Mar 3 15:26:26 prd-ubuntu2004-helm-2c-1g-1280 passwd[712]: password for 'ubuntu' changed by 'root' Mar 3 15:26:26 prd-ubuntu2004-helm-2c-1g-1280 sshd[781]: Server listening on 0.0.0.0 port 22. Mar 3 15:26:26 prd-ubuntu2004-helm-2c-1g-1280 sshd[781]: Server listening on :: port 22. Mar 3 15:26:26 prd-ubuntu2004-helm-2c-1g-1280 systemd-logind[759]: New seat seat0. Mar 3 15:26:26 prd-ubuntu2004-helm-2c-1g-1280 systemd-logind[759]: Watching system buttons on /dev/input/event0 (Power Button) Mar 3 15:26:26 prd-ubuntu2004-helm-2c-1g-1280 systemd-logind[759]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 3 15:26:28 prd-ubuntu2004-helm-2c-1g-1280 sshd[1488]: error: kex_exchange_identification: Connection closed by remote host Mar 3 15:26:28 prd-ubuntu2004-helm-2c-1g-1280 sshd[1596]: Invalid user jenkins from 10.30.104.4 port 47296 Mar 3 15:26:28 prd-ubuntu2004-helm-2c-1g-1280 sshd[1596]: Received disconnect from 10.30.104.4 port 47296:11: Closed due to user request. [preauth] Mar 3 15:26:28 prd-ubuntu2004-helm-2c-1g-1280 sshd[1596]: Disconnected from invalid user jenkins 10.30.104.4 port 47296 [preauth] Mar 3 15:26:30 prd-ubuntu2004-helm-2c-1g-1280 sshd[2323]: Invalid user jenkins from 10.30.104.4 port 47312 Mar 3 15:26:30 prd-ubuntu2004-helm-2c-1g-1280 sshd[2323]: Received disconnect from 10.30.104.4 port 47312:11: Closed due to user request. [preauth] Mar 3 15:26:30 prd-ubuntu2004-helm-2c-1g-1280 sshd[2323]: Disconnected from invalid user jenkins 10.30.104.4 port 47312 [preauth] Mar 3 15:26:33 prd-ubuntu2004-helm-2c-1g-1280 sshd[2995]: Invalid user jenkins from 10.30.104.4 port 47320 Mar 3 15:26:33 prd-ubuntu2004-helm-2c-1g-1280 sshd[2995]: Received disconnect from 10.30.104.4 port 47320:11: Closed due to user request. [preauth] Mar 3 15:26:33 prd-ubuntu2004-helm-2c-1g-1280 sshd[2995]: Disconnected from invalid user jenkins 10.30.104.4 port 47320 [preauth] Mar 3 15:26:35 prd-ubuntu2004-helm-2c-1g-1280 sshd[3659]: Invalid user jenkins from 10.30.104.4 port 47326 Mar 3 15:26:35 prd-ubuntu2004-helm-2c-1g-1280 sshd[3659]: Received disconnect from 10.30.104.4 port 47326:11: Closed due to user request. [preauth] Mar 3 15:26:35 prd-ubuntu2004-helm-2c-1g-1280 sshd[3659]: Disconnected from invalid user jenkins 10.30.104.4 port 47326 [preauth] Mar 3 15:26:37 prd-ubuntu2004-helm-2c-1g-1280 sshd[4304]: Invalid user jenkins from 10.30.104.4 port 47336 Mar 3 15:26:37 prd-ubuntu2004-helm-2c-1g-1280 sshd[4304]: Received disconnect from 10.30.104.4 port 47336:11: Closed due to user request. [preauth] Mar 3 15:26:37 prd-ubuntu2004-helm-2c-1g-1280 sshd[4304]: Disconnected from invalid user jenkins 10.30.104.4 port 47336 [preauth] Mar 3 15:26:39 prd-ubuntu2004-helm-2c-1g-1280 sshd[4946]: Invalid user jenkins from 10.30.104.4 port 47342 Mar 3 15:26:39 prd-ubuntu2004-helm-2c-1g-1280 sshd[4946]: Received disconnect from 10.30.104.4 port 47342:11: Closed due to user request. [preauth] Mar 3 15:26:39 prd-ubuntu2004-helm-2c-1g-1280 sshd[4946]: Disconnected from invalid user jenkins 10.30.104.4 port 47342 [preauth] Mar 3 15:26:41 prd-ubuntu2004-helm-2c-1g-1280 sshd[5578]: Invalid user jenkins from 10.30.104.4 port 47348 Mar 3 15:26:41 prd-ubuntu2004-helm-2c-1g-1280 sshd[5578]: Received disconnect from 10.30.104.4 port 47348:11: Closed due to user request. [preauth] Mar 3 15:26:41 prd-ubuntu2004-helm-2c-1g-1280 sshd[5578]: Disconnected from invalid user jenkins 10.30.104.4 port 47348 [preauth] Mar 