Jun 3 09:45:55 prd-ubuntu2004-helm-2c-1g-6387 passwd[705]: password for 'ubuntu' changed by 'root' Jun 3 09:45:55 prd-ubuntu2004-helm-2c-1g-6387 sshd[783]: Server listening on 0.0.0.0 port 22. Jun 3 09:45:55 prd-ubuntu2004-helm-2c-1g-6387 sshd[783]: Server listening on :: port 22. Jun 3 09:45:55 prd-ubuntu2004-helm-2c-1g-6387 systemd-logind[745]: New seat seat0. Jun 3 09:45:55 prd-ubuntu2004-helm-2c-1g-6387 systemd-logind[745]: Watching system buttons on /dev/input/event0 (Power Button) Jun 3 09:45:55 prd-ubuntu2004-helm-2c-1g-6387 systemd-logind[745]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 3 09:45:58 prd-ubuntu2004-helm-2c-1g-6387 sshd[1912]: error: kex_exchange_identification: Connection closed by remote host Jun 3 09:46:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[2919]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:46:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[2919]: pam_unix(cron:session): session closed for user root Jun 3 09:46:06 prd-ubuntu2004-helm-2c-1g-6387 sshd[4474]: Invalid user jenkins from 10.30.104.4 port 53406 Jun 3 09:46:06 prd-ubuntu2004-helm-2c-1g-6387 sshd[4474]: Received disconnect from 10.30.104.4 port 53406:11: Closed due to user request. [preauth] Jun 3 09:46:06 prd-ubuntu2004-helm-2c-1g-6387 sshd[4474]: Disconnected from invalid user jenkins 10.30.104.4 port 53406 [preauth] Jun 3 09:46:08 prd-ubuntu2004-helm-2c-1g-6387 sshd[5126]: Invalid user jenkins from 10.30.104.4 port 53410 Jun 3 09:46:08 prd-ubuntu2004-helm-2c-1g-6387 sshd[5126]: Received disconnect from 10.30.104.4 port 53410:11: Closed due to user request. [preauth] Jun 3 09:46:08 prd-ubuntu2004-helm-2c-1g-6387 sshd[5126]: Disconnected from invalid user jenkins 10.30.104.4 port 53410 [preauth] Jun 3 09:46:10 prd-ubuntu2004-helm-2c-1g-6387 sshd[5760]: Invalid user jenkins from 10.30.104.4 port 53412 Jun 3 09:46:10 prd-ubuntu2004-helm-2c-1g-6387 sshd[5760]: Received disconnect from 10.30.104.4 port 53412:11: Closed due to user request. [preauth] Jun 3 09:46:10 prd-ubuntu2004-helm-2c-1g-6387 sshd[5760]: Disconnected from invalid user jenkins 10.30.104.4 port 53412 [preauth] Jun 3 09:46:13 prd-ubuntu2004-helm-2c-1g-6387 sshd[6537]: Invalid user jenkins from 10.30.104.4 port 53414 Jun 3 09:46:13 prd-ubuntu2004-helm-2c-1g-6387 sshd[6537]: Received disconnect from 10.30.104.4 port 53414:11: Closed due to user request. [preauth] Jun 3 09:46:13 prd-ubuntu2004-helm-2c-1g-6387 sshd[6537]: Disconnected from invalid user jenkins 10.30.104.4 port 53414 [preauth] Jun 3 09:46:15 prd-ubuntu2004-helm-2c-1g-6387 sshd[7440]: Invalid user jenkins from 10.30.104.4 port 53416 Jun 3 09:46:15 prd-ubuntu2004-helm-2c-1g-6387 sshd[7440]: Received disconnect from 10.30.104.4 port 53416:11: Closed due to user request. [preauth] Jun 3 09:46:15 prd-ubuntu2004-helm-2c-1g-6387 sshd[7440]: Disconnected from invalid user jenkins 10.30.104.4 port 53416 [preauth] Jun 3 09:46:17 prd-ubuntu2004-helm-2c-1g-6387 sshd[8204]: Invalid user jenkins from 10.30.104.4 port 53418 Jun 3 09:46:17 prd-ubuntu2004-helm-2c-1g-6387 sshd[8204]: Received disconnect from 10.30.104.4 port 53418:11: Closed due to user request. [preauth] Jun 3 09:46:17 prd-ubuntu2004-helm-2c-1g-6387 sshd[8204]: Disconnected from invalid user jenkins 10.30.104.4 port 53418 [preauth] Jun 3 09:46:19 prd-ubuntu2004-helm-2c-1g-6387 sshd[8719]: Invalid user jenkins from 10.30.104.4 port 53420 Jun 3 09:46:19 prd-ubuntu2004-helm-2c-1g-6387 sshd[8719]: Received disconnect from 10.30.104.4 port 53420:11: Closed due to user request. [preauth] Jun 3 09:46:19 prd-ubuntu2004-helm-2c-1g-6387 sshd[8719]: Disconnected from invalid user jenkins 10.30.104.4 port 53420 [preauth] Jun 3 09:46:19 prd-ubuntu2004-helm-2c-1g-6387 useradd[8812]: new group: name=jenkins, GID=1001 Jun 3 09:46:19 prd-ubuntu2004-helm-2c-1g-6387 useradd[8812]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jun 3 09:46:19 prd-ubuntu2004-helm-2c-1g-6387 usermod[8843]: add 'jenkins' to group 'docker' Jun 3 09:46:19 prd-ubuntu2004-helm-2c-1g-6387 usermod[8843]: add 'jenkins' to shadow group 'docker' Jun 3 09:46:21 prd-ubuntu2004-helm-2c-1g-6387 sshd[9544]: Accepted publickey for jenkins from 10.30.104.4 port 53422 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jun 3 09:46:21 prd-ubuntu2004-helm-2c-1g-6387 