Jul 25 20:42:59 prd-ubuntu2004-helm-2c-1g-12304 passwd[695]: password for 'ubuntu' changed by 'root'
Jul 25 20:42:59 prd-ubuntu2004-helm-2c-1g-12304 sshd[786]: Server listening on 0.0.0.0 port 22.
Jul 25 20:42:59 prd-ubuntu2004-helm-2c-1g-12304 sshd[786]: Server listening on :: port 22.
Jul 25 20:42:59 prd-ubuntu2004-helm-2c-1g-12304 systemd-logind[754]: New seat seat0.
Jul 25 20:42:59 prd-ubuntu2004-helm-2c-1g-12304 systemd-logind[754]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 25 20:42:59 prd-ubuntu2004-helm-2c-1g-12304 systemd-logind[754]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 25 20:43:01 prd-ubuntu2004-helm-2c-1g-12304 sshd[1428]: error: kex_exchange_identification: Connection closed by remote host
Jul 25 20:43:01 prd-ubuntu2004-helm-2c-1g-12304 CRON[1516]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 25 20:43:01 prd-ubuntu2004-helm-2c-1g-12304 CRON[1516]: pam_unix(cron:session): session closed for user root
Jul 25 20:43:02 prd-ubuntu2004-helm-2c-1g-12304 sshd[1893]: Invalid user jenkins from 10.30.104.4 port 52498
Jul 25 20:43:02 prd-ubuntu2004-helm-2c-1g-12304 sshd[1893]: Received disconnect from 10.30.104.4 port 52498:11: Closed due to user request. [preauth]
Jul 25 20:43:02 prd-ubuntu2004-helm-2c-1g-12304 sshd[1893]: Disconnected from invalid user jenkins 10.30.104.4 port 52498 [preauth]
Jul 25 20:43:04 prd-ubuntu2004-helm-2c-1g-12304 sshd[2700]: Invalid user jenkins from 10.30.104.4 port 52508
Jul 25 20:43:04 prd-ubuntu2004-helm-2c-1g-12304 sshd[2700]: Received disconnect from 10.30.104.4 port 52508:11: Closed due to user request. [preauth]
Jul 25 20:43:04 prd-ubuntu2004-helm-2c-1g-12304 sshd[2700]: Disconnected from invalid user jenkins 10.30.104.4 port 52508 [preauth]
Jul 25 20:43:07 prd-ubuntu2004-helm-2c-1g-12304 sshd[3458]: Invalid user jenkins from 10.30.104.4 port 52514
Jul 25 20:43:07 prd-ubuntu2004-helm-2c-1g-12304 sshd[3458]: Received disconnect from 10.30.104.4 port 52514:11: Closed due to user request. [preauth]
Jul 25 20:43:07 prd-ubuntu2004-helm-2c-1g-12304 sshd[3458]: Disconnected from invalid user jenkins 10.30.104.4 port 52514 [preauth]
Jul 25 20:43:09 prd-ubuntu2004-helm-2c-1g-12304 sshd[4164]: Invalid user jenkins from 10.30.104.4 port 52520
Jul 25 20:43:09 prd-ubuntu2004-helm-2c-1g-12304 sshd[4164]: Received disconnect from 10.30.104.4 port 52520:11: Closed due to user request. [preauth]
Jul 25 20:43:09 prd-ubuntu2004-helm-2c-1g-12304 sshd[4164]: Disconnected from invalid user jenkins 10.30.104.4 port 52520 [preauth]
Jul 25 20:43:11 prd-ubuntu2004-helm-2c-1g-12304 sshd[4847]: Invalid user jenkins from 10.30.104.4 port 52528
Jul 25 20:43:11 prd-ubuntu2004-helm-2c-1g-12304 sshd[4847]: Received disconnect from 10.30.104.4 port 52528:11: Closed due to user request. [preauth]
Jul 25 20:43:11 prd-ubuntu2004-helm-2c-1g-12304 sshd[4847]: Disconnected from invalid user jenkins 10.30.104.4 port 52528 [preauth]
Jul 25 20:43:13 prd-ubuntu2004-helm-2c-1g-12304 sshd[5548]: Invalid user jenkins from 10.30.104.4 port 52540
Jul 25 20:43:13 prd-ubuntu2004-helm-2c-1g-12304 sshd[5548]: Received disconnect from 10.30.104.4 port 52540:11: Closed due to user request. [preauth]
Jul 25 20:43:13 prd-ubuntu2004-helm-2c-1g-12304 sshd[5548]: Disconnected from invalid user jenkins 10.30.104.4 port 52540 [preauth]
Jul 25 20:43:15 prd-ubuntu2004-helm-2c-1g-12304 sshd[6209]: Invalid user jenkins from 10.30.104.4 port 52550
