type=1103 audit(1696275146.260:283): pid=3282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.652598] audit: type=1006 audit(1696275146.260:284): pid=3282 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 135.672325] audit: type=1300 audit(1696275146.260:284): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdabaa9920 a2=3 a3=0 items=0 ppid=1 pid=3282 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.681615] audit: type=1327 audit(1696275146.260:284): proctitle=737368643A20636F7265205B707269765D [ 135.685539] audit: type=1105 audit(1696275146.290:285): pid=3282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.695261] audit: type=1103 audit(1696275146.296:286): pid=3285 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.015126] audit: type=1106 audit(1696275146.633:287): pid=3282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.024943] audit: type=1104 audit(1696275146.633:288): pid=3282 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.039384] kauditd_printk_skb: 1 callbacks suppressed [ 146.039387] audit: type=1130 audit(1696275156.658:290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.33:22-139.178.89.65:45908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 146.217818] audit: type=1101 audit(1696275156.837:291): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.227353] audit: type=1103 audit(1696275156.845:292): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.234596] audit: type=1006 audit(1696275156.845:293): pid=3295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 146.245927] audit: type=1300 audit(1696275156.845:293): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2f5a6d60 a2=3 a3=0 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.260042] audit: type=1327 audit(1696275156.845:293): proctitle=737368643A20636F7265205B707269765D [ 146.267152] audit: type=1105 audit(1696275156.886:294): pid=3295 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.277856] audit: type=1103 audit(1696275156.891:295): pid=3298 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.464214] audit: type=1106 audit(1696275157.083:296): pid=3295 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.470821] audit: type=1104 audit(1696275157.083:297): pid=3295 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.490170] kauditd_printk_skb: 1 callbacks suppressed [ 156.490172] audit: type=1130 audit(1696275167.109:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.33:22-139.178.89.65:53564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.679944] audit: type=1101 audit(1696275167.299:300): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.690683] audit: type=1103 audit(1696275167.309:301): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.702123] audit: type=1006 audit(1696275167.317:302): pid=3310 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 156.706283] audit: type=1300 audit(1696275167.317:302): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffad75b260 a2=3 a3=0 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.728740] audit: type=1327 audit(1696275167.317:302): proctitle=737368643A20636F7265205B707269765D [ 156.749329] audit: type=1105 audit(1696275167.368:303): pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.758531] audit: type=1103 audit(1696275167.368:304): pid=3313 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.019689] audit: type=1106 audit(1696275167.638:305): pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.032222] audit: type=1104 audit(1696275167.648:306): pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.029741] kauditd_printk_skb: 1 callbacks suppressed [ 163.029744] audit: type=1131 audit(1696275173.648:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.073180] audit: type=1130 audit(1696275173.692:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.701938] audit: type=1334 audit(1696275177.320:310): prog-id=10 op=LOAD [ 166.703356] audit: type=1300 audit(1696275177.320:310): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdef56c9f0 a2=74 a3=7ffdef56c9f0 items=0 ppid=3620 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.716920] audit: type=1327 audit(1696275177.320:310): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 166.719120] audit: type=1334 audit(1696275177.321:311): prog-id=10 op=UNLOAD [ 166.720676] audit: type=1334 audit(1696275177.321:312): prog-id=11 op=LOAD [ 166.722199] audit: type=1300 audit(1696275177.321:312): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdef56ba70 a2=90 a3=2 items=0 ppid=3620 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.728483] audit: type=1327 audit(1696275177.321:312): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 166.730610] audit: type=1334 audit(1696275177.322:313): prog-id=11 op=UNLOAD [ 169.797412] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_net: link becomes ready [ 169.799142] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_host: link becomes ready [ 170.409449] NET: Registered PF_ALG protocol family [ 170.415870] kauditd_printk_skb: 3837 callbacks suppressed [ 170.415873] audit: type=1334 audit(1696275181.035:2131): prog-id=823 op=LOAD [ 170.418597] audit: type=1300 audit(1696275181.035:2131): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdbe7ae7c0 a2=74 a3=7ffdbe7ae7c0 items=0 ppid=3738 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.425641] audit: type=1327 audit(1696275181.035:2131): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 170.438695] audit: type=1334 audit(1696275181.035:2132): prog-id=823 op=UNLOAD [ 170.446473] audit: type=1334 audit(1696275181.035:2133): prog-id=824 op=LOAD [ 170.448269] audit: type=1300 audit(1696275181.035:2133): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdbe7ae750 a2=80 a3=0 items=0 ppid=3738 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.455107] audit: type=1327 audit(1696275181.035:2133): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 170.460664] audit: type=1334 audit(1696275181.037:2134): prog-id=824 op=UNLOAD [ 170.462444] audit: type=1334 audit(1696275181.038:2135): prog-id=825 op=LOAD [ 170.464127] audit: type=1300 audit(1696275181.038:2135): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdbe7ae430 a2=80 a3=0 items=0 ppid=3738 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:01 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:02 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 172.186853] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:03 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:04 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 175.416967] kauditd_printk_skb: 1575 callbacks suppressed [ 175.416970] audit: type=1334 audit(1696275186.036:2841): prog-id=1132 op=LOAD [ 175.419899] audit: type=1300 audit(1696275186.036:2841): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd23255a40 a2=74 a3=7ffd23255a40 items=0 ppid=4127 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.428077] audit: type=1327 audit(1696275186.036:2841): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 175.430314] audit: type=1334 audit(1696275186.036:2842): prog-id=1132 op=UNLOAD [ 175.432075] audit: type=1334 audit(1696275186.036:2843): prog-id=1133 op=LOAD [ 175.434029] audit: type=1300 