Dec 6 15:19:44 prd-ubuntu2004-helm-2c-1g-2792 passwd[707]: password for 'ubuntu' changed by 'root' Dec 6 15:19:44 prd-ubuntu2004-helm-2c-1g-2792 systemd-logind[753]: New seat seat0. Dec 6 15:19:44 prd-ubuntu2004-helm-2c-1g-2792 systemd-logind[753]: Watching system buttons on /dev/input/event0 (Power Button) Dec 6 15:19:44 prd-ubuntu2004-helm-2c-1g-2792 systemd-logind[753]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 6 15:19:44 prd-ubuntu2004-helm-2c-1g-2792 sshd[786]: Server listening on 0.0.0.0 port 22. Dec 6 15:19:44 prd-ubuntu2004-helm-2c-1g-2792 sshd[786]: Server listening on :: port 22. Dec 6 15:19:45 prd-ubuntu2004-helm-2c-1g-2792 sshd[1084]: error: kex_exchange_identification: Connection closed by remote host Dec 6 15:19:52 prd-ubuntu2004-helm-2c-1g-2792 sshd[3426]: Invalid user jenkins from 10.30.104.4 port 58284 Dec 6 15:19:52 prd-ubuntu2004-helm-2c-1g-2792 sshd[3426]: Received disconnect from 10.30.104.4 port 58284:11: Closed due to user request. [preauth] Dec 6 15:19:52 prd-ubuntu2004-helm-2c-1g-2792 sshd[3426]: Disconnected from invalid user jenkins 10.30.104.4 port 58284 [preauth] Dec 6 15:19:54 prd-ubuntu2004-helm-2c-1g-2792 sshd[4122]: Invalid user jenkins from 10.30.104.4 port 58412 Dec 6 15:19:54 prd-ubuntu2004-helm-2c-1g-2792 sshd[4122]: Received disconnect from 10.30.104.4 port 58412:11: Closed due to user request. [preauth] Dec 6 15:19:54 prd-ubuntu2004-helm-2c-1g-2792 sshd[4122]: Disconnected from invalid user jenkins 10.30.104.4 port 58412 [preauth] Dec 6 15:19:56 prd-ubuntu2004-helm-2c-1g-2792 sshd[4796]: Invalid user jenkins from 10.30.104.4 port 58414 Dec 6 15:19:56 prd-ubuntu2004-helm-2c-1g-2792 sshd[4796]: Received disconnect from 10.30.104.4 port 58414:11: Closed due to user request. [preauth] Dec 6 15:19:56 prd-ubuntu2004-helm-2c-1g-2792 sshd[4796]: Disconnected from invalid user jenkins 10.30.104.4 port 58414 [preauth] Dec 6 15:19:59 prd-ubuntu2004-helm-2c-1g-2792 sshd[5496]: Invalid user jenkins from 10.30.104.4 port 58416 Dec 6 15:19:59 prd-ubuntu2004-helm-2c-1g-2792 sshd[5496]: Received disconnect from 10.30.104.4 port 58416:11: Closed due to user request. [preauth] Dec 6 15:19:59 prd-ubuntu2004-helm-2c-1g-2792 sshd[5496]: Disconnected from invalid user jenkins 10.30.104.4 port 58416 [preauth] Dec 6 15:20:01 prd-ubuntu2004-helm-2c-1g-2792 sshd[6178]: Invalid user jenkins from 10.30.104.4 port 58418 Dec 6 15:20:01 prd-ubuntu2004-helm-2c-1g-2792 sshd[6178]: Received disconnect from 10.30.104.4 port 58418:11: Closed due to user request. [preauth] Dec 6 15:20:01 prd-ubuntu2004-helm-2c-1g-2792 sshd[6178]: Disconnected from invalid user jenkins 10.30.104.4 port 58418 [preauth] Dec 6 15:20:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[6359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:20:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[6359]: pam_unix(cron:session): session closed for user root Dec 6 15:20:03 prd-ubuntu2004-helm-2c-1g-2792 sshd[6926]: Invalid user jenkins from 10.30.104.4 port 58426 Dec 6 15:20:03 prd-ubuntu2004-helm-2c-1g-2792 sshd[6926]: Received disconnect from 10.30.104.4 port 58426:11: Closed due to user request. [preauth] Dec 6 15:20:03 prd-ubuntu2004-helm-2c-1g-2792 sshd[6926]: Disconnected from invalid user jenkins 10.30.104.4 port 58426 [preauth] Dec 6 15:20:05 prd-ubuntu2004-helm-2c-1g-2792 sshd[7796]: Invalid user jenkins from 10.30.104.4 port 58428 Dec 6 15:20:05 prd-ubuntu2004-helm-2c-1g-2792 sshd[7796]: Received disconnect from 10.30.104.4 port 58428:11: Closed due to user request. [preauth] Dec 6 15:20:05 prd-ubuntu2004-helm-2c-1g-2792 sshd[7796]: Disconnected from invalid user jenkins 10.30.104.4 port 58428 [preauth] Dec 6 15:20:07 prd-ubuntu2004-helm-2c-1g-2792 sshd[8462]: Invalid user jenkins from 10.30.104.4 port 58432 Dec 6 15:20:07 prd-ubuntu2004-helm-2c-1g-2792 sshd[8462]: Received disconnect from 10.30.104.4 port 58432:11: Closed due to user request. [preauth] Dec 6 15:20:07 prd-ubuntu2004-helm-2c-1g-2792 sshd[8462]: Disconnected from invalid user jenkins 10.30.104.4 port 58432 [preauth] Dec 6 15:20:09 prd-ubuntu2004-helm-2c-1g-2792 sshd[8910]: Invalid user jenkins from 10.30.104.4 port 58434 Dec 6 15:20:09 prd-ubuntu2004-helm-2c-1g-2792 sshd[8910]: Received disconnect from 10.30.104.4 port 58434:11: Closed due to user request. [preauth] Dec 6 15:20:09 prd-ubuntu2004-helm-2c-1g-2792 sshd[8910]: Disconnected from invalid user jenkins 10.30.104.4 port 58434 [preauth] Dec 6 15:20:11 prd-ubuntu2004-helm-2c-1g-2792 sshd[9152]: Invalid user jenkins from 10.30.104.4 port 58436 Dec 6 15:20:11 prd-ubuntu2004-helm-2c-1g-2792 sshd[9152]: Received disconnect from 10.30.104.4 port 58436:11: Closed due to user request. [preauth] Dec 6 15:20:11 prd-ubuntu2004-helm-2c-1g-2792 sshd[9152]: Disconnected from invalid user jenkins 10.30.104.4 port 58436 [preauth] Dec 6 15:20:13 prd-ubuntu2004-helm-2c-1g-2792 sshd[9600]: Invalid user jenkins from 10.30.104.4 port 58444 Dec 6 15:20:13 prd-ubuntu2004-helm-2c-1g-2792 sshd[9600]: Received disconnect from 10.30.104.4 port 58444:11: Closed due to user request. [preauth] Dec 6 15:20:13 prd-ubuntu2004-helm-2c-1g-2792 sshd[9600]: Disconnected from invalid user jenkins 10.30.104.4 port 58444 [preauth] Dec 6 15:20:14 prd-ubuntu2004-helm-2c-1g-2792 useradd[9895]: