Nov 9 03:24:15 prd-ubuntu2204-docker-4c-4g-7259 sshd[925]: error: kex_exchange_identification: Connection closed by remote host Nov 9 03:24:15 prd-ubuntu2204-docker-4c-4g-7259 sshd[925]: Connection closed by 10.30.168.15 port 45652 Nov 9 03:24:21 prd-ubuntu2204-docker-4c-4g-7259 sshd[932]: Invalid user jenkins from 10.30.168.15 port 45658 Nov 9 03:24:22 prd-ubuntu2204-docker-4c-4g-7259 sshd[932]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 9 03:24:22 prd-ubuntu2204-docker-4c-4g-7259 sshd[932]: Received disconnect from 10.30.168.15 port 45658:11: Closed due to user request. [preauth] Nov 9 03:24:22 prd-ubuntu2204-docker-4c-4g-7259 sshd[932]: Disconnected from invalid user jenkins 10.30.168.15 port 45658 [preauth] Nov 9 03:24:24 prd-ubuntu2204-docker-4c-4g-7259 sshd[934]: Invalid user jenkins from 10.30.168.15 port 45660 Nov 9 03:24:24 prd-ubuntu2204-docker-4c-4g-7259 sshd[934]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 9 03:24:24 prd-ubuntu2204-docker-4c-4g-7259 sshd[934]: Received disconnect from 10.30.168.15 port 45660:11: Closed due to user request. [preauth] Nov 9 03:24:24 prd-ubuntu2204-docker-4c-4g-7259 sshd[934]: Disconnected from invalid user jenkins 10.30.168.15 port 45660 [preauth] Nov 9 03:24:27 prd-ubuntu2204-docker-4c-4g-7259 sshd[936]: Invalid user jenkins from 10.30.168.15 port 45664 Nov 9 03:24:27 prd-ubuntu2204-docker-4c-4g-7259 sshd[936]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 9 03:24:27 prd-ubuntu2204-docker-4c-4g-7259 sshd[936]: Received disconnect from 10.30.168.15 port 45664:11: Closed due to user request. [preauth] Nov 9 03:24:27 prd-ubuntu2204-docker-4c-4g-7259 sshd[936]: Disconnected from invalid user jenkins 10.30.168.15 port 45664 [preauth] Nov 9 03:24:30 prd-ubuntu2204-docker-4c-4g-7259 sshd[1209]: Invalid user jenkins from 10.30.168.15 port 45668 Nov 9 03:24:30 prd-ubuntu2204-docker-4c-4g-7259 sshd[1209]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 9 03:24:30 prd-ubuntu2204-docker-4c-4g-7259 sshd[1209]: Received disconnect from 10.30.168.15 port 45668:11: Closed due to user request. [preauth] Nov 9 03:24:30 prd-ubuntu2204-docker-4c-4g-7259 sshd[1209]: Disconnected from invalid user jenkins 10.30.168.15 port 45668 [preauth] Nov 9 03:24:33 prd-ubuntu2204-docker-4c-4g-7259 sshd[1320]: Invalid user jenkins from 10.30.168.15 port 45672 Nov 9 03:24:33 prd-ubuntu2204-docker-4c-4g-7259 sshd[1320]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 9 03:24:33 prd-ubuntu2204-docker-4c-4g-7259 sshd[1320]: Received disconnect from 10.30.168.15 port 45672:11: Closed due to user request. [preauth] Nov 9 03:24:33 prd-ubuntu2204-docker-4c-4g-7259 sshd[1320]: Disconnected from invalid user jenkins 10.30.168.15 port 45672 [preauth] Nov 9 03:24:36 prd-ubuntu2204-docker-4c-4g-7259 sshd[1322]: Invalid user jenkins from 10.30.168.15 port 45674 Nov 9 03:24:36 prd-ubuntu2204-docker-4c-4g-7259 sshd[1322]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 9 03:24:36 prd-ubuntu2204-docker-4c-4g-7259 sshd[1322]: Received disconnect from 10.30.168.15 port 45674:11: Closed due to user request. [preauth] Nov 9 03:24:36 prd-ubuntu2204-docker-4c-4g-7259 sshd[1322]: Disconnected from invalid user jenkins 10.30.168.15 port 45674 [preauth] Nov 9 03:24:37 prd-ubuntu2204-docker-4c-4g-7259 useradd[1351]: new group: name=jenkins, GID=1001 Nov 9 03:24:37 prd-ubuntu2204-docker-4c-4g-7259 useradd[1351]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 9 03:24:37 prd-ubuntu2204-docker-4c-4g-7259 usermod[1360]: add 'jenkins' to group 'docker' Nov 9 03:24:37 prd-ubuntu2204-docker-4c-4g-7259 usermod[1360]: add 'jenkins' to shadow group 'docker' Nov 9 03:24:39 prd-ubuntu2204-docker-4c-4g-7259 sshd[1394]: Accepted publickey for jenkins from 10.30.168.15 port 45676 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 9 03:24:39 prd-ubuntu2204-docker-4c-4g-7259 sshd[1394]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 9 03:24:39 prd-ubuntu2204-docker-4c-4g-7259 systemd-logind[724]: New session 1 of user jenkins. Nov 9 03:24:39 prd-ubuntu2204-docker-4c-4g-7259 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 9 03:25:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[1839]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:25:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[1839]: pam_unix(cron:session): session closed for user root Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session closed for user root Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session closed for user root Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session closed for user root Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session closed for user root Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session closed for user root Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Nov 9 03:25:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: pam_unix(sudo:session): session closed for user root Nov 9 03:26:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[2017]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:26:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[2017]: pam_unix(cron:session): session closed for user root Nov 9 03:27:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[2412]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:27:02 prd-ubuntu2204-docker-4c-4g-7259 CRON[2412]: pam_unix(cron:session): session closed for user root Nov 9 03:28:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[3266]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:28:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[3266]: pam_unix(cron:session): session closed for user root Nov 9 03:29:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[4517]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:29:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[4517]: pam_unix(cron:session): session closed for user root Nov 9 03:30:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[6008]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:30:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[6009]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:30:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[6009]: pam_unix(cron:session): session closed for user root Nov 9 03:30:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[6008]: pam_unix(cron:session): session closed for user root Nov 9 03:31:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[7126]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:31:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[7126]: pam_unix(cron:session): session closed for user root Nov 9 03:32:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8008]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:32:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8008]: pam_unix(cron:session): session closed for user root Nov 9 03:33:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8018]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:33:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8018]: pam_unix(cron:session): session closed for user root Nov 9 03:34:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8024]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:34:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8024]: pam_unix(cron:session): session closed for user root Nov 9 03:35:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8033]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 9 03:35:01 prd-ubuntu2204-docker-4c-4g-7259 CRON[8033]: pam_unix(cron:session): session closed for user root Nov 9 03:35:51 prd-ubuntu2204-docker-4c-4g-7259 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp