Jul 30 21:25:19 prd-ubuntu2004-helm-2c-1g-14111 passwd[713]: password for 'ubuntu' changed by 'root'
Jul 30 21:25:19 prd-ubuntu2004-helm-2c-1g-14111 sshd[778]: Server listening on 0.0.0.0 port 22.
Jul 30 21:25:19 prd-ubuntu2004-helm-2c-1g-14111 sshd[778]: Server listening on :: port 22.
Jul 30 21:25:20 prd-ubuntu2004-helm-2c-1g-14111 systemd-logind[754]: New seat seat0.
Jul 30 21:25:20 prd-ubuntu2004-helm-2c-1g-14111 systemd-logind[754]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 30 21:25:20 prd-ubuntu2004-helm-2c-1g-14111 systemd-logind[754]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 30 21:25:23 prd-ubuntu2004-helm-2c-1g-14111 sshd[2025]: error: kex_exchange_identification: Connection closed by remote host
Jul 30 21:25:23 prd-ubuntu2004-helm-2c-1g-14111 sshd[2092]: Invalid user jenkins from 10.30.104.4 port 52014
Jul 30 21:25:23 prd-ubuntu2004-helm-2c-1g-14111 sshd[2092]: Received disconnect from 10.30.104.4 port 52014:11: Closed due to user request. [preauth]
Jul 30 21:25:23 prd-ubuntu2004-helm-2c-1g-14111 sshd[2092]: Disconnected from invalid user jenkins 10.30.104.4 port 52014 [preauth]
Jul 30 21:25:25 prd-ubuntu2004-helm-2c-1g-14111 sshd[2815]: Invalid user jenkins from 10.30.104.4 port 52016
Jul 30 21:25:25 prd-ubuntu2004-helm-2c-1g-14111 sshd[2815]: Received disconnect from 10.30.104.4 port 52016:11: Closed due to user request. [preauth]
Jul 30 21:25:25 prd-ubuntu2004-helm-2c-1g-14111 sshd[2815]: Disconnected from invalid user jenkins 10.30.104.4 port 52016 [preauth]
Jul 30 21:25:27 prd-ubuntu2004-helm-2c-1g-14111 sshd[3533]: Invalid user jenkins from 10.30.104.4 port 52018
Jul 30 21:25:27 prd-ubuntu2004-helm-2c-1g-14111 sshd[3533]: Received disconnect from 10.30.104.4 port 52018:11: Closed due to user request. [preauth]
Jul 30 21:25:27 prd-ubuntu2004-helm-2c-1g-14111 sshd[3533]: Disconnected from invalid user jenkins 10.30.104.4 port 52018 [preauth]
Jul 30 21:25:30 prd-ubuntu2004-helm-2c-1g-14111 sshd[4200]: Invalid user jenkins from 10.30.104.4 port 52020
Jul 30 21:25:30 prd-ubuntu2004-helm-2c-1g-14111 sshd[4200]: Received disconnect from 10.30.104.4 port 52020:11: Closed due to user request. [preauth]
Jul 30 21:25:30 prd-ubuntu2004-helm-2c-1g-14111 sshd[4200]: Disconnected from invalid user jenkins 10.30.104.4 port 52020 [preauth]
Jul 30 21:25:32 prd-ubuntu2004-helm-2c-1g-14111 sshd[4880]: Invalid user jenkins from 10.30.104.4 port 52022
Jul 30 21:25:32 prd-ubuntu2004-helm-2c-1g-14111 sshd[4880]: Received disconnect from 10.30.104.4 port 52022:11: Closed due to user request. [preauth]
Jul 30 21:25:32 prd-ubuntu2004-helm-2c-1g-14111 sshd[4880]: Disconnected from invalid user jenkins 10.30.104.4 port 52022 [preauth]
Jul 30 21:25:34 prd-ubuntu2004-helm-2c-1g-14111 sshd[5524]: Invalid user jenkins from 10.30.104.4 port 52026
Jul 30 21:25:34 prd-ubuntu2004-helm-2c-1g-14111 sshd[5524]: Received disconnect from 10.30.104.4 port 52026:11: Closed due to user request. [preauth]
Jul 30 21:25:34 prd-ubuntu2004-helm-2c-1g-14111 sshd[5524]: Disconnected from invalid user jenkins 10.30.104.4 port 52026 [preauth]
Jul 30 21:25:36 prd-ubuntu2004-helm-2c-1g-14111 sshd[6216]: Invalid user jenkins from 10.30.104.4 port 52028
Jul 30 21:25:36 prd-ubuntu2004-helm-2c-1g-14111 sshd[6216]: Received disconnect from 10.30.104.4 port 52028:11: Closed due to user request. [preauth]
Jul 30 21:25:36 prd-ubuntu2004-helm-2c-1g-14111 sshd[6216]: Disconnected from invalid user jenkins 10.30.104.4 port 52028 [preauth]
Jul 30 21:25:38 prd-ubuntu2004-helm-2c-1g-14111 sshd[7151]: Invalid user jenkins from 10.30.104.4 port 52030
Jul 30 21:25:38 prd-ubuntu2004-helm-2c-1g-14111 sshd[7151]: Received disconnect from 10.30.104.4 port 52030:11: Closed due to user request. [preauth]
Jul 30 21:25:38 prd-ubuntu2004-helm-2c-1g-14111 sshd[7151]: Disconnected from invalid user jenkins 10.30.104.4 port 52030 [preauth]
Jul 30 21:25:40 prd-ubuntu2004-helm-2c-1g-14111 sshd[7999]: Invalid user jenkins from 10.30.104.4 port 52032
Jul 30 21:25:40 prd-ubuntu2004-helm-2c-1g-14111 sshd[7999]: Received disconnect from 10.30.104.4 port 52032:11: Closed due to user request. [preauth]
Jul 30 21:25:40 prd-ubuntu2004-helm-2c-1g-14111 sshd[7999]: Disconnected from invalid user jenkins 10.30.104.4 port 52032 [preauth]
Jul 30 21:25:42 prd-ubuntu2004-helm-2c-1g-14111 sshd[8451]: Invalid user jenkins from 10.30.104.4 port 52034
Jul 30 21:25:42 prd-ubuntu2004-helm-2c-1g-14111 sshd[8451]: Received disconnect from 10.30.104.4 port 52034:11: Closed due to user request. [preauth]
Jul 30 21:25:42 prd-ubuntu2004-helm-2c-1g-14111 sshd[8451]: Disconnected from invalid user jenkins 10.30.104.4 port 52034 [preauth]
Jul 30 21:25:45 prd-ubuntu2004-helm-2c-1g-14111 sshd[8893]: Invalid user jenkins from 10.30.104.4 port 52036
Jul 30 21:25:45 prd-ubuntu2004-helm-2c-1g-14111 sshd[8893]: Received disconnect from 10.30.104.4 port 52036:11: Closed due to user request. [preauth]
Jul 30 21:25:45 prd-ubuntu2004-helm-2c-1g-14111 sshd[8893]: Disconnected from invalid user jenkins 10.30.104.4 port 52036 [preauth]
