Jul 22 18:06:12 prd-ubuntu2004-helm-2c-1g-1004 passwd[710]: password for 'ubuntu' changed by 'root' Jul 22 18:06:12 prd-ubuntu2004-helm-2c-1g-1004 sshd[792]: Server listening on 0.0.0.0 port 22. Jul 22 18:06:12 prd-ubuntu2004-helm-2c-1g-1004 sshd[792]: Server listening on :: port 22. Jul 22 18:06:12 prd-ubuntu2004-helm-2c-1g-1004 systemd-logind[753]: New seat seat0. Jul 22 18:06:12 prd-ubuntu2004-helm-2c-1g-1004 systemd-logind[753]: Watching system buttons on /dev/input/event0 (Power Button) Jul 22 18:06:12 prd-ubuntu2004-helm-2c-1g-1004 systemd-logind[753]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 22 18:06:16 prd-ubuntu2004-helm-2c-1g-1004 sshd[2214]: error: kex_exchange_identification: Connection closed by remote host Jul 22 18:06:22 prd-ubuntu2004-helm-2c-1g-1004 sshd[4249]: Invalid user jenkins from 10.30.104.4 port 43918 Jul 22 18:06:22 prd-ubuntu2004-helm-2c-1g-1004 sshd[4249]: Received disconnect from 10.30.104.4 port 43918:11: Closed due to user request. [preauth] Jul 22 18:06:22 prd-ubuntu2004-helm-2c-1g-1004 sshd[4249]: Disconnected from invalid user jenkins 10.30.104.4 port 43918 [preauth] Jul 22 18:06:24 prd-ubuntu2004-helm-2c-1g-1004 sshd[4901]: Invalid user jenkins from 10.30.104.4 port 43922 Jul 22 18:06:25 prd-ubuntu2004-helm-2c-1g-1004 sshd[4901]: Received disconnect from 10.30.104.4 port 43922:11: Closed due to user request. [preauth] Jul 22 18:06:25 prd-ubuntu2004-helm-2c-1g-1004 sshd[4901]: Disconnected from invalid user jenkins 10.30.104.4 port 43922 [preauth] Jul 22 18:06:27 prd-ubuntu2004-helm-2c-1g-1004 sshd[5554]: Invalid user jenkins from 10.30.104.4 port 43924 Jul 22 18:06:27 prd-ubuntu2004-helm-2c-1g-1004 sshd[5554]: Received disconnect from 10.30.104.4 port 43924:11: Closed due to user request. [preauth] Jul 22 18:06:27 prd-ubuntu2004-helm-2c-1g-1004 sshd[5554]: Disconnected from invalid user jenkins 10.30.104.4 port 43924 [preauth] Jul 22 18:06:29 prd-ubuntu2004-helm-2c-1g-1004 sshd[6220]: Invalid user jenkins from 10.30.104.4 port 43926 Jul 22 18:06:29 prd-ubuntu2004-helm-2c-1g-1004 sshd[6220]: Received disconnect from 10.30.104.4 port 43926:11: Closed due to user request. [preauth] Jul 22 18:06:29 prd-ubuntu2004-helm-2c-1g-1004 sshd[6220]: Disconnected from invalid user jenkins 10.30.104.4 port 43926 [preauth] Jul 22 18:06:32 prd-ubuntu2004-helm-2c-1g-1004 sshd[7180]: Invalid user jenkins from 10.30.104.4 port 43928 Jul 22 18:06:32 prd-ubuntu2004-helm-2c-1g-1004 sshd[7180]: Received disconnect from 10.30.104.4 port 43928:11: Closed due to user request. [preauth] Jul 22 18:06:32 prd-ubuntu2004-helm-2c-1g-1004 sshd[7180]: Disconnected from invalid user jenkins 10.30.104.4 port 43928 [preauth] Jul 22 18:06:34 prd-ubuntu2004-helm-2c-1g-1004 sshd[7999]: Invalid user jenkins from 10.30.104.4 port 43930 Jul 22 18:06:34 prd-ubuntu2004-helm-2c-1g-1004 sshd[7999]: Received disconnect from 10.30.104.4 port 43930:11: Closed due to user request. [preauth] Jul 22 18:06:34 prd-ubuntu2004-helm-2c-1g-1004 sshd[7999]: Disconnected from invalid user jenkins 10.30.104.4 port 43930 [preauth] Jul 22 18:06:36 prd-ubuntu2004-helm-2c-1g-1004 sshd[8449]: Invalid user jenkins from 10.30.104.4 port 43932 Jul 22 18:06:36 prd-ubuntu2004-helm-2c-1g-1004 sshd[8449]: Received disconnect from 10.30.104.4 port 43932:11: Closed due to user request. [preauth] Jul 22 18:06:36 prd-ubuntu2004-helm-2c-1g-1004 sshd[8449]: Disconnected from invalid user jenkins 10.30.104.4 port 43932 [preauth] Jul 22 18:06:38 prd-ubuntu2004-helm-2c-1g-1004 sshd[8752]: Invalid user jenkins from 10.30.104.4 port 43934 Jul 22 18:06:38 prd-ubuntu2004-helm-2c-1g-1004 sshd[8752]: Received disconnect from 10.30.104.4 port 43934:11: Closed due to user request. [preauth] Jul 22 18:06:38 prd-ubuntu2004-helm-2c-1g-1004 sshd[8752]: Disconnected from invalid user jenkins 10.30.104.4 port 43934 [preauth] Jul 22 18:06:38 prd-ubuntu2004-helm-2c-1g-1004 useradd[8781]: new group: name=jenkins, GID=1001 Jul 22 18:06:38 prd-ubuntu2004-helm-2c-1g-1004 useradd[8781]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jul 22 18:06:38 prd-ubuntu2004-helm-2c-1g-1004 usermod[8821]: add 'jenkins' to group 'docker' Jul 22 18:06:38 prd-ubuntu2004-helm-2c-1g-1004 usermod[8821]: add 'jenkins' to shadow group 'docker' Jul 22 18:06:40 prd-ubuntu2004-helm-2c-1g-1004 sshd[9608]: Accepted publickey for jenkins from 10.30.104.4 port 43940 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jul 22 18:06:40 prd-ubuntu2004-helm-2c-1g-1004 sshd[9608]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 