Mar 4 11:47:40 prd-ubuntu2004-helm-2c-1g-1533 passwd[700]: password for 'ubuntu' changed by 'root' Mar 4 11:47:40 prd-ubuntu2004-helm-2c-1g-1533 sshd[782]: Server listening on 0.0.0.0 port 22. Mar 4 11:47:40 prd-ubuntu2004-helm-2c-1g-1533 sshd[782]: Server listening on :: port 22. Mar 4 11:47:40 prd-ubuntu2004-helm-2c-1g-1533 systemd-logind[745]: New seat seat0. Mar 4 11:47:40 prd-ubuntu2004-helm-2c-1g-1533 systemd-logind[745]: Watching system buttons on /dev/input/event0 (Power Button) Mar 4 11:47:40 prd-ubuntu2004-helm-2c-1g-1533 systemd-logind[745]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 4 11:47:43 prd-ubuntu2004-helm-2c-1g-1533 sshd[2002]: error: kex_exchange_identification: Connection closed by remote host Mar 4 11:47:48 prd-ubuntu2004-helm-2c-1g-1533 sshd[3816]: Invalid user jenkins from 10.30.104.4 port 39342 Mar 4 11:47:48 prd-ubuntu2004-helm-2c-1g-1533 sshd[3816]: Received disconnect from 10.30.104.4 port 39342:11: Closed due to user request. [preauth] Mar 4 11:47:48 prd-ubuntu2004-helm-2c-1g-1533 sshd[3816]: Disconnected from invalid user jenkins 10.30.104.4 port 39342 [preauth] Mar 4 11:47:50 prd-ubuntu2004-helm-2c-1g-1533 sshd[4542]: Invalid user jenkins from 10.30.104.4 port 39352 Mar 4 11:47:50 prd-ubuntu2004-helm-2c-1g-1533 sshd[4542]: Received disconnect from 10.30.104.4 port 39352:11: Closed due to user request. [preauth] Mar 4 11:47:50 prd-ubuntu2004-helm-2c-1g-1533 sshd[4542]: Disconnected from invalid user jenkins 10.30.104.4 port 39352 [preauth] Mar 4 11:47:52 prd-ubuntu2004-helm-2c-1g-1533 sshd[5229]: Invalid user jenkins from 10.30.104.4 port 39364 Mar 4 11:47:53 prd-ubuntu2004-helm-2c-1g-1533 sshd[5229]: Received disconnect from 10.30.104.4 port 39364:11: Closed due to user request. [preauth] Mar 4 11:47:53 prd-ubuntu2004-helm-2c-1g-1533 sshd[5229]: Disconnected from invalid user jenkins 10.30.104.4 port 39364 [preauth] Mar 4 11:47:55 prd-ubuntu2004-helm-2c-1g-1533 sshd[5962]: Invalid user jenkins from 10.30.104.4 port 39372 Mar 4 11:47:55 prd-ubuntu2004-helm-2c-1g-1533 sshd[5962]: Received disconnect from 10.30.104.4 port 39372:11: Closed due to user request. [preauth] Mar 4 11:47:55 prd-ubuntu2004-helm-2c-1g-1533 sshd[5962]: Disconnected from invalid user jenkins 10.30.104.4 port 39372 [preauth] Mar 4 11:47:57 prd-ubuntu2004-helm-2c-1g-1533 sshd[6755]: Invalid user jenkins from 10.30.104.4 port 39386 Mar 4 11:47:57 prd-ubuntu2004-helm-2c-1g-1533 sshd[6755]: Received disconnect from 10.30.104.4 port 39386:11: Closed due to user request. [preauth] Mar 4 11:47:57 prd-ubuntu2004-helm-2c-1g-1533 sshd[6755]: Disconnected from invalid user jenkins 10.30.104.4 port 39386 [preauth] Mar 4 11:47:59 prd-ubuntu2004-helm-2c-1g-1533 sshd[7359]: Invalid user jenkins from 10.30.104.4 port 39390 Mar 4 11:47:59 prd-ubuntu2004-helm-2c-1g-1533 sshd[7359]: Received disconnect from 10.30.104.4 port 39390:11: Closed due to user request. [preauth] Mar 4 11:47:59 prd-ubuntu2004-helm-2c-1g-1533 sshd[7359]: Disconnected from invalid user jenkins 10.30.104.4 port 39390 [preauth] Mar 4 11:48:01 prd-ubuntu2004-helm-2c-1g-1533 sshd[7904]: Invalid user jenkins from 10.30.104.4 port 39394 Mar 4 11:48:01 prd-ubuntu2004-helm-2c-1g-1533 sshd[7904]: Received disconnect from 10.30.104.4 port 39394:11: Closed due to user request. [preauth] Mar 4 11:48:01 prd-ubuntu2004-helm-2c-1g-1533 sshd[7904]: Disconnected from invalid user jenkins 10.30.104.4 port 39394 [preauth] Mar 4 11:48:01 prd-ubuntu2004-helm-2c-1g-1533 CRON[7951]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 4 11:48:01 prd-ubuntu2004-helm-2c-1g-1533 CRON[7951]: pam_unix(cron:session): session closed for user root Mar 4 11:48:03 prd-ubuntu2004-helm-2c-1g-1533 sshd[8330]: Invalid user jenkins from 10.30.104.4 port 39402 Mar 4 11:48:03 prd-ubuntu2004-helm-2c-1g-1533 sshd[8330]: Received disconnect from 10.30.104.4 port 39402:11: Closed due to user request. [preauth] Mar 4 11:48:03 prd-ubuntu2004-helm-2c-1g-1533 sshd[8330]: Disconnected from invalid user jenkins 10.30.104.4 port 39402 [preauth] Mar 4 11:48:05 prd-ubuntu2004-helm-2c-1g-1533 sshd[8680]: Invalid user jenkins from 10.30.104.4 port 39408 Mar 4 11:48:05 prd-ubuntu2004-helm-2c-1g-1533 sshd[8680]: Received disconnect from 10.30.104.4 port 39408:11: Closed due to user request. [preauth] Mar 4 11:48:05 prd-ubuntu2004-helm-2c-1g-1533 sshd[8680]: Disconnected from invalid user jenkins 10.30.104.4 port 39408 [preauth] Mar 4 11:48:08 prd-ubuntu2004-helm-2c-1g-1533 sshd[9018]: Invalid user jenkins from 10.30.104.4 port 39412 Mar 4 11:48:08 prd-ubuntu2004-helm-2c-1g-1533 sshd[9018]: Received disconnect from 10.30.104.4 port 39412:11: Closed due to user request. [preauth] Mar 4 11:48:09 prd-ubuntu2004-helm-2c-1g-1533 sshd[9018]: Disconnected from invalid user jenkins 10.30.104.4 port 39412 [preauth] Mar 4 11:48:10 prd-ubuntu2004-helm-2c-1g-1533 sshd[9100]: Invalid user jenkins from 10.30.104.4 port 39420 Mar 4 11:48:10 prd-ubuntu2004-helm-2c-1g-1533 sshd[9100]: Received disconnect from 10.30.104.4 port 39420:11: Closed due to user request. [preauth] Mar 4 11:48:10 prd-ubuntu2004-helm-2c-1g-1533 sshd[9100]: Disconnected from invalid user jenkins 10.30.104.4 port 39420 [preauth] Mar 4 11:48:12 prd-ubuntu2004-helm-2c-1g-1533 sshd[9457]: Invalid user jenkins from 10.30.104.4 port 39422 Mar 4 11:48:13 prd-ubuntu2004-helm-2c-1g-1533 sshd[9457]: Received disconnect from 10.30.104.4 port 39422:11: Closed due to user request. [preauth] Mar 4 11:48:13 prd-ubuntu2004-helm-2c-1g-1533 sshd[9457]: Disconnected from invalid user jenkins 10.30.104.4 port 39422 [preauth] Mar 4 11:48:15 prd-ubuntu2004-helm-2c-1g-1533 sshd[9676]: Invalid user jenkins from 10.30.104.4 port 39424 Mar 4 11:48:15 prd-ubuntu2004-helm-2c-1g-1533 sshd[9676]: Received disconnect from 10.30.104.4 port 39424:11: Closed due to user request. [preauth] Mar 4 11:48:15 prd-ubuntu2004-helm-2c-1g-1533 sshd[9676]: Disconnected from invalid user jenkins 10.30.104.4 port 39424 [preauth] Mar 4 11:48:15 prd-ubuntu2004-helm-2c-1g-1533 useradd[9829]: new group: name=jenkins, GID=1001 Mar 4 11:48:15 prd-ubuntu2004-helm-2c-1g-1533 useradd[9829]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 4 11:48:17 prd-ubuntu2004-helm-2c-1g-1533 sshd[9987]: Received disconnect from 10.30.104.4 port 39428:11: Closed due to user request. [preauth] Mar 4 11:48:17 prd-ubuntu2004-helm-2c-1g-1533 sshd[9987]: Disconnected from authenticating user jenkins 10.30.104.4 port 39428 [preauth] Mar 4 11:48:17 prd-ubuntu2004-helm-2c-1g-1533 usermod[10025]: add 'jenkins' to group 'docker' Mar 4 11:48:17 prd-ubuntu2004-helm-2c-1g-1533 usermod[10025]: add 'jenkins' to shadow group 'docker' Mar 4 11:48:19 prd-ubuntu2004-helm-2c-1g-1533 sshd[10431]: Accepted publickey for jenkins from 10.30.104.4 port 39434 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Mar 4 11:48:19 prd-ubuntu2004-helm-2c-1g-1533 sshd[10431]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 4 11:48:19 prd-ubuntu2004-helm-2c-1g-1533 systemd-logind[745]: New session 2 of user jenkins. Mar 4 11:48:19 prd-ubuntu2004-helm-2c-1g-1533 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 4 11:49:02 prd-ubuntu2004-helm-2c-1g-1533 CRON[22797]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 4 11:49:02 prd-ubuntu2004-helm-2c-1g-1533 CRON[22797]: pam_unix(cron:session): session closed for user root Mar 4 11:50:01 prd-ubuntu2004-helm-2c-1g-1533 CRON[29816]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 4 11:50:01 prd-ubuntu2004-helm-2c-1g-1533 CRON[29816]: pam_unix(cron:session): session closed for user root Mar 4 11:50:01 prd-ubuntu2004-helm-2c-1g-1533 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Mar 4 11:50:01 prd-ubuntu2004-helm-2c-1g-1533 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)