Jun 16 10:31:43 prd-ubuntu2004-helm-2c-1g-12321 passwd[700]: password for 'ubuntu' changed by 'root' Jun 16 10:31:43 prd-ubuntu2004-helm-2c-1g-12321 sshd[769]: Server listening on 0.0.0.0 port 22. Jun 16 10:31:43 prd-ubuntu2004-helm-2c-1g-12321 sshd[769]: Server listening on :: port 22. Jun 16 10:31:43 prd-ubuntu2004-helm-2c-1g-12321 systemd-logind[745]: New seat seat0. Jun 16 10:31:43 prd-ubuntu2004-helm-2c-1g-12321 systemd-logind[745]: Watching system buttons on /dev/input/event0 (Power Button) Jun 16 10:31:43 prd-ubuntu2004-helm-2c-1g-12321 systemd-logind[745]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 16 10:31:45 prd-ubuntu2004-helm-2c-1g-12321 sshd[1271]: error: kex_exchange_identification: Connection closed by remote host Jun 16 10:31:45 prd-ubuntu2004-helm-2c-1g-12321 sshd[1520]: Invalid user jenkins from 10.30.104.4 port 53686 Jun 16 10:31:45 prd-ubuntu2004-helm-2c-1g-12321 sshd[1520]: Received disconnect from 10.30.104.4 port 53686:11: Closed due to user request. [preauth] Jun 16 10:31:45 prd-ubuntu2004-helm-2c-1g-12321 sshd[1520]: Disconnected from invalid user jenkins 10.30.104.4 port 53686 [preauth] Jun 16 10:31:47 prd-ubuntu2004-helm-2c-1g-12321 sshd[2266]: Invalid user jenkins from 10.30.104.4 port 53688 Jun 16 10:31:47 prd-ubuntu2004-helm-2c-1g-12321 sshd[2266]: Received disconnect from 10.30.104.4 port 53688:11: Closed due to user request. [preauth] Jun 16 10:31:47 prd-ubuntu2004-helm-2c-1g-12321 sshd[2266]: Disconnected from invalid user jenkins 10.30.104.4 port 53688 [preauth] Jun 16 10:31:50 prd-ubuntu2004-helm-2c-1g-12321 sshd[2971]: Invalid user jenkins from 10.30.104.4 port 53692 Jun 16 10:31:50 prd-ubuntu2004-helm-2c-1g-12321 sshd[2971]: Received disconnect from 10.30.104.4 port 53692:11: Closed due to user request. [preauth] Jun 16 10:31:50 prd-ubuntu2004-helm-2c-1g-12321 sshd[2971]: Disconnected from invalid user jenkins 10.30.104.4 port 53692 [preauth] Jun 16 10:31:52 prd-ubuntu2004-helm-2c-1g-12321 sshd[3654]: Invalid user jenkins from 10.30.104.4 port 53694 Jun 16 10:31:52 prd-ubuntu2004-helm-2c-1g-12321 sshd[3654]: Received disconnect from 10.30.104.4 port 53694:11: Closed due to user request. [preauth] Jun 16 10:31:52 prd-ubuntu2004-helm-2c-1g-12321 sshd[3654]: Disconnected from invalid user jenkins 10.30.104.4 port 53694 [preauth] Jun 16 10:31:54 prd-ubuntu2004-helm-2c-1g-12321 sshd[4374]: Invalid user jenkins from 10.30.104.4 port 53696 Jun 16 10:31:54 prd-ubuntu2004-helm-2c-1g-12321 sshd[4374]: Received disconnect from 10.30.104.4 port 53696:11: Closed due to user request. [preauth] Jun 16 10:31:54 prd-ubuntu2004-helm-2c-1g-12321 sshd[4374]: Disconnected from invalid user jenkins 10.30.104.4 port 53696 [preauth] Jun 16 10:31:56 prd-ubuntu2004-helm-2c-1g-12321 sshd[5032]: Invalid user jenkins from 10.30.104.4 port 53698 Jun 16 10:31:56 prd-ubuntu2004-helm-2c-1g-12321 sshd[5032]: Received disconnect from 10.30.104.4 port 53698:11: Closed due to user request. [preauth] Jun 16 10:31:56 prd-ubuntu2004-helm-2c-1g-12321 sshd[5032]: Disconnected from invalid user jenkins 10.30.104.4 port 53698 [preauth] Jun 16 10:31:58 prd-ubuntu2004-helm-2c-1g-12321 sshd[5655]: Invalid user jenkins from 10.30.104.4 port 53700 Jun 16 10:31:58 prd-ubuntu2004-helm-2c-1g-12321 sshd[5655]: Received disconnect from 10.30.104.4 port 53700:11: Closed due to user request. [preauth] Jun 16 10:31:58 prd-ubuntu2004-helm-2c-1g-12321 sshd[5655]: Disconnected from invalid user jenkins 10.30.104.4 port 53700 [preauth] Jun 16 10:32:00 prd-ubuntu2004-helm-2c-1g-12321 sshd[6151]: Invalid user jenkins from 10.30.104.4 port 53702 Jun 16 10:32:00 prd-ubuntu2004-helm-2c-1g-12321 sshd[6151]: Received disconnect from 10.30.104.4 port 53702:11: Closed due to user request. [preauth] Jun 16 10:32:00 prd-ubuntu2004-helm-2c-1g-12321 sshd[6151]: Disconnected from invalid user jenkins 10.30.104.4 port 53702 [preauth] Jun 16 10:32:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[6243]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:32:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[6243]: pam_unix(cron:session): session closed for user root Jun 16 10:32:03 prd-ubuntu2004-helm-2c-1g-12321 sshd[6509]: Invalid user jenkins from 10.30.104.4 port 53704 Jun 16 10:32:03 prd-ubuntu2004-helm-2c-1g-12321 sshd[6509]: Received disconnect from 10.30.104.4 port 53704:11: Closed due to user request. [preauth] Jun 16 10:32:03 prd-ubuntu2004-helm-2c-1g-12321 sshd[6509]: Disconnected from invalid user jenkins 10.30.104.4 port 53704 [preauth] Jun 16 10:32:06 prd-ubuntu2004-helm-2c-1g-12321 sshd[7191]: Invalid user jenkins from 10.30.104.4 port 53708 Jun 16 10:32:06 prd-ubuntu2004-helm-2c-1g-12321 sshd[7191]: Received disconnect from 10.30.104.4 port 53708:11: Closed due to user request. [preauth] Jun 16 10:32:06 prd-ubuntu2004-helm-2c-1g-12321 sshd[7191]: Disconnected from invalid user jenkins 10.30.104.4 port 53708 [preauth] Jun 16 10:32:08 prd-ubuntu2004-helm-2c-1g-12321 sshd[8018]: Invalid user jenkins from 10.30.104.4 port 53710 Jun 16 10:32:08 prd-ubuntu2004-helm-2c-1g-12321 sshd[8018]: Received disconnect from 10.30.104.4 port 53710:11: Closed due to user request. [preauth] Jun 16 10:32:08 prd-ubuntu2004-helm-2c-1g-12321 sshd[8018]: Disconnected from invalid user jenkins 10.30.104.4 port 53710 [preauth] Jun 16 10:32:10 prd-ubuntu2004-helm-2c-1g-12321 sshd[8500]: Invalid user jenkins from 10.30.104.4 port 53712 Jun 16 10:32:10 prd-ubuntu2004-helm-2c-1g-12321 sshd[8500]: Received disconnect from 10.30.104.4 port 53712:11: Closed due to user request. [preauth] Jun 16 10:32:10 prd-ubuntu2004-helm-2c-1g-12321 sshd[8500]: Disconnected from invalid user jenkins 10.30.104.4 port 53712 [preauth] Jun 16 10:32:12 prd-ubuntu2004-helm-2c-1g-12321 sshd[8739]: Invalid user jenkins from 10.30.104.4 port 53714 Jun 16 10:32:12 prd-ubuntu2004-helm-2c-1g-12321 sshd[8739]: Received disconnect from 10.30.104.4 port 53714:11: Closed due to user request. [preauth] Jun 16 10:32:12 prd-ubuntu2004-helm-2c-1g-12321 sshd[8739]: Disconnected from invalid user jenkins 10.30.104.4 port 53714 [preauth] Jun 16 10:32:15 prd-ubuntu2004-helm-2c-1g-12321 sshd[9303]: Invalid user jenkins from 10.30.104.4 port 53716 Jun 16 10:32:15 prd-ubuntu2004-helm-2c-1g-12321 useradd[9328]: new group: name=jenkins, GID=1001 Jun 16 10:32:15 prd-ubuntu2004-helm-2c-1g-12321 useradd[9328]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jun 16 10:32:15 prd-ubuntu2004-helm-2c-1g-12321 sshd[9303]: Received disconnect from 10.30.104.4 port 53716:11: Closed due to user request. [preauth] Jun 16 10:32:15 prd-ubuntu2004-helm-2c-1g-12321 sshd[9303]: Disconnected from invalid user jenkins 10.30.104.4 port 53716 [preauth] Jun 16 10:32:15 prd-ubuntu2004-helm-2c-1g-12321 usermod[9376]: add 'jenkins' to group 'docker' Jun 16 10:32:15 prd-ubuntu2004-helm-2c-1g-12321 usermod[9376]: add 'jenkins' to shadow group 'docker' Jun 16 10:32:17 prd-ubuntu2004-helm-2c-1g-12321 sshd[10191]: Accepted publickey for jenkins from 10.30.104.4 port 53718 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jun 16 10:32:17 prd-ubuntu2004-helm-2c-1g-12321 sshd[10191]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 16 10:32:17 prd-ubuntu2004-helm-2c-1g-12321 systemd-logind[745]: New session 2 of user jenkins. Jun 16 10:32:17 prd-ubuntu2004-helm-2c-1g-12321 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 16 10:33:02 prd-ubuntu2004-helm-2c-1g-12321 CRON[24824]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:33:02 prd-ubuntu2004-helm-2c-1g-12321 CRON[24824]: pam_unix(cron:session): session closed for user root Jun 16 