Mar 2 09:20:17 prd-ubuntu2004-helm-2c-1g-940 passwd[693]: password for 'ubuntu' changed by 'root' Mar 2 09:20:17 prd-ubuntu2004-helm-2c-1g-940 sshd[774]: Server listening on 0.0.0.0 port 22. Mar 2 09:20:17 prd-ubuntu2004-helm-2c-1g-940 sshd[774]: Server listening on :: port 22. Mar 2 09:20:17 prd-ubuntu2004-helm-2c-1g-940 systemd-logind[751]: New seat seat0. Mar 2 09:20:17 prd-ubuntu2004-helm-2c-1g-940 systemd-logind[751]: Watching system buttons on /dev/input/event0 (Power Button) Mar 2 09:20:17 prd-ubuntu2004-helm-2c-1g-940 systemd-logind[751]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 2 09:20:18 prd-ubuntu2004-helm-2c-1g-940 sshd[1454]: error: kex_exchange_identification: Connection closed by remote host Mar 2 09:20:19 prd-ubuntu2004-helm-2c-1g-940 sshd[1706]: Invalid user jenkins from 10.30.104.4 port 49682 Mar 2 09:20:19 prd-ubuntu2004-helm-2c-1g-940 sshd[1706]: Received disconnect from 10.30.104.4 port 49682:11: Closed due to user request. [preauth] Mar 2 09:20:19 prd-ubuntu2004-helm-2c-1g-940 sshd[1706]: Disconnected from invalid user jenkins 10.30.104.4 port 49682 [preauth] Mar 2 09:20:21 prd-ubuntu2004-helm-2c-1g-940 sshd[2477]: Invalid user jenkins from 10.30.104.4 port 49684 Mar 2 09:20:21 prd-ubuntu2004-helm-2c-1g-940 sshd[2477]: Received disconnect from 10.30.104.4 port 49684:11: Closed due to user request. [preauth] Mar 2 09:20:21 prd-ubuntu2004-helm-2c-1g-940 sshd[2477]: Disconnected from invalid user jenkins 10.30.104.4 port 49684 [preauth] Mar 2 09:20:23 prd-ubuntu2004-helm-2c-1g-940 sshd[3193]: Invalid user jenkins from 10.30.104.4 port 49686 Mar 2 09:20:23 prd-ubuntu2004-helm-2c-1g-940 sshd[3193]: Received disconnect from 10.30.104.4 port 49686:11: Closed due to user request. [preauth] Mar 2 09:20:23 prd-ubuntu2004-helm-2c-1g-940 sshd[3193]: Disconnected from invalid user jenkins 10.30.104.4 port 49686 [preauth] Mar 2 09:20:25 prd-ubuntu2004-helm-2c-1g-940 sshd[3878]: Invalid user jenkins from 10.30.104.4 port 49688 Mar 2 09:20:26 prd-ubuntu2004-helm-2c-1g-940 sshd[3878]: Received disconnect from 10.30.104.4 port 49688:11: Closed due to user request. [preauth] Mar 2 09:20:26 prd-ubuntu2004-helm-2c-1g-940 sshd[3878]: Disconnected from invalid user jenkins 10.30.104.4 port 49688 [preauth] Mar 2 09:20:28 prd-ubuntu2004-helm-2c-1g-940 sshd[4519]: Invalid user jenkins from 10.30.104.4 port 49690 Mar 2 09:20:28 prd-ubuntu2004-helm-2c-1g-940 sshd[4519]: Received disconnect from 10.30.104.4 port 49690:11: Closed due to user request. [preauth] Mar 2 09:20:28 prd-ubuntu2004-helm-2c-1g-940 sshd[4519]: Disconnected from invalid user jenkins 10.30.104.4 port 49690 [preauth] Mar 2 09:20:30 prd-ubuntu2004-helm-2c-1g-940 sshd[5166]: Invalid user jenkins from 10.30.104.4 port 49700 Mar 2 09:20:30 prd-ubuntu2004-helm-2c-1g-940 sshd[5166]: Received disconnect from 10.30.104.4 port 49700:11: Closed due to user request. [preauth] Mar 2 09:20:30 prd-ubuntu2004-helm-2c-1g-940 sshd[5166]: Disconnected from invalid user jenkins 10.30.104.4 port 49700 [preauth] Mar 2 09:20:32 prd-ubuntu2004-helm-2c-1g-940 sshd[5821]: Invalid user jenkins from 10.30.104.4 port 49708 Mar 2 09:20:32 prd-ubuntu2004-helm-2c-1g-940 sshd[5821]: Received disconnect from 10.30.104.4 port 49708:11: Closed due to user request. [preauth] Mar 2 09:20:32 prd-ubuntu2004-helm-2c-1g-940 sshd[5821]: Disconnected from invalid user jenkins 10.30.104.4 port 49708 [preauth] Mar 2 09:20:34 prd-ubuntu2004-helm-2c-1g-940 sshd[6562]: Invalid user jenkins from 10.30.104.4 port 49716 Mar 2 09:20:34 prd-ubuntu2004-helm-2c-1g-940 sshd[6562]: Received disconnect from 10.30.104.4 port 49716:11: Closed due to user request. [preauth] Mar 2 09:20:34 prd-ubuntu2004-helm-2c-1g-940 sshd[6562]: Disconnected from invalid user jenkins 10.30.104.4 port 49716 [preauth] Mar 2 09:20:36 prd-ubuntu2004-helm-2c-1g-940 sshd[7522]: Invalid user jenkins from 10.30.104.4 port 49724 Mar 2 09:20:36 prd-ubuntu2004-helm-2c-1g-940 sshd[7522]: Received disconnect from 10.30.104.4 port 49724:11: Closed due to user request. [preauth] Mar 2 09:20:36 prd-ubuntu2004-helm-2c-1g-940 sshd[7522]: Disconnected from invalid user jenkins 10.30.104.4 port 49724 [preauth] Mar 2 09:20:38 prd-ubuntu2004-helm-2c-1g-940 sshd[8203]: Invalid user jenkins from 10.30.104.4 port 49730 Mar 2 09:20:38 prd-ubuntu2004-helm-2c-1g-940 sshd[8203]: Received disconnect from 10.30.104.4 port 49730:11: Closed due to user request. [preauth] Mar 2 09:20:38 prd-ubuntu2004-helm-2c-1g-940 sshd[8203]: Disconnected from invalid user jenkins 10.30.104.4 port 49730 [preauth] Mar 2 09:20:39 prd-ubuntu2004-helm-2c-1g-940 useradd[8451]: new group: name=jenkins, GID=1001 Mar 2 09:20:39 prd-ubuntu2004-helm-2c-1g-940 useradd[8451]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 2 09:20:39 prd-ubuntu2004-helm-2c-1g-940 usermod[8482]: add 'jenkins' to group 'docker' Mar 2 09:20:39 prd-ubuntu2004-helm-2c-1g-940 usermod[8482]: add 'jenkins' to shadow group 'docker' Mar 2 09:20:40 prd-ubuntu2004-helm-2c-1g-940 sshd[9056]: Accepted publickey for jenkins from 10.30.104.4 port 49732 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Mar 2 09:20:40 prd-ubuntu2004-helm-2c-1g-940 sshd[9056]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 2 09:20:40 prd-ubuntu2004-helm-2c-1g-940 systemd-logind[751]: New