audit(1696275186.036:2843): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd23254ac0 a2=90 a3=2 items=0 ppid=4127 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.440787] audit: type=1327 audit(1696275186.036:2843): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 175.445066] audit: type=1334 audit(1696275186.039:2844): prog-id=1133 op=UNLOAD [ 175.446850] audit: type=1334 audit(1696275186.039:2845): prog-id=1134 op=LOAD [ 175.448854] audit: type=1300 audit(1696275186.039:2845): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd23254ac0 a2=90 a3=2 items=0 ppid=4127 pid=4186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:06 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 179.135723] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:11 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 181.348007] kauditd_printk_skb: 2913 callbacks suppressed [ 181.348010] audit: type=1106 audit(1696275191.967:4192): pid=4429 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.372751] audit: type=1104 audit(1696275191.967:4193): pid=4429 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.406710] audit: type=1131 audit(1696275191.979:4194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.33:22-139.178.89.65:39594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.431569] audit: type=1130 audit(1696275191.990:4195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.33:22-139.178.89.65:39604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.645606] audit: type=1101 audit(1696275192.252:4196): pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.645613] audit: type=1103 audit(1696275192.255:4197): pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.645617] audit: type=1006 audit(1696275192.255:4198): pid=4627 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 181.645620] audit: type=1300 audit(1696275192.255:4198): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd321accd0 a2=3 a3=0 items=0 ppid=1 pid=4627 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.645623] audit: type=1327 audit(1696275192.255:4198): proctitle=737368643A20636F7265205B707269765D [ 181.661355] audit: type=1105 audit(1696275192.280:4199): pid=4627 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:13 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 191.959667] kauditd_printk_skb: 4 callbacks suppressed [ 191.959669] audit: type=1130 audit(1696275202.579:4204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.33:22-139.178.89.65:45102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.128205] audit: type=1101 audit(1696275202.747:4205): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.136101] audit: type=1130 audit(1696275202.755:4206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.33:22-198.235.24.151:60038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.146183] audit: type=1103 audit(1696275202.764:4207): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.152194] audit: type=1006 audit(1696275202.764:4208): pid=4670 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 192.156194] audit: type=1300 audit(1696275202.764:4208): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc91dea60 a2=3 a3=0 items=0 ppid=1 pid=4670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.173277] audit: type=1327 audit(1696275202.764:4208): proctitle=737368643A20636F7265205B707269765D [ 192.175539] audit: type=1105 audit(1696275202.789:4209): pid=4670 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.182355] audit: type=1103 audit(1696275202.791:4210): pid=4674 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.365684] audit: type=1106 audit(1696275202.985:4211): pid=4670 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.122473] kauditd_printk_skb: 3926 callbacks suppressed [ 197.122476] audit: type=1325 audit(1696275207.742:6028): table=filter:245 family=2 entries=1 op=nft_register_chain pid=4994 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.127662] audit: type=1300 audit(1696275207.742:6028): arch=c000003e syscall=46 success=yes exit=148 a0=3 a1=7ffde8c64940 a2=0 a3=7ffde8c6492c items=0 ppid=4703 pid=4994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.135663] audit: type=1327 audit(1696275207.742:6028): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F494E505554004F4C445F43494C49554D5F494E505554 [ 197.139342] audit: type=1325 audit(1696275207.751:6029): table=filter:246 family=2 entries=1 op=nft_register_chain pid=4997 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.143002] audit: type=1300 audit(1696275207.751:6029): arch=c000003e syscall=46 success=yes exit=148 a0=3 a1=7fff91a746b0 a2=0 a3=7fff91a7469c items=0 ppid=4703 pid=4997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.150263] audit: type=1327 audit(1696275207.751:6029): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F4F5554505554004F4C445F43494C49554D5F4F5554505554 [ 197.155899] audit: type=1325 audit(1696275207.775:6030): table=raw:247 family=2 entries=1 op=nft_register_chain pid=5000 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.159484] audit: type=1300 audit(1696275207.775:6030): arch=c000003e syscall=46 success=yes exit=144 a0=3 a1=7ffce79a3040 a2=0 a3=7ffce79a302c items=0 ppid=4703 pid=5000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.166777] audit: type=1327 audit(1696275207.775:6030): proctitle=69707461626C6573002D770035002D7400726177002D450043494C49554D5F4F55545055545F726177004F4C445F43494C49554D5F4F55545055545F726177 [ 197.178105] audit: type=1325 audit(1696275207.797:6031): table=nat:248 family=2 entries=1 op=nft_register_chain pid=5003 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.650485] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:30 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:31 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 202.394145] kauditd_printk_skb: 393 callbacks suppressed [ 202.394148] audit: type=1130 audit(1696275213.013:6173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.33:22-139.178.89.65:33254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.559626] audit: type=1101 audit(1696275213.179:6174): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.567623] audit: type=1103 audit(1696275213.187:6175): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.573812] audit: type=1006 audit(1696275213.187:6176): pid=5205 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 202.578315] audit: type=1300 audit(1696275213.187:6176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc8d643c0 a2=3 a3=0 items=0 ppid=1 pid=5205 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.585237] audit: type=1327 audit(1696275213.187:6176): proctitle=737368643A20636F7265205B707269765D [ 202.590576] audit: type=1105 audit(1696275213.210:6177): pid=5205 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.597959] audit: type=1103 audit(1696275213.210:6178): pid=5208 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.770558] audit: type=1106 audit(1696275213.390:6179): pid=5205 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.777875] audit: type=1104 audit(1696275213.390:6180): pid=5205 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 212.794994] kauditd_printk_skb: 1 callbacks suppressed [ 212.794997] audit: type=1130 