May 8 11:39:32 prd-ubuntu2004-helm-2c-1g-8938 passwd[705]: password for 'ubuntu' changed by 'root' May 8 11:39:32 prd-ubuntu2004-helm-2c-1g-8938 sshd[782]: Server listening on 0.0.0.0 port 22. May 8 11:39:32 prd-ubuntu2004-helm-2c-1g-8938 sshd[782]: Server listening on :: port 22. May 8 11:39:32 prd-ubuntu2004-helm-2c-1g-8938 systemd-logind[752]: New seat seat0. May 8 11:39:32 prd-ubuntu2004-helm-2c-1g-8938 systemd-logind[752]: Watching system buttons on /dev/input/event0 (Power Button) May 8 11:39:32 prd-ubuntu2004-helm-2c-1g-8938 systemd-logind[752]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 8 11:39:34 prd-ubuntu2004-helm-2c-1g-8938 sshd[1419]: error: kex_exchange_identification: Connection closed by remote host May 8 11:39:41 prd-ubuntu2004-helm-2c-1g-8938 sshd[3709]: Invalid user jenkins from 10.30.104.4 port 60964 May 8 11:39:41 prd-ubuntu2004-helm-2c-1g-8938 sshd[3709]: Received disconnect from 10.30.104.4 port 60964:11: Closed due to user request. [preauth] May 8 11:39:41 prd-ubuntu2004-helm-2c-1g-8938 sshd[3709]: Disconnected from invalid user jenkins 10.30.104.4 port 60964 [preauth] May 8 11:39:43 prd-ubuntu2004-helm-2c-1g-8938 sshd[4417]: Invalid user jenkins from 10.30.104.4 port 60976 May 8 11:39:43 prd-ubuntu2004-helm-2c-1g-8938 sshd[4417]: Received disconnect from 10.30.104.4 port 60976:11: Closed due to user request. [preauth] May 8 11:39:43 prd-ubuntu2004-helm-2c-1g-8938 sshd[4417]: Disconnected from invalid user jenkins 10.30.104.4 port 60976 [preauth] May 8 11:39:45 prd-ubuntu2004-helm-2c-1g-8938 sshd[5098]: Invalid user jenkins from 10.30.104.4 port 60992 May 8 11:39:45 prd-ubuntu2004-helm-2c-1g-8938 sshd[5098]: Received disconnect from 10.30.104.4 port 60992:11: Closed due to user request. [preauth] May 8 11:39:45 prd-ubuntu2004-helm-2c-1g-8938 sshd[5098]: Disconnected from invalid user jenkins 10.30.104.4 port 60992 [preauth] May 8 11:39:47 prd-ubuntu2004-helm-2c-1g-8938 sshd[5807]: Invalid user jenkins from 10.30.104.4 port 60998 May 8 11:39:47 prd-ubuntu2004-helm-2c-1g-8938 sshd[5807]: Received disconnect from 10.30.104.4 port 60998:11: Closed due to user request. [preauth] May 8 11:39:47 prd-ubuntu2004-helm-2c-1g-8938 sshd[5807]: Disconnected from invalid user jenkins 10.30.104.4 port 60998 [preauth] May 8 11:39:49 prd-ubuntu2004-helm-2c-1g-8938 sshd[6585]: Invalid user jenkins from 10.30.104.4 port 32774 May 8 11:39:49 prd-ubuntu2004-helm-2c-1g-8938 sshd[6585]: Received disconnect from 10.30.104.4 port 32774:11: Closed due to user request. [preauth] May 8 11:39:49 prd-ubuntu2004-helm-2c-1g-8938 sshd[6585]: Disconnected from invalid user jenkins 10.30.104.4 port 32774 [preauth] May 8 11:39:52 prd-ubuntu2004-helm-2c-1g-8938 sshd[7579]: Invalid user jenkins from 10.30.104.4 port 32784 May 8 11:39:52 prd-ubuntu2004-helm-2c-1g-8938 sshd[7579]: Received disconnect from 10.30.104.4 port 32784:11: Closed due to user request. [preauth] May 8 11:39:52 prd-ubuntu2004-helm-2c-1g-8938 sshd[7579]: Disconnected from invalid user jenkins 10.30.104.4 port 32784 [preauth] May 8 11:39:55 prd-ubuntu2004-helm-2c-1g-8938 sshd[8372]: Invalid user jenkins from 10.30.104.4 port 32786 May 8 11:39:55 prd-ubuntu2004-helm-2c-1g-8938 sshd[8372]: Received disconnect from 10.30.104.4 port 32786:11: Closed due to user request. [preauth] May 8 11:39:55 prd-ubuntu2004-helm-2c-1g-8938 sshd[8372]: Disconnected from invalid user jenkins 10.30.104.4 port 32786 [preauth] May 8 11:39:55 prd-ubuntu2004-helm-2c-1g-8938 useradd[8522]: new group: name=jenkins, GID=1001 May 8 11:39:55 prd-ubuntu2004-helm-2c-1g-8938 useradd[8522]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 8 11:39:55 prd-ubuntu2004-helm-2c-1g-8938 usermod[8555]: add 'jenkins' to group 'docker' May 8 11:39:55 prd-ubuntu2004-helm-2c-1g-8938 usermod[8555]: add 'jenkins' to shadow group 'docker' May 8 11:39:57 prd-ubuntu2004-helm-2c-1g-8938 sshd[9213]: Accepted publickey for jenkins from 10.30.104.4 port 32788 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 May 8 11:39:57 prd-ubuntu2004-helm-2c-1g-8938 sshd[9213]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 8 11:39:57 prd-ubuntu2004-helm-2c-1g-8938 systemd-logind[752]: New session 1 of user jenkins. May 8 11:39:57 prd-ubuntu2004-helm-2c-1g-8938 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 