Nov 5 10:58:04 prd-ubuntu2004-helm-2c-1g-1090 passwd[714]: password for 'ubuntu' changed by 'root' Nov 5 10:58:04 prd-ubuntu2004-helm-2c-1g-1090 systemd-logind[761]: New seat seat0. Nov 5 10:58:04 prd-ubuntu2004-helm-2c-1g-1090 systemd-logind[761]: Watching system buttons on /dev/input/event0 (Power Button) Nov 5 10:58:04 prd-ubuntu2004-helm-2c-1g-1090 systemd-logind[761]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 5 10:58:04 prd-ubuntu2004-helm-2c-1g-1090 sshd[791]: Server listening on 0.0.0.0 port 22. Nov 5 10:58:04 prd-ubuntu2004-helm-2c-1g-1090 sshd[791]: Server listening on :: port 22. Nov 5 10:58:09 prd-ubuntu2004-helm-2c-1g-1090 sshd[2513]: error: kex_exchange_identification: Connection closed by remote host Nov 5 10:58:09 prd-ubuntu2004-helm-2c-1g-1090 sshd[2586]: Invalid user jenkins from 10.30.104.4 port 59170 Nov 5 10:58:09 prd-ubuntu2004-helm-2c-1g-1090 sshd[2586]: Received disconnect from 10.30.104.4 port 59170:11: Closed due to user request. [preauth] Nov 5 10:58:09 prd-ubuntu2004-helm-2c-1g-1090 sshd[2586]: Disconnected from invalid user jenkins 10.30.104.4 port 59170 [preauth] Nov 5 10:58:11 prd-ubuntu2004-helm-2c-1g-1090 sshd[3170]: Invalid user jenkins from 10.30.104.4 port 59184 Nov 5 10:58:11 prd-ubuntu2004-helm-2c-1g-1090 sshd[3170]: Received disconnect from 10.30.104.4 port 59184:11: Closed due to user request. [preauth] Nov 5 10:58:11 prd-ubuntu2004-helm-2c-1g-1090 sshd[3170]: Disconnected from invalid user jenkins 10.30.104.4 port 59184 [preauth] Nov 5 10:58:13 prd-ubuntu2004-helm-2c-1g-1090 sshd[3796]: Invalid user jenkins from 10.30.104.4 port 59192 Nov 5 10:58:13 prd-ubuntu2004-helm-2c-1g-1090 sshd[3796]: Received disconnect from 10.30.104.4 port 59192:11: Closed due to user request. [preauth] Nov 5 10:58:13 prd-ubuntu2004-helm-2c-1g-1090 sshd[3796]: Disconnected from invalid user jenkins 10.30.104.4 port 59192 [preauth] Nov 5 10:58:16 prd-ubuntu2004-helm-2c-1g-1090 sshd[4436]: Invalid user jenkins from 10.30.104.4 port 59202 Nov 5 10:58:16 prd-ubuntu2004-helm-2c-1g-1090 sshd[4436]: Received disconnect from 10.30.104.4 port 59202:11: Closed due to user request. [preauth] Nov 5 10:58:16 prd-ubuntu2004-helm-2c-1g-1090 sshd[4436]: Disconnected from invalid user jenkins 10.30.104.4 port 59202 [preauth] Nov 5 10:58:18 prd-ubuntu2004-helm-2c-1g-1090 sshd[5048]: Invalid user jenkins from 10.30.104.4 port 59216 Nov 5 10:58:18 prd-ubuntu2004-helm-2c-1g-1090 sshd[5048]: Received disconnect from 10.30.104.4 port 59216:11: Closed due to user request. [preauth] Nov 5 10:58:18 prd-ubuntu2004-helm-2c-1g-1090 sshd[5048]: Disconnected from invalid user jenkins 10.30.104.4 port 59216 [preauth] Nov 5 10:58:20 prd-ubuntu2004-helm-2c-1g-1090 sshd[5669]: Invalid user jenkins from 10.30.104.4 port 59224 Nov 5 10:58:20 prd-ubuntu2004-helm-2c-1g-1090 sshd[5669]: Received disconnect from 10.30.104.4 port 59224:11: Closed due to user request. [preauth] Nov 5 10:58:20 prd-ubuntu2004-helm-2c-1g-1090 sshd[5669]: Disconnected from invalid user jenkins 10.30.104.4 port 59224 [preauth] Nov 5 10:58:22 