audit(1696275223.414:6182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.33:22-139.178.89.65:35104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 212.964747] audit: type=1101 audit(1696275223.584:6183): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 212.972029] audit: type=1103 audit(1696275223.591:6184): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 212.977943] audit: type=1006 audit(1696275223.591:6185): pid=5220 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 212.981498] audit: type=1300 audit(1696275223.591:6185): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff56b60e90 a2=3 a3=0 items=0 ppid=1 pid=5220 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 212.988520] audit: type=1327 audit(1696275223.591:6185): proctitle=737368643A20636F7265205B707269765D [ 212.994422] audit: type=1105 audit(1696275223.613:6186): pid=5220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.001439] audit: type=1103 audit(1696275223.615:6187): pid=5223 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.181291] audit: type=1106 audit(1696275223.800:6188): pid=5220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.188551] audit: type=1104 audit(1696275223.801:6189): pid=5220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.406652] kauditd_printk_skb: 1 callbacks suppressed [ 221.406655] audit: type=1334 audit(1696275232.027:6191): prog-id=2539 op=LOAD [ 221.409812] audit: type=1300 audit(1696275232.027:6191): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5fcc0200 a2=74 a3=7ffe5fcc0200 items=0 ppid=5251 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.421106] audit: type=1327 audit(1696275232.027:6191): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 221.423531] audit: type=1334 audit(1696275232.027:6192): prog-id=2539 op=UNLOAD [ 221.425337] audit: type=1334 audit(1696275232.027:6193): prog-id=2540 op=LOAD [ 221.427487] audit: type=1300 audit(1696275232.027:6193): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5fcbf280 a2=90 a3=2 items=0 ppid=5251 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.436120] audit: type=1327 audit(1696275232.027:6193): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 221.439102] audit: type=1334 audit(1696275232.031:6194): prog-id=2540 op=UNLOAD [ 221.441356] audit: type=1334 audit(1696275232.032:6195): prog-id=2541 op=LOAD [ 221.443109] audit: type=1300 audit(1696275232.032:6195): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5fcbf280 a2=90 a3=2 items=0 ppid=5251 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.713227] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:58 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:59 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 233.703095] kauditd_printk_skb: 4303 callbacks suppressed [ 233.703098] audit: type=1130 audit(1696275244.323:8183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.33:22-139.178.89.65:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 233.884234] audit: type=1101 audit(1696275244.504:8184): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 233.893229] audit: type=1103 audit(1696275244.513:8185): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 233.901423] audit: type=1006 audit(1696275244.514:8186): pid=5765 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 233.907238] audit: type=1300 audit(1696275244.514:8186): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd512eca0 a2=3 a3=0 items=0 ppid=1 pid=5765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.919850] audit: type=1327 audit(1696275244.514:8186): proctitle=737368643A20636F7265205B707269765D [ 233.923567] audit: type=1105 audit(1696275244.538:8187): pid=5765 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 233.931444] audit: type=1103 audit(1696275244.540:8188): pid=5768 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 234.164302] audit: type=1106 audit(1696275244.784:8189): pid=5765 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 234.175101] audit: type=1104 audit(1696275244.785:8190): pid=5765 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.188449] kauditd_printk_skb: 1 callbacks suppressed [ 244.188453] audit: type=1130 audit(1696275254.809:8192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.33:22-139.178.89.65:51270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 244.388080] audit: type=1101 audit(1696275255.008:8193): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.402179] audit: type=1103 audit(1696275255.021:8194): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.409607] audit: type=1006 audit(1696275255.023:8195): pid=5780 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 244.415077] audit: type=1300 audit(1696275255.023:8195): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1aba1640 a2=3 a3=0 items=0 ppid=1 pid=5780 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.430605] audit: type=1327 audit(1696275255.023:8195): proctitle=737368643A20636F7265205B707269765D [ 244.453392] audit: type=1105 audit(1696275255.074:8196): pid=5780 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.462972] audit: type=1103 audit(1696275255.076:8197): pid=5783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.656031] audit: type=1106 audit(1696275255.276:8198): pid=5780 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.663453] audit: type=1104 audit(1696275255.276:8199): pid=5780 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.678945] kauditd_printk_skb: 1 callbacks suppressed [ 254.678948] audit: type=1130 audit(1696275265.298:8201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.33:22-139.178.89.65:43550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 254.846284] audit: type=1101 audit(1696275265.466:8202): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.854008] audit: type=1103 audit(1696275265.473:8203): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.860207] audit: type=1006 audit(1696275265.473:8204): pid=5795 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 254.866376] audit: type=1300 audit(1696275265.473:8204): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc85bf8520 a2=3 a3=0 items=0 ppid=1 pid=5795 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 254.873469] audit: type=1327 audit(1696275265.473:8204): proctitle=737368643A20636F7265205B707269765D [ 254.884553] audit: type=1105 audit(1696275265.503:8205): pid=5795 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.892617] audit: type=1103 audit(1696275265.512:8206): pid=5798 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 255.079570] audit: type=1106 audit(1696275265.699:8207): pid=5795 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 255.091345] audit: type=1104 audit(1696275265.699:8208): pid=5795 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.107833] kauditd_printk_skb: 1 callbacks suppressed [ 265.107835] audit: type=1130 audit(1696275275.728:8210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.33:22-139.178.89.65:41828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 265.273720] audit: type=1101 audit(1696275275.893:8211): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.281015] audit: type=1103 audit(1696275275.900:8212): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.286961] audit: type=1006 audit(1696275275.901:8213): pid=5808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 265.290882] audit: type=1300 audit(1696275275.901:8213): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2b3c7df0 a2=3 a3=0 items=0 ppid=1 pid=5808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 265.299013] audit: type=1327 audit(1696275275.901:8213): proctitle=737368643A20636F7265205B707269765D [ 265.305520] audit: type=1105 audit(1696275275.924:8214): pid=5808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.314747] audit: type=1103 audit(1696275275.934:8215): pid=5811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.503614] audit: type=1106 audit(1696275276.123:8216): pid=5808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.514557] audit: type=1104 audit(1696275276.126:8217): pid=5808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.132415] systemd-journald[1436]: Data hash table of /var/log/journal/ec2e24beb993f985509ecb2b67ba2d67/system.journal has a fill level at 75.0 (33393 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 269.137731] systemd-journald[1436]: /var/log/journal/ec2e24beb993f985509ecb2b67ba2d67/system.journal: Journal header limits reached or header out-of-date, rotating. [ 270.955547] kauditd_printk_skb: 3835 callbacks suppressed [ 270.955550] audit: type=1334 audit(1696275281.575:10029): prog-id=4203 op=LOAD [ 270.958703] audit: type=1300 audit(1696275281.575:10029): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffee4d99ac0 a2=74 a3=7ffee4d99ac0 items=0 ppid=5932 pid=6006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 270.967453] audit: type=1327 audit(1696275281.575:10029): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 270.974733] audit: type=1334 audit(1696275281.575:10030): prog-id=4203 op=UNLOAD [ 270.977477] audit: type=1334 audit(1696275281.575:10031): prog-id=4204 op=LOAD [ 270.980495] audit: type=1300 audit(1696275281.575:10031): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffee4d99a50 a2=80 a3=0 items=0 ppid=5932 pid=6006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 270.989237] audit: type=1327 audit(1696275281.575:10031): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 270.995543] audit: type=1334 audit(1696275281.579:10032): prog-id=4204 op=UNLOAD [ 270.997570] audit: type=1334 audit(1696275281.579:10033): prog-id=4205 op=LOAD [ 271.000745] audit: type=1300 audit(1696275281.579:10033): arch=c000003e syscall=321 success=yes exit=32 a0=5 a1=7ffee4d997c0 a2=80 a3=0 items=0 ppid=5932 pid=6006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 272.150700] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:34:45 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:34:46 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 276.124178] kauditd_printk_skb: 468 callbacks suppressed [ 276.124182] audit: type=1101 audit(1696275286.744:10211): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 276.143035] audit: type=1103 audit(1696275286.762:10212): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 276.151076] audit: type=1006 audit(1696275286.762:10213): pid=6359 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 276.156209] audit: type=1300 audit(1696275286.762:10213): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe4afa410 a2=3 a3=0 items=0 ppid=1 pid=6359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 276.174725] audit: type=1327 audit(1696275286.762:10213): proctitle=737368643A20636F7265205B707269765D [ 276.178943] audit: type=1105 audit(1696275286.794:10214): pid=6359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 276.188688] audit: type=1103 audit(1696275286.796:10215): pid=6362 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.588130] audit: type=1106 audit(1696275291.208:10216): pid=6359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.599502] audit: type=1104 audit(1696275291.208:10217): pid=6359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.607155] audit: type=1131 audit(1696275291.208:10218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.33:22-139.178.89.65:45908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 285.582009] kauditd_printk_skb: 8 callbacks suppressed [ 285.582011] audit: type=1334 audit(1696275296.201:10225): prog-id=4241 op=LOAD [ 285.584769] audit: type=1300 audit(1696275296.201:10225): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc82f721b0 a2=74 a3=7ffc82f721b0 items=0 ppid=6788 pid=6845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 285.593507] audit: type=1327 audit(1696275296.201:10225): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 285.602746] audit: type=1334 audit(1696275296.202:10226): prog-id=4241 op=UNLOAD [ 285.605727] audit: type=1334 audit(1696275296.202:10227): prog-id=4242 op=LOAD [ 285.607334] audit: type=1300 audit(1696275296.202:10227): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc82f71230 a2=90 a3=2 items=0 ppid=6788 pid=6845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 285.614120] audit: type=1327 audit(1696275296.202:10227): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 285.616346] audit: type=1334 audit(1696275296.203:10228): prog-id=4242 op=UNLOAD [ 285.617917] audit: type=1334 audit(1696275296.203:10229): prog-id=4243 op=LOAD [ 285.619422] audit: type=1300 audit(1696275296.203:10229): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc82f71230 a2=90 a3=2 items=0 ppid=6788 pid=6845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 286.038961] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni)) [ 289.000571] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 290.788978] kauditd_printk_skb: 4246 callbacks suppressed [ 290.788981] audit: type=1334 audit(1696275301.409:12191): prog-id=5068 op=LOAD [ 290.792085] audit: type=1300 audit(1696275301.409:12191): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffddf9dae40 a2=74 a3=7ffddf9dae40 items=0 ppid=6788 pid=7341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 290.805790] audit: type=1327 audit(1696275301.409:12191): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 290.810887] audit: type=1334 audit(1696275301.409:12192): prog-id=5068 op=UNLOAD [ 290.816783] audit: type=1334 audit(1696275301.409:12193): prog-id=5069 op=LOAD [ 290.818590] audit: type=1300 audit(1696275301.409:12193): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffddf9dadd0 a2=80 a3=0 items=0 ppid=6788 pid=7341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 290.826425] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.827657] audit: audit_lost=63 audit_rate_limit=0 audit_backlog_limit=64 [ 290.829111] audit: backlog limit exceeded [ 290.830010] audit: type=1327 audit(1696275301.409:12193): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:02 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:03 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 295.789998] kauditd_printk_skb: 4232 callbacks suppressed [ 295.790001] audit: type=1327 audit(1696275306.409:14156): proctitle=69707461626C6573002D770035002D74006E6174002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F6E6174002D6A004F4C445F43494C49554D5F5052455F6E6174 [ 295.797623] audit: type=1325 audit(1696275306.413:14157): table=nat:702 family=2 entries=1 op=nft_unregister_rule