Jul 28 19:22:33 prd-ubuntu2004-helm-2c-1g-13471 passwd[702]: password for 'ubuntu' changed by 'root'
Jul 28 19:22:33 prd-ubuntu2004-helm-2c-1g-13471 systemd-logind[746]: New seat seat0.
Jul 28 19:22:33 prd-ubuntu2004-helm-2c-1g-13471 sshd[793]: Server listening on 0.0.0.0 port 22.
Jul 28 19:22:33 prd-ubuntu2004-helm-2c-1g-13471 sshd[793]: Server listening on :: port 22.
Jul 28 19:22:33 prd-ubuntu2004-helm-2c-1g-13471 systemd-logind[746]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 28 19:22:33 prd-ubuntu2004-helm-2c-1g-13471 systemd-logind[746]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 28 19:22:36 prd-ubuntu2004-helm-2c-1g-13471 sshd[1951]: error: kex_exchange_identification: Connection closed by remote host
Jul 28 19:22:42 prd-ubuntu2004-helm-2c-1g-13471 sshd[3910]: Invalid user jenkins from 10.30.104.4 port 51514
Jul 28 19:22:42 prd-ubuntu2004-helm-2c-1g-13471 sshd[3910]: Received disconnect from 10.30.104.4 port 51514:11: Closed due to user request. [preauth]
Jul 28 19:22:42 prd-ubuntu2004-helm-2c-1g-13471 sshd[3910]: Disconnected from invalid user jenkins 10.30.104.4 port 51514 [preauth]
Jul 28 19:22:44 prd-ubuntu2004-helm-2c-1g-13471 sshd[4623]: Invalid user jenkins from 10.30.104.4 port 51516
Jul 28 19:22:44 prd-ubuntu2004-helm-2c-1g-13471 sshd[4623]: Received disconnect from 10.30.104.4 port 51516:11: Closed due to user request. [preauth]
Jul 28 19:22:44 prd-ubuntu2004-helm-2c-1g-13471 sshd[4623]: Disconnected from invalid user jenkins 10.30.104.4 port 51516 [preauth]
Jul 28 19:22:46 prd-ubuntu2004-helm-2c-1g-13471 sshd[5338]: Invalid user jenkins from 10.30.104.4 port 51518
Jul 28 19:22:46 prd-ubuntu2004-helm-2c-1g-13471 sshd[5338]: Received disconnect from 10.30.104.4 port 51518:11: Closed due to user request. [preauth]
Jul 28 19:22:46 prd-ubuntu2004-helm-2c-1g-13471 sshd[5338]: Disconnected from invalid user jenkins 10.30.104.4 port 51518 [preauth]
Jul 28 19:22:48 prd-ubuntu2004-helm-2c-1g-13471 sshd[6082]: Invalid user jenkins from 10.30.104.4 port 51520
Jul 28 19:22:48 prd-ubuntu2004-helm-2c-1g-13471 sshd[6082]: Received disconnect from 10.30.104.4 port 51520:11: Closed due to user request. [preauth]
Jul 28 19:22:48 prd-ubuntu2004-helm-2c-1g-13471 sshd[6082]: Disconnected from invalid user jenkins 10.30.104.4 port 51520 [preauth]
Jul 28 19:22:50 prd-ubuntu2004-helm-2c-1g-13471 sshd[6916]: Invalid user jenkins from 10.30.104.4 port 51522
Jul 28 19:22:51 prd-ubuntu2004-helm-2c-1g-13471 sshd[6916]: Received disconnect from 10.30.104.4 port 51522:11: Closed due to user request. [preauth]
Jul 28 19:22:51 prd-ubuntu2004-helm-2c-1g-13471 sshd[6916]: Disconnected from invalid user jenkins 10.30.104.4 port 51522 [preauth]
Jul 28 19:22:54 prd-ubuntu2004-helm-2c-1g-13471 sshd[7921]: Invalid user jenkins from 10.30.104.4 port 51524
Jul 28 19:22:54 prd-ubuntu2004-helm-2c-1g-13471 sshd[7921]: Received disconnect from 10.30.104.4 port 51524:11: Closed due to user request. [preauth]
Jul 28 19:22:54 prd-ubuntu2004-helm-2c-1g-13471 sshd[7921]: Disconnected from invalid user jenkins 10.30.104.4 port 51524 [preauth]
Jul 28 19:22:56 prd-ubuntu2004-helm-2c-1g-13471 sshd[8735]: Invalid user jenkins from 10.30.104.4 port 51528
Jul 28 19:22:56 prd-ubuntu2004-helm-2c-1g-13471 sshd[8735]: Received disconnect from 10.30.104.4 port 51528:11: Closed due to user request. [preauth]
Jul 28 19:22:56 prd-ubuntu2004-helm-2c-1g-13471 sshd[8735]: Disconnected from invalid user jenkins 10.30.104.4 port 51528 [preauth]
Jul 28 19:22:58 prd-ubuntu2004-helm-2c-1g-13471 sshd[9427]: Invalid user jenkins from 10.30.104.4 port 51530
Jul 28 19:22:58 prd-ubuntu2004-helm-2c-1g-13471 useradd[9460]: new group: name=jenkins, GID=1001
Jul 28 19:22:58 prd-ubuntu2004-helm-2c-1g-13471 useradd[9460]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jul 28 19:22:58 prd-ubuntu2004-helm-2c-1g-13471 sshd[9427]: Received disconnect from 10.30.104.4 port 51530:11: Closed due to user request. [preauth]
Jul 28 19:22:58 prd-ubuntu2004-helm-2c-1g-13471 sshd[9427]: Disconnected from invalid user jenkins 10.30.104.4 port 51530 [preauth]
Jul 28 19:22:58 prd-ubuntu2004-helm-2c-1g-13471 usermod[9505]: add 'jenkins' to group 'docker'
Jul 28 19:22:58 prd-ubuntu2004-helm-2c-1g-13471 usermod[9505]: add 'jenkins' to shadow group 'docker'
Jul 28 19:23:00 prd-ubuntu2004-helm-2c-1g-13471 sshd[10369]: Accepted publickey for jenkins from 10.30.104.4 port 51532 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Jul 28 19:23:00 prd-ubuntu2004-helm-2c-1g-13471 sshd[10369]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jul 28 19:23:00 prd-ubuntu2004-helm-2c-1g-13471 systemd-logind[746]: New session 1 of user jenkins.
Jul 28 19:23:00 prd-ubuntu2004-helm-2c-1g-13471 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jul 28 19:23:02 prd-ubuntu2004-helm-2c-1g-13471 CRON[11300]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 19:23:02 prd-ubuntu2004-helm-2c-1g-13471 CRON[11300]: pam_unix(cron:session): session closed for user root
Jul 28 19:24:01 prd-ubuntu2004-helm-2c-1g-13471 CRON[28214]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 19:24:01 prd-ubuntu2004-helm-2c-1g-13471 CRON[28214]: pam_unix(cron:session): session closed for user root
Jul 28 19:24:34 prd-ubuntu2004-helm-2c-1g-13471 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Jul 28 19:24:34 prd-ubuntu2004-helm-2c-1g-13471 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)