Feb 7 09:35:22 prd-ubuntu1804-builder-4c-4g-3341 passwd[952]: password for 'ubuntu' changed by 'root' Feb 7 09:35:22 prd-ubuntu1804-builder-4c-4g-3341 systemd-logind[1037]: Watching system buttons on /dev/input/event0 (Power Button) Feb 7 09:35:22 prd-ubuntu1804-builder-4c-4g-3341 systemd-logind[1037]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 7 09:35:22 prd-ubuntu1804-builder-4c-4g-3341 systemd-logind[1037]: New seat seat0. Feb 7 09:35:22 prd-ubuntu1804-builder-4c-4g-3341 sshd[1120]: Server listening on 0.0.0.0 port 22. Feb 7 09:35:22 prd-ubuntu1804-builder-4c-4g-3341 sshd[1120]: Server listening on :: port 22. Feb 7 09:35:25 prd-ubuntu1804-builder-4c-4g-3341 sshd[1378]: Did not receive identification string from 10.30.104.4 port 51258 Feb 7 09:35:34 prd-ubuntu1804-builder-4c-4g-3341 sshd[1512]: Invalid user jenkins from 10.30.104.4 port 51298 Feb 7 09:35:34 prd-ubuntu1804-builder-4c-4g-3341 sshd[1512]: Received disconnect from 10.30.104.4 port 51298:11: Closed due to user request. [preauth] Feb 7 09:35:34 prd-ubuntu1804-builder-4c-4g-3341 sshd[1512]: Disconnected from invalid user jenkins 10.30.104.4 port 51298 [preauth] Feb 7 09:35:36 prd-ubuntu1804-builder-4c-4g-3341 sshd[1516]: Invalid user jenkins from 10.30.104.4 port 51306 Feb 7 09:35:37 prd-ubuntu1804-builder-4c-4g-3341 sshd[1516]: Received disconnect from 10.30.104.4 port 51306:11: Closed due to user request. [preauth] Feb 7 09:35:37 prd-ubuntu1804-builder-4c-4g-3341 sshd[1516]: Disconnected from invalid user jenkins 10.30.104.4 port 51306 [preauth] Feb 7 09:35:38 prd-ubuntu1804-builder-4c-4g-3341 sshd[1518]: Invalid user jenkins from 10.30.104.4 port 51318 Feb 7 09:35:38 prd-ubuntu1804-builder-4c-4g-3341 sshd[1518]: Received disconnect from 10.30.104.4 port 51318:11: Closed due to user request. [preauth] Feb 7 09:35:38 prd-ubuntu1804-builder-4c-4g-3341 sshd[1518]: Disconnected from invalid user jenkins 10.30.104.4 port 51318 [preauth] Feb 7 09:35:40 prd-ubuntu1804-builder-4c-4g-3341 sshd[1520]: Invalid user jenkins from 10.30.104.4 port 51328 Feb 7 09:35:41 prd-ubuntu1804-builder-4c-4g-3341 sshd[1520]: Received disconnect from 10.30.104.4 port 51328:11: Closed due to user request. [preauth] Feb 7 09:35:41 prd-ubuntu1804-builder-4c-4g-3341 sshd[1520]: Disconnected from invalid user jenkins 10.30.104.4 port 51328 [preauth] Feb 7 09:35:43 prd-ubuntu1804-builder-4c-4g-3341 sshd[1528]: Invalid user jenkins from 10.30.104.4 port 51336 Feb 7 09:35:43 prd-ubuntu1804-builder-4c-4g-3341 sshd[1528]: Received disconnect from 10.30.104.4 port 51336:11: Closed due to user request. [preauth] Feb 7 09:35:43 prd-ubuntu1804-builder-4c-4g-3341 sshd[1528]: Disconnected from invalid user jenkins 10.30.104.4 port 51336 [preauth] Feb 7 09:35:45 prd-ubuntu1804-builder-4c-4g-3341 sshd[1530]: Invalid user jenkins from 10.30.104.4 port 51354 Feb 7 09:35:45 prd-ubuntu1804-builder-4c-4g-3341 sshd[1530]: Received disconnect from 10.30.104.4 port 51354:11: Closed due to user request. [preauth] Feb 7 09:35:45 prd-ubuntu1804-builder-4c-4g-3341 sshd[1530]: Disconnected from invalid user jenkins 10.30.104.4 port 51354 [preauth] Feb 7 09:35:47 prd-ubuntu1804-builder-4c-4g-3341 sshd[1532]: Invalid user jenkins from 10.30.104.4 port 51360 Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1532]: Received disconnect from 10.30.104.4 port 51360:11: Closed due to user request. [preauth] Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1532]: Disconnected from invalid user jenkins 10.30.104.4 port 51360 [preauth] Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1554]: Invalid user jenkins from 10.30.104.4 port 51384 Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1554]: Received disconnect from 10.30.104.4 port 51384:11: Closed due to user request. [preauth] Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1554]: Disconnected from invalid user jenkins 10.30.104.4 port 51384 [preauth] Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1556]: Invalid user jenkins from 10.30.104.4 port 51396 Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1556]: Received disconnect from 10.30.104.4 port 51396:11: Closed due to user request. [preauth] Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1556]: Disconnected from invalid user jenkins 10.30.104.4 port 51396 [preauth] Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1561]: Invalid user jenkins from 10.30.104.4 port 51416 Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1561]: Received disconnect from 10.30.104.4 