Feb 23 07:57:03 prd-ubuntu2004-helm-2c-1g-19405 passwd[709]: password for 'ubuntu' changed by 'root'
Feb 23 07:57:03 prd-ubuntu2004-helm-2c-1g-19405 sshd[789]: Server listening on 0.0.0.0 port 22.
Feb 23 07:57:03 prd-ubuntu2004-helm-2c-1g-19405 sshd[789]: Server listening on :: port 22.
Feb 23 07:57:03 prd-ubuntu2004-helm-2c-1g-19405 systemd-logind[752]: New seat seat0.
Feb 23 07:57:03 prd-ubuntu2004-helm-2c-1g-19405 systemd-logind[752]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 23 07:57:03 prd-ubuntu2004-helm-2c-1g-19405 systemd-logind[752]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 23 07:57:05 prd-ubuntu2004-helm-2c-1g-19405 sshd[1573]: error: kex_exchange_identification: Connection closed by remote host
Feb 23 07:57:12 prd-ubuntu2004-helm-2c-1g-19405 sshd[3948]: Invalid user jenkins from 10.30.104.4 port 52040
Feb 23 07:57:12 prd-ubuntu2004-helm-2c-1g-19405 sshd[3948]: Received disconnect from 10.30.104.4 port 52040:11: Closed due to user request. [preauth]
Feb 23 07:57:12 prd-ubuntu2004-helm-2c-1g-19405 sshd[3948]: Disconnected from invalid user jenkins 10.30.104.4 port 52040 [preauth]
Feb 23 07:57:14 prd-ubuntu2004-helm-2c-1g-19405 sshd[4605]: Invalid user jenkins from 10.30.104.4 port 52060
Feb 23 07:57:14 prd-ubuntu2004-helm-2c-1g-19405 sshd[4605]: Received disconnect from 10.30.104.4 port 52060:11: Closed due to user request. [preauth]
Feb 23 07:57:14 prd-ubuntu2004-helm-2c-1g-19405 sshd[4605]: Disconnected from invalid user jenkins 10.30.104.4 port 52060 [preauth]
Feb 23 07:57:16 prd-ubuntu2004-helm-2c-1g-19405 sshd[5255]: Invalid user jenkins from 10.30.104.4 port 52074
Feb 23 07:57:16 prd-ubuntu2004-helm-2c-1g-19405 sshd[5255]: Received disconnect from 10.30.104.4 port 52074:11: Closed due to user request. [preauth]
Feb 23 07:57:16 prd-ubuntu2004-helm-2c-1g-19405 sshd[5255]: Disconnected from invalid user jenkins 10.30.104.4 port 52074 [preauth]
Feb 23 07:57:18 prd-ubuntu2004-helm-2c-1g-19405 sshd[5941]: Invalid user jenkins from 10.30.104.4 port 52088
Feb 23 07:57:19 prd-ubuntu2004-helm-2c-1g-19405 sshd[5941]: Received disconnect from 10.30.104.4 port 52088:11: Closed due to user request. [preauth]
Feb 23 07:57:19 prd-ubuntu2004-helm-2c-1g-19405 sshd[5941]: Disconnected from invalid user jenkins 10.30.104.4 port 52088 [preauth]
Feb 23 07:57:21 prd-ubuntu2004-helm-2c-1g-19405 sshd[6753]: Invalid user jenkins from 10.30.104.4 port 52104
Feb 23 07:57:21 prd-ubuntu2004-helm-2c-1g-19405 sshd[6753]: Received disconnect from 10.30.104.4 port 52104:11: Closed due to user request. [preauth]
Feb 23 07:57:21 prd-ubuntu2004-helm-2c-1g-19405 sshd[6753]: Disconnected from invalid user jenkins 10.30.104.4 port 52104 [preauth]
Feb 23 07:57:23 prd-ubuntu2004-helm-2c-1g-19405 sshd[7665]: Invalid user jenkins from 10.30.104.4 port 52122
Feb 23 07:57:23 prd-ubuntu2004-helm-2c-1g-19405 sshd[7665]: Received disconnect from 10.30.104.4 port 52122:11: Closed due to user request. [preauth]
Feb 23 07:57:23 prd-ubuntu2004-helm-2c-1g-19405 sshd[7665]: Disconnected from invalid user jenkins 10.30.104.4 port 52122 [preauth]
Feb 23 07:57:25 prd-ubuntu2004-helm-2c-1g-19405 sshd[8215]: Invalid user jenkins from 10.30.104.4 port 52136
Feb 23 07:57:25 prd-ubuntu2004-helm-2c-1g-19405 sshd[8215]: Received disconnect from 10.30.104.4 port 52136:11: Closed due to user request. [preauth]
Feb 23 07:57:25 prd-ubuntu2004-helm-2c-1g-19405 sshd[8215]: Disconnected from invalid user jenkins 10.30.104.4 port 52136 [preauth]
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 useradd[8686]: new group: name=jenkins, GID=1001
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 useradd[8686]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 usermod[8723]: add 'jenkins' to group 'docker'
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 usermod[8723]: add 'jenkins' to shadow group 'docker'
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 sshd[8829]: Accepted publickey for jenkins from 10.30.104.4 port 52142 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 sshd[8829]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 systemd-logind[752]: New session 1 of user jenkins.
Feb 23 07:57:27 prd-ubuntu2004-helm-2c-1g-19405 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 23 07:58:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[21009]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 07:58:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[21009]: pam_unix(cron:session): session closed for user root
Feb 23 07:59:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[28932]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 07:59:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[28932]: pam_unix(cron:session): session closed for user root