22 18:06:40 prd-ubuntu2004-helm-2c-1g-1004 systemd-logind[753]: New session 1 of user jenkins. Jul 22 18:06:40 prd-ubuntu2004-helm-2c-1g-1004 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 22 18:07:02 prd-ubuntu2004-helm-2c-1g-1004 CRON[17663]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:07:02 prd-ubuntu2004-helm-2c-1g-1004 CRON[17663]: pam_unix(cron:session): session closed for user root Jul 22 18:08:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[29257]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:08:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[29257]: pam_unix(cron:session): session closed for user root Jul 22 18:09:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[32278]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:09:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[32278]: pam_unix(cron:session): session closed for user root Jul 22 18:10:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[34651]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:10:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[34651]: pam_unix(cron:session): session closed for user root Jul 22 18:11:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[35175]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:11:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[35175]: pam_unix(cron:session): session closed for user root Jul 22 18:12:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[35213]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:12:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[35213]: pam_unix(cron:session): session closed for user root Jul 22 18:13:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[35546]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:13:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[35546]: pam_unix(cron:session): session closed for user root Jul 22 18:14:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36761]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:14:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36761]: pam_unix(cron:session): session closed for user root Jul 22 18:15:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36806]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:15:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36806]: pam_unix(cron:session): session closed for user root Jul 22 18:16:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36810]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:16:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36810]: pam_unix(cron:session): session closed for user root Jul 22 18:17:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36817]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:17:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36816]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:17:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36817]: pam_unix(cron:session): session closed for user root Jul 22 18:17:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36816]: pam_unix(cron:session): session closed for user root Jul 22 18:18:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36822]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:18:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36822]: pam_unix(cron:session): session closed for user root Jul 22 18:19:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36826]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:19:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36826]: pam_unix(cron:session): session closed for user root Jul 22 18:20:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36829]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:20:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36829]: pam_unix(cron:session): session closed for user root Jul 22 18:21:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36833]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:21:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[36833]: pam_unix(cron:session): session closed for user root Jul 22 18:22:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[37171]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 22 18:22:01 prd-ubuntu2004-helm-2c-1g-1004 CRON[37171]: pam_unix(cron:session): session closed for user root Jul 22 18:22:14 prd-ubuntu2004-helm-2c-1g-1004 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jul 22 18:22:14 prd-ubuntu2004-helm-2c-1g-1004 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)