Jul 8 14:18:55 prd-ubuntu2004-helm-2c-1g-7074 passwd[706]: password for 'ubuntu' changed by 'root' Jul 8 14:18:55 prd-ubuntu2004-helm-2c-1g-7074 sshd[787]: Server listening on 0.0.0.0 port 22. Jul 8 14:18:55 prd-ubuntu2004-helm-2c-1g-7074 sshd[787]: Server listening on :: port 22. Jul 8 14:18:55 prd-ubuntu2004-helm-2c-1g-7074 systemd-logind[749]: New seat seat0. Jul 8 14:18:55 prd-ubuntu2004-helm-2c-1g-7074 systemd-logind[749]: Watching system buttons on /dev/input/event0 (Power Button) Jul 8 14:18:55 prd-ubuntu2004-helm-2c-1g-7074 systemd-logind[749]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 8 14:18:57 prd-ubuntu2004-helm-2c-1g-7074 sshd[1391]: error: kex_exchange_identification: Connection closed by remote host Jul 8 14:19:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[2773]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:19:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[2773]: pam_unix(cron:session): session closed for user root Jul 8 14:19:03 prd-ubuntu2004-helm-2c-1g-7074 sshd[3484]: Invalid user jenkins from 10.30.104.4 port 36212 Jul 8 14:19:03 prd-ubuntu2004-helm-2c-1g-7074 sshd[3484]: Received disconnect from 10.30.104.4 port 36212:11: Closed due to user request. [preauth] Jul 8 14:19:03 prd-ubuntu2004-helm-2c-1g-7074 sshd[3484]: Disconnected from invalid user jenkins 10.30.104.4 port 36212 [preauth] Jul 8 14:19:05 prd-ubuntu2004-helm-2c-1g-7074 sshd[4064]: Invalid user jenkins from 10.30.104.4 port 36232 Jul 8 14:19:05 prd-ubuntu2004-helm-2c-1g-7074 sshd[4064]: Received disconnect from 10.30.104.4 port 36232:11: Closed due to user request. [preauth] Jul 8 14:19:05 prd-ubuntu2004-helm-2c-1g-7074 sshd[4064]: Disconnected from invalid user jenkins 10.30.104.4 port 36232 [preauth] Jul 8 14:19:07 prd-ubuntu2004-helm-2c-1g-7074 sshd[4756]: Invalid user jenkins from 10.30.104.4 port 36248 Jul 8 14:19:08 prd-ubuntu2004-helm-2c-1g-7074 sshd[4756]: Received disconnect from 10.30.104.4 port 36248:11: Closed due to user request. [preauth] Jul 8 14:19:08 prd-ubuntu2004-helm-2c-1g-7074 sshd[4756]: Disconnected from invalid user jenkins 10.30.104.4 port 36248 [preauth] Jul 8 14:19:10 prd-ubuntu2004-helm-2c-1g-7074 sshd[5458]: Invalid user jenkins from 10.30.104.4 port 36264 Jul 8 14:19:10 prd-ubuntu2004-helm-2c-1g-7074 sshd[5458]: Received disconnect from 10.30.104.4 port 36264:11: Closed due to user request. [preauth] Jul 8 14:19:10 prd-ubuntu2004-helm-2c-1g-7074 sshd[5458]: Disconnected from invalid user jenkins 10.30.104.4 port 36264 [preauth] Jul 8 14:19:12 prd-ubuntu2004-helm-2c-1g-7074 sshd[6214]: Invalid user jenkins from 10.30.104.4 port 36276 Jul 8 14:19:12 prd-ubuntu2004-helm-2c-1g-7074 sshd[6214]: Received disconnect from 10.30.104.4 port 36276:11: Closed due to user request. [preauth] Jul 8 14:19:12 prd-ubuntu2004-helm-2c-1g-7074 sshd[6214]: Disconnected from invalid user jenkins 10.30.104.4 port 36276 [preauth] Jul 8 14:19:14 prd-ubuntu2004-helm-2c-1g-7074 sshd[7183]: Invalid user jenkins from 10.30.104.4 port 36304 Jul 8 14:19:14 prd-ubuntu2004-helm-2c-1g-7074 sshd[7183]: Received disconnect from 10.30.104.4 port 36304:11: Closed due to user request. [preauth] Jul 8 14:19:14 prd-ubuntu2004-helm-2c-1g-7074 sshd[7183]: Disconnected from invalid user jenkins 10.30.104.4 port 36304 [preauth] Jul 8 14:19:16 prd-ubuntu2004-helm-2c-1g-7074 sshd[7984]: Invalid user jenkins from 10.30.104.4 port 36322 Jul 8 14:19:17 prd-ubuntu2004-helm-2c-1g-7074 sshd[7984]: Received disconnect from 10.30.104.4 port 36322:11: Closed due to user request. [preauth] Jul 8 14:19:17 prd-ubuntu2004-helm-2c-1g-7074 sshd[7984]: Disconnected from invalid user jenkins 10.30.104.4 port 36322 [preauth] Jul 8 14:19:19 prd-ubuntu2004-helm-2c-1g-7074 sshd[8333]: Invalid user