Jan 8 15:06:22 prd-ubuntu2004-helm-2c-1g-10526 passwd[723]: password for 'ubuntu' changed by 'root' Jan 8 15:06:22 prd-ubuntu2004-helm-2c-1g-10526 systemd-logind[795]: New seat seat0. Jan 8 15:06:22 prd-ubuntu2004-helm-2c-1g-10526 systemd-logind[795]: Watching system buttons on /dev/input/event0 (Power Button) Jan 8 15:06:22 prd-ubuntu2004-helm-2c-1g-10526 systemd-logind[795]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 8 15:06:22 prd-ubuntu2004-helm-2c-1g-10526 sshd[842]: Server listening on 0.0.0.0 port 22. Jan 8 15:06:22 prd-ubuntu2004-helm-2c-1g-10526 sshd[842]: Server listening on :: port 22. Jan 8 15:06:28 prd-ubuntu2004-helm-2c-1g-10526 sshd[1020]: error: kex_exchange_identification: Connection closed by remote host Jan 8 15:06:32 prd-ubuntu2004-helm-2c-1g-10526 sshd[1142]: Invalid user jenkins from 10.30.104.4 port 57734 Jan 8 15:06:33 prd-ubuntu2004-helm-2c-1g-10526 sshd[1142]: Received disconnect from 10.30.104.4 port 57734:11: Closed due to user request. [preauth] Jan 8 15:06:33 prd-ubuntu2004-helm-2c-1g-10526 sshd[1142]: Disconnected from invalid user jenkins 10.30.104.4 port 57734 [preauth] Jan 8 15:06:34 prd-ubuntu2004-helm-2c-1g-10526 sshd[1210]: Invalid user jenkins from 10.30.104.4 port 57746 Jan 8 15:06:34 prd-ubuntu2004-helm-2c-1g-10526 sshd[1210]: Received disconnect from 10.30.104.4 port 57746:11: Closed due to user request. [preauth] Jan 8 15:06:34 prd-ubuntu2004-helm-2c-1g-10526 sshd[1210]: Disconnected from invalid user jenkins 10.30.104.4 port 57746 [preauth] Jan 8 15:06:36 prd-ubuntu2004-helm-2c-1g-10526 sshd[1288]: Invalid user jenkins from 10.30.104.4 port 57752 Jan 8 15:06:36 prd-ubuntu2004-helm-2c-1g-10526 sshd[1288]: Received disconnect from 10.30.104.4 port 57752:11: Closed due to user request. [preauth] Jan 8 15:06:36 prd-ubuntu2004-helm-2c-1g-10526 sshd[1288]: Disconnected from invalid user jenkins 10.30.104.4 port 57752 [preauth] Jan 8 15:06:38 prd-ubuntu2004-helm-2c-1g-10526 sshd[1374]: Invalid user jenkins from 10.30.104.4 port 57764 Jan 8 15:06:38 prd-ubuntu2004-helm-2c-1g-10526 sshd[1374]: Received disconnect from 10.30.104.4 port 57764:11: Closed due to user request. [preauth] Jan 8 15:06:38 prd-ubuntu2004-helm-2c-1g-10526 sshd[1374]: Disconnected from invalid user jenkins 10.30.104.4 port 57764 [preauth] Jan 8 15:06:40 prd-ubuntu2004-helm-2c-1g-10526 sshd[1425]: Invalid user jenkins from 10.30.104.4 port 57780 Jan 8 15:06:41 prd-ubuntu2004-helm-2c-1g-10526 sshd[1425]: Received disconnect from 10.30.104.4 port 57780:11: Closed due to user request. [preauth] Jan 8 15:06:41 prd-ubuntu2004-helm-2c-1g-10526 sshd[1425]: Disconnected from invalid user jenkins 10.30.104.4 port 57780 [preauth] Jan 8 15:06:43 prd-ubuntu2004-helm-2c-1g-10526 sshd[1484]: Invalid user jenkins from 10.30.104.4 port 57786 Jan 8 15:06:43 prd-ubuntu2004-helm-2c-1g-10526 sshd[1484]: Received disconnect from 10.30.104.4 port 57786:11: Closed due to user request. [preauth] Jan 8 15:06:43 prd-ubuntu2004-helm-2c-1g-10526 sshd[1484]: Disconnected from invalid user jenkins 10.30.104.4 port 57786 [preauth] Jan 8 15:06:45 prd-ubuntu2004-helm-2c-1g-10526 sshd[1721]: Invalid user jenkins from 10.30.104.4 port 57796 Jan 8 15:06:45 prd-ubuntu2004-helm-2c-1g-10526 sshd[1721]: Received disconnect from 10.30.104.4 