Sep 9 11:58:38 prd-ubuntu2204-docker-2c-2g-51151 passwd[666]: password for 'ubuntu' changed by 'root' Sep 9 11:58:38 prd-ubuntu2204-docker-2c-2g-51151 sshd[742]: Server listening on 0.0.0.0 port 22. Sep 9 11:58:38 prd-ubuntu2204-docker-2c-2g-51151 sshd[742]: Server listening on :: port 22. Sep 9 11:58:38 prd-ubuntu2204-docker-2c-2g-51151 systemd-logind[698]: New seat seat0. Sep 9 11:58:38 prd-ubuntu2204-docker-2c-2g-51151 systemd-logind[698]: Watching system buttons on /dev/input/event0 (Power Button) Sep 9 11:58:38 prd-ubuntu2204-docker-2c-2g-51151 systemd-logind[698]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 9 11:58:41 prd-ubuntu2204-docker-2c-2g-51151 sshd[906]: error: kex_exchange_identification: Connection closed by remote host Sep 9 11:58:41 prd-ubuntu2204-docker-2c-2g-51151 sshd[906]: Connection closed by 10.30.168.15 port 53428 Sep 9 11:58:48 prd-ubuntu2204-docker-2c-2g-51151 sshd[913]: Invalid user jenkins from 10.30.168.15 port 53468 Sep 9 11:58:48 prd-ubuntu2204-docker-2c-2g-51151 sshd[913]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:58:48 prd-ubuntu2204-docker-2c-2g-51151 sshd[913]: Received disconnect from 10.30.168.15 port 53468:11: Closed due to user request. [preauth] Sep 9 11:58:48 prd-ubuntu2204-docker-2c-2g-51151 sshd[913]: Disconnected from invalid user jenkins 10.30.168.15 port 53468 [preauth] Sep 9 11:58:51 prd-ubuntu2204-docker-2c-2g-51151 sshd[915]: Invalid user jenkins from 10.30.168.15 port 53476 Sep 9 11:58:51 prd-ubuntu2204-docker-2c-2g-51151 sshd[915]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:58:51 prd-ubuntu2204-docker-2c-2g-51151 sshd[915]: Received disconnect from 10.30.168.15 port 53476:11: Closed due to user request. [preauth] Sep 9 11:58:51 prd-ubuntu2204-docker-2c-2g-51151 sshd[915]: Disconnected from invalid user jenkins 10.30.168.15 port 53476 [preauth] Sep 9 11:58:54 prd-ubuntu2204-docker-2c-2g-51151 sshd[917]: Invalid user jenkins from 10.30.168.15 port 53484 Sep 9 11:58:54 prd-ubuntu2204-docker-2c-2g-51151 sshd[917]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:58:54 prd-ubuntu2204-docker-2c-2g-51151 sshd[917]: Received disconnect from 10.30.168.15 port 53484:11: Closed due to user request. [preauth] Sep 9 11:58:54 prd-ubuntu2204-docker-2c-2g-51151 sshd[917]: Disconnected from invalid user jenkins 10.30.168.15 port 53484 [preauth] Sep 9 11:58:58 prd-ubuntu2204-docker-2c-2g-51151 sshd[1154]: Invalid user jenkins from 10.30.168.15 port 53494 Sep 9 11:58:58 prd-ubuntu2204-docker-2c-2g-51151 sshd[1154]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:58:58 prd-ubuntu2204-docker-2c-2g-51151 sshd[1154]: Received disconnect from 10.30.168.15 port 53494:11: Closed due to user request. [preauth] Sep 9 11:58:58 prd-ubuntu2204-docker-2c-2g-51151 sshd[1154]: Disconnected from invalid user jenkins 10.30.168.15 port 53494 [preauth] Sep 9 11:59:01 prd-ubuntu2204-docker-2c-2g-51151 sshd[1265]: Invalid user jenkins from 10.30.168.15 port 53504 Sep 9 11:59:01 prd-ubuntu2204-docker-2c-2g-51151 sshd[1265]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:59:01 prd-ubuntu2204-docker-2c-2g-51151 sshd[1265]: Received disconnect from 10.30.168.15 port 53504:11: Closed due to user request. [preauth] Sep 9 11:59:01 prd-ubuntu2204-docker-2c-2g-51151 sshd[1265]: Disconnected from invalid