12478 sshd[5281]: Disconnected from invalid user jenkins 10.30.104.4 port 37008 [preauth]
Nov 13 14:25:53 prd-ubuntu2004-helm-2c-1g-12478 sshd[6028]: Invalid user jenkins from 10.30.104.4 port 37016
Nov 13 14:25:53 prd-ubuntu2004-helm-2c-1g-12478 sshd[6028]: Received disconnect from 10.30.104.4 port 37016:11: Closed due to user request. [preauth]
Nov 13 14:25:53 prd-ubuntu2004-helm-2c-1g-12478 sshd[6028]: Disconnected from invalid user jenkins 10.30.104.4 port 37016 [preauth]
Nov 13 14:25:55 prd-ubuntu2004-helm-2c-1g-12478 sshd[6815]: Invalid user jenkins from 10.30.104.4 port 37018
Nov 13 14:25:55 prd-ubuntu2004-helm-2c-1g-12478 sshd[6815]: Received disconnect from 10.30.104.4 port 37018:11: Closed due to user request. [preauth]
Nov 13 14:25:55 prd-ubuntu2004-helm-2c-1g-12478 sshd[6815]: Disconnected from invalid user jenkins 10.30.104.4 port 37018 [preauth]
Nov 13 14:25:58 prd-ubuntu2004-helm-2c-1g-12478 sshd[7799]: Invalid user jenkins from 10.30.104.4 port 37020
Nov 13 14:25:58 prd-ubuntu2004-helm-2c-1g-12478 sshd[7799]: Received disconnect from 10.30.104.4 port 37020:11: Closed due to user request. [preauth]
Nov 13 14:25:58 prd-ubuntu2004-helm-2c-1g-12478 sshd[7799]: Disconnected from invalid user jenkins 10.30.104.4 port 37020 [preauth]
Nov 13 14:26:01 prd-ubuntu2004-helm-2c-1g-12478 sshd[8534]: Invalid user jenkins from 10.30.104.4 port 37024
Nov 13 14:26:01 prd-ubuntu2004-helm-2c-1g-12478 sshd[8534]: Received disconnect from 10.30.104.4 port 37024:11: Closed due to user request. [preauth]
Nov 13 14:26:01 prd-ubuntu2004-helm-2c-1g-12478 sshd[8534]: Disconnected from invalid user jenkins 10.30.104.4 port 37024 [preauth]
Nov 13 14:26:02 prd-ubuntu2004-helm-2c-1g-12478 CRON[9086]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:26:02 prd-ubuntu2004-helm-2c-1g-12478 CRON[9086]: pam_unix(cron:session): session closed for user root
Nov 13 14:26:03 prd-ubuntu2004-helm-2c-1g-12478 sshd[9150]: Invalid user jenkins from 10.30.104.4 port 37026
Nov 13 14:26:03 prd-ubuntu2004-helm-2c-1g-12478 sshd[9150]: Received disconnect from 10.30.104.4 port 37026:11: Closed due to user request. [preauth]
Nov 13 14:26:03 prd-ubuntu2004-helm-2c-1g-12478 sshd[9150]: Disconnected from invalid user jenkins 10.30.104.4 port 37026 [preauth]
Nov 13 14:26:05 prd-ubuntu2004-helm-2c-1g-12478 sshd[9496]: Invalid user jenkins from 10.30.104.4 port 37028
Nov 13 14:26:05 prd-ubuntu2004-helm-2c-1g-12478 sshd[9496]: Received disconnect from 10.30.104.4 port 37028:11: Closed due to user request. [preauth]
Nov 13 14:26:05 prd-ubuntu2004-helm-2c-1g-12478 sshd[9496]: Disconnected from invalid user jenkins 10.30.104.4 port 37028 [preauth]
Nov 13 14:26:06 prd-ubuntu2004-helm-2c-1g-12478 useradd[10076]: new group: name=jenkins, GID=1001
Nov 13 14:26:06 prd-ubuntu2004-helm-2c-1g-12478 useradd[10076]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Nov 13 14:26:06 prd-ubuntu2004-helm-2c-1g-12478 usermod[10114]: add 'jenkins' to group 'docker'
Nov 13 14:26:06 prd-ubuntu2004-helm-2c-1g-12478 usermod[10114]: add 'jenkins' to shadow group 'docker'
Nov 13 14:26:07 prd-ubuntu2004-helm-2c-1g-12478 sshd[10369]: Accepted publickey for jenkins from 10.30.104.4 port 37030 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Nov 13 14:26:07 prd-ubuntu2004-helm-2c-1g-12478 sshd[10369]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Nov 13 14:26:07 prd-ubuntu2004-helm-2c-1g-12478 systemd-logind[756]: New session 2 of user jenkins.
Nov 13 14:26:07 prd-ubuntu2004-helm-2c-1g-12478 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Nov 13 14:27:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[27334]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:27:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[27334]: pam_unix(cron:session): session closed for user root
Nov 13 14:28:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[28999]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:28:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[28999]: pam_unix(cron:session): session closed for user root
Nov 13 14:29:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[29938]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:29:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[29938]: pam_unix(cron:session): session closed for user root
Nov 13 14:30:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[30957]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:30:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[30957]: pam_unix(cron:session): session closed for user root
Nov 13 14:30:51 prd-ubuntu2004-helm-2c-1g-12478 systemd-logind[756]: Watching system buttons on /dev/input/event0 (Power Button)
Nov 13 14:30:51 prd-ubuntu2004-helm-2c-1g-12478 systemd-logind[756]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Nov 13 14:31:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[32528]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:31:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[32528]: pam_unix(cron:session): session closed for user root
Nov 13 14:32:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[34047]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:32:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[34047]: pam_unix(cron:session): session closed for user root
Nov 13 14:33:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35226]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:33:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35226]: pam_unix(cron:session): session closed for user root
Nov 13 14:34:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35532]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:34:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35532]: pam_unix(cron:session): session closed for user root
Nov 13 14:35:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35535]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:35:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35535]: pam_unix(cron:session): session closed for user root
Nov 13 14:36:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35543]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:36:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[35543]: pam_unix(cron:session): session closed for user root
Nov 13 14:37:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36503]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:37:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36503]: pam_unix(cron:session): session closed for user root
Nov 13 14:38:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36940]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:38:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36940]: pam_unix(cron:session): session closed for user root
Nov 13 14:39:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36943]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:39:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36943]: pam_unix(cron:session): session closed for user root
Nov 13 14:40:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36948]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:40:02 prd-ubuntu2004-helm-2c-1g-12478 CRON[36948]: pam_unix(cron:session): session closed for user root
Nov 13 14:41:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36991]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:41:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36991]: pam_unix(cron:session): session closed for user root
Nov 13 14:42:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36996]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:42:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[36996]: pam_unix(cron:session): session closed for user root
Nov 13 14:43:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37000]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:43:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37000]: pam_unix(cron:session): session closed for user root
Nov 13 14:44:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37004]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:44:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37004]: pam_unix(cron:session): session closed for user root
Nov 13 14:45:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37007]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:45:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37007]: pam_unix(cron:session): session closed for user root
Nov 13 14:46:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37073]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 13 14:46:01 prd-ubuntu2004-helm-2c-1g-12478 CRON[37073]: pam_unix(cron:session): session closed for user root
Nov 13 14:46:51 prd-ubuntu2004-helm-2c-1g-12478 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp