Dec 13 15:31:52 prd-ubuntu2004-helm-2c-1g-4814 passwd[709]: password for 'ubuntu' changed by 'root'
Dec 13 15:31:52 prd-ubuntu2004-helm-2c-1g-4814 sshd[781]: Server listening on 0.0.0.0 port 22.
Dec 13 15:31:52 prd-ubuntu2004-helm-2c-1g-4814 sshd[781]: Server listening on :: port 22.
Dec 13 15:31:52 prd-ubuntu2004-helm-2c-1g-4814 systemd-logind[755]: New seat seat0.
Dec 13 15:31:52 prd-ubuntu2004-helm-2c-1g-4814 systemd-logind[755]: Watching system buttons on /dev/input/event0 (Power Button)
Dec 13 15:31:52 prd-ubuntu2004-helm-2c-1g-4814 systemd-logind[755]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Dec 13 15:31:53 prd-ubuntu2004-helm-2c-1g-4814 sshd[1067]: error: kex_exchange_identification: Connection closed by remote host
Dec 13 15:32:02 prd-ubuntu2004-helm-2c-1g-4814 sshd[1280]: Invalid user jenkins from 10.30.104.4 port 43286
Dec 13 15:32:05 prd-ubuntu2004-helm-2c-1g-4814 sshd[1336]: Invalid user jenkins from 10.30.104.4 port 43294
Dec 13 15:32:06 prd-ubuntu2004-helm-2c-1g-4814 sshd[1280]: Received disconnect from 10.30.104.4 port 43286:11: Closed due to user request. [preauth]
Dec 13 15:32:06 prd-ubuntu2004-helm-2c-1g-4814 sshd[1280]: Disconnected from invalid user jenkins 10.30.104.4 port 43286 [preauth]
Dec 13 15:32:06 prd-ubuntu2004-helm-2c-1g-4814 sshd[1336]: Received disconnect from 10.30.104.4 port 43294:11: Closed due to user request. [preauth]
Dec 13 15:32:06 prd-ubuntu2004-helm-2c-1g-4814 sshd[1336]: Disconnected from invalid user jenkins 10.30.104.4 port 43294 [preauth]
Dec 13 15:32:06 prd-ubuntu2004-helm-2c-1g-4814 CRON[1267]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 13 15:32:06 prd-ubuntu2004-helm-2c-1g-4814 CRON[1267]: pam_unix(cron:session): session closed for user root
Dec 13 15:32:07 prd-ubuntu2004-helm-2c-1g-4814 sshd[1368]: Invalid user jenkins from 10.30.104.4 port 43302
Dec 13 15:32:07 prd-ubuntu2004-helm-2c-1g-4814 sshd[1368]: Received disconnect from 10.30.104.4 port 43302:11: Closed due to user request. [preauth]
Dec 13 15:32:07 prd-ubuntu2004-helm-2c-1g-4814 sshd[1368]: Disconnected from invalid user jenkins 10.30.104.4 port 43302 [preauth]
Dec 13 15:32:09 prd-ubuntu2004-helm-2c-1g-4814 sshd[1402]: Invalid user jenkins from 10.30.104.4 port 43310
Dec 13 15:32:09 prd-ubuntu2004-helm-2c-1g-4814 sshd[1402]: Received disconnect from 10.30.104.4 port 43310:11: Closed due to user request. [preauth]
Dec 13 15:32:09 prd-ubuntu2004-helm-2c-1g-4814 sshd[1402]: Disconnected from invalid user jenkins 10.30.104.4 port 43310 [preauth]
Dec 13 15:32:11 prd-ubuntu2004-helm-2c-1g-4814 sshd[1457]: Invalid user jenkins from 10.30.104.4 port 43318
Dec 13 15:32:11 prd-ubuntu2004-helm-2c-1g-4814 sshd[1457]: Received disconnect from 10.30.104.4 port 43318:11: Closed due to user request. [preauth]
Dec 13 15:32:11 prd-ubuntu2004-helm-2c-1g-4814 sshd[1457]: Disconnected from invalid user jenkins 10.30.104.4 port 43318 [preauth]
Dec 13 15:32:13 prd-ubuntu2004-helm-2c-1g-4814 sshd[1690]: Invalid user jenkins from 10.30.104.4 port 43336
Dec 13 15:32:13 prd-ubuntu2004-helm-2c-1g-4814 sshd[1690]: Received disconnect from 10.30.104.4 port 43336:11: Closed due to user request. [preauth]
Dec 13 15:32:13 prd-ubuntu2004-helm-2c-1g-4814 sshd[1690]: Disconnected from invalid user jenkins 10.30.104.4 port 43336 [preauth]
Dec 13 15:32:15 prd-ubuntu2004-helm-2c-1g-4814 sshd[1962]: Invalid user jenkins from 10.30.104.4 port 43338
Dec 13 15:32:15 prd-ubuntu2004-helm-2c-1g-4814 sshd[1962]: Received disconnect from 10.30.104.4 port 43338:11: Closed due to user request. [preauth]
Dec 13 15:32:15 prd-ubuntu2004-helm-2c-1g-4814 sshd[1962]: Disconnected from invalid user jenkins 10.30.104.4 port 43338 [preauth]
Dec 13 15:32:18 prd-ubuntu2004-helm-2c-1g-4814 sshd[2310]: Invalid user jenkins from 10.30.104.4 port 43342
Dec 13 15:32:18 prd-ubuntu2004-helm-2c-1g-4814 sshd[2310]: Received disconnect from 10.30.104.4 port 43342:11: Closed due to user request. [preauth]
Dec 13 15:32:18 prd-ubuntu2004-helm-2c-1g-4814 sshd[2310]: Disconnected from invalid user jenkins 10.30.104.4 port 43342 [preauth]
Dec 13 15:32:20 prd-ubuntu2004-helm-2c-1g-4814 sshd[2728]: Invalid user jenkins from 10.30.104.4 port 43350
Dec 13 15:32:20 prd-ubuntu2004-helm-2c-1g-4814 sshd[2728]: Received disconnect from 10.30.104.4 port 43350:11: Closed due to user request. [preauth]
Dec 13 15:32:20 prd-ubuntu2004-helm-2c-1g-4814 sshd[2728]: Disconnected from invalid user jenkins 10.30.104.4 port 43350 [preauth]
Dec 13 15:32:22 prd-ubuntu2004-helm-2c-1g-4814 sshd[3088]: Invalid user jenkins from 10.30.104.4 port 43356
Dec 13 15:32:22 prd-ubuntu2004-helm-2c-1g-4814 sshd[3088]: Received disconnect from 10.30.104.4 port 43356:11: Closed due to user request. [preauth]
Dec 13 15:32:22 prd-ubuntu2004-helm-2c-1g-4814 sshd[3088]: Disconnected from invalid user jenkins 10.30.104.4 port 43356 [preauth]
Dec 13 15:32:25 prd-ubuntu2004-helm-2c-1g-4814 sshd[3643]: Invalid user jenkins from 10.30.104.4 port 43360
Dec 13 15:32:25 prd-ubuntu2004-helm-2c-1g-4814 sshd[3643]: Received disconnect from 10.30.104.4 port 43360:11: Closed due to user request. [preauth]
Dec 13 15:32:25 prd-ubuntu2004-helm-2c-1g-4814 sshd[3643]: Disconnected from invalid user jenkins 10.30.104.4 port 43360 [preauth]
Dec 13 15:32:27 prd-ubuntu2004-helm-2c-1g-4814 sshd[4043]: Invalid user jenkins from 10.30.104.4 port 43368
Dec 13 15:32:27 prd-ubuntu2004-helm-2c-1g-4814 sshd[4043]: Received disconnect from 10.30.104.4 port 43368:11: Closed due to user request. [preauth]
Dec 13 15:32:27 prd-ubuntu2004-helm-2c-1g-4814 sshd[4043]: Disconnected from invalid user jenkins 10.30.104.4 port 43368 [preauth]
Dec 13 15:32:29 prd-ubuntu2004-helm-2c-1g-4814 sshd[4529]: Invalid user jenkins from 10.30.104.4 port 43372
Dec 13 15:32:29 prd-ubuntu2004-helm-2c-1g-4814 sshd[4529]: Received disconnect from 10.30.104.4 port 43372:11: Closed due to user request. [preauth]
Dec 13 15:32:29 prd-ubuntu2004-helm-2c-1g-4814 sshd[4529]: Disconnected from invalid user jenkins 10.30.104.4 port 43372 [preauth]
Dec 13 15:32:31 prd-ubuntu2004-helm-2c-1g-4814 sshd[4863]: Invalid user jenkins from 10.30.104.4 port 43376
Dec 13 15:32:31 prd-ubuntu2004-helm-2c-1g-4814 sshd[4863]: Received disconnect from 10.30.104.4 port 43376:11: Closed due to user request. [preauth]
Dec 13 15:32:31 prd-ubuntu2004-helm-2c-1g-4814 sshd[4863]: Disconnected from invalid user jenkins 10.30.104.4 port 43376 [preauth]
Dec 13 15:32:33 prd-ubuntu2004-helm-2c-1g-4814 sshd[5366]: Invalid user jenkins from 10.30.104.4 port 43396
Dec 13 15:32:33 prd-ubuntu2004-helm-2c-1g-4814 sshd[5366]: Received disconnect from 10.30.104.4 port 43396:11: Closed due to user request. [preauth]
Dec 13 15:32:33 prd-ubuntu2004-helm-2c-1g-4814 sshd[5366]: Disconnected from invalid user jenkins 10.30.104.4 port 43396 [preauth]