user jenkins 10.30.168.15 port 53504 [preauth] Sep 9 11:59:02 prd-ubuntu2204-docker-2c-2g-51151 CRON[1269]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 9 11:59:02 prd-ubuntu2204-docker-2c-2g-51151 CRON[1269]: pam_unix(cron:session): session closed for user root Sep 9 11:59:04 prd-ubuntu2204-docker-2c-2g-51151 sshd[1272]: Invalid user jenkins from 10.30.168.15 port 53508 Sep 9 11:59:04 prd-ubuntu2204-docker-2c-2g-51151 sshd[1272]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:59:04 prd-ubuntu2204-docker-2c-2g-51151 sshd[1272]: Received disconnect from 10.30.168.15 port 53508:11: Closed due to user request. [preauth] Sep 9 11:59:04 prd-ubuntu2204-docker-2c-2g-51151 sshd[1272]: Disconnected from invalid user jenkins 10.30.168.15 port 53508 [preauth] Sep 9 11:59:07 prd-ubuntu2204-docker-2c-2g-51151 sshd[1274]: Invalid user jenkins from 10.30.168.15 port 53512 Sep 9 11:59:07 prd-ubuntu2204-docker-2c-2g-51151 sshd[1274]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:59:07 prd-ubuntu2204-docker-2c-2g-51151 sshd[1274]: Received disconnect from 10.30.168.15 port 53512:11: Closed due to user request. [preauth] Sep 9 11:59:07 prd-ubuntu2204-docker-2c-2g-51151 sshd[1274]: Disconnected from invalid user jenkins 10.30.168.15 port 53512 [preauth] Sep 9 11:59:09 prd-ubuntu2204-docker-2c-2g-51151 useradd[1303]: new group: name=jenkins, GID=1001 Sep 9 11:59:09 prd-ubuntu2204-docker-2c-2g-51151 useradd[1303]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Sep 9 11:59:10 prd-ubuntu2204-docker-2c-2g-51151 usermod[1316]: add 'jenkins' to group 'docker' Sep 9 11:59:10 prd-ubuntu2204-docker-2c-2g-51151 usermod[1316]: add 'jenkins' to shadow group 'docker' Sep 9 11:59:10 prd-ubuntu2204-docker-2c-2g-51151 sshd[1307]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 9 11:59:10 prd-ubuntu2204-docker-2c-2g-51151 sshd[1307]: Received disconnect from 10.30.168.15 port 53518:11: Closed due to user request. [preauth] Sep 9 11:59:10 prd-ubuntu2204-docker-2c-2g-51151 sshd[1307]: Disconnected from authenticating user jenkins 10.30.168.15 port 53518 [preauth] Sep 9 11:59:13 prd-ubuntu2204-docker-2c-2g-51151 sshd[1352]: Accepted publickey for jenkins from 10.30.168.15 port 53532 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Sep 9 11:59:13 prd-ubuntu2204-docker-2c-2g-51151 sshd[1352]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Sep 9 11:59:13 prd-ubuntu2204-docker-2c-2g-51151 systemd-logind[698]: New session 2 of user jenkins. Sep 9 11:59:13 prd-ubuntu2204-docker-2c-2g-51151 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Sep 9 12:00:01 prd-ubuntu2204-docker-2c-2g-51151 CRON[1999]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 9 12:00:01 prd-ubuntu2204-docker-2c-2g-51151 CRON[1999]: pam_unix(cron:session): session closed for user root Sep 9 12:01:01 prd-ubuntu2204-docker-2c-2g-51151 CRON[2440]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 9 12:01:01 prd-ubuntu2204-docker-2c-2g-51151 CRON[2440]: pam_unix(cron:session): session closed for user root Sep 9 12:01:24 prd-ubuntu2204-docker-2c-2g-51151 sudo: jenkins : PWD=/w/workspace/builder-packer-merge-ubuntu-20.04-docker ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Sep 9 12:01:24 prd-ubuntu2204-docker-2c-2g-51151 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)