Mar 4 09:59:18 prd-ubuntu1804-builder-4c-4g-1425 passwd[984]: password for 'ubuntu' changed by 'root' Mar 4 09:59:18 prd-ubuntu1804-builder-4c-4g-1425 systemd-logind[1088]: Watching system buttons on /dev/input/event0 (Power Button) Mar 4 09:59:18 prd-ubuntu1804-builder-4c-4g-1425 systemd-logind[1088]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 4 09:59:18 prd-ubuntu1804-builder-4c-4g-1425 systemd-logind[1088]: New seat seat0. Mar 4 09:59:18 prd-ubuntu1804-builder-4c-4g-1425 sshd[1214]: Server listening on 0.0.0.0 port 22. Mar 4 09:59:18 prd-ubuntu1804-builder-4c-4g-1425 sshd[1214]: Server listening on :: port 22. Mar 4 09:59:21 prd-ubuntu1804-builder-4c-4g-1425 sshd[1465]: Did not receive identification string from 10.30.104.4 port 38904 Mar 4 09:59:28 prd-ubuntu1804-builder-4c-4g-1425 sshd[1558]: Invalid user jenkins from 10.30.104.4 port 38920 Mar 4 09:59:28 prd-ubuntu1804-builder-4c-4g-1425 sshd[1558]: Received disconnect from 10.30.104.4 port 38920:11: Closed due to user request. [preauth] Mar 4 09:59:28 prd-ubuntu1804-builder-4c-4g-1425 sshd[1558]: Disconnected from invalid user jenkins 10.30.104.4 port 38920 [preauth] Mar 4 09:59:30 prd-ubuntu1804-builder-4c-4g-1425 sshd[1562]: Invalid user jenkins from 10.30.104.4 port 38932 Mar 4 09:59:30 prd-ubuntu1804-builder-4c-4g-1425 sshd[1562]: Received disconnect from 10.30.104.4 port 38932:11: Closed due to user request. [preauth] Mar 4 09:59:30 prd-ubuntu1804-builder-4c-4g-1425 sshd[1562]: Disconnected from invalid user jenkins 10.30.104.4 port 38932 [preauth] Mar 4 09:59:32 prd-ubuntu1804-builder-4c-4g-1425 sshd[1570]: Invalid user jenkins from 10.30.104.4 port 38940 Mar 4 09:59:32 prd-ubuntu1804-builder-4c-4g-1425 sshd[1570]: Received disconnect from 10.30.104.4 port 38940:11: Closed due to user request. [preauth] Mar 4 09:59:32 prd-ubuntu1804-builder-4c-4g-1425 sshd[1570]: Disconnected from invalid user jenkins 10.30.104.4 port 38940 [preauth] Mar 4 09:59:34 prd-ubuntu1804-builder-4c-4g-1425 sshd[1572]: Invalid user jenkins from 10.30.104.4 port 38950 Mar 4 09:59:35 prd-ubuntu1804-builder-4c-4g-1425 sshd[1572]: Received disconnect from 10.30.104.4 port 38950:11: Closed due to user request. [preauth] Mar 4 09:59:35 prd-ubuntu1804-builder-4c-4g-1425 sshd[1572]: Disconnected from invalid user jenkins 10.30.104.4 port 38950 [preauth] Mar 4 09:59:37 prd-ubuntu1804-builder-4c-4g-1425 sshd[1574]: Invalid user jenkins from 10.30.104.4 port 38966 Mar 4 09:59:37 prd-ubuntu1804-builder-4c-4g-1425 sshd[1574]: Received disconnect from 10.30.104.4 port 38966:11: Closed due to user request. [preauth] Mar 4 09:59:37 prd-ubuntu1804-builder-4c-4g-1425 sshd[1574]: Disconnected from invalid user jenkins 10.30.104.4 port 38966 [preauth] Mar 4 09:59:39 prd-ubuntu1804-builder-4c-4g-1425 sshd[1576]: Invalid user jenkins from 10.30.104.4 port 38970 Mar 4 09:59:39 prd-ubuntu1804-builder-4c-4g-1425 sshd[1576]: Received disconnect from 10.30.104.4 port 38970:11: Closed due to user request. [preauth] Mar 4 