3 15:26:43 prd-ubuntu2004-helm-2c-1g-1280 sshd[6151]: Invalid user jenkins from 10.30.104.4 port 47356 Mar 3 15:26:43 prd-ubuntu2004-helm-2c-1g-1280 sshd[6151]: Received disconnect from 10.30.104.4 port 47356:11: Closed due to user request. [preauth] Mar 3 15:26:43 prd-ubuntu2004-helm-2c-1g-1280 sshd[6151]: Disconnected from invalid user jenkins 10.30.104.4 port 47356 [preauth] Mar 3 15:26:46 prd-ubuntu2004-helm-2c-1g-1280 sshd[7150]: Invalid user jenkins from 10.30.104.4 port 47362 Mar 3 15:26:46 prd-ubuntu2004-helm-2c-1g-1280 sshd[7150]: Received disconnect from 10.30.104.4 port 47362:11: Closed due to user request. [preauth] Mar 3 15:26:46 prd-ubuntu2004-helm-2c-1g-1280 sshd[7150]: Disconnected from invalid user jenkins 10.30.104.4 port 47362 [preauth] Mar 3 15:26:48 prd-ubuntu2004-helm-2c-1g-1280 sshd[7891]: Invalid user jenkins from 10.30.104.4 port 47370 Mar 3 15:26:48 prd-ubuntu2004-helm-2c-1g-1280 sshd[7891]: Received disconnect from 10.30.104.4 port 47370:11: Closed due to user request. [preauth] Mar 3 15:26:48 prd-ubuntu2004-helm-2c-1g-1280 sshd[7891]: Disconnected from invalid user jenkins 10.30.104.4 port 47370 [preauth] Mar 3 15:26:50 prd-ubuntu2004-helm-2c-1g-1280 sshd[8450]: Invalid user jenkins from 10.30.104.4 port 47378 Mar 3 15:26:50 prd-ubuntu2004-helm-2c-1g-1280 sshd[8450]: Received disconnect from 10.30.104.4 port 47378:11: Closed due to user request. [preauth] Mar 3 15:26:50 prd-ubuntu2004-helm-2c-1g-1280 sshd[8450]: Disconnected from invalid user jenkins 10.30.104.4 port 47378 [preauth] Mar 3 15:26:52 prd-ubuntu2004-helm-2c-1g-1280 sshd[8689]: Invalid user jenkins from 10.30.104.4 port 47382 Mar 3 15:26:52 prd-ubuntu2004-helm-2c-1g-1280 sshd[8689]: Received disconnect from 10.30.104.4 port 47382:11: Closed due to user request. [preauth] Mar 3 15:26:52 prd-ubuntu2004-helm-2c-1g-1280 sshd[8689]: Disconnected from invalid user jenkins 10.30.104.4 port 47382 [preauth] Mar 3 15:26:53 prd-ubuntu2004-helm-2c-1g-1280 useradd[8861]: new group: name=jenkins, GID=1001 Mar 3 15:26:53 prd-ubuntu2004-helm-2c-1g-1280 useradd[8861]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 3 15:26:53 prd-ubuntu2004-helm-2c-1g-1280 usermod[8900]: add 'jenkins' to group 'docker' Mar 3 15:26:53 prd-ubuntu2004-helm-2c-1g-1280 usermod[8900]: add 'jenkins' to shadow group 'docker' Mar 3 15:26:55 prd-ubuntu2004-helm-2c-1g-1280 sshd[9515]: Accepted publickey for jenkins from 10.30.104.4 port 47390 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Mar 3 15:26:55 prd-ubuntu2004-helm-2c-1g-1280 sshd[9515]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 3 15:26:55 prd-ubuntu2004-helm-2c-1g-1280 systemd-logind[759]: New session 1 of user jenkins. Mar 3 15:26:55 prd-ubuntu2004-helm-2c-1g-1280 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 3 15:27:01 prd-ubuntu2004-helm-2c-1g-1280 CRON[12188]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 15:27:01 prd-ubuntu2004-helm-2c-1g-1280 CRON[12188]: pam_unix(cron:session): session closed for user root Mar 3 15:28:01 prd-ubuntu2004-helm-2c-1g-1280 CRON[28487]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 3 15:28:01 prd-ubuntu2004-helm-2c-1g-1280 CRON[28487]: pam_unix(cron:session): session closed for user root Mar 3 15:28:25 prd-ubuntu2004-helm-2c-1g-1280 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Mar 3 15:28:25 prd-ubuntu2004-helm-2c-1g-1280 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)