pid=7800 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.802084] audit: type=1300 audit(1696275306.413:14157): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7fff1aa99770 a2=0 a3=7fff1aa9975c items=0 ppid=7389 pid=7800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 295.809768] audit: type=1327 audit(1696275306.413:14157): proctitle=69707461626C6573002D770035002D74006E6174002D4400504F5354524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F504F53545F6E6174002D6A004F4C445F43494C49554D5F504F53545F6E6174 [ 295.816855] audit: type=1325 audit(1696275306.433:14158): table=nat:703 family=2 entries=1 op=nft_unregister_rule pid=7801 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.821612] audit: type=1300 audit(1696275306.433:14158): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffe967729f0 a2=0 a3=7ffe967729dc items=0 ppid=7389 pid=7801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 295.830933] audit: type=1327 audit(1696275306.433:14158): proctitle=69707461626C6573002D770035002D74006E6174002D44004F5554505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F4F55545055545F6E6174002D6A004F4C445F43494C49554D5F4F55545055545F6E6174 [ 295.838344] audit: type=1325 audit(1696275306.436:14159): table=nat:704 family=2 entries=1 op=nft_unregister_rule pid=7802 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.841886] audit: type=1300 audit(1696275306.436:14159): arch=c000003e syscall=46 success=yes exit=568 a0=3 a1=7ffd14b5ccd0 a2=0 a3=7ffd14b5ccbc items=0 ppid=7389 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 295.849148] audit: type=1327 audit(1696275306.436:14159): proctitle=69707461626C6573002D770035002D74006E6174002D44004F4C445F43494C49554D5F504F53545F6E6174002D6D006D61726B002D2D6D61726B0030786430302F3078663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E61742043494C49554D5F50 [ 296.338694] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:09 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:10 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 312.012622] kauditd_printk_skb: 276 callbacks suppressed [ 312.012626] audit: type=1334 audit(1696275322.632:14262): prog-id=5943 op=LOAD [ 312.015318] audit: type=1300 audit(1696275322.632:14262): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc3633ee0 a2=74 a3=7fffc3633ee0 items=0 ppid=7999 pid=8055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.023973] audit: type=1327 audit(1696275322.632:14262): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 312.026320] audit: type=1334 audit(1696275322.633:14263): prog-id=5943 op=UNLOAD [ 312.028081] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.028123] audit: type=1334 audit(1696275322.633:14264): prog-id=5944 op=LOAD [ 312.029359] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 312.031248] audit: type=1300 audit(1696275322.633:14264): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc3632f60 a2=90 a3=2 items=0 ppid=7999 pid=8055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.032506] audit: backlog limit exceeded [ 312.040855] audit: type=1327 audit(1696275322.633:14264): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 315.559365] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 317.418387] kauditd_printk_skb: 4294 callbacks suppressed [ 317.418423] audit: type=1334 audit(1696275328.038:16233): prog-id=6770 op=LOAD [ 317.422601] audit: type=1300 audit(1696275328.038:16233): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffea84dcca0 a2=74 a3=7ffea84dcca0 items=0 ppid=7999 pid=8553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 317.436583] audit: type=1327 audit(1696275328.038:16233): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 317.451822] audit: type=1334 audit(1696275328.038:16234): prog-id=6770 op=UNLOAD [ 317.460611] audit: type=1334 audit(1696275328.038:16235): prog-id=6771 op=LOAD [ 317.462635] audit: type=1300 audit(1696275328.038:16235): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffea84dcc30 a2=80 a3=0 items=0 ppid=7999 pid=8553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 317.471325] audit: type=1327 audit(1696275328.038:16235): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 317.487678] audit: type=1334 audit(1696275328.043:16236): prog-id=6771 op=UNLOAD [ 317.489995] audit: type=1334 audit(1696275328.043:16237): prog-id=6772 op=LOAD [ 317.498845] audit: type=1300 audit(1696275328.043:16237): arch=c000003e syscall=321 success=yes exit=38 a0=5 a1=7ffea84dc9a0 a2=80 a3=0 items=0 ppid=7999 pid=8553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:28 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:29 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 191.959667] kauditd_printk_skb: 4 callbacks suppressed [ 191.959669] audit: type=1130 audit(1696275202.579:4204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.33:22-139.178.89.65:45102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.128205] audit: type=1101 audit(1696275202.747:4205): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.136101] audit: type=1130 audit(1696275202.755:4206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.33:22-198.235.24.151:60038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.146183] audit: type=1103 audit(1696275202.764:4207): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.152194] audit: type=1006 audit(1696275202.764:4208): pid=4670 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 192.156194] audit: type=1300 audit(1696275202.764:4208): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc91dea60 a2=3 a3=0 items=0 ppid=1 pid=4670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.173277] audit: type=1327 audit(1696275202.764:4208): proctitle=737368643A20636F7265205B707269765D [ 192.175539] audit: type=1105 audit(1696275202.789:4209): pid=4670 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.182355] audit: type=1103 audit(1696275202.791:4210): pid=4674 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.365684] audit: type=1106 audit(1696275202.985:4211): pid=4670 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.122473] kauditd_printk_skb: 3926 callbacks suppressed [ 197.122476] audit: type=1325 audit(1696275207.742:6028): table=filter:245 family=2 entries=1 op=nft_register_chain pid=4994 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.127662] audit: type=1300 audit(1696275207.742:6028): arch=c000003e syscall=46 success=yes exit=148 a0=3 a1=7ffde8c64940 a2=0 a3=7ffde8c6492c items=0 ppid=4703 pid=4994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.135663] audit: type=1327 audit(1696275207.742:6028): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F494E505554004F4C445F43494C49554D5F494E505554 [ 197.139342] audit: type=1325 audit(1696275207.751:6029): table=filter:246 family=2 entries=1 op=nft_register_chain pid=4997 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.143002] audit: type=1300 audit(1696275207.751:6029): arch=c000003e syscall=46 success=yes exit=148 a0=3 a1=7fff91a746b0 a2=0 a3=7fff91a7469c items=0 ppid=4703 pid=4997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.150263] audit: type=1327 audit(1696275207.751:6029): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F4F5554505554004F4C445F43494C49554D5F4F5554505554 [ 197.155899] audit: type=1325 audit(1696275207.775:6030): table=raw:247 family=2 entries=1 op=nft_register_chain pid=5000 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.159484] audit: type=1300 audit(1696275207.775:6030): arch=c000003e syscall=46 success=yes exit=144 a0=3 a1=7ffce79a3040 a2=0 a3=7ffce79a302c items=0 ppid=4703 pid=5000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.166777] audit: type=1327 audit(1696275207.775:6030): proctitle=69707461626C6573002D770035002D7400726177002D450043494C49554D5F4F55545055545F726177004F4C445F43494C49554D5F4F55545055545F726177 [ 197.178105] audit: type=1325 audit(1696275207.797:6031): table=nat:248 family=2 entries=1 op=nft_register_chain pid=5003 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 197.650485] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:30 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:31 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 202.394145] kauditd_printk_skb: 393 callbacks suppressed [ 202.394148] audit: type=1130 audit(1696275213.013:6173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.33:22-139.178.89.65:33254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.559626] audit: type=1101 audit(1696275213.179:6174): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.567623] audit: type=1103 audit(1696275213.187:6175): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.573812] audit: type=1006 audit(1696275213.187:6176): pid=5205 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 202.578315] audit: type=1300 audit(1696275213.187:6176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc8d643c0 a2=3 a3=0 items=0 ppid=1 pid=5205 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.585237] audit: type=1327 audit(1696275213.187:6176): proctitle=737368643A20636F7265205B707269765D [ 202.590576] audit: type=1105 audit(1696275213.210:6177): pid=5205 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.597959] audit: type=1103 audit(1696275213.210:6178): pid=5208 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.770558] audit: type=1106 audit(1696275213.390:6179): pid=5205 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.777875] audit: type=1104 audit(1696275213.390:6180): pid=5205 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 212.794994] kauditd_printk_skb: 1 callbacks suppressed [ 212.794997] audit: type=1130 audit(1696275223.414:6182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.33:22-139.178.89.65:35104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 212.964747] audit: type=1101 audit(1696275223.584:6183): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 212.972029] audit: type=1103 audit(1696275223.591:6184): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 212.977943] audit: type=1006 audit(1696275223.591:6185): pid=5220 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 212.981498] audit: type=1300 audit(1696275223.591:6185): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff56b60e90 a2=3 a3=0 items=0 ppid=1 pid=5220 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 212.988520] audit: type=1327 audit(1696275223.591:6185): proctitle=737368643A20636F7265205B707269765D [ 212.994422] audit: type=1105 audit(1696275223.613:6186): pid=5220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.001439] audit: type=1103 audit(1696275223.615:6187): pid=5223 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.181291] audit: type=1106 audit(1696275223.800:6188): pid=5220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.188551] audit: type=1104 audit(1696275223.801:6189): pid=5220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.406652] kauditd_printk_skb: 1 callbacks suppressed [ 221.406655] audit: type=1334 audit(1696275232.027:6191): prog-id=2539 op=LOAD [ 221.409812] audit: type=1300 audit(1696275232.027:6191): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5fcc0200 a2=74 a3=7ffe5fcc0200 items=0 ppid=5251 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.421106] audit: type=1327 audit(1696275232.027:6191): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 221.423531] audit: type=1334 audit(1696275232.027:6192): prog-id=2539 op=UNLOAD [ 221.425337] audit: type=1334 audit(1696275232.027:6193): prog-id=2540 op=LOAD [ 221.427487] audit: type=1300 audit(1696275232.027:6193): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5fcbf280 a2=90 a3=2 items=0 ppid=5251 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.436120] audit: type=1327 audit(1696275232.027:6193): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 221.439102] audit: type=1334 audit(1696275232.031:6194): prog-id=2540 op=UNLOAD [ 221.441356] audit: type=1334 audit(1696275232.032:6195): prog-id=2541 op=LOAD [ 221.443109] audit: type=1300 audit(1696275232.032:6195): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5fcbf280 a2=90 a3=2 items=0 ppid=5251 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.713227] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:58 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:33:59 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 233.703095] kauditd_printk_skb: 4303 callbacks suppressed [ 233.703098] audit: type=1130 audit(1696275244.323:8183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.33:22-139.178.89.65:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 233.884234] audit: type=1101 audit(1696275244.504:8184): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 233.893229] audit: type=1103 audit(1696275244.513:8185): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 233.901423] audit: type=1006 audit(1696275244.514:8186): pid=5765 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 233.907238] audit: type=1300 audit(1696275244.514:8186): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd512eca0 a2=3 a3=0 items=0 ppid=1 pid=5765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.919850] audit: type=1327 audit(1696275244.514:8186): proctitle=737368643A20636F7265205B707269765D [ 233.923567] audit: type=1105 audit(1696275244.538:8187): pid=5765 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 233.931444] audit: type=1103 audit(1696275244.540:8188): pid=5768 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 234.164302] audit: type=1106 audit(1696275244.784:8189): pid=5765 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 234.175101] audit: type=1104 audit(1696275244.785:8190): pid=5765 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.188449] kauditd_printk_skb: 1 callbacks suppressed [ 244.188453] audit: type=1130 audit(1696275254.809:8192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.33:22-139.178.89.65:51270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 244.388080] audit: type=1101 audit(1696275255.008:8193): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.402179] audit: type=1103 audit(1696275255.021:8194): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.409607] audit: type=1006 audit(1696275255.023:8195): pid=5780 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 244.415077] audit: type=1300 audit(1696275255.023:8195): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1aba1640 a2=3 a3=0 items=0 ppid=1 pid=5780 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.430605] audit: