Oct 13 12:17:20 prd-ubuntu2004-helm-2c-1g-1298 passwd[704]: password for 'ubuntu' changed by 'root'
Oct 13 12:17:20 prd-ubuntu2004-helm-2c-1g-1298 sshd[776]: Server listening on 0.0.0.0 port 22.
Oct 13 12:17:20 prd-ubuntu2004-helm-2c-1g-1298 sshd[776]: Server listening on :: port 22.
Oct 13 12:17:20 prd-ubuntu2004-helm-2c-1g-1298 systemd-logind[757]: New seat seat0.
Oct 13 12:17:20 prd-ubuntu2004-helm-2c-1g-1298 systemd-logind[757]: Watching system buttons on /dev/input/event0 (Power Button)
Oct 13 12:17:20 prd-ubuntu2004-helm-2c-1g-1298 systemd-logind[757]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Oct 13 12:17:22 prd-ubuntu2004-helm-2c-1g-1298 sshd[1486]: error: kex_exchange_identification: Connection closed by remote host
Oct 13 12:17:30 prd-ubuntu2004-helm-2c-1g-1298 sshd[3710]: Invalid user jenkins from 10.30.104.4 port 57684
Oct 13 12:17:30 prd-ubuntu2004-helm-2c-1g-1298 sshd[3710]: Received disconnect from 10.30.104.4 port 57684:11: Closed due to user request. [preauth]
Oct 13 12:17:30 prd-ubuntu2004-helm-2c-1g-1298 sshd[3710]: Disconnected from invalid user jenkins 10.30.104.4 port 57684 [preauth]
Oct 13 12:17:32 prd-ubuntu2004-helm-2c-1g-1298 sshd[4319]: Invalid user jenkins from 10.30.104.4 port 57686
Oct 13 12:17:32 prd-ubuntu2004-helm-2c-1g-1298 sshd[4319]: Received disconnect from 10.30.104.4 port 57686:11: Closed due to user request. [preauth]
Oct 13 12:17:32 prd-ubuntu2004-helm-2c-1g-1298 sshd[4319]: Disconnected from invalid user jenkins 10.30.104.4 port 57686 [preauth]
Oct 13 12:17:34 prd-ubuntu2004-helm-2c-1g-1298 sshd[4905]: Invalid user jenkins from 10.30.104.4 port 57688
Oct 13 12:17:34 prd-ubuntu2004-helm-2c-1g-1298 sshd[4905]: Received disconnect from 10.30.104.4 port 57688:11: Closed due to user request. [preauth]
Oct 13 12:17:34 prd-ubuntu2004-helm-2c-1g-1298 sshd[4905]: Disconnected from invalid user jenkins 10.30.104.4 port 57688 [preauth]
Oct 13 12:17:36 prd-ubuntu2004-helm-2c-1g-1298 sshd[5487]: Invalid user jenkins from 10.30.104.4 port 57690
Oct 13 12:17:36 prd-ubuntu2004-helm-2c-1g-1298 sshd[5487]: Received disconnect from 10.30.104.4 port 57690:11: Closed due to user request. [preauth]
Oct 13 12:17:36 prd-ubuntu2004-helm-2c-1g-1298 sshd[5487]: Disconnected from invalid user jenkins 10.30.104.4 port 57690 [preauth]
Oct 13 12:17:39 prd-ubuntu2004-helm-2c-1g-1298 sshd[6217]: Invalid user jenkins from 10.30.104.4 port 57692
Oct 13 12:17:39 prd-ubuntu2004-helm-2c-1g-1298 sshd[6217]: Received disconnect from 10.30.104.4 port 57692:11: Closed due to user request. [preauth]
Oct 13 12:17:39 prd-ubuntu2004-helm-2c-1g-1298 sshd[6217]: Disconnected from invalid user jenkins 10.30.104.4 port 57692 [preauth]
Oct 13 12:17:41 prd-ubuntu2004-helm-2c-1g-1298 sshd[6954]: Invalid user jenkins from 10.30.104.4 port 57696
Oct 13 12:17:41 prd-ubuntu2004-helm-2c-1g-1298 sshd[6954]: Received disconnect from 10.30.104.4 port 57696:11: Closed due to user request. [preauth]
Oct 13 12:17:41 prd-ubuntu2004-helm-2c-1g-1298 sshd[6954]: Disconnected from invalid user jenkins 10.30.104.4 port 57696 [preauth]
Oct 13 12:17:43 prd-ubuntu2004-helm-2c-1g-1298 useradd[7262]: new group: name=jenkins, GID=1001
Oct 13 12:17:43 prd-ubuntu2004-helm-2c-1g-1298 useradd[7262]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Oct 13 12:17:43 prd-ubuntu2004-helm-2c-1g-1298 usermod[7296]: add 'jenkins' to group 'docker'
Oct 13 12:17:43 prd-ubuntu2004-helm-2c-1g-1298 usermod[7296]: add 'jenkins' to shadow group 'docker'
Oct 13 12:17:43 prd-ubuntu2004-helm-2c-1g-1298 sshd[7551]: Accepted publickey for jenkins from 10.30.104.4 port 57698 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Oct 13 12:17:43 prd-ubuntu2004-helm-2c-1g-1298 sshd[7551]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Oct 13 12:17:43 prd-ubuntu2004-helm-2c-1g-1298 systemd-logind[757]: New session 1 of user jenkins.
Oct 13 12:17:44 prd-ubuntu2004-helm-2c-1g-1298 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Oct 13 12:18:02 prd-ubuntu2004-helm-2c-1g-1298 CRON[13986]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:18:02 prd-ubuntu2004-helm-2c-1g-1298 CRON[13986]: pam_unix(cron:session): session closed for user root
Oct 13 12:19:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[28824]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:19:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[28824]: pam_unix(cron:session): session closed for user root
Oct 13 12:20:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[32253]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:20:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[32253]: pam_unix(cron:session): session closed for user root
Oct 13 12:21:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[34612]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:21:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[34612]: pam_unix(cron:session): session closed for user root
Oct 13 12:22:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[35126]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:22:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[35126]: pam_unix(cron:session): session closed for user root
Oct 13 12:23:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[35685]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:23:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[35685]: pam_unix(cron:session): session closed for user root
Oct 13 12:24:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[36586]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:24:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[36586]: pam_unix(cron:session): session closed for user root
Oct 13 12:25:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37247]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:25:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37247]: pam_unix(cron:session): session closed for user root
Oct 13 12:26:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37251]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:26:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37251]: pam_unix(cron:session): session closed for user root
Oct 13 12:27:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37254]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:27:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37254]: pam_unix(cron:session): session closed for user root
Oct 13 12:28:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37260]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:28:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37260]: pam_unix(cron:session): session closed for user root
Oct 13 12:29:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37263]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:29:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37263]: pam_unix(cron:session): session closed for user root
Oct 13 12:30:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37267]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:30:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37267]: pam_unix(cron:session): session closed for user root
Oct 13 12:31:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37270]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:31:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37270]: pam_unix(cron:session): session closed for user root
Oct 13 12:32:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37364]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 13 12:32:01 prd-ubuntu2004-helm-2c-1g-1298 CRON[37364]: pam_unix(cron:session): session closed for user root
Oct 13 12:32:36 prd-ubuntu2004-helm-2c-1g-1298 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Oct 13 12:32:36 prd-ubuntu2004-helm-2c-1g-1298 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)