Jan 1 03:03:59 prd-centos8-builder-1c-1g-2500 polkitd[870]: Loading rules from directory /etc/polkit-1/rules.d Jan 1 03:03:59 prd-centos8-builder-1c-1g-2500 polkitd[870]: Loading rules from directory /usr/share/polkit-1/rules.d Jan 1 03:03:59 prd-centos8-builder-1c-1g-2500 polkitd[870]: Finished loading, compiling and executing 3 rules Jan 1 03:03:59 prd-centos8-builder-1c-1g-2500 polkitd[870]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jan 1 03:04:01 prd-centos8-builder-1c-1g-2500 sshd[934]: Server listening on 0.0.0.0 port 22. Jan 1 03:04:01 prd-centos8-builder-1c-1g-2500 sshd[934]: Server listening on :: port 22. Jan 1 03:04:05 prd-centos8-builder-1c-1g-2500 sshd[1210]: error: kex_exchange_identification: Connection closed by remote host Jan 1 03:04:10 prd-centos8-builder-1c-1g-2500 sshd[3311]: Invalid user jenkins from 10.32.4.5 port 50840 Jan 1 03:04:11 prd-centos8-builder-1c-1g-2500 sshd[3311]: Received disconnect from 10.32.4.5 port 50840:11: Closed due to user request. [preauth] Jan 1 03:04:11 prd-centos8-builder-1c-1g-2500 sshd[3311]: Disconnected from invalid user jenkins 10.32.4.5 port 50840 [preauth] Jan 1 03:04:12 prd-centos8-builder-1c-1g-2500 sshd[4231]: Invalid user jenkins from 10.32.4.5 port 50842 Jan 1 03:04:13 prd-centos8-builder-1c-1g-2500 sshd[4231]: Received disconnect from 10.32.4.5 port 50842:11: Closed due to user request. [preauth] Jan 1 03:04:13 prd-centos8-builder-1c-1g-2500 sshd[4231]: Disconnected from invalid user jenkins 10.32.4.5 port 50842 [preauth] Jan 1 03:04:15 prd-centos8-builder-1c-1g-2500 sshd[4651]: Invalid user jenkins from 10.32.4.5 port 50846 Jan 1 03:04:15 prd-centos8-builder-1c-1g-2500 sshd[4651]: Received disconnect from 10.32.4.5 port 50846:11: Closed due to user request. [preauth] Jan 1 03:04:15 prd-centos8-builder-1c-1g-2500 sshd[4651]: Disconnected from invalid user jenkins 10.32.4.5 port 50846 [preauth] Jan 1 03:04:17 prd-centos8-builder-1c-1g-2500 sshd[4690]: Invalid user jenkins from 10.32.4.5 port 50848 Jan 1 03:04:17 prd-centos8-builder-1c-1g-2500 sshd[4690]: Received disconnect from 10.32.4.5 port 50848:11: Closed due to user request. [preauth] Jan 1 03:04:17 prd-centos8-builder-1c-1g-2500 sshd[4690]: Disconnected from invalid user jenkins 10.32.4.5 port 50848 [preauth] Jan 1 03:04:19 prd-centos8-builder-1c-1g-2500 sshd[4692]: Invalid user jenkins from 10.32.4.5 port 50854 Jan 1 03:04:19 prd-centos8-builder-1c-1g-2500 sshd[4692]: Received disconnect from 10.32.4.5 port 50854:11: Closed due to user request. [preauth] Jan 1 03:04:19 prd-centos8-builder-1c-1g-2500 sshd[4692]: Disconnected from invalid user jenkins 10.32.4.5 port 50854 [preauth] Jan 1 03:04:21 prd-centos8-builder-1c-1g-2500 sshd[4694]: Invalid user jenkins from 10.32.4.5 port 50856 Jan 1 03:04:21 prd-centos8-builder-1c-1g-2500 sshd[4694]: Received disconnect from 10.32.4.5 port 50856:11: Closed due to user request. [preauth] Jan 1 03:04:21 prd-centos8-builder-1c-1g-2500 sshd[4694]: Disconnected from invalid user jenkins 10.32.4.5 port 50856 [preauth] Jan 1 03:04:24 prd-centos8-builder-1c-1g-2500 sshd[4696]: Invalid user jenkins