prd-ubuntu2004-helm-2c-1g-1090 sshd[6324]: Invalid user jenkins from 10.30.104.4 port 59226 Nov 5 10:58:22 prd-ubuntu2004-helm-2c-1g-1090 sshd[6324]: Received disconnect from 10.30.104.4 port 59226:11: Closed due to user request. [preauth] Nov 5 10:58:22 prd-ubuntu2004-helm-2c-1g-1090 sshd[6324]: Disconnected from invalid user jenkins 10.30.104.4 port 59226 [preauth] Nov 5 10:58:25 prd-ubuntu2004-helm-2c-1g-1090 sshd[7250]: Invalid user jenkins from 10.30.104.4 port 59228 Nov 5 10:58:25 prd-ubuntu2004-helm-2c-1g-1090 sshd[7250]: Received disconnect from 10.30.104.4 port 59228:11: Closed due to user request. [preauth] Nov 5 10:58:25 prd-ubuntu2004-helm-2c-1g-1090 sshd[7250]: Disconnected from invalid user jenkins 10.30.104.4 port 59228 [preauth] Nov 5 10:58:27 prd-ubuntu2004-helm-2c-1g-1090 sshd[7843]: Invalid user jenkins from 10.30.104.4 port 59236 Nov 5 10:58:27 prd-ubuntu2004-helm-2c-1g-1090 sshd[7843]: Received disconnect from 10.30.104.4 port 59236:11: Closed due to user request. [preauth] Nov 5 10:58:27 prd-ubuntu2004-helm-2c-1g-1090 sshd[7843]: Disconnected from invalid user jenkins 10.30.104.4 port 59236 [preauth] Nov 5 10:58:29 prd-ubuntu2004-helm-2c-1g-1090 sshd[8402]: Invalid user jenkins from 10.30.104.4 port 59238 Nov 5 10:58:29 prd-ubuntu2004-helm-2c-1g-1090 sshd[8402]: Received disconnect from 10.30.104.4 port 59238:11: Closed due to user request. [preauth] Nov 5 10:58:29 prd-ubuntu2004-helm-2c-1g-1090 sshd[8402]: Disconnected from invalid user jenkins 10.30.104.4 port 59238 [preauth] Nov 5 10:58:30 prd-ubuntu2004-helm-2c-1g-1090 useradd[8479]: new group: name=jenkins, GID=1001 Nov 5 10:58:30 prd-ubuntu2004-helm-2c-1g-1090 useradd[8479]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 5 10:58:30 prd-ubuntu2004-helm-2c-1g-1090 usermod[8519]: add 'jenkins' to group 'docker' Nov 5 10:58:30 prd-ubuntu2004-helm-2c-1g-1090 usermod[8519]: add 'jenkins' to shadow group 'docker' Nov 5 10:58:32 prd-ubuntu2004-helm-2c-1g-1090 sshd[9067]: Accepted publickey for jenkins from 10.30.104.4 port 59240 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 5 10:58:32 prd-ubuntu2004-helm-2c-1g-1090 sshd[9067]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 5 10:58:32 prd-ubuntu2004-helm-2c-1g-1090 systemd-logind[761]: New session 1 of user jenkins. Nov 5 10:58:32 prd-ubuntu2004-helm-2c-1g-1090 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 5 10:59:01 prd-ubuntu2004-helm-2c-1g-1090 CRON[18880]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 5 10:59:01 prd-ubuntu2004-helm-2c-1g-1090 CRON[18880]: pam_unix(cron:session): session closed for user root Nov 5 11:00:01 prd-ubuntu2004-helm-2c-1g-1090 CRON[29717]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 5 11:00:01 prd-ubuntu2004-helm-2c-1g-1090 CRON[29717]: pam_unix(cron:session): session closed for user root Nov 5 11:00:12 prd-ubuntu2004-helm-2c-1g-1090 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-image-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 5 11:00:12 prd-ubuntu2004-helm-2c-1g-1090 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)