Dec 1 04:00:32 prd-ubuntu2204-docker-2c-2g-2822 sshd[873]: error: kex_exchange_identification: Connection closed by remote host Dec 1 04:00:32 prd-ubuntu2204-docker-2c-2g-2822 sshd[873]: Connection closed by 10.30.168.15 port 52118 Dec 1 04:00:36 prd-ubuntu2204-docker-2c-2g-2822 sshd[880]: Invalid user jenkins from 10.30.168.15 port 52122 Dec 1 04:00:36 prd-ubuntu2204-docker-2c-2g-2822 sshd[880]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Dec 1 04:00:36 prd-ubuntu2204-docker-2c-2g-2822 sshd[880]: Received disconnect from 10.30.168.15 port 52122:11: Closed due to user request. [preauth] Dec 1 04:00:36 prd-ubuntu2204-docker-2c-2g-2822 sshd[880]: Disconnected from invalid user jenkins 10.30.168.15 port 52122 [preauth] Dec 1 04:00:39 prd-ubuntu2204-docker-2c-2g-2822 sshd[882]: Invalid user jenkins from 10.30.168.15 port 52124 Dec 1 04:00:39 prd-ubuntu2204-docker-2c-2g-2822 sshd[882]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Dec 1 04:00:39 prd-ubuntu2204-docker-2c-2g-2822 sshd[882]: Received disconnect from 10.30.168.15 port 52124:11: Closed due to user request. [preauth] Dec 1 04:00:39 prd-ubuntu2204-docker-2c-2g-2822 sshd[882]: Disconnected from invalid user jenkins 10.30.168.15 port 52124 [preauth] Dec 1 04:00:42 prd-ubuntu2204-docker-2c-2g-2822 sshd[884]: Invalid user jenkins from 10.30.168.15 port 52128 Dec 1 04:00:42 prd-ubuntu2204-docker-2c-2g-2822 sshd[884]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Dec 1 04:00:42 prd-ubuntu2204-docker-2c-2g-2822 sshd[884]: Received disconnect from 10.30.168.15 port 52128:11: Closed due to user request. [preauth] Dec 1 04:00:42 prd-ubuntu2204-docker-2c-2g-2822 sshd[884]: Disconnected from invalid user jenkins 10.30.168.15 port 52128 [preauth] Dec 1 04:00:45 prd-ubuntu2204-docker-2c-2g-2822 sshd[886]: Invalid user jenkins from 10.30.168.15 port 52130 Dec 1 04:00:45 prd-ubuntu2204-docker-2c-2g-2822 sshd[886]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Dec 1 04:00:45 prd-ubuntu2204-docker-2c-2g-2822 sshd[886]: Received disconnect from 10.30.168.15 port 52130:11: Closed due to user request. [preauth] Dec 1 04:00:45 prd-ubuntu2204-docker-2c-2g-2822 sshd[886]: Disconnected from invalid user jenkins 10.30.168.15 port 52130 [preauth] Dec 1 04:00:49 prd-ubuntu2204-docker-2c-2g-2822 sshd[1190]: Invalid user jenkins from 10.30.168.15 port 52142 Dec 1 04:00:49 prd-ubuntu2204-docker-2c-2g-2822 sshd[1190]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Dec 1 04:00:49 prd-ubuntu2204-docker-2c-2g-2822 sshd[1190]: Received disconnect from 10.30.168.15 port 52142:11: Closed due to user request. [preauth] Dec 1 04:00:49 prd-ubuntu2204-docker-2c-2g-2822 sshd[1190]: Disconnected from invalid user jenkins 10.30.168.15 port 52142 [preauth] Dec 1 04:00:52 prd-ubuntu2204-docker-2c-2g-2822 sshd[1264]: Invalid user jenkins from 10.30.168.15 port 52144 Dec 1 04:00:52 prd-ubuntu2204-docker-2c-2g-2822 sshd[1264]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Dec 1 04:00:52 prd-ubuntu2204-docker-2c-2g-2822 sshd[1264]: Received disconnect from 10.30.168.15 port 52144:11: Closed due to user request. [preauth] Dec 1 04:00:52 prd-ubuntu2204-docker-2c-2g-2822 sshd[1264]: Disconnected from invalid user jenkins 10.30.168.15 port 52144 [preauth] Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 useradd[1297]: new group: name=jenkins, GID=1001 Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 useradd[1297]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 sshd[1290]: Invalid user jenkins from 10.30.168.15 port 52146 Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 usermod[1306]: add 'jenkins' to group 'docker' Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 usermod[1306]: add 'jenkins' to shadow group 'docker' Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 sshd[1290]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 sshd[1290]: Received disconnect from 10.30.168.15 port 52146:11: Closed due to user request. [preauth] Dec 1 04:00:54 prd-ubuntu2204-docker-2c-2g-2822 sshd[1290]: Disconnected from invalid user jenkins 10.30.168.15 port 52146 [preauth] Dec 1 04:00:57 prd-ubuntu2204-docker-2c-2g-2822 sshd[1341]: Accepted publickey for jenkins from 10.30.168.15 port 52150 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Dec 1 04:00:57 prd-ubuntu2204-docker-2c-2g-2822 sshd[1341]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Dec 1 04:00:57 prd-ubuntu2204-docker-2c-2g-2822 systemd-logind[687]: New session 1 of user jenkins. Dec 1 04:00:57 prd-ubuntu2204-docker-2c-2g-2822 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Dec 1 04:01:01 prd-ubuntu2204-docker-2c-2g-2822 CRON[1514]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Dec 1 04:01:01 prd-ubuntu2204-docker-2c-2g-2822 CRON[1514]: pam_unix(cron:session): session closed for user root Dec 1 04:02:01 prd-ubuntu2204-docker-2c-2g-2822 CRON[2051]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Dec 1 04:02:01 prd-ubuntu2204-docker-2c-2g-2822 CRON[2051]: pam_unix(cron:session): session closed for user root Dec 1 04:03:01 prd-ubuntu2204-docker-2c-2g-2822 CRON[2480]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Dec 1 04:03:01 prd-ubuntu2204-docker-2c-2g-2822 CRON[2480]: pam_unix(cron:session): session closed for user root Dec 1 04:03:18 prd-ubuntu2204-docker-2c-2g-2822 sudo: jenkins : PWD=/w/workspace/builder-packer-merge-ubuntu-18.04-docker ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Dec 1 04:03:18 prd-ubuntu2204-docker-2c-2g-2822 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)