port 57796:11: Closed due to user request. [preauth] Jan 8 15:06:45 prd-ubuntu2004-helm-2c-1g-10526 sshd[1721]: Disconnected from invalid user jenkins 10.30.104.4 port 57796 [preauth] Jan 8 15:06:47 prd-ubuntu2004-helm-2c-1g-10526 sshd[2022]: Invalid user jenkins from 10.30.104.4 port 57804 Jan 8 15:06:47 prd-ubuntu2004-helm-2c-1g-10526 sshd[2022]: Received disconnect from 10.30.104.4 port 57804:11: Closed due to user request. [preauth] Jan 8 15:06:47 prd-ubuntu2004-helm-2c-1g-10526 sshd[2022]: Disconnected from invalid user jenkins 10.30.104.4 port 57804 [preauth] Jan 8 15:06:49 prd-ubuntu2004-helm-2c-1g-10526 sshd[2357]: Invalid user jenkins from 10.30.104.4 port 57810 Jan 8 15:06:49 prd-ubuntu2004-helm-2c-1g-10526 sshd[2357]: Received disconnect from 10.30.104.4 port 57810:11: Closed due to user request. [preauth] Jan 8 15:06:49 prd-ubuntu2004-helm-2c-1g-10526 sshd[2357]: Disconnected from invalid user jenkins 10.30.104.4 port 57810 [preauth] Jan 8 15:06:51 prd-ubuntu2004-helm-2c-1g-10526 sshd[2632]: Invalid user jenkins from 10.30.104.4 port 57816 Jan 8 15:06:51 prd-ubuntu2004-helm-2c-1g-10526 sshd[2632]: Received disconnect from 10.30.104.4 port 57816:11: Closed due to user request. [preauth] Jan 8 15:06:51 prd-ubuntu2004-helm-2c-1g-10526 sshd[2632]: Disconnected from invalid user jenkins 10.30.104.4 port 57816 [preauth] Jan 8 15:06:53 prd-ubuntu2004-helm-2c-1g-10526 sshd[2834]: Invalid user jenkins from 10.30.104.4 port 57836 Jan 8 15:06:53 prd-ubuntu2004-helm-2c-1g-10526 sshd[2834]: Received disconnect from 10.30.104.4 port 57836:11: Closed due to user request. [preauth] Jan 8 15:06:53 prd-ubuntu2004-helm-2c-1g-10526 sshd[2834]: Disconnected from invalid user jenkins 10.30.104.4 port 57836 [preauth] Jan 8 15:06:56 prd-ubuntu2004-helm-2c-1g-10526 sshd[3195]: Invalid user jenkins from 10.30.104.4 port 57850 Jan 8 15:06:56 prd-ubuntu2004-helm-2c-1g-10526 sshd[3195]: Received disconnect from 10.30.104.4 port 57850:11: Closed due to user request. [preauth] Jan 8 15:06:56 prd-ubuntu2004-helm-2c-1g-10526 sshd[3195]: Disconnected from invalid user jenkins 10.30.104.4 port 57850 [preauth] Jan 8 15:06:58 prd-ubuntu2004-helm-2c-1g-10526 sshd[3805]: Invalid user jenkins from 10.30.104.4 port 57860 Jan 8 15:06:58 prd-ubuntu2004-helm-2c-1g-10526 sshd[3805]: Received disconnect from 10.30.104.4 port 57860:11: Closed due to user request. [preauth] Jan 8 15:06:58 prd-ubuntu2004-helm-2c-1g-10526 sshd[3805]: Disconnected from invalid user jenkins 10.30.104.4 port 57860 [preauth] Jan 8 15:07:00 prd-ubuntu2004-helm-2c-1g-10526 sshd[4403]: Invalid user jenkins from 10.30.104.4 port 57874 Jan 8 15:07:00 prd-ubuntu2004-helm-2c-1g-10526 sshd[4403]: Received disconnect from 10.30.104.4 port 57874:11: Closed due to user request. [preauth] Jan 8 15:07:00 prd-ubuntu2004-helm-2c-1g-10526 sshd[4403]: Disconnected from invalid user jenkins 10.30.104.4 port 57874 [preauth] Jan 8 15:07:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[4759]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 8 15:07:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[4759]: pam_unix(cron:session): session closed for user root Jan 8 15:07:02 prd-ubuntu2004-helm-2c-1g-10526 sshd[5148]: Invalid user jenkins from 10.30.104.4 port 57890 Jan 8 15:07:02 prd-ubuntu2004-helm-2c-1g-10526 sshd[5148]: Received disconnect from 10.30.104.4 port 57890:11: Closed due to user request. [preauth] Jan 8 15:07:03 prd-ubuntu2004-helm-2c-1g-10526 sshd[5148]: Disconnected from invalid user jenkins 10.30.104.4 port 57890 [preauth] Jan 8 15:07:04 prd-ubuntu2004-helm-2c-1g-10526 sshd[5176]: Invalid user jenkins from 10.30.104.4 port 57904 Jan 8 15:07:04 prd-ubuntu2004-helm-2c-1g-10526 sshd[5176]: Received disconnect from 10.30.104.4 port 57904:11: Closed due to user request. [preauth] Jan 8 15:07:04 prd-ubuntu2004-helm-2c-1g-10526 sshd[5176]: Disconnected from invalid user jenkins 10.30.104.4 port 57904 [preauth] Jan 8 15:07:06 prd-ubuntu2004-helm-2c-1g-10526 sshd[5305]: Invalid user jenkins from 10.30.104.4 port 57914 Jan 8 15:07:06 prd-ubuntu2004-helm-2c-1g-10526 sshd[5305]: Received disconnect from 10.30.104.4 port 57914:11: Closed due to user request. [preauth] Jan 8 15:07:06 prd-ubuntu2004-helm-2c-1g-10526 sshd[5305]: Disconnected from invalid user jenkins 10.30.104.4 port 57914 [preauth] Jan 8 15:07:08 prd-ubuntu2004-helm-2c-1g-10526 sshd[5381]: Invalid user jenkins from 10.30.104.4 port 57930 Jan 8 15:07:08 prd-ubuntu2004-helm-2c-1g-10526 sshd[5381]: Received disconnect from 10.30.104.4 port 57930:11: Closed due to user request. [preauth] Jan 8 15:07:08 prd-ubuntu2004-helm-2c-1g-10526 sshd[5381]: Disconnected from invalid user jenkins 10.30.104.4 port 57930 [preauth] Jan 8 15:07:11 prd-ubuntu2004-helm-2c-1g-10526 sshd[5497]: Invalid user jenkins from 10.30.104.4 port 57952 Jan 8 15:07:11 prd-ubuntu2004-helm-2c-1g-10526 sshd[5497]: Received disconnect from 10.30.104.4 port 57952:11: Closed due to user request. [preauth] Jan 8 15:07:11 prd-ubuntu2004-helm-2c-1g-10526 sshd[5497]: Disconnected from invalid user jenkins 10.30.104.4 port 57952 [preauth] Jan 8 15:07:13 prd-ubuntu2004-helm-2c-1g-10526 sshd[5789]: Invalid user jenkins from 10.30.104.4 port 57960 Jan 8 15:07:13 prd-ubuntu2004-helm-2c-1g-10526 sshd[5789]: Received disconnect from 10.30.104.4 port 57960:11: Closed due to user request. [preauth] Jan 8 15:07:13 prd-ubuntu2004-helm-2c-1g-10526 sshd[5789]: Disconnected from invalid user jenkins 10.30.104.4 port 57960 [preauth] Jan 8 15:07:15 prd-ubuntu2004-helm-2c-1g-10526 sshd[6050]: Invalid user jenkins from 10.30.104.4 port 57968 Jan 8 15:07:15 prd-ubuntu2004-helm-2c-1g-10526 sshd[6050]: Received disconnect from 10.30.104.4 port 57968:11: Closed due to user request. [preauth] Jan 8 15:07:15 prd-ubuntu2004-helm-2c-1g-10526 sshd[6050]: Disconnected from invalid user jenkins 10.30.104.4 port 57968 [preauth] Jan 8 15:07:17 prd-ubuntu2004-helm-2c-1g-10526 sshd[6433]: Invalid user jenkins from 10.30.104.4 port 57976 Jan 8 15:07:17 prd-ubuntu2004-helm-2c-1g-10526 sshd[6433]: Received disconnect from 10.30.104.4 port 57976:11: Closed due to user request. [preauth] Jan 8 15:07:17 prd-ubuntu2004-helm-2c-1g-10526 sshd[6433]: Disconnected from invalid user jenkins 10.30.104.4 port 57976 [preauth] Jan 8 15:07:19 prd-ubuntu2004-helm-2c-1g-10526 sshd[6625]: Invalid user jenkins from 10.30.104.4 port 57984 Jan 8 15:07:19 prd-ubuntu2004-helm-2c-1g-10526 sshd[6625]: Received disconnect from 10.30.104.4 port 57984:11: Closed due to user request. [preauth] Jan 8 15:07:19 prd-ubuntu2004-helm-2c-1g-10526 