8 11:40:02 prd-ubuntu2004-helm-2c-1g-8938 CRON[11497]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:40:02 prd-ubuntu2004-helm-2c-1g-8938 CRON[11497]: pam_unix(cron:session): session closed for user root May 8 11:41:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[28281]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:41:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[28281]: pam_unix(cron:session): session closed for user root May 8 11:42:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[31908]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:42:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[31908]: pam_unix(cron:session): session closed for user root May 8 11:43:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[34487]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:43:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[34487]: pam_unix(cron:session): session closed for user root May 8 11:44:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[35148]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:44:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[35148]: pam_unix(cron:session): session closed for user root May 8 11:44:41 prd-ubuntu2004-helm-2c-1g-8938 systemd-logind[752]: Watching system buttons on /dev/input/event0 (Power Button) May 8 11:44:41 prd-ubuntu2004-helm-2c-1g-8938 systemd-logind[752]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 8 11:45:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[36201]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:45:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[36201]: pam_unix(cron:session): session closed for user root May 8 11:46:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[36405]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:46:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[36405]: pam_unix(cron:session): session closed for user root May 8 11:47:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37782]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:47:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37782]: pam_unix(cron:session): session closed for user root May 8 11:48:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37827]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:48:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37827]: pam_unix(cron:session): session closed for user root May 8 11:49:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37830]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:49:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37830]: pam_unix(cron:session): session closed for user root May 8 11:50:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37839]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:50:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37839]: pam_unix(cron:session): session closed for user root May 8 11:51:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37842]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:51:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37842]: pam_unix(cron:session): session closed for user root May 8 11:52:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37846]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:52:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37846]: pam_unix(cron:session): session closed for user root May 8 11:53:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37849]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:53:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37849]: pam_unix(cron:session): session closed for user root May 8 11:54:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37853]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:54:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37853]: pam_unix(cron:session): session closed for user root May 8 11:55:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37958]: pam_unix(cron:session): session opened for user root by (uid=0) May 8 11:55:01 prd-ubuntu2004-helm-2c-1g-8938 CRON[37958]: pam_unix(cron:session): session closed for user root May 8 11:55:27 prd-ubuntu2004-helm-2c-1g-8938 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp May 8 11:55:27 prd-ubuntu2004-helm-2c-1g-8938 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)