Apr 2 09:16:25 prd-ubuntu1804-builder-4c-4g-3006 passwd[1009]: password for 'ubuntu' changed by 'root' Apr 2 09:16:25 prd-ubuntu1804-builder-4c-4g-3006 systemd-logind[1104]: Watching system buttons on /dev/input/event0 (Power Button) Apr 2 09:16:25 prd-ubuntu1804-builder-4c-4g-3006 systemd-logind[1104]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 2 09:16:25 prd-ubuntu1804-builder-4c-4g-3006 systemd-logind[1104]: New seat seat0. Apr 2 09:16:25 prd-ubuntu1804-builder-4c-4g-3006 sshd[1189]: Server listening on 0.0.0.0 port 22. Apr 2 09:16:25 prd-ubuntu1804-builder-4c-4g-3006 sshd[1189]: Server listening on :: port 22. Apr 2 09:16:31 prd-ubuntu1804-builder-4c-4g-3006 sshd[1520]: Did not receive identification string from 10.30.104.4 port 53644 Apr 2 09:16:46 prd-ubuntu1804-builder-4c-4g-3006 sshd[1535]: Invalid user jenkins from 10.30.104.4 port 53680 Apr 2 09:16:46 prd-ubuntu1804-builder-4c-4g-3006 sshd[1535]: Received disconnect from 10.30.104.4 port 53680:11: Closed due to user request. [preauth] Apr 2 09:16:46 prd-ubuntu1804-builder-4c-4g-3006 sshd[1535]: Disconnected from invalid user jenkins 10.30.104.4 port 53680 [preauth] Apr 2 09:16:48 prd-ubuntu1804-builder-4c-4g-3006 sshd[1561]: Invalid user jenkins from 10.30.104.4 port 53724 Apr 2 09:16:48 prd-ubuntu1804-builder-4c-4g-3006 sshd[1561]: Received disconnect from 10.30.104.4 port 53724:11: Closed due to user request. [preauth] Apr 2 09:16:48 prd-ubuntu1804-builder-4c-4g-3006 sshd[1561]: Disconnected from invalid user jenkins 10.30.104.4 port 53724 [preauth] Apr 2 09:16:51 prd-ubuntu1804-builder-4c-4g-3006 sshd[1579]: Invalid user jenkins from 10.30.104.4 port 53736 Apr 2 09:16:51 prd-ubuntu1804-builder-4c-4g-3006 sshd[1579]: Received disconnect from 10.30.104.4 port 53736:11: Closed due to user request. [preauth] Apr 2 09:16:51 prd-ubuntu1804-builder-4c-4g-3006 sshd[1579]: Disconnected from invalid user jenkins 10.30.104.4 port 53736 [preauth] Apr 2 09:16:53 prd-ubuntu1804-builder-4c-4g-3006 sshd[1581]: Invalid user jenkins from 10.30.104.4 port 53746 Apr 2 09:16:53 prd-ubuntu1804-builder-4c-4g-3006 sshd[1581]: Received disconnect from 10.30.104.4 port 53746:11: Closed due to user request. [preauth] Apr 2 09:16:53 prd-ubuntu1804-builder-4c-4g-3006 sshd[1581]: Disconnected from invalid user jenkins 10.30.104.4 port 53746 [preauth] Apr 2 09:16:55 prd-ubuntu1804-builder-4c-4g-3006 sshd[1583]: Invalid user jenkins from 10.30.104.4 port 53754 Apr 2 09:17:00 prd-ubuntu1804-builder-4c-4g-3006 sshd[1583]: Received disconnect from 10.30.104.4 port 53754:11: Closed due to user request. [preauth] Apr 2 09:17:00 prd-ubuntu1804-builder-4c-4g-3006 sshd[1583]: Disconnected from invalid user jenkins 10.30.104.4 port 53754 [preauth] Apr 2 09:17:02 prd-ubuntu1804-builder-4c-4g-3006 CRON[1610]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 2 09:17:02 prd-ubuntu1804-builder-4c-4g-3006 CRON[1611]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 2 09:17:02 prd-ubuntu1804-builder-4c-4g-3006 CRON[1610]: pam_unix(cron:session): session closed for user root Apr 2 09:17:02 prd-ubuntu1804-builder-4c-4g-3006 CRON[1611]: pam_unix(cron:session): session closed for user root Apr 2 09:17:02 prd-ubuntu1804-builder-4c-4g-3006 sshd[1622]: Invalid user jenkins from 10.30.104.4 port 53794 Apr 2 09:17:02 prd-ubuntu1804-builder-4c-4g-3006 sshd[1622]: Received disconnect from 10.30.104.4 port 53794:11: Closed due to user request. [preauth] Apr 2 09:17:02 prd-ubuntu1804-builder-4c-4g-3006 sshd[1622]: Disconnected from invalid user jenkins 10.30.104.4 port 53794 [preauth] Apr 2 09:17:05 prd-ubuntu1804-builder-4c-4g-3006 sshd[1624]: Invalid user jenkins from 10.30.104.4 port 53806 Apr 2 09:17:05 prd-ubuntu1804-builder-4c-4g-3006 sshd[1624]: Received disconnect from 10.30.104.4 port 53806:11: Closed due to user request. [preauth] Apr 2 09:17:05 prd-ubuntu1804-builder-4c-4g-3006 sshd[1624]: Disconnected from invalid user jenkins 10.30.104.4 port 53806 [preauth] Apr 2 09:17:07 prd-ubuntu1804-builder-4c-4g-3006 sshd[1626]: Invalid user jenkins from 10.30.104.4 port 53816 Apr 2 09:17:10 prd-ubuntu1804-builder-4c-4g-3006 sshd[1626]: Received disconnect from 10.30.104.4 port 53816:11: Closed due to user request. [preauth] Apr 2 09:17:10 prd-ubuntu1804-builder-4c-4g-3006 