Jul 27 11:27:22 prd-ubuntu2004-helm-2c-1g-12847 passwd[705]: password for 'ubuntu' changed by 'root' Jul 27 11:27:22 prd-ubuntu2004-helm-2c-1g-12847 systemd-logind[751]: New seat seat0. Jul 27 11:27:22 prd-ubuntu2004-helm-2c-1g-12847 systemd-logind[751]: Watching system buttons on /dev/input/event0 (Power Button) Jul 27 11:27:22 prd-ubuntu2004-helm-2c-1g-12847 systemd-logind[751]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 27 11:27:23 prd-ubuntu2004-helm-2c-1g-12847 sshd[803]: Server listening on 0.0.0.0 port 22. Jul 27 11:27:23 prd-ubuntu2004-helm-2c-1g-12847 sshd[803]: Server listening on :: port 22. Jul 27 11:27:25 prd-ubuntu2004-helm-2c-1g-12847 sshd[895]: error: kex_exchange_identification: Connection closed by remote host Jul 27 11:27:34 prd-ubuntu2004-helm-2c-1g-12847 sshd[1093]: Invalid user jenkins from 10.30.104.4 port 36860 Jul 27 11:27:37 prd-ubuntu2004-helm-2c-1g-12847 sshd[1158]: Invalid user jenkins from 10.30.104.4 port 36878 Jul 27 11:27:38 prd-ubuntu2004-helm-2c-1g-12847 sshd[1093]: Received disconnect from 10.30.104.4 port 36860:11: Closed due to user request. [preauth] Jul 27 11:27:38 prd-ubuntu2004-helm-2c-1g-12847 sshd[1093]: Disconnected from invalid user jenkins 10.30.104.4 port 36860 [preauth] Jul 27 11:27:38 prd-ubuntu2004-helm-2c-1g-12847 sshd[1158]: Received disconnect from 10.30.104.4 port 36878:11: Closed due to user request. [preauth] Jul 27 11:27:38 prd-ubuntu2004-helm-2c-1g-12847 sshd[1158]: Disconnected from invalid user jenkins 10.30.104.4 port 36878 [preauth] Jul 27 11:27:39 prd-ubuntu2004-helm-2c-1g-12847 sshd[1207]: Invalid user jenkins from 10.30.104.4 port 36892 Jul 27 11:27:39 prd-ubuntu2004-helm-2c-1g-12847 sshd[1207]: Received disconnect from 10.30.104.4 port 36892:11: Closed due to user request. [preauth] Jul 27 11:27:39 prd-ubuntu2004-helm-2c-1g-12847 sshd[1207]: Disconnected from invalid user jenkins 10.30.104.4 port 36892 [preauth] Jul 27 11:27:41 prd-ubuntu2004-helm-2c-1g-12847 sshd[1251]: Invalid user jenkins from 10.30.104.4 port 36902 Jul 27 11:27:41 prd-ubuntu2004-helm-2c-1g-12847 sshd[1251]: Received disconnect from 10.30.104.4 port 36902:11: Closed due to user request. [preauth] Jul 27 11:27:41 prd-ubuntu2004-helm-2c-1g-12847 sshd[1251]: Disconnected from invalid user jenkins 10.30.104.4 port 36902 [preauth] Jul 27 11:27:43 prd-ubuntu2004-helm-2c-1g-12847 sshd[1328]: Invalid user jenkins from 10.30.104.4 port 36912 Jul 27 11:27:43 prd-ubuntu2004-helm-2c-1g-12847 sshd[1328]: Received disconnect from 10.30.104.4 port 36912:11: Closed due to user request. [preauth] Jul 27 11:27:43 prd-ubuntu2004-helm-2c-1g-12847 sshd[1328]: Disconnected from invalid user jenkins 10.30.104.4 port 36912 [preauth] Jul 27 11:27:45 prd-ubuntu2004-helm-2c-1g-12847 sshd[1403]: Invalid user jenkins from 10.30.104.4 port 36922 Jul 27 11:27:45 prd-ubuntu2004-helm-2c-1g-12847 sshd[1403]: Received disconnect from 10.30.104.4 port 36922:11: Closed due to user request. [preauth] Jul 27 11:27:45 prd-ubuntu2004-helm-2c-1g-12847 sshd[1403]: Disconnected from invalid user jenkins 10.30.104.4 port 36922 [preauth] Jul 27 11:27:47 prd-ubuntu2004-helm-2c-1g-12847 sshd[1468]: Invalid user jenkins from 10.30.104.4 port 36938 Jul 27 11:27:48 prd-ubuntu2004-helm-2c-1g-12847 sshd[1468]: Received disconnect from 10.30.104.4 port 36938:11: Closed due to user request. [preauth] Jul 27 11:27:48 prd-ubuntu2004-helm-2c-1g-12847 sshd[1468]: Disconnected from invalid user jenkins 10.30.104.4 port 36938 [preauth] Jul 27 11:27:50 prd-ubuntu2004-helm-2c-1g-12847 sshd[1546]: Invalid user jenkins from 10.30.104.4 port 36944 Jul 27 11:27:50 prd-ubuntu2004-helm-2c-1g-12847 sshd[1546]: Received disconnect from 10.30.104.4 port 36944:11: Closed due to user request. [preauth] Jul 27 11:27:50 prd-ubuntu2004-helm-2c-1g-12847 sshd[1546]: Disconnected from invalid user jenkins 10.30.104.4 port 36944 [preauth] Jul 27 11:27:52 prd-ubuntu2004-helm-2c-1g-12847 sshd[1735]: Invalid user jenkins from 10.30.104.4 port 36954 Jul 27 11:27:52 prd-ubuntu2004-helm-2c-1g-12847 sshd[1735]: Received disconnect from 10.30.104.4 port 36954:11: Closed due to user request. [preauth] Jul 27 11:27:52 prd-ubuntu2004-helm-2c-1g-12847 sshd[1735]: Disconnected from invalid user jenkins 10.30.104.4 port 36954 [preauth] Jul 27 11:27:54 prd-ubuntu2004-helm-2c-1g-12847 sshd[1922]: Invalid user jenkins from 10.30.104.4 port 36964 Jul 27 11:27:54 prd-ubuntu2004-helm-2c-1g-12847 sshd[1922]: Received disconnect from 10.30.104.4 port 36964:11: Closed due to user request. [preauth] Jul 27 11:27:54 prd-ubuntu2004-helm-2c-1g-12847 sshd[1922]: Disconnected from invalid user jenkins 10.30.104.4 port 36964 [preauth] Jul 27 11:27:56 prd-ubuntu2004-helm-2c-1g-12847 sshd[2162]: Invalid user jenkins from 10.30.104.4 port 36970 Jul 27 11:27:56 prd-ubuntu2004-helm-2c-1g-12847 sshd[2162]: Received disconnect from 10.30.104.4 port 36970:11: Closed due to user request. [preauth] Jul 27 11:27:56 prd-ubuntu2004-helm-2c-1g-12847 sshd[2162]: Disconnected from invalid user jenkins 10.30.104.4 port 36970 [preauth] Jul 27 11:27:58 prd-ubuntu2004-helm-2c-1g-12847 sshd[2430]: Invalid user jenkins from 10.30.104.4 port 36976 Jul 27 11:27:58 prd-ubuntu2004-helm-2c-1g-12847 sshd[2430]: Received disconnect from 10.30.104.4 port 36976:11: Closed due to user request. [preauth] Jul 27 11:27:58 prd-ubuntu2004-helm-2c-1g-12847 sshd[2430]: Disconnected from invalid user jenkins 10.30.104.4 port 36976 [preauth] Jul 27 11:28:00 prd-ubuntu2004-helm-2c-1g-12847 sshd[2740]: Invalid user jenkins from 10.30.104.4 port 36986 Jul 27 11:28:01 prd-ubuntu2004-helm-2c-1g-12847 sshd[2740]: Received disconnect from 10.30.104.4 port 36986:11: Closed due to user request. [preauth] Jul 27 11:28:01 prd-ubuntu2004-helm-2c-1g-12847 sshd[2740]: Disconnected from invalid user jenkins 10.30.104.4 port 36986 [preauth] Jul 27 11:28:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[2761]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:28:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[2761]: pam_unix(cron:session): session closed for user root Jul 27 11:28:03 prd-ubuntu2004-helm-2c-1g-12847 sshd[2992]: Invalid user jenkins from 10.30.104.4 port 36992 Jul 27 11:28:03 prd-ubuntu2004-helm-2c-1g-12847 sshd[2992]: Received disconnect from 10.30.104.4 port 36992:11: Closed due to user request. [preauth] Jul 27 11:28:03 prd-ubuntu2004-helm-2c-1g-12847 sshd[2992]: Disconnected from invalid user jenkins 10.30.104.4 port 36992 [preauth] Jul 27 11:28:05 prd-ubuntu2004-helm-2c-1g-12847 sshd[3314]: Invalid user jenkins from 10.30.104.4 port 37000 Jul 27 11:28:05 prd-ubuntu2004-helm-2c-1g-12847 sshd[3314]: Received disconnect from 10.30.104.4 port 37000:11: Closed due to user request. [preauth] Jul 27 11:28:05 prd-ubuntu2004-helm-2c-1g-12847 sshd[3314]: Disconnected from invalid user jenkins 