type=1327 audit(1696275255.023:8195): proctitle=737368643A20636F7265205B707269765D [ 244.453392] audit: type=1105 audit(1696275255.074:8196): pid=5780 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.462972] audit: type=1103 audit(1696275255.076:8197): pid=5783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.656031] audit: type=1106 audit(1696275255.276:8198): pid=5780 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 244.663453] audit: type=1104 audit(1696275255.276:8199): pid=5780 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.678945] kauditd_printk_skb: 1 callbacks suppressed [ 254.678948] audit: type=1130 audit(1696275265.298:8201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.33:22-139.178.89.65:43550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 254.846284] audit: type=1101 audit(1696275265.466:8202): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.854008] audit: type=1103 audit(1696275265.473:8203): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.860207] audit: type=1006 audit(1696275265.473:8204): pid=5795 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 254.866376] audit: type=1300 audit(1696275265.473:8204): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc85bf8520 a2=3 a3=0 items=0 ppid=1 pid=5795 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 254.873469] audit: type=1327 audit(1696275265.473:8204): proctitle=737368643A20636F7265205B707269765D [ 254.884553] audit: type=1105 audit(1696275265.503:8205): pid=5795 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 254.892617] audit: type=1103 audit(1696275265.512:8206): pid=5798 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 255.079570] audit: type=1106 audit(1696275265.699:8207): pid=5795 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 255.091345] audit: type=1104 audit(1696275265.699:8208): pid=5795 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.107833] kauditd_printk_skb: 1 callbacks suppressed [ 265.107835] audit: type=1130 audit(1696275275.728:8210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.33:22-139.178.89.65:41828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 265.273720] audit: type=1101 audit(1696275275.893:8211): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.281015] audit: type=1103 audit(1696275275.900:8212): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.286961] audit: type=1006 audit(1696275275.901:8213): pid=5808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 265.290882] audit: type=1300 audit(1696275275.901:8213): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2b3c7df0 a2=3 a3=0 items=0 ppid=1 pid=5808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 265.299013] audit: type=1327 audit(1696275275.901:8213): proctitle=737368643A20636F7265205B707269765D [ 265.305520] audit: type=1105 audit(1696275275.924:8214): pid=5808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.314747] audit: type=1103 audit(1696275275.934:8215): pid=5811 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.503614] audit: type=1106 audit(1696275276.123:8216): pid=5808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 265.514557] audit: type=1104 audit(1696275276.126:8217): pid=5808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.132415] systemd-journald[1436]: Data hash table of /var/log/journal/ec2e24beb993f985509ecb2b67ba2d67/system.journal has a fill level at 75.0 (33393 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 269.137731] systemd-journald[1436]: /var/log/journal/ec2e24beb993f985509ecb2b67ba2d67/system.journal: Journal header limits reached or header out-of-date, rotating. [ 270.955547] kauditd_printk_skb: 3835 callbacks suppressed [ 270.955550] audit: type=1334 audit(1696275281.575:10029): prog-id=4203 op=LOAD [ 270.958703] audit: type=1300 audit(1696275281.575:10029): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffee4d99ac0 a2=74 a3=7ffee4d99ac0 items=0 ppid=5932 pid=6006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 270.967453] audit: type=1327 audit(1696275281.575:10029): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 270.974733] audit: type=1334 audit(1696275281.575:10030): prog-id=4203 op=UNLOAD [ 270.977477] audit: type=1334 audit(1696275281.575:10031): prog-id=4204 op=LOAD [ 270.980495] audit: type=1300 audit(1696275281.575:10031): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffee4d99a50 a2=80 a3=0 items=0 ppid=5932 pid=6006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 270.989237] audit: type=1327 audit(1696275281.575:10031): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 270.995543] audit: type=1334 audit(1696275281.579:10032): prog-id=4204 op=UNLOAD [ 270.997570] audit: type=1334 audit(1696275281.579:10033): prog-id=4205 op=LOAD [ 271.000745] audit: type=1300 audit(1696275281.579:10033): arch=c000003e syscall=321 success=yes exit=32 a0=5 a1=7ffee4d997c0 a2=80 a3=0 items=0 ppid=5932 pid=6006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 272.150700] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:34:45 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:34:46 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 276.124178] kauditd_printk_skb: 468 callbacks suppressed [ 276.124182] audit: type=1101 audit(1696275286.744:10211): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 276.143035] audit: type=1103 audit(1696275286.762:10212): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 276.151076] audit: type=1006 audit(1696275286.762:10213): pid=6359 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 276.156209] audit: type=1300 audit(1696275286.762:10213): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe4afa410 a2=3 a3=0 items=0 ppid=1 pid=6359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 276.174725] audit: type=1327 audit(1696275286.762:10213): proctitle=737368643A20636F7265205B707269765D [ 276.178943] audit: type=1105 audit(1696275286.794:10214): pid=6359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 276.188688] audit: type=1103 audit(1696275286.796:10215): pid=6362 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.588130] audit: type=1106 audit(1696275291.208:10216): pid=6359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.599502] audit: type=1104 audit(1696275291.208:10217): pid=6359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.607155] audit: type=1131 audit(1696275291.208:10218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.33:22-139.178.89.65:45908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 285.582009] kauditd_printk_skb: 8 callbacks suppressed [ 285.582011] audit: type=1334 audit(1696275296.201:10225): prog-id=4241 op=LOAD [ 285.584769] audit: type=1300 audit(1696275296.201:10225): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc82f721b0 a2=74 a3=7ffc82f721b0 items=0 ppid=6788 pid=6845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 285.593507] audit: type=1327 audit(1696275296.201:10225): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 285.602746] audit: type=1334 audit(1696275296.202:10226): prog-id=4241 op=UNLOAD [ 285.605727] audit: type=1334 audit(1696275296.202:10227): prog-id=4242 op=LOAD [ 285.607334] audit: type=1300 