Nov 7 00:16:08 prd-ubuntu2204-docker-2c-2g-6598 sshd[870]: error: kex_exchange_identification: Connection closed by remote host Nov 7 00:16:08 prd-ubuntu2204-docker-2c-2g-6598 sshd[870]: Connection closed by 10.30.168.15 port 50246 Nov 7 00:16:10 prd-ubuntu2204-docker-2c-2g-6598 sshd[878]: Invalid user jenkins from 10.30.168.15 port 50256 Nov 7 00:16:10 prd-ubuntu2204-docker-2c-2g-6598 sshd[878]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 7 00:16:10 prd-ubuntu2204-docker-2c-2g-6598 sshd[878]: Received disconnect from 10.30.168.15 port 50256:11: Closed due to user request. [preauth] Nov 7 00:16:10 prd-ubuntu2204-docker-2c-2g-6598 sshd[878]: Disconnected from invalid user jenkins 10.30.168.15 port 50256 [preauth] Nov 7 00:16:13 prd-ubuntu2204-docker-2c-2g-6598 sshd[880]: Invalid user jenkins from 10.30.168.15 port 50260 Nov 7 00:16:14 prd-ubuntu2204-docker-2c-2g-6598 sshd[880]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 7 00:16:14 prd-ubuntu2204-docker-2c-2g-6598 sshd[880]: Received disconnect from 10.30.168.15 port 50260:11: Closed due to user request. [preauth] Nov 7 00:16:14 prd-ubuntu2204-docker-2c-2g-6598 sshd[880]: Disconnected from invalid user jenkins 10.30.168.15 port 50260 [preauth] Nov 7 00:16:17 prd-ubuntu2204-docker-2c-2g-6598 sshd[882]: Invalid user jenkins from 10.30.168.15 port 50268 Nov 7 00:16:17 prd-ubuntu2204-docker-2c-2g-6598 sshd[882]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 7 00:16:17 prd-ubuntu2204-docker-2c-2g-6598 sshd[882]: Received disconnect from 10.30.168.15 port 50268:11: Closed due to user request. [preauth] Nov 7 00:16:17 prd-ubuntu2204-docker-2c-2g-6598 sshd[882]: Disconnected from invalid user jenkins 10.30.168.15 port 50268 [preauth] Nov 7 00:16:20 prd-ubuntu2204-docker-2c-2g-6598 sshd[884]: Invalid user jenkins from 10.30.168.15 port 50272 Nov 7 00:16:20 prd-ubuntu2204-docker-2c-2g-6598 sshd[884]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 7 00:16:20 prd-ubuntu2204-docker-2c-2g-6598 sshd[884]: Received disconnect from 10.30.168.15 port 50272:11: Closed due to user request. [preauth] Nov 7 00:16:20 prd-ubuntu2204-docker-2c-2g-6598 sshd[884]: Disconnected from invalid user jenkins 10.30.168.15 port 50272 [preauth] Nov 7 00:16:23 prd-ubuntu2204-docker-2c-2g-6598 sshd[1136]: Invalid user jenkins from 10.30.168.15 port 50278 Nov 7 00:16:23 prd-ubuntu2204-docker-2c-2g-6598 sshd[1136]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 7 00:16:23 prd-ubuntu2204-docker-2c-2g-6598 sshd[1136]: Received disconnect from 10.30.168.15 port 50278:11: Closed due to user request. [preauth] Nov 7 00:16:23 prd-ubuntu2204-docker-2c-2g-6598 sshd[1136]: Disconnected from invalid user jenkins 10.30.168.15 port 50278 [preauth] Nov 7 00:16:26 prd-ubuntu2204-docker-2c-2g-6598 sshd[1236]: Invalid user jenkins from 10.30.168.15 port 50282 Nov 7 00:16:26 prd-ubuntu2204-docker-2c-2g-6598 sshd[1236]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 7 00:16:26 prd-ubuntu2204-docker-2c-2g-6598 sshd[1236]: Received disconnect from 10.30.168.15 port 50282:11: Closed due to user request. [preauth] Nov 7 00:16:26 prd-ubuntu2204-docker-2c-2g-6598 sshd[1236]: Disconnected from invalid user jenkins 10.30.168.15 port 50282 [preauth] Nov 7 00:16:29 prd-ubuntu2204-docker-2c-2g-6598 sshd[1263]: Invalid user jenkins from 10.30.168.15 port 50286 Nov 7 00:16:29 prd-ubuntu2204-docker-2c-2g-6598 sshd[1263]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 7 00:16:29 prd-ubuntu2204-docker-2c-2g-6598 sshd[1263]: Received disconnect from 10.30.168.15 port 50286:11: Closed due to user request. [preauth] Nov 7 00:16:29 prd-ubuntu2204-docker-2c-2g-6598 sshd[1263]: Disconnected from invalid user jenkins 10.30.168.15 port 50286 [preauth] Nov 7 00:16:31 prd-ubuntu2204-docker-2c-2g-6598 useradd[1292]: new group: name=jenkins, GID=1001 Nov 7 00:16:31 prd-ubuntu2204-docker-2c-2g-6598 useradd[1292]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 7 00:16:31 prd-ubuntu2204-docker-2c-2g-6598 usermod[1301]: add 'jenkins' to group 'docker' Nov 7 00:16:31 prd-ubuntu2204-docker-2c-2g-6598 usermod[1301]: add 'jenkins' to shadow group 'docker' Nov 7 00:16:32 prd-ubuntu2204-docker-2c-2g-6598 sshd[1314]: Accepted publickey for jenkins from 10.30.168.15 port 50292 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 7 00:16:33 prd-ubuntu2204-docker-2c-2g-6598 sshd[1314]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 7 00:16:33 prd-ubuntu2204-docker-2c-2g-6598 systemd-logind[689]: New session 1 of user jenkins. Nov 7 00:16:33 prd-ubuntu2204-docker-2c-2g-6598 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 7 00:17:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2053]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 7 00:17:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2054]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 7 00:17:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2053]: pam_unix(cron:session): session closed for user root Nov 7 00:17:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2054]: pam_unix(cron:session): session closed for user root Nov 7 00:18:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2238]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 7 00:18:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2238]: pam_unix(cron:session): session closed for user root Nov 7 00:19:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2261]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 7 00:19:01 prd-ubuntu2204-docker-2c-2g-6598 CRON[2261]: pam_unix(cron:session): session closed for user root Nov 7 00:19:06 prd-ubuntu2204-docker-2c-2g-6598 sudo: jenkins : PWD=/w/workspace/builder-packer-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 7 00:19:06 prd-ubuntu2204-docker-2c-2g-6598 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)