Feb 6 09:01:30 prd-ubuntu2004-helm-2c-1g-5674 passwd[713]: password for 'ubuntu' changed by 'root' Feb 6 09:01:30 prd-ubuntu2004-helm-2c-1g-5674 systemd-logind[761]: New seat seat0. Feb 6 09:01:30 prd-ubuntu2004-helm-2c-1g-5674 systemd-logind[761]: Watching system buttons on /dev/input/event0 (Power Button) Feb 6 09:01:30 prd-ubuntu2004-helm-2c-1g-5674 systemd-logind[761]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 6 09:01:30 prd-ubuntu2004-helm-2c-1g-5674 sshd[802]: Server listening on 0.0.0.0 port 22. Feb 6 09:01:30 prd-ubuntu2004-helm-2c-1g-5674 sshd[802]: Server listening on :: port 22. Feb 6 09:01:32 prd-ubuntu2004-helm-2c-1g-5674 sshd[1458]: error: kex_exchange_identification: Connection closed by remote host Feb 6 09:01:32 prd-ubuntu2004-helm-2c-1g-5674 sshd[1513]: Invalid user jenkins from 10.30.104.4 port 50784 Feb 6 09:01:32 prd-ubuntu2004-helm-2c-1g-5674 sshd[1513]: Received disconnect from 10.30.104.4 port 50784:11: Closed due to user request. [preauth] Feb 6 09:01:32 prd-ubuntu2004-helm-2c-1g-5674 sshd[1513]: Disconnected from invalid user jenkins 10.30.104.4 port 50784 [preauth] Feb 6 09:01:34 prd-ubuntu2004-helm-2c-1g-5674 sshd[2257]: Invalid user jenkins from 10.30.104.4 port 50800 Feb 6 09:01:34 prd-ubuntu2004-helm-2c-1g-5674 sshd[2257]: Received disconnect from 10.30.104.4 port 50800:11: Closed due to user request. [preauth] Feb 6 09:01:34 prd-ubuntu2004-helm-2c-1g-5674 sshd[2257]: Disconnected from invalid user jenkins 10.30.104.4 port 50800 [preauth] Feb 6 09:01:36 prd-ubuntu2004-helm-2c-1g-5674 sshd[2979]: Invalid user jenkins from 10.30.104.4 port 50814 Feb 6 09:01:36 prd-ubuntu2004-helm-2c-1g-5674 sshd[2979]: Received disconnect from 10.30.104.4 port 50814:11: Closed due to user request. [preauth] Feb 6 09:01:36 prd-ubuntu2004-helm-2c-1g-5674 sshd[2979]: Disconnected from invalid user jenkins 10.30.104.4 port 50814 [preauth] Feb 6 09:01:38 prd-ubuntu2004-helm-2c-1g-5674 sshd[3657]: Invalid user jenkins from 10.30.104.4 port 50822 Feb 6 09:01:39 prd-ubuntu2004-helm-2c-1g-5674 sshd[3657]: Received disconnect from 10.30.104.4 port 50822:11: Closed due to user request. [preauth] Feb 6 09:01:39 prd-ubuntu2004-helm-2c-1g-5674 sshd[3657]: Disconnected from invalid user jenkins 10.30.104.4 port 50822 [preauth] Feb 6 09:01:41 prd-ubuntu2004-helm-2c-1g-5674 sshd[4339]: Invalid user jenkins from 10.30.104.4 port 50834 Feb 6 09:01:41 prd-ubuntu2004-helm-2c-1g-5674 sshd[4339]: Received disconnect from 10.30.104.4 port 50834:11: Closed due to user request. [preauth] Feb 6 09:01:41 prd-ubuntu2004-helm-2c-1g-5674 sshd[4339]: Disconnected from invalid user jenkins 10.30.104.4 port 50834 [preauth] Feb 6 09:01:43 prd-ubuntu2004-helm-2c-1g-5674 sshd[5005]: Invalid user jenkins from 10.30.104.4 port 50842 Feb 6 09:01:43 prd-ubuntu2004-helm-2c-1g-5674 sshd[5005]: Received disconnect from 10.30.104.4 port 50842:11: Closed due to user request. [preauth] Feb 6 09:01:43 prd-ubuntu2004-helm-2c-1g-5674 sshd[5005]: Disconnected from invalid user jenkins 10.30.104.4 port 50842 [preauth] Feb 6 09:01:45 prd-ubuntu2004-helm-2c-1g-5674 sshd[5662]: Invalid user jenkins from 10.30.104.4 port 50852 Feb 6 09:01:45 prd-ubuntu2004-helm-2c-1g-5674 sshd[5662]: Received disconnect from 10.30.104.4 port 50852:11: Closed due to user request. [preauth] Feb 6 09:01:45 prd-ubuntu2004-helm-2c-1g-5674 sshd[5662]: Disconnected from invalid user jenkins 10.30.104.4 port 50852 [preauth] Feb 6 09:01:47 prd-ubuntu2004-helm-2c-1g-5674 sshd[6408]: Invalid user jenkins from 10.30.104.4 port 50862 Feb 6 09:01:47 prd-ubuntu2004-helm-2c-1g-5674 sshd[6408]: Received disconnect from 