Feb 18 09:52:32 prd-ubuntu2004-helm-2c-1g-18038 passwd[695]: password for 'ubuntu' changed by 'root'
Feb 18 09:52:32 prd-ubuntu2004-helm-2c-1g-18038 sshd[788]: Server listening on 0.0.0.0 port 22.
Feb 18 09:52:32 prd-ubuntu2004-helm-2c-1g-18038 sshd[788]: Server listening on :: port 22.
Feb 18 09:52:32 prd-ubuntu2004-helm-2c-1g-18038 systemd-logind[749]: New seat seat0.
Feb 18 09:52:32 prd-ubuntu2004-helm-2c-1g-18038 systemd-logind[749]: Watching system buttons on /dev/input/event0 (Power Button)
Feb 18 09:52:32 prd-ubuntu2004-helm-2c-1g-18038 systemd-logind[749]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Feb 18 09:52:34 prd-ubuntu2004-helm-2c-1g-18038 sshd[1499]: error: kex_exchange_identification: Connection closed by remote host
Feb 18 09:52:42 prd-ubuntu2004-helm-2c-1g-18038 sshd[4102]: Invalid user jenkins from 10.30.104.4 port 36494
Feb 18 09:52:42 prd-ubuntu2004-helm-2c-1g-18038 sshd[4102]: Received disconnect from 10.30.104.4 port 36494:11: Closed due to user request. [preauth]
Feb 18 09:52:42 prd-ubuntu2004-helm-2c-1g-18038 sshd[4102]: Disconnected from invalid user jenkins 10.30.104.4 port 36494 [preauth]
Feb 18 09:52:44 prd-ubuntu2004-helm-2c-1g-18038 sshd[4786]: Invalid user jenkins from 10.30.104.4 port 36496
Feb 18 09:52:44 prd-ubuntu2004-helm-2c-1g-18038 sshd[4786]: Received disconnect from 10.30.104.4 port 36496:11: Closed due to user request. [preauth]
Feb 18 09:52:44 prd-ubuntu2004-helm-2c-1g-18038 sshd[4786]: Disconnected from invalid user jenkins 10.30.104.4 port 36496 [preauth]
Feb 18 09:52:46 prd-ubuntu2004-helm-2c-1g-18038 sshd[5430]: Invalid user jenkins from 10.30.104.4 port 36500
Feb 18 09:52:46 prd-ubuntu2004-helm-2c-1g-18038 sshd[5430]: Received disconnect from 10.30.104.4 port 36500:11: Closed due to user request. [preauth]
Feb 18 09:52:46 prd-ubuntu2004-helm-2c-1g-18038 sshd[5430]: Disconnected from invalid user jenkins 10.30.104.4 port 36500 [preauth]
Feb 18 09:52:48 prd-ubuntu2004-helm-2c-1g-18038 sshd[6113]: Invalid user jenkins from 10.30.104.4 port 36502
Feb 18 09:52:48 prd-ubuntu2004-helm-2c-1g-18038 sshd[6113]: Received disconnect from 10.30.104.4 port 36502:11: Closed due to user request. [preauth]
Feb 18 09:52:48 prd-ubuntu2004-helm-2c-1g-18038 sshd[6113]: Disconnected from invalid user jenkins 10.30.104.4 port 36502 [preauth]
Feb 18 09:52:50 prd-ubuntu2004-helm-2c-1g-18038 sshd[6992]: Invalid user jenkins from 10.30.104.4 port 36504
Feb 18 09:52:51 prd-ubuntu2004-helm-2c-1g-18038 sshd[6992]: Received disconnect from 10.30.104.4 port 36504:11: Closed due to user request. [preauth]
Feb 18 09:52:51 prd-ubuntu2004-helm-2c-1g-18038 sshd[6992]: Disconnected from invalid user jenkins 10.30.104.4 port 36504 [preauth]
Feb 18 09:52:53 prd-ubuntu2004-helm-2c-1g-18038 sshd[7816]: Invalid user jenkins from 10.30.104.4 port 36506
Feb 18 09:52:53 prd-ubuntu2004-helm-2c-1g-18038 sshd[7816]: Received disconnect from 10.30.104.4 port 36506:11: Closed due to user request. [preauth]
Feb 18 09:52:53 prd-ubuntu2004-helm-2c-1g-18038 sshd[7816]: Disconnected from invalid user jenkins 10.30.104.4 port 36506 [preauth]
Feb 18 09:52:55 prd-ubuntu2004-helm-2c-1g-18038 sshd[8410]: Invalid user jenkins from 10.30.104.4 port 36508
Feb 18 09:52:55 prd-ubuntu2004-helm-2c-1g-18038 sshd[8410]: Received disconnect from 10.30.104.4 port 36508:11: Closed due to user request. [preauth]
Feb 18 09:52:55 prd-ubuntu2004-helm-2c-1g-18038 sshd[8410]: Disconnected from invalid user jenkins 10.30.104.4 port 36508 [preauth]
Feb 18 09:52:56 prd-ubuntu2004-helm-2c-1g-18038 useradd[8769]: new group: name=jenkins, GID=1001
Feb 18 09:52:56 prd-ubuntu2004-helm-2c-1g-18038 useradd[8769]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Feb 18 09:52:56 prd-ubuntu2004-helm-2c-1g-18038 usermod[8806]: add 'jenkins' to group 'docker'
Feb 18 09:52:56 prd-ubuntu2004-helm-2c-1g-18038 usermod[8806]: add 'jenkins' to shadow group 'docker'
Feb 18 09:52:57 prd-ubuntu2004-helm-2c-1g-18038 sshd[9218]: Accepted publickey for jenkins from 10.30.104.4 port 36510 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Feb 18 09:52:57 prd-ubuntu2004-helm-2c-1g-18038 sshd[9218]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Feb 18 09:52:57 prd-ubuntu2004-helm-2c-1g-18038 systemd-logind[749]: New session 1 of user jenkins.
Feb 18 09:52:57 prd-ubuntu2004-helm-2c-1g-18038 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Feb 18 09:53:01 prd-ubuntu2004-helm-2c-1g-18038 CRON[10884]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 18 09:53:01 prd-ubuntu2004-helm-2c-1g-18038 CRON[10884]: pam_unix(cron:session): session closed for user root
Feb 18 09:54:01 prd-ubuntu2004-helm-2c-1g-18038 CRON[28226]: pam_unix(cron:session): session opened for user root by (uid=0)
Feb 18 09:54:01 prd-ubuntu2004-helm-2c-1g-18038 CRON[28226]: pam_unix(cron:session): session closed for user root
Feb 18 09:54:28 prd-ubuntu2004-helm-2c-1g-18038 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Feb 18 09:54:28 prd-ubuntu2004-helm-2c-1g-18038 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)