Aug 4 11:39:44 prd-ubuntu2004-helm-2c-1g-4005 passwd[711]: password for 'ubuntu' changed by 'root' Aug 4 11:39:44 prd-ubuntu2004-helm-2c-1g-4005 sshd[788]: Server listening on 0.0.0.0 port 22. Aug 4 11:39:44 prd-ubuntu2004-helm-2c-1g-4005 sshd[788]: Server listening on :: port 22. Aug 4 11:39:44 prd-ubuntu2004-helm-2c-1g-4005 systemd-logind[753]: New seat seat0. Aug 4 11:39:44 prd-ubuntu2004-helm-2c-1g-4005 systemd-logind[753]: Watching system buttons on /dev/input/event0 (Power Button) Aug 4 11:39:44 prd-ubuntu2004-helm-2c-1g-4005 systemd-logind[753]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 4 11:39:44 prd-ubuntu2004-helm-2c-1g-4005 sshd[831]: error: kex_exchange_identification: Connection closed by remote host Aug 4 11:39:52 prd-ubuntu2004-helm-2c-1g-4005 sshd[3367]: Invalid user jenkins from 10.30.104.4 port 41756 Aug 4 11:39:52 prd-ubuntu2004-helm-2c-1g-4005 sshd[3367]: Received disconnect from 10.30.104.4 port 41756:11: Closed due to user request. [preauth] Aug 4 11:39:52 prd-ubuntu2004-helm-2c-1g-4005 sshd[3367]: Disconnected from invalid user jenkins 10.30.104.4 port 41756 [preauth] Aug 4 11:39:54 prd-ubuntu2004-helm-2c-1g-4005 sshd[4093]: Invalid user jenkins from 10.30.104.4 port 41768 Aug 4 11:39:54 prd-ubuntu2004-helm-2c-1g-4005 sshd[4093]: Received disconnect from 10.30.104.4 port 41768:11: Closed due to user request. [preauth] Aug 4 11:39:54 prd-ubuntu2004-helm-2c-1g-4005 sshd[4093]: Disconnected from invalid user jenkins 10.30.104.4 port 41768 [preauth] Aug 4 11:39:56 prd-ubuntu2004-helm-2c-1g-4005 sshd[4791]: Invalid user jenkins from 10.30.104.4 port 41778 Aug 4 11:39:56 prd-ubuntu2004-helm-2c-1g-4005 sshd[4791]: Received disconnect from 10.30.104.4 port 41778:11: Closed due to user request. [preauth] Aug 4 11:39:56 prd-ubuntu2004-helm-2c-1g-4005 sshd[4791]: Disconnected from invalid user jenkins 10.30.104.4 port 41778 [preauth] Aug 4 11:39:58 prd-ubuntu2004-helm-2c-1g-4005 sshd[5481]: Invalid user jenkins from 10.30.104.4 port 41790 Aug 4 11:39:58 prd-ubuntu2004-helm-2c-1g-4005 sshd[5481]: Received disconnect from 10.30.104.4 port 41790:11: Closed due to user request. [preauth] Aug 4 11:39:58 prd-ubuntu2004-helm-2c-1g-4005 sshd[5481]: Disconnected from invalid user jenkins 10.30.104.4 port 41790 [preauth] Aug 4 11:40:00 prd-ubuntu2004-helm-2c-1g-4005 sshd[6138]: Invalid user jenkins from 10.30.104.4 port 41802 Aug 4 11:40:01 prd-ubuntu2004-helm-2c-1g-4005 sshd[6138]: Received disconnect from 10.30.104.4 port 41802:11: Closed due to user request. [preauth] Aug 4 11:40:01 prd-ubuntu2004-helm-2c-1g-4005 sshd[6138]: Disconnected from invalid user jenkins 10.30.104.4 port 41802 [preauth] Aug 4 11:40:01 prd-ubuntu2004-helm-2c-1g-4005 CRON[6365]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 11:40:01 prd-ubuntu2004-helm-2c-1g-4005 CRON[6365]: pam_unix(cron:session): session closed for user root Aug 4 11:40:03 prd-ubuntu2004-helm-2c-1g-4005 sshd[7096]: Invalid user jenkins from 10.30.104.4 port 41822 Aug 4 11:40:04 prd-ubuntu2004-helm-2c-1g-4005 sshd[7096]: Received disconnect from 10.30.104.4 port 41822:11: Closed due to user request. [preauth] Aug 4 11:40:04 prd-ubuntu2004-helm-2c-1g-4005 sshd[7096]: Disconnected from invalid user jenkins 10.30.104.4 port 41822 [preauth] Aug 4 11:40:06 prd-ubuntu2004-helm-2c-1g-4005 sshd[7960]: Invalid user jenkins from 10.30.104.4 port 41828 Aug 4 11:40:06 prd-ubuntu2004-helm-2c-1g-4005 sshd[7960]: Received disconnect from 10.30.104.4 port 41828:11: Closed due to user request. [preauth] Aug 4 11:40:06 prd-ubuntu2004-helm-2c-1g-4005 sshd[7960]: Disconnected from invalid user jenkins 10.30.104.4 port 41828 [preauth] Aug 4 11:40:08 prd-ubuntu2004-helm-2c-1g-4005 sshd[8416]: Invalid user jenkins from 10.30.104.4 port 41834 Aug 4 11:40:08 prd-ubuntu2004-helm-2c-1g-4005 sshd[8416]: Received disconnect from 10.30.104.4 port 41834:11: Closed due to user request. [preauth] Aug 4 11:40:08 prd-ubuntu2004-helm-2c-1g-4005 sshd[8416]: Disconnected from invalid user jenkins 10.30.104.4 port 41834 [preauth] Aug 4 11:40:10 prd-ubuntu2004-helm-2c-1g-4005 sshd[8744]: Invalid user jenkins from 10.30.104.4 port 41842 Aug 4 11:40:10 prd-ubuntu2004-helm-2c-1g-4005 sshd[8744]: Received disconnect from 10.30.104.4 port 41842:11: Closed due to user request. [preauth] Aug 4 11:40:10 prd-ubuntu2004-helm-2c-1g-4005 sshd[8744]: Disconnected from invalid user jenkins 10.30.104.4 port 41842 [preauth] Aug 4 11:40:12 prd-ubuntu2004-helm-2c-1g-4005 sshd[9067]: Invalid user jenkins from 10.30.104.4 port 41848 Aug 4 11:40:12 prd-ubuntu2004-helm-2c-1g-4005 sshd[9067]: Received disconnect from 10.30.104.4 port 41848:11: Closed due to user request. [preauth] Aug 4 11:40:12 prd-ubuntu2004-helm-2c-1g-4005 sshd[9067]: Disconnected from invalid user jenkins 10.30.104.4 port 41848 [preauth] Aug 4 11:40:13 prd-ubuntu2004-helm-2c-1g-4005 useradd[9174]: new group: name=jenkins, GID=1001 Aug 4 11:40:13 prd-ubuntu2004-helm-2c-1g-4005 useradd[9174]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 4 11:40:13 prd-ubuntu2004-helm-2c-1g-4005 usermod[9212]: add 'jenkins' to group 'docker' Aug 4 11:40:13 prd-ubuntu2004-helm-2c-1g-4005 usermod[9212]: add 'jenkins' to shadow group 'docker' Aug 4 11:40:14 prd-ubuntu2004-helm-2c-1g-4005 sshd[9847]: Accepted publickey for jenkins from 10.30.104.4 port 41854 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Aug 4 11:40:14 prd-ubuntu2004-helm-2c-1g-4005 sshd[9847]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 4 11:40:14 prd-ubuntu2004-helm-2c-1g-4005 systemd-logind[753]: New session 2 of user jenkins. Aug 4 11:40:14 prd-ubuntu2004-helm-2c-1g-4005 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 4 11:41:02 prd-ubuntu2004-helm-2c-1g-4005 CRON[26806]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 11:41:02 prd-ubuntu2004-helm-2c-1g-4005 CRON[26806]: pam_unix(cron:session): session closed for user root Aug 4 11:41:53 prd-ubuntu2004-helm-2c-1g-4005 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Aug 4 11:41:53 prd-ubuntu2004-helm-2c-1g-4005 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)