Feb 1 05:01:51 prd-centos8-builder-2c-4g-4640 polkitd[902]: Loading rules from directory /etc/polkit-1/rules.d Feb 1 05:01:51 prd-centos8-builder-2c-4g-4640 polkitd[902]: Loading rules from directory /usr/share/polkit-1/rules.d Feb 1 05:01:51 prd-centos8-builder-2c-4g-4640 polkitd[902]: Finished loading, compiling and executing 3 rules Feb 1 05:01:51 prd-centos8-builder-2c-4g-4640 polkitd[902]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Feb 1 05:01:53 prd-centos8-builder-2c-4g-4640 sshd[959]: Server listening on 0.0.0.0 port 22. Feb 1 05:01:53 prd-centos8-builder-2c-4g-4640 sshd[959]: Server listening on :: port 22. Feb 1 05:01:59 prd-centos8-builder-2c-4g-4640 sshd[2517]: error: kex_exchange_identification: Connection closed by remote host Feb 1 05:02:02 prd-centos8-builder-2c-4g-4640 sshd[3213]: Invalid user jenkins from 10.32.4.5 port 50896 Feb 1 05:02:03 prd-centos8-builder-2c-4g-4640 sshd[3213]: Received disconnect from 10.32.4.5 port 50896:11: Closed due to user request. [preauth] Feb 1 05:02:03 prd-centos8-builder-2c-4g-4640 sshd[3213]: Disconnected from invalid user jenkins 10.32.4.5 port 50896 [preauth] Feb 1 05:02:04 prd-centos8-builder-2c-4g-4640 sshd[3854]: Invalid user jenkins from 10.32.4.5 port 50900 Feb 1 05:02:04 prd-centos8-builder-2c-4g-4640 sshd[3854]: Received disconnect from 10.32.4.5 port 50900:11: Closed due to user request. [preauth] Feb 1 05:02:04 prd-centos8-builder-2c-4g-4640 sshd[3854]: Disconnected from invalid user jenkins 10.32.4.5 port 50900 [preauth] Feb 1 05:02:07 prd-centos8-builder-2c-4g-4640 sshd[4435]: Invalid user jenkins from 10.32.4.5 port 50902 Feb 1 05:02:07 prd-centos8-builder-2c-4g-4640 sshd[4435]: Received disconnect from 10.32.4.5 port 50902:11: Closed due to user request. [preauth] Feb 1 05:02:07 prd-centos8-builder-2c-4g-4640 sshd[4435]: Disconnected from invalid user jenkins 10.32.4.5 port 50902 [preauth] Feb 1 05:02:09 prd-centos8-builder-2c-4g-4640 sshd[4717]: Invalid user jenkins from 10.32.4.5 port 50904 Feb 1 05:02:09 prd-centos8-builder-2c-4g-4640 sshd[4717]: Received disconnect from 10.32.4.5 port 50904:11: Closed due to user request. [preauth] Feb 1 05:02:09 prd-centos8-builder-2c-4g-4640 sshd[4717]: Disconnected from invalid user jenkins 10.32.4.5 port 50904 [preauth] Feb 1 05:02:11 prd-centos8-builder-2c-4g-4640 sshd[4756]: Invalid user jenkins from 10.32.4.5 port 50906 Feb 1 05:02:11 prd-centos8-builder-2c-4g-4640 sshd[4756]: Received disconnect from 10.32.4.5 port 50906:11: Closed due to user request. [preauth] Feb 1 05:02:11 prd-centos8-builder-2c-4g-4640 sshd[4756]: Disconnected from invalid user jenkins 10.32.4.5 port 50906 [preauth] Feb 1 05:02:13 prd-centos8-builder-2c-4g-4640 sshd[4758]: Invalid user jenkins from 10.32.4.5 port 50908 Feb 1 05:02:13 prd-centos8-builder-2c-4g-4640 sshd[4758]: Received disconnect from 10.32.4.5 port 50908:11: Closed due to user request. [preauth] Feb 1 05:02:13 prd-centos8-builder-2c-4g-4640 