09:59:39 prd-ubuntu1804-builder-4c-4g-1425 sshd[1576]: Disconnected from invalid user jenkins 10.30.104.4 port 38970 [preauth] Mar 4 09:59:41 prd-ubuntu1804-builder-4c-4g-1425 sshd[1578]: Invalid user jenkins from 10.30.104.4 port 38976 Mar 4 09:59:42 prd-ubuntu1804-builder-4c-4g-1425 sshd[1578]: Received disconnect from 10.30.104.4 port 38976:11: Closed due to user request. [preauth] Mar 4 09:59:42 prd-ubuntu1804-builder-4c-4g-1425 sshd[1578]: Disconnected from invalid user jenkins 10.30.104.4 port 38976 [preauth] Mar 4 09:59:44 prd-ubuntu1804-builder-4c-4g-1425 sshd[1580]: Invalid user jenkins from 10.30.104.4 port 38986 Mar 4 09:59:45 prd-ubuntu1804-builder-4c-4g-1425 sshd[1580]: Received disconnect from 10.30.104.4 port 38986:11: Closed due to user request. [preauth] Mar 4 09:59:45 prd-ubuntu1804-builder-4c-4g-1425 sshd[1580]: Disconnected from invalid user jenkins 10.30.104.4 port 38986 [preauth] Mar 4 09:59:46 prd-ubuntu1804-builder-4c-4g-1425 sshd[1582]: Invalid user jenkins from 10.30.104.4 port 38994 Mar 4 09:59:46 prd-ubuntu1804-builder-4c-4g-1425 sshd[1582]: Received disconnect from 10.30.104.4 port 38994:11: Closed due to user request. [preauth] Mar 4 09:59:46 prd-ubuntu1804-builder-4c-4g-1425 sshd[1582]: Disconnected from invalid user jenkins 10.30.104.4 port 38994 [preauth] Mar 4 09:59:48 prd-ubuntu1804-builder-4c-4g-1425 sshd[1584]: Invalid user jenkins from 10.30.104.4 port 39000 Mar 4 09:59:48 prd-ubuntu1804-builder-4c-4g-1425 sshd[1584]: Received disconnect from 10.30.104.4 port 39000:11: Closed due to user request. [preauth] Mar 4 09:59:48 prd-ubuntu1804-builder-4c-4g-1425 sshd[1584]: Disconnected from invalid user jenkins 10.30.104.4 port 39000 [preauth] Mar 4 09:59:50 prd-ubuntu1804-builder-4c-4g-1425 sshd[1614]: Invalid user jenkins from 10.30.104.4 port 39008 Mar 4 09:59:50 prd-ubuntu1804-builder-4c-4g-1425 sshd[1614]: Received disconnect from 10.30.104.4 port 39008:11: Closed due to user request. [preauth] Mar 4 09:59:50 prd-ubuntu1804-builder-4c-4g-1425 sshd[1614]: Disconnected from invalid user jenkins 10.30.104.4 port 39008 [preauth] Mar 4 09:59:54 prd-ubuntu1804-builder-4c-4g-1425 sshd[1616]: Invalid user jenkins from 10.30.104.4 port 39016 Mar 4 09:59:54 prd-ubuntu1804-builder-4c-4g-1425 sshd[1616]: Received disconnect from 10.30.104.4 port 39016:11: Closed due to user request. [preauth] Mar 4 09:59:54 prd-ubuntu1804-builder-4c-4g-1425 sshd[1616]: Disconnected from invalid user jenkins 10.30.104.4 port 39016 [preauth] Mar 4 09:59:56 prd-ubuntu1804-builder-4c-4g-1425 sshd[1618]: Invalid user jenkins from 10.30.104.4 port 39024 Mar 4 09:59:56 prd-ubuntu1804-builder-4c-4g-1425 sshd[1618]: Received disconnect from 10.30.104.4 port 39024:11: Closed due to user request. [preauth] Mar 4 09:59:56 prd-ubuntu1804-builder-4c-4g-1425 sshd[1618]: Disconnected from invalid user jenkins 10.30.104.4 port 39024 [preauth] Mar 4 09:59:58 prd-ubuntu1804-builder-4c-4g-1425 sshd[1620]: Invalid user jenkins from 10.30.104.4 port 39030 Mar 