Feb 13 08:54:56 prd-ubuntu2004-helm-2c-1g-7578 passwd[714]: password for 'ubuntu' changed by 'root'
Feb 13 08:54:56 prd-ubuntu2004-helm-2c-1g-7578 sshd[801]: Server listening on 0.0.0.0 port 22.
Feb 13 08:54:56 prd-ubuntu2004-helm-2c-1g-7578 sshd[801]: Server listening on :: port 22.
Feb 13 08:54:56 prd-ubuntu2004-helm-2c-1g-7578 systemd-logind[754]: New seat seat0.
Feb 13 08:54:56 prd-ubuntu2004-helm-2c-1g-7578 systemd-logind[754]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 13 08:54:56 prd-ubuntu2004-helm-2c-1g-7578 systemd-logind[754]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 13 08:54:59 prd-ubuntu2004-helm-2c-1g-7578 sshd[1828]: error: kex_exchange_identification: Connection closed by remote host
Feb 13 08:55:01 prd-ubuntu2004-helm-2c-1g-7578 CRON[2522]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 13 08:55:01 prd-ubuntu2004-helm-2c-1g-7578 CRON[2522]: pam_unix(cron:session): session closed for user root
Feb 13 08:55:02 prd-ubuntu2004-helm-2c-1g-7578 sshd[2748]: Invalid user jenkins from 10.30.104.4 port 53916
Feb 13 08:55:02 prd-ubuntu2004-helm-2c-1g-7578 sshd[2748]: Received disconnect from 10.30.104.4 port 53916:11: Closed due to user request. [preauth]
Feb 13 08:55:02 prd-ubuntu2004-helm-2c-1g-7578 sshd[2748]: Disconnected from invalid user jenkins 10.30.104.4 port 53916 [preauth]
Feb 13 08:55:04 prd-ubuntu2004-helm-2c-1g-7578 sshd[3465]: Invalid user jenkins from 10.30.104.4 port 53972
Feb 13 08:55:04 prd-ubuntu2004-helm-2c-1g-7578 sshd[3465]: Received disconnect from 10.30.104.4 port 53972:11: Closed due to user request. [preauth]
Feb 13 08:55:04 prd-ubuntu2004-helm-2c-1g-7578 sshd[3465]: Disconnected from invalid user jenkins 10.30.104.4 port 53972 [preauth]
Feb 13 08:55:06 prd-ubuntu2004-helm-2c-1g-7578 sshd[4125]: Invalid user jenkins from 10.30.104.4 port 54010
Feb 13 08:55:06 prd-ubuntu2004-helm-2c-1g-7578 sshd[4125]: Received disconnect from 10.30.104.4 port 54010:11: Closed due to user request. [preauth]
Feb 13 08:55:06 prd-ubuntu2004-helm-2c-1g-7578 sshd[4125]: Disconnected from invalid user jenkins 10.30.104.4 port 54010 [preauth]
Feb 13 08:55:08 prd-ubuntu2004-helm-2c-1g-7578 sshd[4774]: Invalid user jenkins from 10.30.104.4 port 54056
Feb 13 08:55:08 prd-ubuntu2004-helm-2c-1g-7578 sshd[4774]: Received disconnect from 10.30.104.4 port 54056:11: Closed due to user request. [preauth]
Feb 13 08:55:08 prd-ubuntu2004-helm-2c-1g-7578 sshd[4774]: Disconnected from invalid user jenkins 10.30.104.4 port 54056 [preauth]
Feb 13 08:55:10 prd-ubuntu2004-helm-2c-1g-7578 sshd[5413]: Invalid user jenkins from 10.30.104.4 port 54098
Feb 13 08:55:10 prd-ubuntu2004-helm-2c-1g-7578 sshd[5413]: Received disconnect from 10.30.104.4 port 54098:11: Closed due to user request. [preauth]
Feb 13 08:55:10 prd-ubuntu2004-helm-2c-1g-7578 sshd[5413]: Disconnected from invalid user jenkins 10.30.104.4 port 54098 [preauth]
Feb 13 08:55:12 prd-ubuntu2004-helm-2c-1g-7578 sshd[6089]: Invalid user jenkins from 10.30.104.4 port 54152
Feb 13 08:55:12 prd-ubuntu2004-helm-2c-1g-7578 sshd[6089]: Received disconnect from 10.30.104.4 port 54152:11: Closed due to user request. [preauth]
