Nov 1 09:02:23 prd-ubuntu2204-docker-2c-2g-4426 sshd[881]: error: kex_exchange_identification: Connection closed by remote host Nov 1 09:02:23 prd-ubuntu2204-docker-2c-2g-4426 sshd[881]: Connection closed by 10.30.168.15 port 58492 Nov 1 09:02:31 prd-ubuntu2204-docker-2c-2g-4426 sshd[889]: Invalid user jenkins from 10.30.168.15 port 58500 Nov 1 09:02:31 prd-ubuntu2204-docker-2c-2g-4426 sshd[889]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 1 09:02:31 prd-ubuntu2204-docker-2c-2g-4426 sshd[889]: Received disconnect from 10.30.168.15 port 58500:11: Closed due to user request. [preauth] Nov 1 09:02:31 prd-ubuntu2204-docker-2c-2g-4426 sshd[889]: Disconnected from invalid user jenkins 10.30.168.15 port 58500 [preauth] Nov 1 09:02:34 prd-ubuntu2204-docker-2c-2g-4426 sshd[891]: Invalid user jenkins from 10.30.168.15 port 58502 Nov 1 09:02:34 prd-ubuntu2204-docker-2c-2g-4426 sshd[891]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 1 09:02:34 prd-ubuntu2204-docker-2c-2g-4426 sshd[891]: Received disconnect from 10.30.168.15 port 58502:11: Closed due to user request. [preauth] Nov 1 09:02:34 prd-ubuntu2204-docker-2c-2g-4426 sshd[891]: Disconnected from invalid user jenkins 10.30.168.15 port 58502 [preauth] Nov 1 09:02:36 prd-ubuntu2204-docker-2c-2g-4426 sshd[893]: Invalid user jenkins from 10.30.168.15 port 58510 Nov 1 09:02:37 prd-ubuntu2204-docker-2c-2g-4426 sshd[893]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 1 09:02:37 prd-ubuntu2204-docker-2c-2g-4426 sshd[893]: Received disconnect from 10.30.168.15 port 58510:11: Closed due to user request. [preauth] Nov 1 09:02:37 prd-ubuntu2204-docker-2c-2g-4426 sshd[893]: Disconnected from invalid user jenkins 10.30.168.15 port 58510 [preauth] Nov 1 09:02:39 prd-ubuntu2204-docker-2c-2g-4426 sshd[1148]: Invalid user jenkins from 10.30.168.15 port 58512 Nov 1 09:02:39 prd-ubuntu2204-docker-2c-2g-4426 sshd[1148]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 1 09:02:39 prd-ubuntu2204-docker-2c-2g-4426 sshd[1148]: Received disconnect from 10.30.168.15 port 58512:11: Closed due to user request. [preauth] Nov 1 09:02:39 prd-ubuntu2204-docker-2c-2g-4426 sshd[1148]: Disconnected from invalid user jenkins 10.30.168.15 port 58512 [preauth] Nov 1 09:02:41 prd-ubuntu2204-docker-2c-2g-4426 sshd[1255]: Invalid user jenkins from 10.30.168.15 port 58514 Nov 1 09:02:41 prd-ubuntu2204-docker-2c-2g-4426 sshd[1255]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 1 09:02:42 prd-ubuntu2204-docker-2c-2g-4426 sshd[1255]: Received disconnect from 10.30.168.15 port 58514:11: Closed due to user request. [preauth] Nov 1 09:02:42 prd-ubuntu2204-docker-2c-2g-4426 sshd[1255]: Disconnected from invalid user jenkins 10.30.168.15 port 58514 [preauth] Nov 1 09:02:44 prd-ubuntu2204-docker-2c-2g-4426 sshd[1275]: Invalid user jenkins from 10.30.168.15 port 58516 Nov 1 09:02:44 prd-ubuntu2204-docker-2c-2g-4426 sshd[1275]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 1 09:02:44 prd-ubuntu2204-docker-2c-2g-4426 sshd[1275]: Received disconnect from 10.30.168.15 port 58516:11: Closed due to user request. [preauth] Nov 1 09:02:44 prd-ubuntu2204-docker-2c-2g-4426 sshd[1275]: Disconnected from invalid user jenkins 10.30.168.15 port 58516 [preauth] Nov 1 09:02:45 prd-ubuntu2204-docker-2c-2g-4426 useradd[1304]: new group: name=jenkins, GID=1001 Nov 1 09:02:45 prd-ubuntu2204-docker-2c-2g-4426 useradd[1304]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 1 09:02:45 prd-ubuntu2204-docker-2c-2g-4426 usermod[1313]: add 'jenkins' to group 'docker' Nov 1 09:02:45 prd-ubuntu2204-docker-2c-2g-4426 usermod[1313]: add 'jenkins' to shadow group 'docker' Nov 1 09:02:47 prd-ubuntu2204-docker-2c-2g-4426 sshd[1347]: Accepted publickey for jenkins from 10.30.168.15 port 58520 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 1 09:02:47 prd-ubuntu2204-docker-2c-2g-4426 sshd[1347]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 1 09:02:47 prd-ubuntu2204-docker-2c-2g-4426 systemd-logind[696]: New session 1 of user jenkins. Nov 1 09:02:47 prd-ubuntu2204-docker-2c-2g-4426 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 1 09:03:00 prd-ubuntu2204-docker-2c-2g-4426 CRON[1806]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 1 09:03:00 prd-ubuntu2204-docker-2c-2g-4426 CRON[1806]: pam_unix(cron:session): session closed for user root Nov 1 09:04:01 prd-ubuntu2204-docker-2c-2g-4426 CRON[2190]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 1 09:04:01 prd-ubuntu2204-docker-2c-2g-4426 CRON[2190]: pam_unix(cron:session): session closed for user root Nov 1 09:05:01 prd-ubuntu2204-docker-2c-2g-4426 CRON[2467]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 1 09:05:01 prd-ubuntu2204-docker-2c-2g-4426 CRON[2467]: pam_unix(cron:session): session closed for user root Nov 1 09:05:51 prd-ubuntu2204-docker-2c-2g-4426 sudo: jenkins : PWD=/w/workspace/builder-packer-merge-centos-cs-9-builder ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 1 09:05:51 prd-ubuntu2204-docker-2c-2g-4426 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)