Jul 25 20:43:15 prd-ubuntu2004-helm-2c-1g-12304 sshd[6209]: Received disconnect from 10.30.104.4 port 52550:11: Closed due to user request. [preauth]
Jul 25 20:43:15 prd-ubuntu2004-helm-2c-1g-12304 sshd[6209]: Disconnected from invalid user jenkins 10.30.104.4 port 52550 [preauth]
Jul 25 20:43:18 prd-ubuntu2004-helm-2c-1g-12304 sshd[7105]: Invalid user jenkins from 10.30.104.4 port 52558
Jul 25 20:43:18 prd-ubuntu2004-helm-2c-1g-12304 sshd[7105]: Received disconnect from 10.30.104.4 port 52558:11: Closed due to user request. [preauth]
Jul 25 20:43:18 prd-ubuntu2004-helm-2c-1g-12304 sshd[7105]: Disconnected from invalid user jenkins 10.30.104.4 port 52558 [preauth]
Jul 25 20:43:20 prd-ubuntu2004-helm-2c-1g-12304 sshd[7692]: Invalid user jenkins from 10.30.104.4 port 52572
Jul 25 20:43:20 prd-ubuntu2004-helm-2c-1g-12304 sshd[7692]: Received disconnect from 10.30.104.4 port 52572:11: Closed due to user request. [preauth]
Jul 25 20:43:20 prd-ubuntu2004-helm-2c-1g-12304 sshd[7692]: Disconnected from invalid user jenkins 10.30.104.4 port 52572 [preauth]
Jul 25 20:43:22 prd-ubuntu2004-helm-2c-1g-12304 sshd[8489]: Invalid user jenkins from 10.30.104.4 port 52578
Jul 25 20:43:22 prd-ubuntu2004-helm-2c-1g-12304 sshd[8489]: Received disconnect from 10.30.104.4 port 52578:11: Closed due to user request. [preauth]
Jul 25 20:43:22 prd-ubuntu2004-helm-2c-1g-12304 sshd[8489]: Disconnected from invalid user jenkins 10.30.104.4 port 52578 [preauth]
Jul 25 20:43:25 prd-ubuntu2004-helm-2c-1g-12304 sshd[9125]: Invalid user jenkins from 10.30.104.4 port 52580
Jul 25 20:43:25 prd-ubuntu2004-helm-2c-1g-12304 useradd[9154]: new group: name=jenkins, GID=1001
Jul 25 20:43:25 prd-ubuntu2004-helm-2c-1g-12304 useradd[9154]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jul 25 20:43:25 prd-ubuntu2004-helm-2c-1g-12304 sshd[9125]: Received disconnect from 10.30.104.4 port 52580:11: Closed due to user request. [preauth]
Jul 25 20:43:25 prd-ubuntu2004-helm-2c-1g-12304 sshd[9125]: Disconnected from invalid user jenkins 10.30.104.4 port 52580 [preauth]
Jul 25 20:43:25 prd-ubuntu2004-helm-2c-1g-12304 usermod[9190]: add 'jenkins' to group 'docker'
Jul 25 20:43:25 prd-ubuntu2004-helm-2c-1g-12304 usermod[9190]: add 'jenkins' to shadow group 'docker'
Jul 25 20:43:27 prd-ubuntu2004-helm-2c-1g-12304 sshd[10012]: Accepted publickey for jenkins from 10.30.104.4 port 52582 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Jul 25 20:43:27 prd-ubuntu2004-helm-2c-1g-12304 sshd[10012]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jul 25 20:43:27 prd-ubuntu2004-helm-2c-1g-12304 systemd-logind[754]: New session 2 of user jenkins.
Jul 25 20:43:27 prd-ubuntu2004-helm-2c-1g-12304 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jul 25 20:44:02 prd-ubuntu2004-helm-2c-1g-12304 CRON[22761]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 25 20:44:02 prd-ubuntu2004-helm-2c-1g-12304 CRON[22761]: pam_unix(cron:session): session closed for user root
Jul 25 20:45:01 prd-ubuntu2004-helm-2c-1g-12304 CRON[29894]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 25 20:45:01 prd-ubuntu2004-helm-2c-1g-12304 CRON[29894]: pam_unix(cron:session): session closed for user root
Jul 25 20:45:07 prd-ubuntu2004-helm-2c-1g-12304 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Jul 25 20:45:07 prd-ubuntu2004-helm-2c-1g-12304 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)