sshd[6625]: Disconnected from invalid user jenkins 10.30.104.4 port 57984 [preauth] Jan 8 15:07:21 prd-ubuntu2004-helm-2c-1g-10526 sshd[6869]: Invalid user jenkins from 10.30.104.4 port 57990 Jan 8 15:07:21 prd-ubuntu2004-helm-2c-1g-10526 sshd[6869]: Received disconnect from 10.30.104.4 port 57990:11: Closed due to user request. [preauth] Jan 8 15:07:21 prd-ubuntu2004-helm-2c-1g-10526 sshd[6869]: Disconnected from invalid user jenkins 10.30.104.4 port 57990 [preauth] Jan 8 15:07:23 prd-ubuntu2004-helm-2c-1g-10526 sshd[7154]: Invalid user jenkins from 10.30.104.4 port 58010 Jan 8 15:07:24 prd-ubuntu2004-helm-2c-1g-10526 sshd[7154]: Received disconnect from 10.30.104.4 port 58010:11: Closed due to user request. [preauth] Jan 8 15:07:24 prd-ubuntu2004-helm-2c-1g-10526 sshd[7154]: Disconnected from invalid user jenkins 10.30.104.4 port 58010 [preauth] Jan 8 15:07:26 prd-ubuntu2004-helm-2c-1g-10526 sshd[7588]: Invalid user jenkins from 10.30.104.4 port 58024 Jan 8 15:07:26 prd-ubuntu2004-helm-2c-1g-10526 sshd[7588]: Received disconnect from 10.30.104.4 port 58024:11: Closed due to user request. [preauth] Jan 8 15:07:26 prd-ubuntu2004-helm-2c-1g-10526 sshd[7588]: Disconnected from invalid user jenkins 10.30.104.4 port 58024 [preauth] Jan 8 15:07:28 prd-ubuntu2004-helm-2c-1g-10526 sshd[7658]: Invalid user jenkins from 10.30.104.4 port 58036 Jan 8 15:07:28 prd-ubuntu2004-helm-2c-1g-10526 sshd[7658]: Received disconnect from 10.30.104.4 port 58036:11: Closed due to user request. [preauth] Jan 8 15:07:28 prd-ubuntu2004-helm-2c-1g-10526 sshd[7658]: Disconnected from invalid user jenkins 10.30.104.4 port 58036 [preauth] Jan 8 15:07:30 prd-ubuntu2004-helm-2c-1g-10526 sshd[7688]: Invalid user jenkins from 10.30.104.4 port 58050 Jan 8 15:07:30 prd-ubuntu2004-helm-2c-1g-10526 sshd[7688]: Received disconnect from 10.30.104.4 port 58050:11: Closed due to user request. [preauth] Jan 8 15:07:30 prd-ubuntu2004-helm-2c-1g-10526 sshd[7688]: Disconnected from invalid user jenkins 10.30.104.4 port 58050 [preauth] Jan 8 15:07:32 prd-ubuntu2004-helm-2c-1g-10526 sshd[7946]: Invalid user jenkins from 10.30.104.4 port 58066 Jan 8 15:07:32 prd-ubuntu2004-helm-2c-1g-10526 sshd[7946]: Received disconnect from 10.30.104.4 port 58066:11: Closed due to user request. [preauth] Jan 8 15:07:32 prd-ubuntu2004-helm-2c-1g-10526 sshd[7946]: Disconnected from invalid user jenkins 10.30.104.4 port 58066 [preauth] Jan 8 15:07:34 prd-ubuntu2004-helm-2c-1g-10526 sshd[7980]: Invalid user jenkins from 10.30.104.4 port 58076 Jan 8 15:07:34 prd-ubuntu2004-helm-2c-1g-10526 sshd[7980]: Received disconnect from 10.30.104.4 port 58076:11: Closed due to user request. [preauth] Jan 8 15:07:34 prd-ubuntu2004-helm-2c-1g-10526 sshd[7980]: Disconnected from invalid user jenkins 10.30.104.4 port 58076 [preauth] Jan 8 15:07:36 prd-ubuntu2004-helm-2c-1g-10526 sshd[8306]: Invalid user jenkins from 10.30.104.4 port 58094 Jan 8 15:07:36 prd-ubuntu2004-helm-2c-1g-10526 sshd[8306]: Received disconnect from 10.30.104.4 port 58094:11: Closed due to user request. [preauth] Jan 8 15:07:36 prd-ubuntu2004-helm-2c-1g-10526 sshd[8306]: Disconnected from invalid user jenkins 10.30.104.4 port 58094 [preauth] Jan 8 15:07:38 prd-ubuntu2004-helm-2c-1g-10526 sshd[8308]: Invalid user jenkins from 