Dec 13 15:32:35 prd-ubuntu2004-helm-2c-1g-4814 sshd[6200]: Invalid user jenkins from 10.30.104.4 port 43412
Dec 13 15:32:35 prd-ubuntu2004-helm-2c-1g-4814 sshd[6200]: Received disconnect from 10.30.104.4 port 43412:11: Closed due to user request. [preauth]
Dec 13 15:32:35 prd-ubuntu2004-helm-2c-1g-4814 sshd[6200]: Disconnected from invalid user jenkins 10.30.104.4 port 43412 [preauth]
Dec 13 15:32:37 prd-ubuntu2004-helm-2c-1g-4814 sshd[6804]: Invalid user jenkins from 10.30.104.4 port 43428
Dec 13 15:32:37 prd-ubuntu2004-helm-2c-1g-4814 sshd[6804]: Received disconnect from 10.30.104.4 port 43428:11: Closed due to user request. [preauth]
Dec 13 15:32:37 prd-ubuntu2004-helm-2c-1g-4814 sshd[6804]: Disconnected from invalid user jenkins 10.30.104.4 port 43428 [preauth]
Dec 13 15:32:40 prd-ubuntu2004-helm-2c-1g-4814 sshd[7268]: Invalid user jenkins from 10.30.104.4 port 43440
Dec 13 15:32:40 prd-ubuntu2004-helm-2c-1g-4814 sshd[7268]: Received disconnect from 10.30.104.4 port 43440:11: Closed due to user request. [preauth]
Dec 13 15:32:40 prd-ubuntu2004-helm-2c-1g-4814 sshd[7268]: Disconnected from invalid user jenkins 10.30.104.4 port 43440 [preauth]
Dec 13 15:32:42 prd-ubuntu2004-helm-2c-1g-4814 sshd[7394]: Invalid user jenkins from 10.30.104.4 port 43458
Dec 13 15:32:42 prd-ubuntu2004-helm-2c-1g-4814 sshd[7394]: Received disconnect from 10.30.104.4 port 43458:11: Closed due to user request. [preauth]
Dec 13 15:32:42 prd-ubuntu2004-helm-2c-1g-4814 sshd[7394]: Disconnected from invalid user jenkins 10.30.104.4 port 43458 [preauth]
Dec 13 15:32:44 prd-ubuntu2004-helm-2c-1g-4814 useradd[7814]: new group: name=jenkins, GID=1001
Dec 13 15:32:44 prd-ubuntu2004-helm-2c-1g-4814 useradd[7814]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Dec 13 15:32:44 prd-ubuntu2004-helm-2c-1g-4814 usermod[7853]: add 'jenkins' to group 'docker'
Dec 13 15:32:44 prd-ubuntu2004-helm-2c-1g-4814 usermod[7853]: add 'jenkins' to shadow group 'docker'
Dec 13 15:32:44 prd-ubuntu2004-helm-2c-1g-4814 sshd[7862]: Received disconnect from 10.30.104.4 port 43472:11: Closed due to user request. [preauth]
Dec 13 15:32:44 prd-ubuntu2004-helm-2c-1g-4814 sshd[7862]: Disconnected from authenticating user jenkins 10.30.104.4 port 43472 [preauth]
Dec 13 15:32:46 prd-ubuntu2004-helm-2c-1g-4814 sshd[8577]: Accepted publickey for jenkins from 10.30.104.4 port 43478 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Dec 13 15:32:46 prd-ubuntu2004-helm-2c-1g-4814 sshd[8577]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Dec 13 15:32:46 prd-ubuntu2004-helm-2c-1g-4814 systemd-logind[755]: New session 2 of user jenkins.
Dec 13 15:32:46 prd-ubuntu2004-helm-2c-1g-4814 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Dec 13 15:33:02 prd-ubuntu2004-helm-2c-1g-4814 CRON[13730]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 13 15:33:02 prd-ubuntu2004-helm-2c-1g-4814 CRON[13730]: pam_unix(cron:session): session closed for user root
Dec 13 15:34:01 prd-ubuntu2004-helm-2c-1g-4814 CRON[28478]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 13 15:34:01 prd-ubuntu2004-helm-2c-1g-4814 CRON[28478]: pam_unix(cron:session): session closed for user root
Dec 13 15:34:49 prd-ubuntu2004-helm-2c-1g-4814 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Dec 13 15:34:49 prd-ubuntu2004-helm-2c-1g-4814 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)