port 51416:11: Closed due to user request. [preauth] Feb 7 09:35:59 prd-ubuntu1804-builder-4c-4g-3341 sshd[1561]: Disconnected from invalid user jenkins 10.30.104.4 port 51416 [preauth] Feb 7 09:36:01 prd-ubuntu1804-builder-4c-4g-3341 sshd[1571]: Invalid user jenkins from 10.30.104.4 port 51422 Feb 7 09:36:01 prd-ubuntu1804-builder-4c-4g-3341 sshd[1571]: Received disconnect from 10.30.104.4 port 51422:11: Closed due to user request. [preauth] Feb 7 09:36:01 prd-ubuntu1804-builder-4c-4g-3341 sshd[1571]: Disconnected from invalid user jenkins 10.30.104.4 port 51422 [preauth] Feb 7 09:36:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[1573]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 09:36:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[1573]: pam_unix(cron:session): session closed for user root Feb 7 09:36:03 prd-ubuntu1804-builder-4c-4g-3341 sshd[1583]: Invalid user jenkins from 10.30.104.4 port 51438 Feb 7 09:36:03 prd-ubuntu1804-builder-4c-4g-3341 sshd[1583]: Received disconnect from 10.30.104.4 port 51438:11: Closed due to user request. [preauth] Feb 7 09:36:03 prd-ubuntu1804-builder-4c-4g-3341 sshd[1583]: Disconnected from invalid user jenkins 10.30.104.4 port 51438 [preauth] Feb 7 09:36:05 prd-ubuntu1804-builder-4c-4g-3341 sshd[1585]: Invalid user jenkins from 10.30.104.4 port 51450 Feb 7 09:36:06 prd-ubuntu1804-builder-4c-4g-3341 sshd[1585]: Received disconnect from 10.30.104.4 port 51450:11: Closed due to user request. [preauth] Feb 7 09:36:06 prd-ubuntu1804-builder-4c-4g-3341 sshd[1585]: Disconnected from invalid user jenkins 10.30.104.4 port 51450 [preauth] Feb 7 09:36:08 prd-ubuntu1804-builder-4c-4g-3341 sshd[1587]: Invalid user jenkins from 10.30.104.4 port 51462 Feb 7 09:36:08 prd-ubuntu1804-builder-4c-4g-3341 sshd[1587]: Received disconnect from 10.30.104.4 port 51462:11: Closed due to user request. [preauth] Feb 7 09:36:08 prd-ubuntu1804-builder-4c-4g-3341 sshd[1587]: Disconnected from invalid user jenkins 10.30.104.4 port 51462 [preauth] Feb 7 09:36:10 prd-ubuntu1804-builder-4c-4g-3341 sshd[1589]: Invalid user jenkins from 10.30.104.4 port 51474 Feb 7 09:36:10 prd-ubuntu1804-builder-4c-4g-3341 sshd[1589]: Received disconnect from 10.30.104.4 port 51474:11: Closed due to user request. [preauth] Feb 7 09:36:10 prd-ubuntu1804-builder-4c-4g-3341 sshd[1589]: Disconnected from invalid user jenkins 10.30.104.4 port 51474 [preauth] Feb 7 09:36:12 prd-ubuntu1804-builder-4c-4g-3341 sshd[1606]: Invalid user jenkins from 10.30.104.4 port 51480 Feb 7 09:36:12 prd-ubuntu1804-builder-4c-4g-3341 sshd[1606]: Received disconnect from 10.30.104.4 port 51480:11: Closed due to user request. [preauth] Feb 7 09:36:12 prd-ubuntu1804-builder-4c-4g-3341 sshd[1606]: Disconnected from invalid user jenkins 10.30.104.4 port 51480 [preauth] Feb 7 09:36:12 prd-ubuntu1804-builder-4c-4g-3341 useradd[1611]: new group: name=jenkins, GID=1001 Feb 7 09:36:12 prd-ubuntu1804-builder-4c-4g-3341 useradd[1611]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 7 09:36:14 prd-ubuntu1804-builder-4c-4g-3341 sshd[1655]: Accepted publickey for jenkins from 10.30.104.4 port 51494 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Feb 7 09:36:14 prd-ubuntu1804-builder-4c-4g-3341 sshd[1655]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 7 09:36:14 prd-ubuntu1804-builder-4c-4g-3341 systemd-logind[1037]: New session 2 of user jenkins. Feb 7 09:36:14 prd-ubuntu1804-builder-4c-4g-3341 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 7 09:37:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[2454]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 09:37:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[2454]: pam_unix(cron:session): session closed for user root Feb 7 09:38:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[3128]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 09:38:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[3128]: pam_unix(cron:session): session closed for user root Feb 7 09:39:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[3427]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 7 09:39:01 prd-ubuntu1804-builder-4c-4g-3341 CRON[3427]: pam_unix(cron:session): session closed for user root Feb 7 09:39:07 prd-ubuntu1804-builder-4c-4g-3341 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-pre-commit-lint ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 7 09:39:07 prd-ubuntu1804-builder-4c-4g-3341 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)