Jul 30 21:25:45 prd-ubuntu2004-helm-2c-1g-14111 useradd[8938]: new group: name=jenkins, GID=1001
Jul 30 21:25:45 prd-ubuntu2004-helm-2c-1g-14111 useradd[8938]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jul 30 21:25:46 prd-ubuntu2004-helm-2c-1g-14111 usermod[8978]: add 'jenkins' to group 'docker'
Jul 30 21:25:46 prd-ubuntu2004-helm-2c-1g-14111 usermod[8978]: add 'jenkins' to shadow group 'docker'
Jul 30 21:25:47 prd-ubuntu2004-helm-2c-1g-14111 sshd[9503]: Accepted publickey for jenkins from 10.30.104.4 port 52040 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Jul 30 21:25:47 prd-ubuntu2004-helm-2c-1g-14111 sshd[9503]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jul 30 21:25:47 prd-ubuntu2004-helm-2c-1g-14111 systemd-logind[754]: New session 1 of user jenkins.
Jul 30 21:25:47 prd-ubuntu2004-helm-2c-1g-14111 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jul 30 21:26:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[14259]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:26:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[14259]: pam_unix(cron:session): session closed for user root
Jul 30 21:27:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[28300]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:27:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[28300]: pam_unix(cron:session): session closed for user root
Jul 30 21:28:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[31774]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:28:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[31774]: pam_unix(cron:session): session closed for user root
Jul 30 21:29:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[33868]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:29:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[33868]: pam_unix(cron:session): session closed for user root
Jul 30 21:30:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[35146]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:30:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[35146]: pam_unix(cron:session): session closed for user root
Jul 30 21:31:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[35176]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:31:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[35176]: pam_unix(cron:session): session closed for user root
Jul 30 21:32:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[35202]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:32:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[35202]: pam_unix(cron:session): session closed for user root
Jul 30 21:33:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36724]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:33:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36724]: pam_unix(cron:session): session closed for user root
Jul 30 21:34:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36765]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:34:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36765]: pam_unix(cron:session): session closed for user root
Jul 30 21:35:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36768]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:35:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36768]: pam_unix(cron:session): session closed for user root
Jul 30 21:36:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36774]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:36:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36774]: pam_unix(cron:session): session closed for user root
Jul 30 21:37:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36777]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:37:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36777]: pam_unix(cron:session): session closed for user root
Jul 30 21:38:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36781]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:38:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36781]: pam_unix(cron:session): session closed for user root
Jul 30 21:39:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36785]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:39:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36785]: pam_unix(cron:session): session closed for user root
Jul 30 21:40:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36790]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:40:01 prd-ubuntu2004-helm-2c-1g-14111 CRON[36790]: pam_unix(cron:session): session closed for user root
Jul 30 21:41:02 prd-ubuntu2004-helm-2c-1g-14111 CRON[36811]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 30 21:41:02 prd-ubuntu2004-helm-2c-1g-14111 CRON[36811]: pam_unix(cron:session): session closed for user root
Jul 30 21:41:46 prd-ubuntu2004-helm-2c-1g-14111 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Jul 30 21:41:46 prd-ubuntu2004-helm-2c-1g-14111 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)