Nov 13 14:45:53 prd-ubuntu2204-docker-2c-2g-8584 sshd[889]: error: kex_exchange_identification: Connection closed by remote host Nov 13 14:45:53 prd-ubuntu2204-docker-2c-2g-8584 sshd[889]: Connection closed by 10.30.168.15 port 57872 Nov 13 14:46:00 prd-ubuntu2204-docker-2c-2g-8584 sshd[896]: Invalid user jenkins from 10.30.168.15 port 57880 Nov 13 14:46:00 prd-ubuntu2204-docker-2c-2g-8584 sshd[896]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 13 14:46:00 prd-ubuntu2204-docker-2c-2g-8584 sshd[896]: Received disconnect from 10.30.168.15 port 57880:11: Closed due to user request. [preauth] Nov 13 14:46:00 prd-ubuntu2204-docker-2c-2g-8584 sshd[896]: Disconnected from invalid user jenkins 10.30.168.15 port 57880 [preauth] Nov 13 14:46:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[898]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:46:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[898]: pam_unix(cron:session): session closed for user root Nov 13 14:46:03 prd-ubuntu2204-docker-2c-2g-8584 sshd[901]: Invalid user jenkins from 10.30.168.15 port 57882 Nov 13 14:46:03 prd-ubuntu2204-docker-2c-2g-8584 sshd[901]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 13 14:46:03 prd-ubuntu2204-docker-2c-2g-8584 sshd[901]: Received disconnect from 10.30.168.15 port 57882:11: Closed due to user request. [preauth] Nov 13 14:46:03 prd-ubuntu2204-docker-2c-2g-8584 sshd[901]: Disconnected from invalid user jenkins 10.30.168.15 port 57882 [preauth] Nov 13 14:46:05 prd-ubuntu2204-docker-2c-2g-8584 sshd[903]: Invalid user jenkins from 10.30.168.15 port 57884 Nov 13 14:46:06 prd-ubuntu2204-docker-2c-2g-8584 sshd[903]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 13 14:46:06 prd-ubuntu2204-docker-2c-2g-8584 sshd[903]: Received disconnect from 10.30.168.15 port 57884:11: Closed due to user request. [preauth] Nov 13 14:46:06 prd-ubuntu2204-docker-2c-2g-8584 sshd[903]: Disconnected from invalid user jenkins 10.30.168.15 port 57884 [preauth] Nov 13 14:46:08 prd-ubuntu2204-docker-2c-2g-8584 sshd[1170]: Invalid user jenkins from 10.30.168.15 port 57886 Nov 13 14:46:08 prd-ubuntu2204-docker-2c-2g-8584 sshd[1170]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 13 14:46:08 prd-ubuntu2204-docker-2c-2g-8584 sshd[1170]: Received disconnect from 10.30.168.15 port 57886:11: Closed due to user request. [preauth] Nov 13 14:46:08 prd-ubuntu2204-docker-2c-2g-8584 sshd[1170]: Disconnected from invalid user jenkins 10.30.168.15 port 57886 [preauth] Nov 13 14:46:11 prd-ubuntu2204-docker-2c-2g-8584 sshd[1279]: Invalid user jenkins from 10.30.168.15 port 57892 Nov 13 14:46:11 prd-ubuntu2204-docker-2c-2g-8584 sshd[1279]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 13 14:46:11 prd-ubuntu2204-docker-2c-2g-8584 sshd[1279]: Received disconnect from 10.30.168.15 port 57892:11: Closed due to user request. [preauth] Nov 13 14:46:11 prd-ubuntu2204-docker-2c-2g-8584 sshd[1279]: Disconnected from invalid user jenkins 10.30.168.15 port 57892 [preauth] Nov 13 14:46:14 prd-ubuntu2204-docker-2c-2g-8584 sshd[1283]: Invalid user jenkins from 10.30.168.15 port 57894 Nov 13 14:46:14 prd-ubuntu2204-docker-2c-2g-8584 sshd[1283]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 13 14:46:14 prd-ubuntu2204-docker-2c-2g-8584 sshd[1283]: Received disconnect from 10.30.168.15 port 57894:11: Closed due to user request. [preauth] Nov 13 14:46:14 prd-ubuntu2204-docker-2c-2g-8584 sshd[1283]: Disconnected from invalid user jenkins 10.30.168.15 port 57894 [preauth] Nov 13 14:46:17 prd-ubuntu2204-docker-2c-2g-8584 sshd[1286]: Invalid user jenkins from 10.30.168.15 port 57896 Nov 13 14:46:17 prd-ubuntu2204-docker-2c-2g-8584 sshd[1286]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Nov 13 14:46:17 prd-ubuntu2204-docker-2c-2g-8584 sshd[1286]: Received disconnect from 10.30.168.15 port 57896:11: Closed due to user request. [preauth] Nov 13 14:46:17 prd-ubuntu2204-docker-2c-2g-8584 sshd[1286]: Disconnected from invalid user jenkins 10.30.168.15 port 57896 [preauth] Nov 13 14:46:19 prd-ubuntu2204-docker-2c-2g-8584 useradd[1315]: new group: name=jenkins, GID=1001 Nov 13 14:46:19 prd-ubuntu2204-docker-2c-2g-8584 useradd[1315]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 13 14:46:19 prd-ubuntu2204-docker-2c-2g-8584 usermod[1324]: add 'jenkins' to group 'docker' Nov 13 14:46:19 prd-ubuntu2204-docker-2c-2g-8584 usermod[1324]: add 'jenkins' to shadow group 'docker' Nov 13 14:46:20 prd-ubuntu2204-docker-2c-2g-8584 sshd[1360]: Accepted publickey for jenkins from 10.30.168.15 port 57904 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 13 14:46:20 prd-ubuntu2204-docker-2c-2g-8584 sshd[1360]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 13 14:46:20 prd-ubuntu2204-docker-2c-2g-8584 systemd-logind[699]: New session 2 of user jenkins. Nov 13 14:46:20 prd-ubuntu2204-docker-2c-2g-8584 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Nov 13 14:47:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[3142]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:47:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[3142]: pam_unix(cron:session): session closed for user root Nov 13 14:48:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[7005]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:48:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[7005]: pam_unix(cron:session): session closed for user root Nov 13 14:49:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[10810]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:49:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[10810]: pam_unix(cron:session): session closed for user root Nov 13 14:50:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[14629]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:50:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[14629]: pam_unix(cron:session): session closed for user root Nov 13 14:51:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[18597]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:51:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[18597]: pam_unix(cron:session): session closed for user root Nov 13 14:52:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[22553]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:52:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[22553]: pam_unix(cron:session): session closed for user root Nov 13 14:53:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[26218]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:53:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[26218]: pam_unix(cron:session): session closed for user root Nov 13 14:54:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[28097]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Nov 13 14:54:01 prd-ubuntu2204-docker-2c-2g-8584 CRON[28097]: pam_unix(cron:session): session closed for user root Nov 13 14:54:40 prd-ubuntu2204-docker-2c-2g-8584 sudo: jenkins : PWD=/w/workspace/builder-packer-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp