Aug 5 08:18:35 prd-ubuntu2004-helm-2c-1g-4229 passwd[705]: password for 'ubuntu' changed by 'root' Aug 5 08:18:35 prd-ubuntu2004-helm-2c-1g-4229 sshd[794]: Server listening on 0.0.0.0 port 22. Aug 5 08:18:35 prd-ubuntu2004-helm-2c-1g-4229 sshd[794]: Server listening on :: port 22. Aug 5 08:18:35 prd-ubuntu2004-helm-2c-1g-4229 systemd-logind[753]: New seat seat0. Aug 5 08:18:35 prd-ubuntu2004-helm-2c-1g-4229 systemd-logind[753]: Watching system buttons on /dev/input/event0 (Power Button) Aug 5 08:18:35 prd-ubuntu2004-helm-2c-1g-4229 systemd-logind[753]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 5 08:18:36 prd-ubuntu2004-helm-2c-1g-4229 sshd[1171]: error: kex_exchange_identification: Connection closed by remote host Aug 5 08:18:42 prd-ubuntu2004-helm-2c-1g-4229 sshd[3231]: Invalid user jenkins from 10.30.104.4 port 55094 Aug 5 08:18:42 prd-ubuntu2004-helm-2c-1g-4229 sshd[3231]: Received disconnect from 10.30.104.4 port 55094:11: Closed due to user request. [preauth] Aug 5 08:18:42 prd-ubuntu2004-helm-2c-1g-4229 sshd[3231]: Disconnected from invalid user jenkins 10.30.104.4 port 55094 [preauth] Aug 5 08:18:44 prd-ubuntu2004-helm-2c-1g-4229 sshd[3894]: Invalid user jenkins from 10.30.104.4 port 55096 Aug 5 08:18:45 prd-ubuntu2004-helm-2c-1g-4229 sshd[3894]: Received disconnect from 10.30.104.4 port 55096:11: Closed due to user request. [preauth] Aug 5 08:18:45 prd-ubuntu2004-helm-2c-1g-4229 sshd[3894]: Disconnected from invalid user jenkins 10.30.104.4 port 55096 [preauth] Aug 5 08:18:47 prd-ubuntu2004-helm-2c-1g-4229 sshd[4532]: Invalid user jenkins from 10.30.104.4 port 55098 Aug 5 08:18:47 prd-ubuntu2004-helm-2c-1g-4229 sshd[4532]: Received disconnect from 10.30.104.4 port 55098:11: Closed due to user request. [preauth] Aug 5 08:18:47 prd-ubuntu2004-helm-2c-1g-4229 sshd[4532]: Disconnected from invalid user jenkins 10.30.104.4 port 55098 [preauth] Aug 5 08:18:49 prd-ubuntu2004-helm-2c-1g-4229 sshd[5204]: Invalid user jenkins from 10.30.104.4 port 55102 Aug 5 08:18:49 prd-ubuntu2004-helm-2c-1g-4229 sshd[5204]: Received disconnect from 10.30.104.4 port 55102:11: Closed due to user request. [preauth] Aug 5 08:18:49 prd-ubuntu2004-helm-2c-1g-4229 sshd[5204]: Disconnected from invalid user jenkins 10.30.104.4 port 55102 [preauth] Aug 5 08:18:51 prd-ubuntu2004-helm-2c-1g-4229 sshd[5911]: Invalid user jenkins from 10.30.104.4 port 55104 Aug 5 08:18:51 prd-ubuntu2004-helm-2c-1g-4229 sshd[5911]: Received disconnect from 10.30.104.4 port 55104:11: Closed due to user request. [preauth] Aug 5 08:18:51 prd-ubuntu2004-helm-2c-1g-4229 sshd[5911]: Disconnected from invalid user jenkins 10.30.104.4 port 55104 [preauth] Aug 5 08:18:53 prd-ubuntu2004-helm-2c-1g-4229 sshd[6684]: Invalid user jenkins from 10.30.104.4 port 55106 Aug 5 08:18:53 prd-ubuntu2004-helm-2c-1g-4229 sshd[6684]: Received disconnect from 10.30.104.4 port 55106:11: Closed due to user request. [preauth] Aug 5 08:18:53 prd-ubuntu2004-helm-2c-1g-4229 sshd[6684]: Disconnected from invalid user jenkins 10.30.104.4 port 55106 [preauth] Aug 5 08:18:56 prd-ubuntu2004-helm-2c-1g-4229 sshd[7688]: Invalid user jenkins from 10.30.104.4 port 55108 Aug 5 08:18:56 prd-ubuntu2004-helm-2c-1g-4229 sshd[7688]: Received disconnect from 10.30.104.4 port 55108:11: Closed due to user request. [preauth] Aug 5 08:18:56 prd-ubuntu2004-helm-2c-1g-4229 sshd[7688]: Disconnected from invalid user jenkins 10.30.104.4 port 55108 [preauth] Aug 5 08:18:58 prd-ubuntu2004-helm-2c-1g-4229 sshd[8346]: Invalid user jenkins from 10.30.104.4 port 55110 Aug 5 08:18:58 prd-ubuntu2004-helm-2c-1g-4229 sshd[8346]: Received disconnect from 10.30.104.4 port 55110:11: Closed due to user request. [preauth] Aug 5 08:18:58 prd-ubuntu2004-helm-2c-1g-4229 sshd[8346]: Disconnected from invalid user jenkins 10.30.104.4 port 55110 [preauth] Aug 5 08:19:00 prd-ubuntu2004-helm-2c-1g-4229 sshd[8862]: Invalid user jenkins from 10.30.104.4 port 55114 Aug 5 08:19:00 prd-ubuntu2004-helm-2c-1g-4229 sshd[8862]: Received disconnect from 10.30.104.4 port 55114:11: Closed due to user request. [preauth] Aug 5 08:19:00 prd-ubuntu2004-helm-2c-1g-4229 sshd[8862]: Disconnected from invalid user jenkins 10.30.104.4 port 55114 [preauth] Aug 5 08:19:00 prd-ubuntu2004-helm-2c-1g-4229 useradd[8961]: new group: name=jenkins, GID=1001 Aug 5 08:19:00 prd-ubuntu2004-helm-2c-1g-4229 useradd[8961]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 5 08:19:01 prd-ubuntu2004-helm-2c-1g-4229 usermod[9023]: add 'jenkins' to group 'docker' Aug 5 08:19:01 prd-ubuntu2004-helm-2c-1g-4229 usermod[9023]: add 'jenkins' to