jenkins from 10.30.104.4 port 36334 Jul 8 14:19:19 prd-ubuntu2004-helm-2c-1g-7074 sshd[8333]: Received disconnect from 10.30.104.4 port 36334:11: Closed due to user request. [preauth] Jul 8 14:19:19 prd-ubuntu2004-helm-2c-1g-7074 sshd[8333]: Disconnected from invalid user jenkins 10.30.104.4 port 36334 [preauth] Jul 8 14:19:21 prd-ubuntu2004-helm-2c-1g-7074 sshd[8503]: Invalid user jenkins from 10.30.104.4 port 36356 Jul 8 14:19:21 prd-ubuntu2004-helm-2c-1g-7074 sshd[8503]: Received disconnect from 10.30.104.4 port 36356:11: Closed due to user request. [preauth] Jul 8 14:19:21 prd-ubuntu2004-helm-2c-1g-7074 sshd[8503]: Disconnected from invalid user jenkins 10.30.104.4 port 36356 [preauth] Jul 8 14:19:23 prd-ubuntu2004-helm-2c-1g-7074 sshd[8556]: Invalid user jenkins from 10.30.104.4 port 36382 Jul 8 14:19:23 prd-ubuntu2004-helm-2c-1g-7074 sshd[8556]: Received disconnect from 10.30.104.4 port 36382:11: Closed due to user request. [preauth] Jul 8 14:19:23 prd-ubuntu2004-helm-2c-1g-7074 sshd[8556]: Disconnected from invalid user jenkins 10.30.104.4 port 36382 [preauth] Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 useradd[8875]: new group: name=jenkins, GID=1001 Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 useradd[8875]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 usermod[8914]: add 'jenkins' to group 'docker' Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 usermod[8914]: add 'jenkins' to shadow group 'docker' Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 sshd[9048]: Accepted publickey for jenkins from 10.30.104.4 port 36392 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 sshd[9048]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 systemd-logind[749]: New session 2 of user jenkins. Jul 8 14:19:25 prd-ubuntu2004-helm-2c-1g-7074 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 8 14:20:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[21258]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:20:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[21258]: pam_unix(cron:session): session closed for user root Jul 8 14:21:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[29487]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:21:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[29487]: pam_unix(cron:session): session closed for user root Jul 8 14:22:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[32089]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:22:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[32089]: pam_unix(cron:session): session closed for user root Jul 8 14:23:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34305]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:23:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34305]: pam_unix(cron:session): session closed for user root Jul 8 14:24:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34324]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:24:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34324]: pam_unix(cron:session): session closed for user root Jul 8 14:25:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34344]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:25:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34344]: pam_unix(cron:session): session closed for user root Jul 8 14:26:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34347]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 8 14:26:01 prd-ubuntu2004-helm-2c-1g-7074 CRON[34347]: pam_unix(cron:session): session closed for user root Jul 8 14:26:49 prd-ubuntu2004-helm-2c-1g-7074 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jul 8 14:26:49 prd-ubuntu2004-helm-2c-1g-7074 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)