10.30.104.4 port 58106 Jan 8 15:07:39 prd-ubuntu2004-helm-2c-1g-10526 sshd[8308]: Received disconnect from 10.30.104.4 port 58106:11: Closed due to user request. [preauth] Jan 8 15:07:39 prd-ubuntu2004-helm-2c-1g-10526 sshd[8308]: Disconnected from invalid user jenkins 10.30.104.4 port 58106 [preauth] Jan 8 15:07:41 prd-ubuntu2004-helm-2c-1g-10526 sshd[8384]: Invalid user jenkins from 10.30.104.4 port 58122 Jan 8 15:07:41 prd-ubuntu2004-helm-2c-1g-10526 sshd[8384]: Received disconnect from 10.30.104.4 port 58122:11: Closed due to user request. [preauth] Jan 8 15:07:41 prd-ubuntu2004-helm-2c-1g-10526 sshd[8384]: Disconnected from invalid user jenkins 10.30.104.4 port 58122 [preauth] Jan 8 15:07:43 prd-ubuntu2004-helm-2c-1g-10526 sshd[8768]: Invalid user jenkins from 10.30.104.4 port 58130 Jan 8 15:07:43 prd-ubuntu2004-helm-2c-1g-10526 sshd[8768]: Received disconnect from 10.30.104.4 port 58130:11: Closed due to user request. [preauth] Jan 8 15:07:43 prd-ubuntu2004-helm-2c-1g-10526 sshd[8768]: Disconnected from invalid user jenkins 10.30.104.4 port 58130 [preauth] Jan 8 15:07:45 prd-ubuntu2004-helm-2c-1g-10526 sshd[9175]: Invalid user jenkins from 10.30.104.4 port 58136 Jan 8 15:07:45 prd-ubuntu2004-helm-2c-1g-10526 sshd[9175]: Received disconnect from 10.30.104.4 port 58136:11: Closed due to user request. [preauth] Jan 8 15:07:45 prd-ubuntu2004-helm-2c-1g-10526 sshd[9175]: Disconnected from invalid user jenkins 10.30.104.4 port 58136 [preauth] Jan 8 15:07:45 prd-ubuntu2004-helm-2c-1g-10526 useradd[9245]: new group: name=jenkins, GID=1001 Jan 8 15:07:45 prd-ubuntu2004-helm-2c-1g-10526 useradd[9245]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 8 15:07:46 prd-ubuntu2004-helm-2c-1g-10526 usermod[9452]: add 'jenkins' to group 'docker' Jan 8 15:07:46 prd-ubuntu2004-helm-2c-1g-10526 usermod[9452]: add 'jenkins' to shadow group 'docker' Jan 8 15:07:47 prd-ubuntu2004-helm-2c-1g-10526 sshd[9673]: Accepted publickey for jenkins from 10.30.104.4 port 58148 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jan 8 15:07:47 prd-ubuntu2004-helm-2c-1g-10526 sshd[9673]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 8 15:07:47 prd-ubuntu2004-helm-2c-1g-10526 systemd-logind[795]: New session 2 of user jenkins. Jan 8 15:07:47 prd-ubuntu2004-helm-2c-1g-10526 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 8 15:08:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[12564]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 8 15:08:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[12564]: pam_unix(cron:session): session closed for user root Jan 8 15:09:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[27960]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 8 15:09:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[27960]: pam_unix(cron:session): session closed for user root Jan 8 15:10:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[30892]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 8 15:10:01 prd-ubuntu2004-helm-2c-1g-10526 CRON[30892]: pam_unix(cron:session): session closed for user root Jan 8 15:10:19 prd-ubuntu2004-helm-2c-1g-10526 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jan 8 15:10:19 prd-ubuntu2004-helm-2c-1g-10526 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)