session 1 of user jenkins. Mar 2 09:20:40 prd-ubuntu2004-helm-2c-1g-940 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 2 09:21:01 prd-ubuntu2004-helm-2c-1g-940 CRON[16705]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:21:01 prd-ubuntu2004-helm-2c-1g-940 CRON[16705]: pam_unix(cron:session): session closed for user root Mar 2 09:22:01 prd-ubuntu2004-helm-2c-1g-940 CRON[28727]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:22:01 prd-ubuntu2004-helm-2c-1g-940 CRON[28727]: pam_unix(cron:session): session closed for user root Mar 2 09:23:01 prd-ubuntu2004-helm-2c-1g-940 CRON[29592]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:23:01 prd-ubuntu2004-helm-2c-1g-940 CRON[29592]: pam_unix(cron:session): session closed for user root Mar 2 09:24:01 prd-ubuntu2004-helm-2c-1g-940 CRON[30864]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:24:01 prd-ubuntu2004-helm-2c-1g-940 CRON[30864]: pam_unix(cron:session): session closed for user root Mar 2 09:25:01 prd-ubuntu2004-helm-2c-1g-940 CRON[31632]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:25:01 prd-ubuntu2004-helm-2c-1g-940 CRON[31632]: pam_unix(cron:session): session closed for user root Mar 2 09:25:26 prd-ubuntu2004-helm-2c-1g-940 systemd-logind[751]: Watching system buttons on /dev/input/event0 (Power Button) Mar 2 09:25:26 prd-ubuntu2004-helm-2c-1g-940 systemd-logind[751]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 2 09:26:01 prd-ubuntu2004-helm-2c-1g-940 CRON[33007]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:26:01 prd-ubuntu2004-helm-2c-1g-940 CRON[33007]: pam_unix(cron:session): session closed for user root Mar 2 09:27:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34452]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:27:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34452]: pam_unix(cron:session): session closed for user root Mar 2 09:28:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34945]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:28:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34945]: pam_unix(cron:session): session closed for user root Mar 2 09:29:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34949]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:29:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34949]: pam_unix(cron:session): session closed for user root Mar 2 09:30:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34954]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:30:01 prd-ubuntu2004-helm-2c-1g-940 CRON[34954]: pam_unix(cron:session): session closed for user root Mar 2 09:31:01 prd-ubuntu2004-helm-2c-1g-940 CRON[35725]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:31:01 prd-ubuntu2004-helm-2c-1g-940 CRON[35725]: pam_unix(cron:session): session closed for user root Mar 2 09:32:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36313]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:32:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36313]: pam_unix(cron:session): session closed for user root Mar 2 09:33:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36351]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:33:02 prd-ubuntu2004-helm-2c-1g-940 CRON[36351]: pam_unix(cron:session): session closed for user root Mar 2 09:34:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36354]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:34:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36354]: pam_unix(cron:session): session closed for user root Mar 2 09:35:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36358]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:35:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36358]: pam_unix(cron:session): session closed for user root Mar 2 09:36:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36380]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:36:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36380]: pam_unix(cron:session): session closed for user root Mar 2 09:37:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36385]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:37:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36385]: pam_unix(cron:session): session closed for user root Mar 2 09:38:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36389]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:38:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36389]: pam_unix(cron:session): session closed for user root Mar 2 09:39:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36393]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:39:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36393]: pam_unix(cron:session): session closed for user root Mar 2 09:40:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36398]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:40:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36398]: pam_unix(cron:session): session closed for user root Mar 2 09:41:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36493]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 09:41:01 prd-ubuntu2004-helm-2c-1g-940 CRON[36493]: pam_unix(cron:session): session closed for user root Mar 2 09:41:50 prd-ubuntu2004-helm-2c-1g-940 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp