Aug 5 02:28:18 prd-ubuntu2204-builder-2c-2g-2227 passwd[656]: password for 'ubuntu' changed by 'root' Aug 5 02:28:18 prd-ubuntu2204-builder-2c-2g-2227 sshd[731]: Server listening on 0.0.0.0 port 22. Aug 5 02:28:18 prd-ubuntu2204-builder-2c-2g-2227 sshd[731]: Server listening on :: port 22. Aug 5 02:28:18 prd-ubuntu2204-builder-2c-2g-2227 systemd-logind[687]: New seat seat0. Aug 5 02:28:18 prd-ubuntu2204-builder-2c-2g-2227 systemd-logind[687]: Watching system buttons on /dev/input/event0 (Power Button) Aug 5 02:28:18 prd-ubuntu2204-builder-2c-2g-2227 systemd-logind[687]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 5 02:28:21 prd-ubuntu2204-builder-2c-2g-2227 sshd[918]: error: kex_exchange_identification: Connection closed by remote host Aug 5 02:28:21 prd-ubuntu2204-builder-2c-2g-2227 sshd[918]: Connection closed by 10.30.168.15 port 35444 Aug 5 02:28:25 prd-ubuntu2204-builder-2c-2g-2227 sshd[925]: Invalid user jenkins from 10.30.168.15 port 35450 Aug 5 02:28:25 prd-ubuntu2204-builder-2c-2g-2227 sshd[925]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Aug 5 02:28:25 prd-ubuntu2204-builder-2c-2g-2227 sshd[925]: Received disconnect from 10.30.168.15 port 35450:11: Closed due to user request. [preauth] Aug 5 02:28:25 prd-ubuntu2204-builder-2c-2g-2227 sshd[925]: Disconnected from invalid user jenkins 10.30.168.15 port 35450 [preauth] Aug 5 02:28:28 prd-ubuntu2204-builder-2c-2g-2227 sshd[927]: Invalid user jenkins from 10.30.168.15 port 35460 Aug 5 02:28:28 prd-ubuntu2204-builder-2c-2g-2227 sshd[927]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Aug 5 02:28:28 prd-ubuntu2204-builder-2c-2g-2227 sshd[927]: Received disconnect from 10.30.168.15 port 35460:11: Closed due to user request. [preauth] Aug 5 02:28:28 prd-ubuntu2204-builder-2c-2g-2227 sshd[927]: Disconnected from invalid user jenkins 10.30.168.15 port 35460 [preauth] Aug 5 02:28:31 prd-ubuntu2204-builder-2c-2g-2227 sshd[929]: Invalid user jenkins from 10.30.168.15 port 35468 Aug 5 02:28:31 prd-ubuntu2204-builder-2c-2g-2227 sshd[929]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Aug 5 02:28:31 prd-ubuntu2204-builder-2c-2g-2227 sshd[929]: Received disconnect from 10.30.168.15 port 35468:11: Closed due to user request. [preauth] Aug 5 02:28:31 prd-ubuntu2204-builder-2c-2g-2227 sshd[929]: Disconnected from invalid user jenkins 10.30.168.15 port 35468 [preauth] Aug 5 02:28:34 prd-ubuntu2204-builder-2c-2g-2227 sshd[931]: Invalid user jenkins from 10.30.168.15 port 35482 Aug 5 02:28:34 prd-ubuntu2204-builder-2c-2g-2227 sshd[931]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Aug 5 02:28:34 prd-ubuntu2204-builder-2c-2g-2227 sshd[931]: Received disconnect from 10.30.168.15 port 35482:11: Closed due to user request. [preauth] Aug 5 02:28:34 prd-ubuntu2204-builder-2c-2g-2227 sshd[931]: Disconnected from invalid user jenkins 10.30.168.15 port 35482 [preauth] Aug 5 02:28:38 prd-ubuntu2204-builder-2c-2g-2227 sshd[1159]: Invalid user jenkins from 10.30.168.15 port 35486 Aug 5 02:28:38 prd-ubuntu2204-builder-2c-2g-2227 sshd[1159]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Aug 5 02:28:38 prd-ubuntu2204-builder-2c-2g-2227 sshd[1159]: Received disconnect from 10.30.168.15 port 35486:11: Closed due to user request. [preauth] Aug 5 02:28:38 prd-ubuntu2204-builder-2c-2g-2227 sshd[1159]: Disconnected from invalid user jenkins 10.30.168.15 port 35486 [preauth] Aug 5 02:28:41 prd-ubuntu2204-builder-2c-2g-2227 sshd[1268]: Invalid user jenkins from 10.30.168.15 port 35488 Aug 5 02:28:41 prd-ubuntu2204-builder-2c-2g-2227 sshd[1268]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Aug 5 02:28:41 prd-ubuntu2204-builder-2c-2g-2227 sshd[1268]: Received disconnect from 10.30.168.15 port 35488:11: Closed due to user request. [preauth] Aug 5 02:28:41 prd-ubuntu2204-builder-2c-2g-2227 sshd[1268]: Disconnected from invalid user jenkins 10.30.168.15 port 35488 [preauth] Aug 5 02:28:42 prd-ubuntu2204-builder-2c-2g-2227 useradd[1285]: new group: name=jenkins, GID=1001 Aug 5 02:28:42 prd-ubuntu2204-builder-2c-2g-2227 useradd[1285]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 5 02:28:42 prd-ubuntu2204-builder-2c-2g-2227 usermod[1294]: add 'jenkins' to group 'docker' Aug 5 02:28:42 prd-ubuntu2204-builder-2c-2g-2227 usermod[1294]: add 'jenkins' to shadow group 'docker' Aug 5 02:28:44 prd-ubuntu2204-builder-2c-2g-2227 sshd[1328]: Accepted publickey for jenkins from 10.30.168.15 port 35496 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Aug 5 02:28:44 prd-ubuntu2204-builder-2c-2g-2227 sshd[1328]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Aug 5 02:28:44 prd-ubuntu2204-builder-2c-2g-2227 systemd-logind[687]: New session 1 of user jenkins. Aug 5 02:28:44 prd-ubuntu2204-builder-2c-2g-2227 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Aug 5 02:29:02 prd-ubuntu2204-builder-2c-2g-2227 CRON[1975]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Aug 5 02:29:02 prd-ubuntu2204-builder-2c-2g-2227 CRON[1975]: pam_unix(cron:session): session closed for user root Aug 5 02:30:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2053]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Aug 5 02:30:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2053]: pam_unix(cron:session): session closed for user root Aug 5 02:31:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2237]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Aug 5 02:31:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2237]: pam_unix(cron:session): session closed for user root Aug 5 02:32:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2288]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Aug 5 02:32:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2288]: pam_unix(cron:session): session closed for user root Aug 5 02:33:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2340]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Aug 5 02:33:01 prd-ubuntu2204-builder-2c-2g-2227 CRON[2340]: pam_unix(cron:session): session closed for user root Aug 5 02:33:47 prd-ubuntu2204-builder-2c-2g-2227 sudo: jenkins : PWD=/w/workspace/builder-jenkins-cfg-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp