Nov 11 06:55:33 prd-ubuntu2204-docker-2c-2g-7878 sshd[884]: error: kex_exchange_identification: Connection closed by remote host Nov 11 06:55:33 prd-ubuntu2204-docker-2c-2g-7878 sshd[884]: Connection closed by 10.30.168.15 port 45504 Nov 11 06:55:39 prd-ubuntu2204-docker-2c-2g-7878 sshd[891]: Invalid user jenkins from 10.30.168.15 port 45510 Nov 11 06:55:39 prd-ubuntu2204-docker-2c-2g-7878 sshd[891]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 11 06:55:39 prd-ubuntu2204-docker-2c-2g-7878 sshd[891]: Received disconnect from 10.30.168.15 port 45510:11: Closed due to user request. [preauth] Nov 11 06:55:39 prd-ubuntu2204-docker-2c-2g-7878 sshd[891]: Disconnected from invalid user jenkins 10.30.168.15 port 45510 [preauth] Nov 11 06:55:42 prd-ubuntu2204-docker-2c-2g-7878 sshd[893]: Invalid user jenkins from 10.30.168.15 port 45518 Nov 11 06:55:43 prd-ubuntu2204-docker-2c-2g-7878 sshd[893]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 11 06:55:43 prd-ubuntu2204-docker-2c-2g-7878 sshd[893]: Received disconnect from 10.30.168.15 port 45518:11: Closed due to user request. [preauth] Nov 11 06:55:43 prd-ubuntu2204-docker-2c-2g-7878 sshd[893]: Disconnected from invalid user jenkins 10.30.168.15 port 45518 [preauth] Nov 11 06:55:45 prd-ubuntu2204-docker-2c-2g-7878 sshd[895]: Invalid user jenkins from 10.30.168.15 port 45524 Nov 11 06:55:45 prd-ubuntu2204-docker-2c-2g-7878 sshd[895]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 11 06:55:45 prd-ubuntu2204-docker-2c-2g-7878 sshd[895]: Received disconnect from 10.30.168.15 port 45524:11: Closed due to user request. [preauth] Nov 11 06:55:45 prd-ubuntu2204-docker-2c-2g-7878 sshd[895]: Disconnected from invalid user jenkins 10.30.168.15 port 45524 [preauth] Nov 11 06:55:49 prd-ubuntu2204-docker-2c-2g-7878 sshd[1161]: Invalid user jenkins from 10.30.168.15 port 45528 Nov 11 06:55:49 prd-ubuntu2204-docker-2c-2g-7878 sshd[1161]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 11 06:55:49 prd-ubuntu2204-docker-2c-2g-7878 sshd[1161]: Received disconnect from 10.30.168.15 port 45528:11: Closed due to user request. [preauth] Nov 11 06:55:49 prd-ubuntu2204-docker-2c-2g-7878 sshd[1161]: Disconnected from invalid user jenkins 10.30.168.15 port 45528 [preauth] Nov 11 06:55:52 prd-ubuntu2204-docker-2c-2g-7878 sshd[1268]: Invalid user jenkins from 10.30.168.15 port 45532 Nov 11 06:55:52 prd-ubuntu2204-docker-2c-2g-7878 sshd[1268]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 11 06:55:52 prd-ubuntu2204-docker-2c-2g-7878 sshd[1268]: Received disconnect from 10.30.168.15 port 45532:11: Closed due to user request. [preauth] Nov 11 06:55:52 prd-ubuntu2204-docker-2c-2g-7878 sshd[1268]: Disconnected from invalid user jenkins 10.30.168.15 port 45532 [preauth] Nov 11 06:55:55 prd-ubuntu2204-docker-2c-2g-7878 useradd[1299]: new group: name=jenkins, GID=1001 Nov 11 06:55:55 prd-ubuntu2204-docker-2c-2g-7878 useradd[1299]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 11 06:55:55 prd-ubuntu2204-docker-2c-2g-7878 usermod[1308]: add 'jenkins' to group 'docker' Nov 11 06:55:55 prd-ubuntu2204-docker-2c-2g-7878 usermod[1308]: add 'jenkins' to shadow group 'docker' Nov 11 06:55:56 prd-ubuntu2204-docker-2c-2g-7878 sshd[1321]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 11 06:55:56 prd-ubuntu2204-docker-2c-2g-7878 sshd[1321]: Received disconnect from 10.30.168.15 port 45544:11: Closed due to user request. [preauth] Nov 11 06:55:56 prd-ubuntu2204-docker-2c-2g-7878 sshd[1321]: Disconnected from authenticating user jenkins 10.30.168.15 port 45544 [preauth] Nov 11 06:56:00 prd-ubuntu2204-docker-2c-2g-7878 sshd[1344]: Accepted publickey for jenkins from 10.30.168.15 port 45550 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 11 06:56:00 prd-ubuntu2204-docker-2c-2g-7878 sshd[1344]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 11 06:56:00 prd-ubuntu2204-docker-2c-2g-7878 systemd-logind[697]: New session 1 of user jenkins. Nov 11 06:56:00 prd-ubuntu2204-docker-2c-2g-7878 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 11 06:56:02 prd-ubuntu2204-docker-2c-2g-7878 CRON[1502]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 06:56:02 prd-ubuntu2204-docker-2c-2g-7878 CRON[1502]: pam_unix(cron:session): session closed for user root Nov 11 06:57:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[4340]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 06:57:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[4340]: pam_unix(cron:session): session closed for user root Nov 11 06:58:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[8194]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 06:58:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[8194]: pam_unix(cron:session): session closed for user root Nov 11 06:59:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[11859]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 06:59:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[11859]: pam_unix(cron:session): session closed for user root Nov 11 07:00:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[15555]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 07:00:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[15555]: pam_unix(cron:session): session closed for user root Nov 11 07:01:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[19786]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 07:01:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[19786]: pam_unix(cron:session): session closed for user root Nov 11 07:02:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[23590]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 07:02:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[23590]: pam_unix(cron:session): session closed for user root Nov 11 07:03:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[25737]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 11 07:03:01 prd-ubuntu2204-docker-2c-2g-7878 CRON[25737]: pam_unix(cron:session): session closed for user root Nov 11 07:03:44 prd-ubuntu2204-docker-2c-2g-7878 sudo: jenkins : PWD=/w/workspace/builder-packer-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 11 07:03:44 prd-ubuntu2204-docker-2c-2g-7878 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)