new group: name=jenkins, GID=1001 Dec 6 15:20:14 prd-ubuntu2004-helm-2c-1g-2792 useradd[9895]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Dec 6 15:20:14 prd-ubuntu2004-helm-2c-1g-2792 usermod[9936]: add 'jenkins' to group 'docker' Dec 6 15:20:14 prd-ubuntu2004-helm-2c-1g-2792 usermod[9936]: add 'jenkins' to shadow group 'docker' Dec 6 15:20:16 prd-ubuntu2004-helm-2c-1g-2792 sshd[10455]: Accepted publickey for jenkins from 10.30.104.4 port 58446 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Dec 6 15:20:16 prd-ubuntu2004-helm-2c-1g-2792 sshd[10455]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 6 15:20:16 prd-ubuntu2004-helm-2c-1g-2792 systemd-logind[753]: New session 2 of user jenkins. Dec 6 15:20:16 prd-ubuntu2004-helm-2c-1g-2792 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 6 15:21:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[24994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:21:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[24994]: pam_unix(cron:session): session closed for user root Dec 6 15:22:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[27896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:22:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[27896]: pam_unix(cron:session): session closed for user root Dec 6 15:23:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[27899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:23:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[27899]: pam_unix(cron:session): session closed for user root Dec 6 15:24:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[27903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:24:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[27903]: pam_unix(cron:session): session closed for user root Dec 6 15:25:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28595]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:25:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28595]: pam_unix(cron:session): session closed for user root Dec 6 15:26:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:26:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28612]: pam_unix(cron:session): session closed for user root Dec 6 15:27:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:27:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28615]: pam_unix(cron:session): session closed for user root Dec 6 15:28:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:28:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28619]: pam_unix(cron:session): session closed for user root Dec 6 15:29:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:29:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28622]: pam_unix(cron:session): session closed for user root Dec 6 15:30:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:30:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28631]: pam_unix(cron:session): session closed for user root Dec 6 15:31:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:31:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28634]: pam_unix(cron:session): session closed for user root Dec 6 15:32:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:32:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28639]: pam_unix(cron:session): session closed for user root Dec 6 15:33:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:33:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28642]: pam_unix(cron:session): session closed for user root Dec 6 15:34:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:34:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28646]: pam_unix(cron:session): session closed for user root Dec 6 15:35:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:35:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28693]: pam_unix(cron:session): session closed for user root Dec 6 15:36:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:36:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28697]: pam_unix(cron:session): session closed for user root Dec 6 15:37:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:37:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28700]: pam_unix(cron:session): session closed for user root Dec 6 15:38:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:38:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28705]: pam_unix(cron:session): session closed for user root Dec 6 15:39:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:39:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[28708]: pam_unix(cron:session): session closed for user root Dec 6 15:40:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[29060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:40:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[29060]: pam_unix(cron:session): session closed for user root Dec 6 15:41:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[30130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 15:41:01 prd-ubuntu2004-helm-2c-1g-2792 CRON[30130]: pam_unix(cron:session): session closed for user root Dec 6 15:41:26 prd-ubuntu2004-helm-2c-1g-2792 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Dec 6 15:41:26 prd-ubuntu2004-helm-2c-1g-2792 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)