Apr 9 08:43:46 prd-ubuntu1804-builder-4c-4g-21700 passwd[953]: password for 'ubuntu' changed by 'root' Apr 9 08:43:46 prd-ubuntu1804-builder-4c-4g-21700 systemd-logind[992]: Watching system buttons on /dev/input/event0 (Power Button) Apr 9 08:43:46 prd-ubuntu1804-builder-4c-4g-21700 systemd-logind[992]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 9 08:43:46 prd-ubuntu1804-builder-4c-4g-21700 systemd-logind[992]: New seat seat0. Apr 9 08:43:46 prd-ubuntu1804-builder-4c-4g-21700 sshd[1038]: Server listening on 0.0.0.0 port 22. Apr 9 08:43:46 prd-ubuntu1804-builder-4c-4g-21700 sshd[1038]: Server listening on :: port 22. Apr 9 08:43:50 prd-ubuntu1804-builder-4c-4g-21700 sshd[1345]: Did not receive identification string from 10.30.104.4 port 56514 Apr 9 08:43:53 prd-ubuntu1804-builder-4c-4g-21700 sshd[1377]: Invalid user jenkins from 10.30.104.4 port 56524 Apr 9 08:43:54 prd-ubuntu1804-builder-4c-4g-21700 sshd[1377]: Received disconnect from 10.30.104.4 port 56524:11: Closed due to user request. [preauth] Apr 9 08:43:54 prd-ubuntu1804-builder-4c-4g-21700 sshd[1377]: Disconnected from invalid user jenkins 10.30.104.4 port 56524 [preauth] Apr 9 08:43:56 prd-ubuntu1804-builder-4c-4g-21700 sshd[1381]: Invalid user jenkins from 10.30.104.4 port 56534 Apr 9 08:43:56 prd-ubuntu1804-builder-4c-4g-21700 sshd[1381]: Received disconnect from 10.30.104.4 port 56534:11: Closed due to user request. [preauth] Apr 9 08:43:56 prd-ubuntu1804-builder-4c-4g-21700 sshd[1381]: Disconnected from invalid user jenkins 10.30.104.4 port 56534 [preauth] Apr 9 08:43:58 prd-ubuntu1804-builder-4c-4g-21700 sshd[1383]: Invalid user jenkins from 10.30.104.4 port 56542 Apr 9 08:43:58 prd-ubuntu1804-builder-4c-4g-21700 sshd[1383]: Received disconnect from 10.30.104.4 port 56542:11: Closed due to user request. [preauth] Apr 9 08:43:58 prd-ubuntu1804-builder-4c-4g-21700 sshd[1383]: Disconnected from invalid user jenkins 10.30.104.4 port 56542 [preauth] Apr 9 08:44:00 prd-ubuntu1804-builder-4c-4g-21700 sshd[1385]: Invalid user jenkins from 10.30.104.4 port 56544 Apr 9 08:44:00 prd-ubuntu1804-builder-4c-4g-21700 sshd[1385]: Received disconnect from 10.30.104.4 port 56544:11: Closed due to user request. [preauth] Apr 9 08:44:00 prd-ubuntu1804-builder-4c-4g-21700 sshd[1385]: Disconnected from invalid user jenkins 10.30.104.4 port 56544 [preauth] Apr 9 08:44:01 prd-ubuntu1804-builder-4c-4g-21700 CRON[1387]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 9 08:44:01 prd-ubuntu1804-builder-4c-4g-21700 CRON[1387]: pam_unix(cron:session): session closed for user root Apr 9 08:44:02 prd-ubuntu1804-builder-4c-4g-21700 sshd[1396]: Invalid user jenkins from 10.30.104.4 port 56546 Apr 9 08:44:02 prd-ubuntu1804-builder-4c-4g-21700 sshd[1396]: Received disconnect from 10.30.104.4 port 56546:11: Closed due to user request. [preauth] Apr 9 08:44:02 prd-ubuntu1804-builder-4c-4g-21700 sshd[1396]: Disconnected from invalid user jenkins 10.30.104.4 port 56546 [preauth] Apr 9 08:44:04 prd-ubuntu1804-builder-4c-4g-21700 sshd[1398]: Invalid user jenkins from 10.30.104.4 port 56552 Apr 9 08:44:07 prd-ubuntu1804-builder-4c-4g-21700 sshd[1398]: Received disconnect from 10.30.104.4 port 56552:11: Closed due to user request. [preauth] Apr 9 08:44:07 prd-ubuntu1804-builder-4c-4g-21700 sshd[1398]: Disconnected from invalid user jenkins 10.30.104.4 port 56552 [preauth] Apr 9 08:44:09 prd-ubuntu1804-builder-4c-4g-21700 sshd[1400]: Invalid user jenkins from 10.30.104.4 port 56556 Apr 9 08:44:09 prd-ubuntu1804-builder-4c-4g-21700 sshd[1400]: Received disconnect from 10.30.104.4 port 56556:11: Closed due to user request. [preauth] Apr 9 08:44:09 prd-ubuntu1804-builder-4c-4g-21700 sshd[1400]: Disconnected from invalid user jenkins 10.30.104.4 port 56556 [preauth] Apr 9 08:44:10 prd-ubuntu1804-builder-4c-4g-21700 useradd[1420]: new group: name=jenkins, GID=1001 Apr 9 08:44:10 prd-ubuntu1804-builder-4c-4g-21700 useradd[1420]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 9 08:44:11 prd-ubuntu1804-builder-4c-4g-21700 sshd[1453]: Accepted publickey for jenkins from 10.30.104.4 port 56562 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Apr 9 08:44:11 prd-ubuntu1804-builder-4c-4g-21700 sshd[1453]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 9 08:44:11 prd-ubuntu1804-builder-4c-4g-21700 systemd-logind[992]: New session 2 of user jenkins. Apr 9 08:44:11 prd-ubuntu1804-builder-4c-4g-21700 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 9 08:45:02 prd-ubuntu1804-builder-4c-4g-21700 CRON[2395]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 9 08:45:02 prd-ubuntu1804-builder-4c-4g-21700 CRON[2395]: pam_unix(cron:session): session closed for user root Apr 9 08:46:01 prd-ubuntu1804-builder-4c-4g-21700 CRON[3101]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 9 08:46:01 prd-ubuntu1804-builder-4c-4g-21700 CRON[3101]: pam_unix(cron:session): session closed for user root Apr 9 08:46:31 prd-ubuntu1804-builder-4c-4g-21700 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oom-readiness-master-yaml-lint ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 9 08:46:31 prd-ubuntu1804-builder-4c-4g-21700 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)