Nov 3 14:04:06 prd-ubuntu2004-helm-2c-1g-674 passwd[712]: password for 'ubuntu' changed by 'root' Nov 3 14:04:06 prd-ubuntu2004-helm-2c-1g-674 sshd[782]: Server listening on 0.0.0.0 port 22. Nov 3 14:04:06 prd-ubuntu2004-helm-2c-1g-674 sshd[782]: Server listening on :: port 22. Nov 3 14:04:06 prd-ubuntu2004-helm-2c-1g-674 systemd-logind[752]: New seat seat0. Nov 3 14:04:06 prd-ubuntu2004-helm-2c-1g-674 systemd-logind[752]: Watching system buttons on /dev/input/event0 (Power Button) Nov 3 14:04:06 prd-ubuntu2004-helm-2c-1g-674 systemd-logind[752]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 3 14:04:09 prd-ubuntu2004-helm-2c-1g-674 sshd[1820]: error: kex_exchange_identification: Connection closed by remote host Nov 3 14:04:19 prd-ubuntu2004-helm-2c-1g-674 sshd[4768]: Invalid user jenkins from 10.30.104.4 port 48668 Nov 3 14:04:19 prd-ubuntu2004-helm-2c-1g-674 sshd[4768]: Received disconnect from 10.30.104.4 port 48668:11: Closed due to user request. [preauth] Nov 3 14:04:19 prd-ubuntu2004-helm-2c-1g-674 sshd[4768]: Disconnected from invalid user jenkins 10.30.104.4 port 48668 [preauth] Nov 3 14:04:21 prd-ubuntu2004-helm-2c-1g-674 sshd[5351]: Invalid user jenkins from 10.30.104.4 port 48676 Nov 3 14:04:21 prd-ubuntu2004-helm-2c-1g-674 sshd[5351]: Received disconnect from 10.30.104.4 port 48676:11: Closed due to user request. [preauth] Nov 3 14:04:21 prd-ubuntu2004-helm-2c-1g-674 sshd[5351]: Disconnected from invalid user jenkins 10.30.104.4 port 48676 [preauth] Nov 3 14:04:23 prd-ubuntu2004-helm-2c-1g-674 sshd[5941]: Invalid user jenkins from 10.30.104.4 port 48686 Nov 3 14:04:23 prd-ubuntu2004-helm-2c-1g-674 sshd[5941]: Received disconnect from 10.30.104.4 port 48686:11: Closed due to user request. [preauth] Nov 3 14:04:23 prd-ubuntu2004-helm-2c-1g-674 sshd[5941]: Disconnected from invalid user jenkins 10.30.104.4 port 48686 [preauth] Nov 3 14:04:26 prd-ubuntu2004-helm-2c-1g-674 sshd[6804]: Invalid user jenkins from 10.30.104.4 port 48692 Nov 3 14:04:26 prd-ubuntu2004-helm-2c-1g-674 sshd[6804]: Received disconnect from 10.30.104.4 port 48692:11: Closed due to user request. [preauth] Nov 3 14:04:26 prd-ubuntu2004-helm-2c-1g-674 sshd[6804]: Disconnected from invalid user jenkins 10.30.104.4 port 48692 [preauth] Nov 3 14:04:28 prd-ubuntu2004-helm-2c-1g-674 sshd[7501]: Invalid user jenkins from 10.30.104.4 port 48698 Nov 3 14:04:28 prd-ubuntu2004-helm-2c-1g-674 sshd[7501]: Received disconnect from 10.30.104.4 port 48698:11: Closed due to user request. [preauth] Nov 3 14:04:28 prd-ubuntu2004-helm-2c-1g-674 sshd[7501]: Disconnected from invalid user jenkins 10.30.104.4 port 48698 [preauth] Nov 3 14:04:30 prd-ubuntu2004-helm-2c-1g-674 useradd[8029]: new group: name=jenkins, GID=1001 Nov 3 14:04:30 prd-ubuntu2004-helm-2c-1g-674 useradd[8029]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 3 14:04:30 prd-ubuntu2004-helm-2c-1g-674 usermod[8064]: add 'jenkins' to group 'docker' Nov 3 14:04:30 prd-ubuntu2004-helm-2c-1g-674 usermod[8064]: add 'jenkins' to shadow group 'docker' Nov 3 14:04:30 prd-ubuntu2004-helm-2c-1g-674 sshd[8145]: Received disconnect from 10.30.104.4 port 48702:11: Closed due to user request. [preauth] Nov 3 14:04:30 prd-ubuntu2004-helm-2c-1g-674 sshd[8145]: Disconnected from authenticating user jenkins 10.30.104.4 port 48702 [preauth] Nov 3 14:04:32 prd-ubuntu2004-helm-2c-1g-674 sshd[8882]: Accepted publickey for jenkins from 10.30.104.4 port 48708 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 3 14:04:33 prd-ubuntu2004-helm-2c-1g-674 sshd[8882]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 