sshd[1626]: Disconnected from invalid user jenkins 10.30.104.4 port 53816 [preauth] Apr 2 09:17:11 prd-ubuntu1804-builder-4c-4g-3006 sshd[1641]: Invalid user jenkins from 10.30.104.4 port 53834 Apr 2 09:17:11 prd-ubuntu1804-builder-4c-4g-3006 sshd[1641]: Received disconnect from 10.30.104.4 port 53834:11: Closed due to user request. [preauth] Apr 2 09:17:11 prd-ubuntu1804-builder-4c-4g-3006 sshd[1641]: Disconnected from invalid user jenkins 10.30.104.4 port 53834 [preauth] Apr 2 09:17:13 prd-ubuntu1804-builder-4c-4g-3006 sshd[1653]: Invalid user jenkins from 10.30.104.4 port 53844 Apr 2 09:17:13 prd-ubuntu1804-builder-4c-4g-3006 sshd[1653]: Received disconnect from 10.30.104.4 port 53844:11: Closed due to user request. [preauth] Apr 2 09:17:13 prd-ubuntu1804-builder-4c-4g-3006 sshd[1653]: Disconnected from invalid user jenkins 10.30.104.4 port 53844 [preauth] Apr 2 09:17:15 prd-ubuntu1804-builder-4c-4g-3006 sshd[1658]: Invalid user jenkins from 10.30.104.4 port 53852 Apr 2 09:17:16 prd-ubuntu1804-builder-4c-4g-3006 sshd[1658]: Received disconnect from 10.30.104.4 port 53852:11: Closed due to user request. [preauth] Apr 2 09:17:16 prd-ubuntu1804-builder-4c-4g-3006 sshd[1658]: Disconnected from invalid user jenkins 10.30.104.4 port 53852 [preauth] Apr 2 09:17:18 prd-ubuntu1804-builder-4c-4g-3006 sshd[1660]: Invalid user jenkins from 10.30.104.4 port 53862 Apr 2 09:17:18 prd-ubuntu1804-builder-4c-4g-3006 sshd[1660]: Received disconnect from 10.30.104.4 port 53862:11: Closed due to user request. [preauth] Apr 2 09:17:18 prd-ubuntu1804-builder-4c-4g-3006 sshd[1660]: Disconnected from invalid user jenkins 10.30.104.4 port 53862 [preauth] Apr 2 09:17:20 prd-ubuntu1804-builder-4c-4g-3006 sshd[1662]: Invalid user jenkins from 10.30.104.4 port 53874 Apr 2 09:17:20 prd-ubuntu1804-builder-4c-4g-3006 sshd[1662]: Received disconnect from 10.30.104.4 port 53874:11: Closed due to user request. [preauth] Apr 2 09:17:20 prd-ubuntu1804-builder-4c-4g-3006 sshd[1662]: Disconnected from invalid user jenkins 10.30.104.4 port 53874 [preauth] Apr 2 09:17:22 prd-ubuntu1804-builder-4c-4g-3006 sshd[1664]: Invalid user jenkins from 10.30.104.4 port 53886 Apr 2 09:17:22 prd-ubuntu1804-builder-4c-4g-3006 sshd[1664]: Received disconnect from 10.30.104.4 port 53886:11: Closed due to user request. [preauth] Apr 2 09:17:22 prd-ubuntu1804-builder-4c-4g-3006 sshd[1664]: Disconnected from invalid user jenkins 10.30.104.4 port 53886 [preauth] Apr 2 09:17:24 prd-ubuntu1804-builder-4c-4g-3006 sshd[1666]: Invalid user jenkins from 10.30.104.4 port 53890 Apr 2 09:17:24 prd-ubuntu1804-builder-4c-4g-3006 sshd[1666]: Received disconnect from 10.30.104.4 port 53890:11: Closed due to user request. [preauth] Apr 2 09:17:24 prd-ubuntu1804-builder-4c-4g-3006 sshd[1666]: Disconnected from invalid user jenkins 10.30.104.4 port 53890 [preauth] Apr 2 09:17:24 prd-ubuntu1804-builder-4c-4g-3006 useradd[1673]: new group: name=jenkins, GID=1001 Apr 2 09:17:24 prd-ubuntu1804-builder-4c-4g-3006 useradd[1673]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 2 09:17:26 prd-ubuntu1804-builder-4c-4g-3006 sshd[1741]: Accepted publickey for jenkins from 10.30.104.4 port 53898 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Apr 2 09:17:26 prd-ubuntu1804-builder-4c-4g-3006 sshd[1741]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 2 09:17:26 prd-ubuntu1804-builder-4c-4g-3006 systemd-logind[1104]: New session 3 of user jenkins. Apr 2 09:17:26 prd-ubuntu1804-builder-4c-4g-3006 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 2 09:18:01 prd-ubuntu1804-builder-4c-4g-3006 CRON[2444]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 2 09:18:01 prd-ubuntu1804-builder-4c-4g-3006 CRON[2444]: pam_unix(cron:session): session closed for user root Apr 2 09:19:01 prd-ubuntu1804-builder-4c-4g-3006 CRON[3238]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 2 09:19:01 prd-ubuntu1804-builder-4c-4g-3006 CRON[3238]: pam_unix(cron:session): session closed for user root Apr 2 09:19:28 prd-ubuntu1804-builder-4c-4g-3006 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-master-pre-commit-lint ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 2 09:19:28 prd-ubuntu1804-builder-4c-4g-3006 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)