Oct 23 07:10:57 prd-ubuntu2004-helm-2c-1g-4400 passwd[706]: password for 'ubuntu' changed by 'root'
Oct 23 07:10:57 prd-ubuntu2004-helm-2c-1g-4400 sshd[781]: Server listening on 0.0.0.0 port 22.
Oct 23 07:10:57 prd-ubuntu2004-helm-2c-1g-4400 sshd[781]: Server listening on :: port 22.
Oct 23 07:10:57 prd-ubuntu2004-helm-2c-1g-4400 systemd-logind[753]: New seat seat0.
Oct 23 07:10:57 prd-ubuntu2004-helm-2c-1g-4400 systemd-logind[753]: Watching system buttons on /dev/input/event0 (Power Button)
Oct 23 07:10:57 prd-ubuntu2004-helm-2c-1g-4400 systemd-logind[753]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Oct 23 07:10:58 prd-ubuntu2004-helm-2c-1g-4400 sshd[1431]: error: kex_exchange_identification: Connection closed by remote host
Oct 23 07:11:00 prd-ubuntu2004-helm-2c-1g-4400 sshd[2100]: Invalid user jenkins from 10.30.104.4 port 47858
Oct 23 07:11:00 prd-ubuntu2004-helm-2c-1g-4400 sshd[2100]: Received disconnect from 10.30.104.4 port 47858:11: Closed due to user request. [preauth]
Oct 23 07:11:00 prd-ubuntu2004-helm-2c-1g-4400 sshd[2100]: Disconnected from invalid user jenkins 10.30.104.4 port 47858 [preauth]
Oct 23 07:11:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[2542]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:11:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[2542]: pam_unix(cron:session): session closed for user root
Oct 23 07:11:02 prd-ubuntu2004-helm-2c-1g-4400 sshd[2770]: Invalid user jenkins from 10.30.104.4 port 47892
Oct 23 07:11:02 prd-ubuntu2004-helm-2c-1g-4400 sshd[2770]: Received disconnect from 10.30.104.4 port 47892:11: Closed due to user request. [preauth]
Oct 23 07:11:02 prd-ubuntu2004-helm-2c-1g-4400 sshd[2770]: Disconnected from invalid user jenkins 10.30.104.4 port 47892 [preauth]
Oct 23 07:11:04 prd-ubuntu2004-helm-2c-1g-4400 sshd[3407]: Invalid user jenkins from 10.30.104.4 port 47912
Oct 23 07:11:04 prd-ubuntu2004-helm-2c-1g-4400 sshd[3407]: Received disconnect from 10.30.104.4 port 47912:11: Closed due to user request. [preauth]
Oct 23 07:11:04 prd-ubuntu2004-helm-2c-1g-4400 sshd[3407]: Disconnected from invalid user jenkins 10.30.104.4 port 47912 [preauth]
Oct 23 07:11:07 prd-ubuntu2004-helm-2c-1g-4400 sshd[4017]: Invalid user jenkins from 10.30.104.4 port 47930
Oct 23 07:11:07 prd-ubuntu2004-helm-2c-1g-4400 sshd[4017]: Received disconnect from 10.30.104.4 port 47930:11: Closed due to user request. [preauth]
Oct 23 07:11:07 prd-ubuntu2004-helm-2c-1g-4400 sshd[4017]: Disconnected from invalid user jenkins 10.30.104.4 port 47930 [preauth]
Oct 23 07:11:09 prd-ubuntu2004-helm-2c-1g-4400 sshd[4607]: Invalid user jenkins from 10.30.104.4 port 47948
Oct 23 07:11:09 prd-ubuntu2004-helm-2c-1g-4400 sshd[4607]: Received disconnect from 10.30.104.4 port 47948:11: Closed due to user request. [preauth]
Oct 23 07:11:09 prd-ubuntu2004-helm-2c-1g-4400 sshd[4607]: Disconnected from invalid user jenkins 10.30.104.4 port 47948 [preauth]
Oct 23 07:11:11 prd-ubuntu2004-helm-2c-1g-4400 sshd[5191]: Invalid user jenkins from 10.30.104.4 port 47978
Oct 23 07:11:11 prd-ubuntu2004-helm-2c-1g-4400 sshd[5191]: Received disconnect from 10.30.104.4 port 47978:11: Closed due to user request. [preauth]
Oct 23 07:11:11 prd-ubuntu2004-helm-2c-1g-4400 sshd[5191]: Disconnected from invalid user jenkins 10.30.104.4 port 47978 [preauth]
Oct 23 07:11:13 prd-ubuntu2004-helm-2c-1g-4400 sshd[5801]: Invalid user jenkins from 10.30.104.4 port 48000
Oct 23 07:11:13 prd-ubuntu2004-helm-2c-1g-4400 sshd[5801]: Received disconnect from 10.30.104.4 port 48000:11: Closed due to user request. [preauth]
Oct 23 07:11:13 prd-ubuntu2004-helm-2c-1g-4400 sshd[5801]: Disconnected from invalid user jenkins 10.30.104.4 port 48000 [preauth]
Oct 23 07:11:15 prd-ubuntu2004-helm-2c-1g-4400 sshd[6633]: Invalid user jenkins from 10.30.104.4 port 48018
Oct 23 07:11:15 prd-ubuntu2004-helm-2c-1g-4400 sshd[6633]: Received disconnect from 10.30.104.4 port 48018:11: Closed due to user request. [preauth]
Oct 23 07:11:15 prd-ubuntu2004-helm-2c-1g-4400 sshd[6633]: Disconnected from invalid user jenkins 10.30.104.4 port 48018 [preauth]
Oct 23 07:11:17 prd-ubuntu2004-helm-2c-1g-4400 sshd[7282]: Invalid user jenkins from 10.30.104.4 port 48044
Oct 23 07:11:18 prd-ubuntu2004-helm-2c-1g-4400 sshd[7282]: Received disconnect from 10.30.104.4 port 48044:11: Closed due to user request. [preauth]
Oct 23 07:11:18 prd-ubuntu2004-helm-2c-1g-4400 sshd[7282]: Disconnected from invalid user jenkins 10.30.104.4 port 48044 [preauth]
Oct 23 07:11:18 prd-ubuntu2004-helm-2c-1g-4400 useradd[7383]: new group: name=jenkins, GID=1001
Oct 23 07:11:18 prd-ubuntu2004-helm-2c-1g-4400 useradd[7383]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Oct 23 07:11:18 prd-ubuntu2004-helm-2c-1g-4400 usermod[7418]: add 'jenkins' to group 'docker'
Oct 23 07:11:18 prd-ubuntu2004-helm-2c-1g-4400 usermod[7418]: add 'jenkins' to shadow group 'docker'