from 10.32.4.5 port 50858 Jan 1 03:04:24 prd-centos8-builder-1c-1g-2500 sshd[4696]: Received disconnect from 10.32.4.5 port 50858:11: Closed due to user request. [preauth] Jan 1 03:04:24 prd-centos8-builder-1c-1g-2500 sshd[4696]: Disconnected from invalid user jenkins 10.32.4.5 port 50858 [preauth] Jan 1 03:04:26 prd-centos8-builder-1c-1g-2500 sshd[4720]: Invalid user jenkins from 10.32.4.5 port 50860 Jan 1 03:04:26 prd-centos8-builder-1c-1g-2500 sshd[4720]: Received disconnect from 10.32.4.5 port 50860:11: Closed due to user request. [preauth] Jan 1 03:04:26 prd-centos8-builder-1c-1g-2500 sshd[4720]: Disconnected from invalid user jenkins 10.32.4.5 port 50860 [preauth] Jan 1 03:04:28 prd-centos8-builder-1c-1g-2500 sshd[4811]: Invalid user jenkins from 10.32.4.5 port 50862 Jan 1 03:04:28 prd-centos8-builder-1c-1g-2500 sshd[4811]: Received disconnect from 10.32.4.5 port 50862:11: Closed due to user request. [preauth] Jan 1 03:04:28 prd-centos8-builder-1c-1g-2500 sshd[4811]: Disconnected from invalid user jenkins 10.32.4.5 port 50862 [preauth] Jan 1 03:04:30 prd-centos8-builder-1c-1g-2500 sshd[4816]: Invalid user jenkins from 10.32.4.5 port 50866 Jan 1 03:04:30 prd-centos8-builder-1c-1g-2500 sshd[4816]: Received disconnect from 10.32.4.5 port 50866:11: Closed due to user request. [preauth] Jan 1 03:04:30 prd-centos8-builder-1c-1g-2500 sshd[4816]: Disconnected from invalid user jenkins 10.32.4.5 port 50866 [preauth] Jan 1 03:04:32 prd-centos8-builder-1c-1g-2500 sshd[4828]: Invalid user jenkins from 10.32.4.5 port 50868 Jan 1 03:04:32 prd-centos8-builder-1c-1g-2500 sshd[4828]: Received disconnect from 10.32.4.5 port 50868:11: Closed due to user request. [preauth] Jan 1 03:04:32 prd-centos8-builder-1c-1g-2500 sshd[4828]: Disconnected from invalid user jenkins 10.32.4.5 port 50868 [preauth] Jan 1 03:04:34 prd-centos8-builder-1c-1g-2500 sshd[4847]: Invalid user jenkins from 10.32.4.5 port 50872 Jan 1 03:04:35 prd-centos8-builder-1c-1g-2500 sshd[4847]: Received disconnect from 10.32.4.5 port 50872:11: Closed due to user request. [preauth] Jan 1 03:04:35 prd-centos8-builder-1c-1g-2500 sshd[4847]: Disconnected from invalid user jenkins 10.32.4.5 port 50872 [preauth] Jan 1 03:04:35 prd-centos8-builder-1c-1g-2500 useradd[4857]: new group: name=jenkins, GID=1001 Jan 1 03:04:35 prd-centos8-builder-1c-1g-2500 useradd[4857]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 1 03:04:35 prd-centos8-builder-1c-1g-2500 usermod[4866]: add 'jenkins' to group 'mock' Jan 1 03:04:35 prd-centos8-builder-1c-1g-2500 usermod[4866]: add 'jenkins' to shadow group 'mock' Jan 1 03:04:37 prd-centos8-builder-1c-1g-2500 sshd[4903]: Accepted publickey for jenkins from 10.32.4.5 port 50880 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jan 1 03:04:37 prd-centos8-builder-1c-1g-2500 systemd[4907]: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 1 03:04:37 prd-centos8-builder-1c-1g-2500 sshd[4903]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 1 03:09:29 prd-centos8-builder-1c-1g-2500 sudo[8245]: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/bin/cp /var/log/secure /tmp