Nov 3 15:22:45 prd-ubuntu2004-helm-2c-1g-701 passwd[709]: password for 'ubuntu' changed by 'root' Nov 3 15:22:45 prd-ubuntu2004-helm-2c-1g-701 sshd[782]: Server listening on 0.0.0.0 port 22. Nov 3 15:22:45 prd-ubuntu2004-helm-2c-1g-701 sshd[782]: Server listening on :: port 22. Nov 3 15:22:45 prd-ubuntu2004-helm-2c-1g-701 systemd-logind[748]: New seat seat0. Nov 3 15:22:45 prd-ubuntu2004-helm-2c-1g-701 systemd-logind[748]: Watching system buttons on /dev/input/event0 (Power Button) Nov 3 15:22:45 prd-ubuntu2004-helm-2c-1g-701 systemd-logind[748]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 3 15:22:49 prd-ubuntu2004-helm-2c-1g-701 sshd[2007]: error: kex_exchange_identification: Connection closed by remote host Nov 3 15:22:49 prd-ubuntu2004-helm-2c-1g-701 sshd[2190]: Invalid user jenkins from 10.30.104.4 port 36212 Nov 3 15:22:49 prd-ubuntu2004-helm-2c-1g-701 sshd[2190]: Received disconnect from 10.30.104.4 port 36212:11: Closed due to user request. [preauth] Nov 3 15:22:49 prd-ubuntu2004-helm-2c-1g-701 sshd[2190]: Disconnected from invalid user jenkins 10.30.104.4 port 36212 [preauth] Nov 3 15:22:51 prd-ubuntu2004-helm-2c-1g-701 sshd[2821]: Invalid user jenkins from 10.30.104.4 port 36214 Nov 3 15:22:51 prd-ubuntu2004-helm-2c-1g-701 sshd[2821]: Received disconnect from 10.30.104.4 port 36214:11: Closed due to user request. [preauth] Nov 3 15:22:51 prd-ubuntu2004-helm-2c-1g-701 sshd[2821]: Disconnected from invalid user jenkins 10.30.104.4 port 36214 [preauth] Nov 3 15:22:53 prd-ubuntu2004-helm-2c-1g-701 sshd[3435]: Invalid user jenkins from 10.30.104.4 port 36216 Nov 3 15:22:54 prd-ubuntu2004-helm-2c-1g-701 sshd[3435]: Received disconnect from 10.30.104.4 port 36216:11: Closed due to user request. [preauth] Nov 3 15:22:54 prd-ubuntu2004-helm-2c-1g-701 sshd[3435]: Disconnected from invalid user jenkins 10.30.104.4 port 36216 [preauth] Nov 3 15:22:56 prd-ubuntu2004-helm-2c-1g-701 sshd[4032]: Invalid user jenkins from 10.30.104.4 port 36220 Nov 3 15:22:56 prd-ubuntu2004-helm-2c-1g-701 sshd[4032]: Received disconnect from 10.30.104.4 port 36220:11: Closed due to user request. [preauth] Nov 3 15:22:56 prd-ubuntu2004-helm-2c-1g-701 sshd[4032]: Disconnected from invalid user jenkins 10.30.104.4 port 36220 [preauth] Nov 3 15:22:58 prd-ubuntu2004-helm-2c-1g-701 sshd[4631]: Invalid user jenkins from 10.30.104.4 port 36222 Nov 3 15:22:58 prd-ubuntu2004-helm-2c-1g-701 sshd[4631]: Received disconnect from 10.30.104.4 port 36222:11: Closed due to user request. [preauth] Nov 3 15:22:58 prd-ubuntu2004-helm-2c-1g-701 sshd[4631]: Disconnected from invalid user jenkins 10.30.104.4 port 36222 [preauth] Nov 3 15:23:00 prd-ubuntu2004-helm-2c-1g-701 sshd[5221]: Invalid user jenkins from 10.30.104.4 port 36224 Nov 3 15:23:00 prd-ubuntu2004-helm-2c-1g-701 sshd[5221]: Received disconnect from 10.30.104.4 port 36224:11: Closed due to user request. [preauth] Nov 3 15:23:00 prd-ubuntu2004-helm-2c-1g-701 sshd[5221]: Disconnected from invalid user jenkins 10.30.104.4 port 36224 [preauth] Nov 3 15:23:01 prd-ubuntu2004-helm-2c-1g-701 CRON[5477]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 15:23:01 prd-ubuntu2004-helm-2c-1g-701 CRON[5477]: pam_unix(cron:session): session closed for user root Nov 3 15:23:02 prd-ubuntu2004-helm-2c-1g-701 sshd[5792]: Invalid user jenkins from 10.30.104.4 port 36226 Nov 3 15:23:02 prd-ubuntu2004-helm-2c-1g-701 sshd[5792]: Received disconnect from 10.30.104.4 port 36226:11: Closed due to user request. [preauth] Nov 3 15:23:02 prd-ubuntu2004-helm-2c-1g-701 sshd[5792]: Disconnected from invalid user jenkins 10.30.104.4 port 36226 [preauth] Nov 3 15:23:04 prd-ubuntu2004-helm-2c-1g-701 sshd[6591]: Invalid user jenkins from 10.30.104.4 port 36228 Nov 3 15:23:04 prd-ubuntu2004-helm-2c-1g-701 sshd[6591]: Received disconnect from 10.30.104.4 port 36228:11: Closed due to user request. [preauth] Nov 3 15:23:04 prd-ubuntu2004-helm-2c-1g-701 sshd[6591]: Disconnected from invalid user jenkins 10.30.104.4 port 36228 [preauth] Nov 3 15:23:07 prd-ubuntu2004-helm-2c-1g-701 sshd[7190]: Invalid user jenkins from 10.30.104.4 port 36230 Nov 3 15:23:07 prd-ubuntu2004-helm-2c-1g-701 sshd[7190]: Received disconnect from 10.30.104.4 port 36230:11: Closed due to user request. [preauth] Nov 3 15:23:07 prd-ubuntu2004-helm-2c-1g-701 sshd[7190]: Disconnected from invalid user jenkins 10.30.104.4 port 36230 [preauth] Nov 3 15:23:07 prd-ubuntu2004-helm-2c-1g-701 useradd[7257]: new group: name=jenkins, GID=1001 Nov 3 15:23:07 prd-ubuntu2004-helm-2c-1g-701 useradd[7257]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 3 15:23:07 prd-ubuntu2004-helm-2c-1g-701 usermod[7291]: add 'jenkins' to group 'docker' Nov 3 15:23:07 prd-ubuntu2004-helm-2c-1g-701 usermod[7291]: add 'jenkins' to shadow group 'docker' Nov 3 15:23:09 prd-ubuntu2004-helm-2c-1g-701 sshd[7898]: Accepted publickey for jenkins from 10.30.104.4 port 36232 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 3 15:23:09 prd-ubuntu2004-helm-2c-1g-701 sshd[7898]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 3 15:23:09 prd-ubuntu2004-helm-2c-1g-701 systemd-logind[748]: New session 2 of user jenkins. Nov 3 15:23:09 prd-ubuntu2004-helm-2c-1g-701 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 3 15:24:01 prd-ubuntu2004-helm-2c-1g-701 CRON[23829]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 15:24:01 prd-ubuntu2004-helm-2c-1g-701 CRON[23829]: pam_unix(cron:session): session closed for user root Nov 3 15:24:41 prd-ubuntu2004-helm-2c-1g-701 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 3 15:24:41 prd-ubuntu2004-helm-2c-1g-701 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)