shadow group 'docker' Aug 5 08:19:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[9202]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:19:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[9202]: pam_unix(cron:session): session closed for user root Aug 5 08:19:02 prd-ubuntu2004-helm-2c-1g-4229 sshd[9656]: Accepted publickey for jenkins from 10.30.104.4 port 55116 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Aug 5 08:19:02 prd-ubuntu2004-helm-2c-1g-4229 sshd[9656]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 5 08:19:02 prd-ubuntu2004-helm-2c-1g-4229 systemd-logind[753]: New session 2 of user jenkins. Aug 5 08:19:02 prd-ubuntu2004-helm-2c-1g-4229 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 5 08:20:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[28214]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:20:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[28214]: pam_unix(cron:session): session closed for user root Aug 5 08:21:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[31248]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:21:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[31248]: pam_unix(cron:session): session closed for user root Aug 5 08:22:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[32925]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:22:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[32925]: pam_unix(cron:session): session closed for user root Aug 5 08:23:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[35078]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:23:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[35078]: pam_unix(cron:session): session closed for user root Aug 5 08:24:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[35162]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:24:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[35162]: pam_unix(cron:session): session closed for user root Aug 5 08:25:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[35181]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:25:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[35181]: pam_unix(cron:session): session closed for user root Aug 5 08:26:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36134]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:26:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36134]: pam_unix(cron:session): session closed for user root Aug 5 08:27:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36711]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:27:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36711]: pam_unix(cron:session): session closed for user root Aug 5 08:28:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36755]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:28:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36755]: pam_unix(cron:session): session closed for user root Aug 5 08:29:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36762]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:29:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36762]: pam_unix(cron:session): session closed for user root Aug 5 08:30:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36765]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:30:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36765]: pam_unix(cron:session): session closed for user root Aug 5 08:31:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36769]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:31:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36769]: pam_unix(cron:session): session closed for user root Aug 5 08:32:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36772]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:32:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36772]: pam_unix(cron:session): session closed for user root Aug 5 08:33:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36776]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:33:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36776]: pam_unix(cron:session): session closed for user root Aug 5 08:34:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36797]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 5 08:34:01 prd-ubuntu2004-helm-2c-1g-4229 CRON[36797]: pam_unix(cron:session): session closed for user root Aug 5 08:34:53 prd-ubuntu2004-helm-2c-1g-4229 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Aug 5 08:34:53 prd-ubuntu2004-helm-2c-1g-4229 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)