3 14:04:33 prd-ubuntu2004-helm-2c-1g-674 systemd-logind[752]: New session 1 of user jenkins. Nov 3 14:04:33 prd-ubuntu2004-helm-2c-1g-674 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 3 14:05:02 prd-ubuntu2004-helm-2c-1g-674 CRON[18349]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:05:02 prd-ubuntu2004-helm-2c-1g-674 CRON[18349]: pam_unix(cron:session): session closed for user root Nov 3 14:06:01 prd-ubuntu2004-helm-2c-1g-674 CRON[30326]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:06:01 prd-ubuntu2004-helm-2c-1g-674 CRON[30326]: pam_unix(cron:session): session closed for user root Nov 3 14:07:01 prd-ubuntu2004-helm-2c-1g-674 CRON[32339]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:07:01 prd-ubuntu2004-helm-2c-1g-674 CRON[32339]: pam_unix(cron:session): session closed for user root Nov 3 14:08:01 prd-ubuntu2004-helm-2c-1g-674 CRON[35087]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:08:01 prd-ubuntu2004-helm-2c-1g-674 CRON[35087]: pam_unix(cron:session): session closed for user root Nov 3 14:09:01 prd-ubuntu2004-helm-2c-1g-674 CRON[35096]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:09:01 prd-ubuntu2004-helm-2c-1g-674 CRON[35096]: pam_unix(cron:session): session closed for user root Nov 3 14:10:01 prd-ubuntu2004-helm-2c-1g-674 CRON[35569]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:10:01 prd-ubuntu2004-helm-2c-1g-674 CRON[35569]: pam_unix(cron:session): session closed for user root Nov 3 14:11:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36652]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:11:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36652]: pam_unix(cron:session): session closed for user root Nov 3 14:12:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36694]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:12:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36694]: pam_unix(cron:session): session closed for user root Nov 3 14:13:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36698]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:13:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36698]: pam_unix(cron:session): session closed for user root Nov 3 14:14:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36734]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:14:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36734]: pam_unix(cron:session): session closed for user root Nov 3 14:15:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36740]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:15:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36740]: pam_unix(cron:session): session closed for user root Nov 3 14:16:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36744]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:16:01 prd-ubuntu2004-helm-2c-1g-674 CRON[36744]: pam_unix(cron:session): session closed for user root Nov 3 14:17:01 prd-ubuntu2004-helm-2c-1g-674 CRON[37057]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:17:01 prd-ubuntu2004-helm-2c-1g-674 CRON[37058]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 14:17:01 prd-ubuntu2004-helm-2c-1g-674 CRON[37057]: pam_unix(cron:session): session closed for user root Nov 3 14:17:01 prd-ubuntu2004-helm-2c-1g-674 CRON[37058]: pam_unix(cron:session): session closed for user root Nov 3 14:17:18 prd-ubuntu2004-helm-2c-1g-674 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-verify-helm3.8 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 3 14:17:18 prd-ubuntu2004-helm-2c-1g-674 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)