Feb 23 08:00:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[29768]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:00:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[29768]: pam_unix(cron:session): session closed for user root
Feb 23 08:01:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[30872]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:01:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[30872]: pam_unix(cron:session): session closed for user root
Feb 23 08:02:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[31754]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:02:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[31754]: pam_unix(cron:session): session closed for user root
Feb 23 08:03:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[33261]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:03:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[33261]: pam_unix(cron:session): session closed for user root
Feb 23 08:04:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34477]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:04:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34477]: pam_unix(cron:session): session closed for user root
Feb 23 08:05:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34921]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:05:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34921]: pam_unix(cron:session): session closed for user root
Feb 23 08:06:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34925]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:06:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34925]: pam_unix(cron:session): session closed for user root
Feb 23 08:07:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34939]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:07:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[34939]: pam_unix(cron:session): session closed for user root
Feb 23 08:08:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[35907]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:08:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[35907]: pam_unix(cron:session): session closed for user root
Feb 23 08:09:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36317]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:09:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36317]: pam_unix(cron:session): session closed for user root
Feb 23 08:10:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36321]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:10:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36321]: pam_unix(cron:session): session closed for user root
Feb 23 08:11:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36324]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:11:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36324]: pam_unix(cron:session): session closed for user root
Feb 23 08:12:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36328]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:12:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36328]: pam_unix(cron:session): session closed for user root
Feb 23 08:13:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36352]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:13:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36352]: pam_unix(cron:session): session closed for user root
Feb 23 08:14:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36357]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:14:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36357]: pam_unix(cron:session): session closed for user root
Feb 23 08:15:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36360]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:15:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36360]: pam_unix(cron:session): session closed for user root
Feb 23 08:16:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36364]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:16:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36364]: pam_unix(cron:session): session closed for user root
Feb 23 08:17:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36441]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:17:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36442]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 23 08:17:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36441]: pam_unix(cron:session): session closed for user root
Feb 23 08:17:01 prd-ubuntu2004-helm-2c-1g-19405 CRON[36442]: pam_unix(cron:session): session closed for user root
Feb 23 08:17:36 prd-ubuntu2004-helm-2c-1g-19405 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Feb 23 08:17:36 prd-ubuntu2004-helm-2c-1g-19405 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)