Feb 13 08:55:12 prd-ubuntu2004-helm-2c-1g-7578 sshd[6089]: Disconnected from invalid user jenkins 10.30.104.4 port 54152 [preauth]
Feb 13 08:55:15 prd-ubuntu2004-helm-2c-1g-7578 sshd[7035]: Invalid user jenkins from 10.30.104.4 port 54196
Feb 13 08:55:15 prd-ubuntu2004-helm-2c-1g-7578 sshd[7035]: Received disconnect from 10.30.104.4 port 54196:11: Closed due to user request. [preauth]
Feb 13 08:55:15 prd-ubuntu2004-helm-2c-1g-7578 sshd[7035]: Disconnected from invalid user jenkins 10.30.104.4 port 54196 [preauth]
Feb 13 08:55:17 prd-ubuntu2004-helm-2c-1g-7578 sshd[7829]: Invalid user jenkins from 10.30.104.4 port 54250
Feb 13 08:55:17 prd-ubuntu2004-helm-2c-1g-7578 sshd[7829]: Received disconnect from 10.30.104.4 port 54250:11: Closed due to user request. [preauth]
Feb 13 08:55:17 prd-ubuntu2004-helm-2c-1g-7578 sshd[7829]: Disconnected from invalid user jenkins 10.30.104.4 port 54250 [preauth]
Feb 13 08:55:19 prd-ubuntu2004-helm-2c-1g-7578 sshd[8321]: Invalid user jenkins from 10.30.104.4 port 54272
Feb 13 08:55:19 prd-ubuntu2004-helm-2c-1g-7578 sshd[8321]: Received disconnect from 10.30.104.4 port 54272:11: Closed due to user request. [preauth]
Feb 13 08:55:19 prd-ubuntu2004-helm-2c-1g-7578 sshd[8321]: Disconnected from invalid user jenkins 10.30.104.4 port 54272 [preauth]
Feb 13 08:55:21 prd-ubuntu2004-helm-2c-1g-7578 sshd[8700]: Invalid user jenkins from 10.30.104.4 port 54292
Feb 13 08:55:22 prd-ubuntu2004-helm-2c-1g-7578 sshd[8700]: Received disconnect from 10.30.104.4 port 54292:11: Closed due to user request. [preauth]
Feb 13 08:55:22 prd-ubuntu2004-helm-2c-1g-7578 sshd[8700]: Disconnected from invalid user jenkins 10.30.104.4 port 54292 [preauth]
Feb 13 08:55:22 prd-ubuntu2004-helm-2c-1g-7578 useradd[8993]: new group: name=jenkins, GID=1001
Feb 13 08:55:22 prd-ubuntu2004-helm-2c-1g-7578 useradd[8993]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Feb 13 08:55:23 prd-ubuntu2004-helm-2c-1g-7578 usermod[9065]: add 'jenkins' to group 'docker'
Feb 13 08:55:23 prd-ubuntu2004-helm-2c-1g-7578 usermod[9065]: add 'jenkins' to shadow group 'docker'
Feb 13 08:55:24 prd-ubuntu2004-helm-2c-1g-7578 sshd[9464]: Accepted publickey for jenkins from 10.30.104.4 port 54332 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Feb 13 08:55:24 prd-ubuntu2004-helm-2c-1g-7578 sshd[9464]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 13 08:55:24 prd-ubuntu2004-helm-2c-1g-7578 systemd-logind[754]: New session 2 of user jenkins.
Feb 13 08:55:24 prd-ubuntu2004-helm-2c-1g-7578 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 13 08:56:01 prd-ubuntu2004-helm-2c-1g-7578 CRON[19824]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 13 08:56:01 prd-ubuntu2004-helm-2c-1g-7578 CRON[19824]: pam_unix(cron:session): session closed for user root
Feb 13 08:57:01 prd-ubuntu2004-helm-2c-1g-7578 CRON[29641]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 13 08:57:01 prd-ubuntu2004-helm-2c-1g-7578 CRON[29641]: pam_unix(cron:session): session closed for user root
Feb 13 08:57:14 prd-ubuntu2004-helm-2c-1g-7578 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Feb 13 08:57:14 prd-ubuntu2004-helm-2c-1g-7578 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)