10:34:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[31247]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:34:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[31247]: pam_unix(cron:session): session closed for user root Jun 16 10:35:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[32281]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:35:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[32281]: pam_unix(cron:session): session closed for user root Jun 16 10:36:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35117]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:36:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35117]: pam_unix(cron:session): session closed for user root Jun 16 10:37:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35170]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:37:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35170]: pam_unix(cron:session): session closed for user root Jun 16 10:38:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35190]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:38:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35190]: pam_unix(cron:session): session closed for user root Jun 16 10:39:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35982]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:39:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[35982]: pam_unix(cron:session): session closed for user root Jun 16 10:40:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36716]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:40:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36716]: pam_unix(cron:session): session closed for user root Jun 16 10:41:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36758]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:41:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36758]: pam_unix(cron:session): session closed for user root Jun 16 10:42:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36764]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:42:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36764]: pam_unix(cron:session): session closed for user root Jun 16 10:43:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36767]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:43:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36767]: pam_unix(cron:session): session closed for user root Jun 16 10:44:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36772]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:44:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36772]: pam_unix(cron:session): session closed for user root Jun 16 10:45:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36776]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:45:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36776]: pam_unix(cron:session): session closed for user root Jun 16 10:46:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36780]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:46:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36780]: pam_unix(cron:session): session closed for user root Jun 16 10:47:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36822]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:47:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[36822]: pam_unix(cron:session): session closed for user root Jun 16 10:48:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[37314]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 16 10:48:01 prd-ubuntu2004-helm-2c-1g-12321 CRON[37314]: pam_unix(cron:session): session closed for user root Jun 16 10:48:03 prd-ubuntu2004-helm-2c-1g-12321 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jun 16 10:48:03 prd-ubuntu2004-helm-2c-1g-12321 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)