Nov 12 15:17:21 prd-ubuntu2004-helm-2c-1g-12206 passwd[708]: password for 'ubuntu' changed by 'root'
Nov 12 15:17:21 prd-ubuntu2004-helm-2c-1g-12206 systemd-logind[753]: New seat seat0.
Nov 12 15:17:21 prd-ubuntu2004-helm-2c-1g-12206 systemd-logind[753]: Watching system buttons on /dev/input/event0 (Power Button)
Nov 12 15:17:21 prd-ubuntu2004-helm-2c-1g-12206 systemd-logind[753]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Nov 12 15:17:21 prd-ubuntu2004-helm-2c-1g-12206 sshd[798]: Server listening on 0.0.0.0 port 22.
Nov 12 15:17:21 prd-ubuntu2004-helm-2c-1g-12206 sshd[798]: Server listening on :: port 22.
Nov 12 15:17:21 prd-ubuntu2004-helm-2c-1g-12206 sshd[827]: error: kex_exchange_identification: Connection closed by remote host
Nov 12 15:17:24 prd-ubuntu2004-helm-2c-1g-12206 sshd[1046]: Invalid user jenkins from 10.30.104.4 port 47952
Nov 12 15:17:24 prd-ubuntu2004-helm-2c-1g-12206 sshd[1046]: Received disconnect from 10.30.104.4 port 47952:11: Closed due to user request. [preauth]
Nov 12 15:17:24 prd-ubuntu2004-helm-2c-1g-12206 sshd[1046]: Disconnected from invalid user jenkins 10.30.104.4 port 47952 [preauth]
Nov 12 15:17:26 prd-ubuntu2004-helm-2c-1g-12206 sshd[1608]: Invalid user jenkins from 10.30.104.4 port 47958
Nov 12 15:17:26 prd-ubuntu2004-helm-2c-1g-12206 sshd[1608]: Received disconnect from 10.30.104.4 port 47958:11: Closed due to user request. [preauth]
Nov 12 15:17:26 prd-ubuntu2004-helm-2c-1g-12206 sshd[1608]: Disconnected from invalid user jenkins 10.30.104.4 port 47958 [preauth]
Nov 12 15:17:28 prd-ubuntu2004-helm-2c-1g-12206 sshd[1995]: Invalid user jenkins from 10.30.104.4 port 47960
Nov 12 15:17:28 prd-ubuntu2004-helm-2c-1g-12206 sshd[1995]: Received disconnect from 10.30.104.4 port 47960:11: Closed due to user request. [preauth]
Nov 12 15:17:28 prd-ubuntu2004-helm-2c-1g-12206 sshd[1995]: Disconnected from invalid user jenkins 10.30.104.4 port 47960 [preauth]
Nov 12 15:17:30 prd-ubuntu2004-helm-2c-1g-12206 sshd[2701]: Invalid user jenkins from 10.30.104.4 port 47964
Nov 12 15:17:30 prd-ubuntu2004-helm-2c-1g-12206 sshd[2701]: Received disconnect from 10.30.104.4 port 47964:11: Closed due to user request. [preauth]
Nov 12 15:17:30 prd-ubuntu2004-helm-2c-1g-12206 sshd[2701]: Disconnected from invalid user jenkins 10.30.104.4 port 47964 [preauth]
Nov 12 15:17:33 prd-ubuntu2004-helm-2c-1g-12206 sshd[3377]: Invalid user jenkins from 10.30.104.4 port 47966
Nov 12 15:17:33 prd-ubuntu2004-helm-2c-1g-12206 sshd[3377]: Received disconnect from 10.30.104.4 port 47966:11: Closed due to user request. [preauth]
Nov 12 15:17:33 prd-ubuntu2004-helm-2c-1g-12206 sshd[3377]: Disconnected from invalid user jenkins 10.30.104.4 port 47966 [preauth]
Nov 12 15:17:35 prd-ubuntu2004-helm-2c-1g-12206 sshd[4051]: Invalid user jenkins from 10.30.104.4 port 47968