10.30.104.4 port 37000 [preauth] Jul 27 11:28:07 prd-ubuntu2004-helm-2c-1g-12847 sshd[3601]: Invalid user jenkins from 10.30.104.4 port 37010 Jul 27 11:28:07 prd-ubuntu2004-helm-2c-1g-12847 sshd[3601]: Received disconnect from 10.30.104.4 port 37010:11: Closed due to user request. [preauth] Jul 27 11:28:07 prd-ubuntu2004-helm-2c-1g-12847 sshd[3601]: Disconnected from invalid user jenkins 10.30.104.4 port 37010 [preauth] Jul 27 11:28:09 prd-ubuntu2004-helm-2c-1g-12847 sshd[3871]: Invalid user jenkins from 10.30.104.4 port 37018 Jul 27 11:28:09 prd-ubuntu2004-helm-2c-1g-12847 sshd[3871]: Received disconnect from 10.30.104.4 port 37018:11: Closed due to user request. [preauth] Jul 27 11:28:09 prd-ubuntu2004-helm-2c-1g-12847 sshd[3871]: Disconnected from invalid user jenkins 10.30.104.4 port 37018 [preauth] Jul 27 11:28:11 prd-ubuntu2004-helm-2c-1g-12847 sshd[4181]: Invalid user jenkins from 10.30.104.4 port 37026 Jul 27 11:28:11 prd-ubuntu2004-helm-2c-1g-12847 sshd[4181]: Received disconnect from 10.30.104.4 port 37026:11: Closed due to user request. [preauth] Jul 27 11:28:11 prd-ubuntu2004-helm-2c-1g-12847 sshd[4181]: Disconnected from invalid user jenkins 10.30.104.4 port 37026 [preauth] Jul 27 11:28:13 prd-ubuntu2004-helm-2c-1g-12847 sshd[4587]: Invalid user jenkins from 10.30.104.4 port 37036 Jul 27 11:28:14 prd-ubuntu2004-helm-2c-1g-12847 sshd[4587]: Received disconnect from 10.30.104.4 port 37036:11: Closed due to user request. [preauth] Jul 27 11:28:14 prd-ubuntu2004-helm-2c-1g-12847 sshd[4587]: Disconnected from invalid user jenkins 10.30.104.4 port 37036 [preauth] Jul 27 11:28:16 prd-ubuntu2004-helm-2c-1g-12847 sshd[4892]: Invalid user jenkins from 10.30.104.4 port 37040 Jul 27 11:28:16 prd-ubuntu2004-helm-2c-1g-12847 sshd[4892]: Received disconnect from 10.30.104.4 port 37040:11: Closed due to user request. [preauth] Jul 27 11:28:16 prd-ubuntu2004-helm-2c-1g-12847 sshd[4892]: Disconnected from invalid user jenkins 10.30.104.4 port 37040 [preauth] Jul 27 11:28:18 prd-ubuntu2004-helm-2c-1g-12847 sshd[5226]: Invalid user jenkins from 10.30.104.4 port 37044 Jul 27 11:28:18 prd-ubuntu2004-helm-2c-1g-12847 sshd[5226]: Received disconnect from 10.30.104.4 port 37044:11: Closed due to user request. [preauth] Jul 27 11:28:18 prd-ubuntu2004-helm-2c-1g-12847 sshd[5226]: Disconnected from invalid user jenkins 10.30.104.4 port 37044 [preauth] Jul 27 11:28:20 prd-ubuntu2004-helm-2c-1g-12847 sshd[5629]: Invalid user jenkins from 10.30.104.4 port 37052 Jul 27 11:28:20 prd-ubuntu2004-helm-2c-1g-12847 sshd[5629]: Received disconnect from 10.30.104.4 port 37052:11: Closed due to user request. [preauth] Jul 27 11:28:20 prd-ubuntu2004-helm-2c-1g-12847 sshd[5629]: Disconnected from invalid user jenkins 10.30.104.4 port 37052 [preauth] Jul 27 11:28:22 prd-ubuntu2004-helm-2c-1g-12847 sshd[5986]: Invalid user jenkins from 10.30.104.4 port 37058 Jul 27 11:28:22 prd-ubuntu2004-helm-2c-1g-12847 sshd[5986]: Received disconnect from 10.30.104.4 port 37058:11: Closed due to user request. [preauth] Jul 27 11:28:22 prd-ubuntu2004-helm-2c-1g-12847 sshd[5986]: Disconnected from invalid user jenkins 10.30.104.4 port 37058 [preauth] Jul 27 11:28:24 prd-ubuntu2004-helm-2c-1g-12847 sshd[6245]: Invalid user jenkins from 10.30.104.4 port 37062 Jul 27 11:28:24 prd-ubuntu2004-helm-2c-1g-12847 sshd[6245]: Received disconnect from 10.30.104.4 port 37062:11: Closed due to user request. [preauth] Jul 