Oct 23 07:11:20 prd-ubuntu2004-helm-2c-1g-4400 sshd[7983]: Accepted publickey for jenkins from 10.30.104.4 port 48066 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Oct 23 07:11:20 prd-ubuntu2004-helm-2c-1g-4400 sshd[7983]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Oct 23 07:11:20 prd-ubuntu2004-helm-2c-1g-4400 systemd-logind[753]: New session 2 of user jenkins.
Oct 23 07:11:20 prd-ubuntu2004-helm-2c-1g-4400 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Oct 23 07:12:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[21124]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:12:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[21124]: pam_unix(cron:session): session closed for user root
Oct 23 07:13:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[31225]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:13:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[31225]: pam_unix(cron:session): session closed for user root
Oct 23 07:14:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[32905]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:14:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[32905]: pam_unix(cron:session): session closed for user root
Oct 23 07:15:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35122]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:15:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35122]: pam_unix(cron:session): session closed for user root
Oct 23 07:16:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35141]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:16:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35141]: pam_unix(cron:session): session closed for user root
Oct 23 07:17:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35666]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:17:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35665]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:17:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35665]: pam_unix(cron:session): session closed for user root
Oct 23 07:17:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[35666]: pam_unix(cron:session): session closed for user root
Oct 23 07:18:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37127]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:18:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37127]: pam_unix(cron:session): session closed for user root
Oct 23 07:19:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37240]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:19:02 prd-ubuntu2004-helm-2c-1g-4400 CRON[37240]: pam_unix(cron:session): session closed for user root
Oct 23 07:20:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37243]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:20:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37243]: pam_unix(cron:session): session closed for user root
Oct 23 07:21:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37252]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:21:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37252]: pam_unix(cron:session): session closed for user root
Oct 23 07:22:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37255]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:22:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37255]: pam_unix(cron:session): session closed for user root
Oct 23 07:23:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37262]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:23:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37262]: pam_unix(cron:session): session closed for user root
Oct 23 07:24:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37265]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:24:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37265]: pam_unix(cron:session): session closed for user root
Oct 23 07:25:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37269]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:25:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37269]: pam_unix(cron:session): session closed for user root
Oct 23 07:26:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37289]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:26:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[37289]: pam_unix(cron:session): session closed for user root
Oct 23 07:27:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[38311]: pam_unix(cron:session): session opened for user root by (uid=0)
Oct 23 07:27:01 prd-ubuntu2004-helm-2c-1g-4400 CRON[38311]: pam_unix(cron:session): session closed for user root
Oct 23 07:27:13 prd-ubuntu2004-helm-2c-1g-4400 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-merge-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Oct 23 07:27:13 prd-ubuntu2004-helm-2c-1g-4400 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)