Nov 12 15:17:35 prd-ubuntu2004-helm-2c-1g-12206 sshd[4051]: Received disconnect from 10.30.104.4 port 47968:11: Closed due to user request. [preauth]
Nov 12 15:17:35 prd-ubuntu2004-helm-2c-1g-12206 sshd[4051]: Disconnected from invalid user jenkins 10.30.104.4 port 47968 [preauth]
Nov 12 15:17:37 prd-ubuntu2004-helm-2c-1g-12206 sshd[4709]: Invalid user jenkins from 10.30.104.4 port 47970
Nov 12 15:17:37 prd-ubuntu2004-helm-2c-1g-12206 sshd[4709]: Received disconnect from 10.30.104.4 port 47970:11: Closed due to user request. [preauth]
Nov 12 15:17:37 prd-ubuntu2004-helm-2c-1g-12206 sshd[4709]: Disconnected from invalid user jenkins 10.30.104.4 port 47970 [preauth]
Nov 12 15:17:39 prd-ubuntu2004-helm-2c-1g-12206 sshd[5334]: Invalid user jenkins from 10.30.104.4 port 47974
Nov 12 15:17:39 prd-ubuntu2004-helm-2c-1g-12206 sshd[5334]: Received disconnect from 10.30.104.4 port 47974:11: Closed due to user request. [preauth]
Nov 12 15:17:39 prd-ubuntu2004-helm-2c-1g-12206 sshd[5334]: Disconnected from invalid user jenkins 10.30.104.4 port 47974 [preauth]
Nov 12 15:17:41 prd-ubuntu2004-helm-2c-1g-12206 sshd[5984]: Invalid user jenkins from 10.30.104.4 port 47976
Nov 12 15:17:41 prd-ubuntu2004-helm-2c-1g-12206 sshd[5984]: Received disconnect from 10.30.104.4 port 47976:11: Closed due to user request. [preauth]
Nov 12 15:17:41 prd-ubuntu2004-helm-2c-1g-12206 sshd[5984]: Disconnected from invalid user jenkins 10.30.104.4 port 47976 [preauth]
Nov 12 15:17:44 prd-ubuntu2004-helm-2c-1g-12206 sshd[6695]: Invalid user jenkins from 10.30.104.4 port 47978
Nov 12 15:17:44 prd-ubuntu2004-helm-2c-1g-12206 sshd[6695]: Received disconnect from 10.30.104.4 port 47978:11: Closed due to user request. [preauth]
Nov 12 15:17:44 prd-ubuntu2004-helm-2c-1g-12206 sshd[6695]: Disconnected from invalid user jenkins 10.30.104.4 port 47978 [preauth]
Nov 12 15:17:46 prd-ubuntu2004-helm-2c-1g-12206 sshd[7495]: Invalid user jenkins from 10.30.104.4 port 47980
Nov 12 15:17:46 prd-ubuntu2004-helm-2c-1g-12206 sshd[7495]: Received disconnect from 10.30.104.4 port 47980:11: Closed due to user request. [preauth]
Nov 12 15:17:46 prd-ubuntu2004-helm-2c-1g-12206 sshd[7495]: Disconnected from invalid user jenkins 10.30.104.4 port 47980 [preauth]
Nov 12 15:17:48 prd-ubuntu2004-helm-2c-1g-12206 sshd[8278]: Invalid user jenkins from 10.30.104.4 port 47988
Nov 12 15:17:48 prd-ubuntu2004-helm-2c-1g-12206 sshd[8278]: Received disconnect from 10.30.104.4 port 47988:11: Closed due to user request. [preauth]
Nov 12 15:17:48 prd-ubuntu2004-helm-2c-1g-12206 sshd[8278]: Disconnected from invalid user jenkins 10.30.104.4 port 47988 [preauth]
Nov 12 15:17:50 prd-ubuntu2004-helm-2c-1g-12206 sshd[8735]: Invalid user jenkins from 10.30.104.4 port 47990
Nov 12 15:17:50 prd-ubuntu2004-helm-2c-1g-12206 sshd[8735]: Received disconnect from 10.30.104.4 port 47990:11: Closed due to user request. [preauth]