sshd[4758]: Disconnected from invalid user jenkins 10.32.4.5 port 50908 [preauth] Feb 1 05:02:16 prd-centos8-builder-2c-4g-4640 sshd[4760]: Invalid user jenkins from 10.32.4.5 port 50912 Feb 1 05:02:16 prd-centos8-builder-2c-4g-4640 sshd[4760]: Received disconnect from 10.32.4.5 port 50912:11: Closed due to user request. [preauth] Feb 1 05:02:16 prd-centos8-builder-2c-4g-4640 sshd[4760]: Disconnected from invalid user jenkins 10.32.4.5 port 50912 [preauth] Feb 1 05:02:18 prd-centos8-builder-2c-4g-4640 sshd[4762]: Invalid user jenkins from 10.32.4.5 port 50914 Feb 1 05:02:18 prd-centos8-builder-2c-4g-4640 sshd[4762]: Received disconnect from 10.32.4.5 port 50914:11: Closed due to user request. [preauth] Feb 1 05:02:18 prd-centos8-builder-2c-4g-4640 sshd[4762]: Disconnected from invalid user jenkins 10.32.4.5 port 50914 [preauth] Feb 1 05:02:20 prd-centos8-builder-2c-4g-4640 sshd[4799]: Invalid user jenkins from 10.32.4.5 port 50918 Feb 1 05:02:20 prd-centos8-builder-2c-4g-4640 sshd[4799]: Received disconnect from 10.32.4.5 port 50918:11: Closed due to user request. [preauth] Feb 1 05:02:20 prd-centos8-builder-2c-4g-4640 sshd[4799]: Disconnected from invalid user jenkins 10.32.4.5 port 50918 [preauth] Feb 1 05:02:22 prd-centos8-builder-2c-4g-4640 sshd[4900]: Invalid user jenkins from 10.32.4.5 port 50920 Feb 1 05:02:22 prd-centos8-builder-2c-4g-4640 sshd[4900]: Received disconnect from 10.32.4.5 port 50920:11: Closed due to user request. [preauth] Feb 1 05:02:22 prd-centos8-builder-2c-4g-4640 sshd[4900]: Disconnected from invalid user jenkins 10.32.4.5 port 50920 [preauth] Feb 1 05:02:24 prd-centos8-builder-2c-4g-4640 sshd[4904]: Invalid user jenkins from 10.32.4.5 port 50922 Feb 1 05:02:24 prd-centos8-builder-2c-4g-4640 sshd[4904]: Received disconnect from 10.32.4.5 port 50922:11: Closed due to user request. [preauth] Feb 1 05:02:24 prd-centos8-builder-2c-4g-4640 sshd[4904]: Disconnected from invalid user jenkins 10.32.4.5 port 50922 [preauth] Feb 1 05:02:25 prd-centos8-builder-2c-4g-4640 useradd[4920]: new group: name=jenkins, GID=1001 Feb 1 05:02:25 prd-centos8-builder-2c-4g-4640 useradd[4920]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 1 05:02:26 prd-centos8-builder-2c-4g-4640 usermod[4929]: add 'jenkins' to group 'mock' Feb 1 05:02:26 prd-centos8-builder-2c-4g-4640 usermod[4929]: add 'jenkins' to shadow group 'mock' Feb 1 05:02:27 prd-centos8-builder-2c-4g-4640 sshd[4962]: Accepted publickey for jenkins from 10.32.4.5 port 50924 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Feb 1 05:02:27 prd-centos8-builder-2c-4g-4640 systemd[4968]: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 1 05:02:27 prd-centos8-builder-2c-4g-4640 sshd[4962]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 1 05:05:44 prd-centos8-builder-2c-4g-4640 sudo[6317]: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-packer-merge-ubuntu-18.04-builder ; USER=root ; COMMAND=/bin/cp /var/log/secure /tmp