sshd[9544]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 3 09:46:21 prd-ubuntu2004-helm-2c-1g-6387 systemd-logind[745]: New session 2 of user jenkins. Jun 3 09:46:21 prd-ubuntu2004-helm-2c-1g-6387 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 3 09:47:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[23090]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:47:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[23090]: pam_unix(cron:session): session closed for user root Jun 3 09:48:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[31208]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:48:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[31208]: pam_unix(cron:session): session closed for user root Jun 3 09:49:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[32230]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:49:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[32230]: pam_unix(cron:session): session closed for user root Jun 3 09:50:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[34961]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:50:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[34961]: pam_unix(cron:session): session closed for user root Jun 3 09:51:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[35117]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:51:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[35117]: pam_unix(cron:session): session closed for user root Jun 3 09:52:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[35141]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:52:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[35141]: pam_unix(cron:session): session closed for user root Jun 3 09:53:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[35819]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:53:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[35819]: pam_unix(cron:session): session closed for user root Jun 3 09:54:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36660]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:54:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36660]: pam_unix(cron:session): session closed for user root Jun 3 09:55:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36701]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:55:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36701]: pam_unix(cron:session): session closed for user root Jun 3 09:56:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36707]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:56:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36707]: pam_unix(cron:session): session closed for user root Jun 3 09:57:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36731]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:57:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36731]: pam_unix(cron:session): session closed for user root Jun 3 09:58:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36736]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:58:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36736]: pam_unix(cron:session): session closed for user root Jun 3 09:59:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36739]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 09:59:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36739]: pam_unix(cron:session): session closed for user root Jun 3 10:00:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36743]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 10:00:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36743]: pam_unix(cron:session): session closed for user root Jun 3 10:01:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36767]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 10:01:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36767]: pam_unix(cron:session): session closed for user root Jun 3 10:02:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36838]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 3 10:02:01 prd-ubuntu2004-helm-2c-1g-6387 CRON[36838]: pam_unix(cron:session): session closed for user root Jun 3 10:02:38 prd-ubuntu2004-helm-2c-1g-6387 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jun 3 10:02:38 prd-ubuntu2004-helm-2c-1g-6387 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)