Nov 12 15:17:50 prd-ubuntu2004-helm-2c-1g-12206 sshd[8735]: Disconnected from invalid user jenkins 10.30.104.4 port 47990 [preauth]
Nov 12 15:17:52 prd-ubuntu2004-helm-2c-1g-12206 sshd[9153]: Invalid user jenkins from 10.30.104.4 port 47992
Nov 12 15:17:52 prd-ubuntu2004-helm-2c-1g-12206 sshd[9153]: Received disconnect from 10.30.104.4 port 47992:11: Closed due to user request. [preauth]
Nov 12 15:17:52 prd-ubuntu2004-helm-2c-1g-12206 sshd[9153]: Disconnected from invalid user jenkins 10.30.104.4 port 47992 [preauth]
Nov 12 15:17:55 prd-ubuntu2004-helm-2c-1g-12206 sshd[9379]: Invalid user jenkins from 10.30.104.4 port 47996
Nov 12 15:17:55 prd-ubuntu2004-helm-2c-1g-12206 sshd[9379]: Received disconnect from 10.30.104.4 port 47996:11: Closed due to user request. [preauth]
Nov 12 15:17:55 prd-ubuntu2004-helm-2c-1g-12206 sshd[9379]: Disconnected from invalid user jenkins 10.30.104.4 port 47996 [preauth]
Nov 12 15:17:57 prd-ubuntu2004-helm-2c-1g-12206 sshd[9796]: Invalid user jenkins from 10.30.104.4 port 47998
Nov 12 15:17:57 prd-ubuntu2004-helm-2c-1g-12206 sshd[9796]: Received disconnect from 10.30.104.4 port 47998:11: Closed due to user request. [preauth]
Nov 12 15:17:57 prd-ubuntu2004-helm-2c-1g-12206 sshd[9796]: Disconnected from invalid user jenkins 10.30.104.4 port 47998 [preauth]
Nov 12 15:17:57 prd-ubuntu2004-helm-2c-1g-12206 useradd[10027]: new group: name=jenkins, GID=1001
Nov 12 15:17:57 prd-ubuntu2004-helm-2c-1g-12206 useradd[10027]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Nov 12 15:17:57 prd-ubuntu2004-helm-2c-1g-12206 usermod[10067]: add 'jenkins' to group 'docker'
Nov 12 15:17:57 prd-ubuntu2004-helm-2c-1g-12206 usermod[10067]: add 'jenkins' to shadow group 'docker'
Nov 12 15:18:01 prd-ubuntu2004-helm-2c-1g-12206 CRON[11626]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 12 15:18:01 prd-ubuntu2004-helm-2c-1g-12206 CRON[11626]: pam_unix(cron:session): session closed for user root
Nov 12 15:18:02 prd-ubuntu2004-helm-2c-1g-12206 sshd[11614]: Accepted publickey for jenkins from 10.30.104.4 port 48000 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Nov 12 15:18:02 prd-ubuntu2004-helm-2c-1g-12206 sshd[11614]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Nov 12 15:18:02 prd-ubuntu2004-helm-2c-1g-12206 systemd-logind[753]: New session 2 of user jenkins.
Nov 12 15:18:02 prd-ubuntu2004-helm-2c-1g-12206 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Nov 12 15:19:02 prd-ubuntu2004-helm-2c-1g-12206 CRON[28289]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 12 15:19:02 prd-ubuntu2004-helm-2c-1g-12206 CRON[28289]: pam_unix(cron:session): session closed for user root
Nov 12 15:19:46 prd-ubuntu2004-helm-2c-1g-12206 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Nov 12 15:19:46 prd-ubuntu2004-helm-2c-1g-12206 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)