10.30.104.4 port 50862:11: Closed due to user request. [preauth] Feb 6 09:01:47 prd-ubuntu2004-helm-2c-1g-5674 sshd[6408]: Disconnected from invalid user jenkins 10.30.104.4 port 50862 [preauth] Feb 6 09:01:49 prd-ubuntu2004-helm-2c-1g-5674 sshd[7382]: Invalid user jenkins from 10.30.104.4 port 50870 Feb 6 09:01:49 prd-ubuntu2004-helm-2c-1g-5674 sshd[7382]: Received disconnect from 10.30.104.4 port 50870:11: Closed due to user request. [preauth] Feb 6 09:01:49 prd-ubuntu2004-helm-2c-1g-5674 sshd[7382]: Disconnected from invalid user jenkins 10.30.104.4 port 50870 [preauth] Feb 6 09:01:51 prd-ubuntu2004-helm-2c-1g-5674 sshd[8145]: Invalid user jenkins from 10.30.104.4 port 50884 Feb 6 09:01:52 prd-ubuntu2004-helm-2c-1g-5674 sshd[8145]: Received disconnect from 10.30.104.4 port 50884:11: Closed due to user request. [preauth] Feb 6 09:01:52 prd-ubuntu2004-helm-2c-1g-5674 sshd[8145]: Disconnected from invalid user jenkins 10.30.104.4 port 50884 [preauth] Feb 6 09:01:54 prd-ubuntu2004-helm-2c-1g-5674 sshd[8597]: Invalid user jenkins from 10.30.104.4 port 50892 Feb 6 09:01:54 prd-ubuntu2004-helm-2c-1g-5674 sshd[8597]: Received disconnect from 10.30.104.4 port 50892:11: Closed due to user request. [preauth] Feb 6 09:01:54 prd-ubuntu2004-helm-2c-1g-5674 sshd[8597]: Disconnected from invalid user jenkins 10.30.104.4 port 50892 [preauth] Feb 6 09:01:56 prd-ubuntu2004-helm-2c-1g-5674 sshd[8945]: Invalid user jenkins from 10.30.104.4 port 50900 Feb 6 09:01:56 prd-ubuntu2004-helm-2c-1g-5674 sshd[8945]: Received disconnect from 10.30.104.4 port 50900:11: Closed due to user request. [preauth] Feb 6 09:01:56 prd-ubuntu2004-helm-2c-1g-5674 sshd[8945]: Disconnected from invalid user jenkins 10.30.104.4 port 50900 [preauth] Feb 6 09:01:58 prd-ubuntu2004-helm-2c-1g-5674 sshd[9171]: Invalid user jenkins from 10.30.104.4 port 50912 Feb 6 09:01:58 prd-ubuntu2004-helm-2c-1g-5674 sshd[9171]: Received disconnect from 10.30.104.4 port 50912:11: Closed due to user request. [preauth] Feb 6 09:01:58 prd-ubuntu2004-helm-2c-1g-5674 sshd[9171]: Disconnected from invalid user jenkins 10.30.104.4 port 50912 [preauth] Feb 6 09:01:59 prd-ubuntu2004-helm-2c-1g-5674 useradd[9610]: new group: name=jenkins, GID=1001 Feb 6 09:01:59 prd-ubuntu2004-helm-2c-1g-5674 useradd[9610]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Feb 6 09:01:59 prd-ubuntu2004-helm-2c-1g-5674 usermod[9646]: add 'jenkins' to group 'docker' Feb 6 09:01:59 prd-ubuntu2004-helm-2c-1g-5674 usermod[9646]: add 'jenkins' to shadow group 'docker' Feb 6 09:02:00 prd-ubuntu2004-helm-2c-1g-5674 sshd[10064]: Accepted publickey for jenkins from 10.30.104.4 port 50920 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Feb 6 09:02:00 prd-ubuntu2004-helm-2c-1g-5674 sshd[10064]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 6 09:02:00 prd-ubuntu2004-helm-2c-1g-5674 systemd-logind[761]: New session 1 of user jenkins. Feb 6 09:02:00 prd-ubuntu2004-helm-2c-1g-5674 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 6 09:02:01 prd-ubuntu2004-helm-2c-1g-5674 CRON[10393]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 09:02:01 prd-ubuntu2004-helm-2c-1g-5674 CRON[10393]: pam_unix(cron:session): session closed for user root Feb 6 09:03:01 prd-ubuntu2004-helm-2c-1g-5674 CRON[28257]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 6 09:03:01 prd-ubuntu2004-helm-2c-1g-5674 CRON[28257]: pam_unix(cron:session): session closed for user root Feb 6 09:03:31 prd-ubuntu2004-helm-2c-1g-5674 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Feb 6 09:03:31 prd-ubuntu2004-helm-2c-1g-5674 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)