4 09:59:58 prd-ubuntu1804-builder-4c-4g-1425 sshd[1620]: Received disconnect from 10.30.104.4 port 39030:11: Closed due to user request. [preauth] Mar 4 09:59:58 prd-ubuntu1804-builder-4c-4g-1425 sshd[1620]: Disconnected from invalid user jenkins 10.30.104.4 port 39030 [preauth] Mar 4 10:00:00 prd-ubuntu1804-builder-4c-4g-1425 sshd[1622]: Invalid user jenkins from 10.30.104.4 port 39036 Mar 4 10:00:01 prd-ubuntu1804-builder-4c-4g-1425 sshd[1622]: Received disconnect from 10.30.104.4 port 39036:11: Closed due to user request. [preauth] Mar 4 10:00:01 prd-ubuntu1804-builder-4c-4g-1425 sshd[1622]: Disconnected from invalid user jenkins 10.30.104.4 port 39036 [preauth] Mar 4 10:00:02 prd-ubuntu1804-builder-4c-4g-1425 CRON[1625]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 4 10:00:02 prd-ubuntu1804-builder-4c-4g-1425 CRON[1625]: pam_unix(cron:session): session closed for user root Mar 4 10:00:03 prd-ubuntu1804-builder-4c-4g-1425 useradd[1650]: new group: name=jenkins, GID=1001 Mar 4 10:00:03 prd-ubuntu1804-builder-4c-4g-1425 useradd[1650]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 4 10:00:03 prd-ubuntu1804-builder-4c-4g-1425 sshd[1651]: Invalid user jenkins from 10.30.104.4 port 39062 Mar 4 10:00:03 prd-ubuntu1804-builder-4c-4g-1425 sshd[1651]: Received disconnect from 10.30.104.4 port 39062:11: Closed due to user request. [preauth] Mar 4 10:00:03 prd-ubuntu1804-builder-4c-4g-1425 sshd[1651]: Disconnected from invalid user jenkins 10.30.104.4 port 39062 [preauth] Mar 4 10:00:05 prd-ubuntu1804-builder-4c-4g-1425 sshd[1653]: Received disconnect from 10.30.104.4 port 39068:11: Closed due to user request. [preauth] Mar 4 10:00:05 prd-ubuntu1804-builder-4c-4g-1425 sshd[1653]: Disconnected from authenticating user jenkins 10.30.104.4 port 39068 [preauth] Mar 4 10:00:07 prd-ubuntu1804-builder-4c-4g-1425 sshd[1714]: Accepted publickey for jenkins from 10.30.104.4 port 39074 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Mar 4 10:00:07 prd-ubuntu1804-builder-4c-4g-1425 sshd[1714]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 4 10:00:07 prd-ubuntu1804-builder-4c-4g-1425 systemd-logind[1088]: New session 2 of user jenkins. Mar 4 10:00:07 prd-ubuntu1804-builder-4c-4g-1425 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 4 10:01:01 prd-ubuntu1804-builder-4c-4g-1425 CRON[2654]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 4 10:01:01 prd-ubuntu1804-builder-4c-4g-1425 CRON[2654]: pam_unix(cron:session): session closed for user root Mar 4 10:02:01 prd-ubuntu1804-builder-4c-4g-1425 CRON[2884]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 4 10:02:01 prd-ubuntu1804-builder-4c-4g-1425 CRON[2884]: pam_unix(cron:session): session closed for user root Mar 4 10:02:06 prd-ubuntu1804-builder-4c-4g-1425 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-checkbashisms-lint ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 4 10:02:06 prd-ubuntu1804-builder-4c-4g-1425 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)