27 11:28:24 prd-ubuntu2004-helm-2c-1g-12847 sshd[6245]: Disconnected from invalid user jenkins 10.30.104.4 port 37062 [preauth] Jul 27 11:28:26 prd-ubuntu2004-helm-2c-1g-12847 sshd[6527]: Invalid user jenkins from 10.30.104.4 port 37070 Jul 27 11:28:27 prd-ubuntu2004-helm-2c-1g-12847 sshd[6527]: Received disconnect from 10.30.104.4 port 37070:11: Closed due to user request. [preauth] Jul 27 11:28:27 prd-ubuntu2004-helm-2c-1g-12847 sshd[6527]: Disconnected from invalid user jenkins 10.30.104.4 port 37070 [preauth] Jul 27 11:28:29 prd-ubuntu2004-helm-2c-1g-12847 sshd[6885]: Invalid user jenkins from 10.30.104.4 port 37074 Jul 27 11:28:29 prd-ubuntu2004-helm-2c-1g-12847 sshd[6885]: Received disconnect from 10.30.104.4 port 37074:11: Closed due to user request. [preauth] Jul 27 11:28:29 prd-ubuntu2004-helm-2c-1g-12847 sshd[6885]: Disconnected from invalid user jenkins 10.30.104.4 port 37074 [preauth] Jul 27 11:28:31 prd-ubuntu2004-helm-2c-1g-12847 sshd[7216]: Invalid user jenkins from 10.30.104.4 port 37078 Jul 27 11:28:35 prd-ubuntu2004-helm-2c-1g-12847 sshd[7216]: Received disconnect from 10.30.104.4 port 37078:11: Closed due to user request. [preauth] Jul 27 11:28:35 prd-ubuntu2004-helm-2c-1g-12847 sshd[7216]: Disconnected from invalid user jenkins 10.30.104.4 port 37078 [preauth] Jul 27 11:28:35 prd-ubuntu2004-helm-2c-1g-12847 useradd[7518]: new group: name=jenkins, GID=1001 Jul 27 11:28:35 prd-ubuntu2004-helm-2c-1g-12847 useradd[7518]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jul 27 11:28:37 prd-ubuntu2004-helm-2c-1g-12847 usermod[7724]: add 'jenkins' to group 'docker' Jul 27 11:28:37 prd-ubuntu2004-helm-2c-1g-12847 usermod[7724]: add 'jenkins' to shadow group 'docker' Jul 27 11:28:38 prd-ubuntu2004-helm-2c-1g-12847 sshd[7737]: Received disconnect from 10.30.104.4 port 37088:11: Closed due to user request. [preauth] Jul 27 11:28:38 prd-ubuntu2004-helm-2c-1g-12847 sshd[7737]: Disconnected from authenticating user jenkins 10.30.104.4 port 37088 [preauth] Jul 27 11:28:40 prd-ubuntu2004-helm-2c-1g-12847 sshd[8578]: Accepted publickey for jenkins from 10.30.104.4 port 37092 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jul 27 11:28:40 prd-ubuntu2004-helm-2c-1g-12847 sshd[8578]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 27 11:28:40 prd-ubuntu2004-helm-2c-1g-12847 systemd-logind[751]: New session 2 of user jenkins. Jul 27 11:28:40 prd-ubuntu2004-helm-2c-1g-12847 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 27 11:29:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[15560]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:29:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[15560]: pam_unix(cron:session): session closed for user root Jul 27 11:30:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[28290]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:30:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[28290]: pam_unix(cron:session): session closed for user root Jul 27 11:31:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[31317]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:31:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[31317]: pam_unix(cron:session): session closed for user root Jul 27 11:32:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[32991]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:32:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[32991]: pam_unix(cron:session): session closed for user root Jul 27 11:33:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35209]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:33:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35209]: pam_unix(cron:session): session closed for user root Jul 27 11:34:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35214]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:34:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35214]: pam_unix(cron:session): session closed for user root Jul 27 11:35:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35218]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:35:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35218]: pam_unix(cron:session): session closed for user root Jul 27 11:36:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35964]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:36:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[35964]: pam_unix(cron:session): session closed for user root Jul 27 11:37:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36746]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:37:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36746]: pam_unix(cron:session): session closed for user root Jul 27 11:38:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36818]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:38:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36818]: pam_unix(cron:session): session closed for user root Jul 27 11:39:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36823]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:39:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36823]: pam_unix(cron:session): session closed for user root Jul 27 11:40:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36826]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:40:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36826]: pam_unix(cron:session): session closed for user root Jul 27 11:41:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36830]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:41:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36830]: pam_unix(cron:session): session closed for user root Jul 27 11:42:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36833]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:42:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36833]: pam_unix(cron:session): session closed for user root Jul 27 11:43:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36852]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:43:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36852]: pam_unix(cron:session): session closed for user root Jul 27 11:44:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36856]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:44:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36856]: pam_unix(cron:session): session closed for user root Jul 27 11:45:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36860]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 27 11:45:01 prd-ubuntu2004-helm-2c-1g-12847 CRON[36860]: pam_unix(cron:session): session closed for user root Jul 27 11:45:48 prd-ubuntu2004-helm-2c-1g-12847 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jul 27 11:45:48 prd-ubuntu2004-helm-2c-1g-12847 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)