audit(1696275296.202:10227): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc82f71230 a2=90 a3=2 items=0 ppid=6788 pid=6845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 285.614120] audit: type=1327 audit(1696275296.202:10227): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 285.616346] audit: type=1334 audit(1696275296.203:10228): prog-id=4242 op=UNLOAD [ 285.617917] audit: type=1334 audit(1696275296.203:10229): prog-id=4243 op=LOAD [ 285.619422] audit: type=1300 audit(1696275296.203:10229): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc82f71230 a2=90 a3=2 items=0 ppid=6788 pid=6845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 286.038961] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni)) [ 289.000571] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 290.788978] kauditd_printk_skb: 4246 callbacks suppressed [ 290.788981] audit: type=1334 audit(1696275301.409:12191): prog-id=5068 op=LOAD [ 290.792085] audit: type=1300 audit(1696275301.409:12191): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffddf9dae40 a2=74 a3=7ffddf9dae40 items=0 ppid=6788 pid=7341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 290.805790] audit: type=1327 audit(1696275301.409:12191): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 290.810887] audit: type=1334 audit(1696275301.409:12192): prog-id=5068 op=UNLOAD [ 290.816783] audit: type=1334 audit(1696275301.409:12193): prog-id=5069 op=LOAD [ 290.818590] audit: type=1300 audit(1696275301.409:12193): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffddf9dadd0 a2=80 a3=0 items=0 ppid=6788 pid=7341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 290.826425] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.827657] audit: audit_lost=63 audit_rate_limit=0 audit_backlog_limit=64 [ 290.829111] audit: backlog limit exceeded [ 290.830010] audit: type=1327 audit(1696275301.409:12193): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:02 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:03 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 295.789998] kauditd_printk_skb: 4232 callbacks suppressed [ 295.790001] audit: type=1327 audit(1696275306.409:14156): proctitle=69707461626C6573002D770035002D74006E6174002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F6E6174002D6A004F4C445F43494C49554D5F5052455F6E6174 [ 295.797623] audit: type=1325 audit(1696275306.413:14157): table=nat:702 family=2 entries=1 op=nft_unregister_rule pid=7800 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.802084] audit: type=1300 audit(1696275306.413:14157): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7fff1aa99770 a2=0 a3=7fff1aa9975c items=0 ppid=7389 pid=7800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 295.809768] audit: type=1327 audit(1696275306.413:14157): proctitle=69707461626C6573002D770035002D74006E6174002D4400504F5354524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F504F53545F6E6174002D6A004F4C445F43494C49554D5F504F53545F6E6174 [ 295.816855] audit: type=1325 audit(1696275306.433:14158): table=nat:703 family=2 entries=1 op=nft_unregister_rule pid=7801 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.821612] audit: type=1300 audit(1696275306.433:14158): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffe967729f0 a2=0 a3=7ffe967729dc items=0 ppid=7389 pid=7801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 295.830933] audit: type=1327 audit(1696275306.433:14158): proctitle=69707461626C6573002D770035002D74006E6174002D44004F5554505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F4F55545055545F6E6174002D6A004F4C445F43494C49554D5F4F55545055545F6E6174 [ 295.838344] audit: type=1325 audit(1696275306.436:14159): table=nat:704 family=2 entries=1 op=nft_unregister_rule pid=7802 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.841886] audit: type=1300 audit(1696275306.436:14159): arch=c000003e syscall=46 success=yes exit=568 a0=3 a1=7ffd14b5ccd0 a2=0 a3=7ffd14b5ccbc items=0 ppid=7389 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 295.849148] audit: type=1327 audit(1696275306.436:14159): proctitle=69707461626C6573002D770035002D74006E6174002D44004F4C445F43494C49554D5F504F53545F6E6174002D6D006D61726B002D2D6D61726B0030786430302F3078663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E61742043494C49554D5F50 [ 296.338694] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:09 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:10 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 312.012622] kauditd_printk_skb: 276 callbacks suppressed [ 312.012626] audit: type=1334 audit(1696275322.632:14262): prog-id=5943 op=LOAD [ 312.015318] audit: type=1300 audit(1696275322.632:14262): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc3633ee0 a2=74 a3=7fffc3633ee0 items=0 ppid=7999 pid=8055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.023973] audit: type=1327 audit(1696275322.632:14262): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 312.026320] audit: type=1334 audit(1696275322.633:14263): prog-id=5943 op=UNLOAD [ 312.028081] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.028123] audit: type=1334 audit(1696275322.633:14264): prog-id=5944 op=LOAD [ 312.029359] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 312.031248] audit: type=1300 audit(1696275322.633:14264): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc3632f60 a2=90 a3=2 items=0 ppid=7999 pid=8055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.032506] audit: backlog limit exceeded [ 312.040855] audit: type=1327 audit(1696275322.633:14264): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 315.559365] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 317.418387] kauditd_printk_skb: 4294 callbacks suppressed [ 317.418423] audit: type=1334 audit(1696275328.038:16233): prog-id=6770 op=LOAD [ 317.422601] audit: type=1300 audit(1696275328.038:16233): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffea84dcca0 a2=74 a3=7ffea84dcca0 items=0 ppid=7999 pid=8553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 317.436583] audit: type=1327 audit(1696275328.038:16233): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 317.451822] audit: type=1334 audit(1696275328.038:16234): prog-id=6770 op=UNLOAD [ 317.460611] audit: type=1334 audit(1696275328.038:16235): prog-id=6771 op=LOAD [ 317.462635] audit: type=1300 audit(1696275328.038:16235): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffea84dcc30 a2=80 a3=0 items=0 ppid=7999 pid=8553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 317.471325] audit: type=1327 audit(1696275328.038:16235): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323338395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 317.487678] audit: type=1334 audit(1696275328.043:16236): prog-id=6771 op=UNLOAD [ 317.489995] audit: type=1334 audit(1696275328.043:16237): prog-id=6772 op=LOAD [ 317.498845] audit: type=1300 audit(1696275328.043:16237): arch=c000003e syscall=321 success=yes exit=38 a0=5 a1=7ffea84dc9a0 a2=80 a3=0 items=0 ppid=7999 pid=8553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:28 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: This is ip-172-31-29-33 (Linux x86_64 5.15.132-flatcar) 19:35:29 SSH host key: SHA256:x60UrUWWQ1jHh++hVTjkLFgcWRCwjNRrebRiVu0G1dQ (RSA) SSH host key: SHA256:nYYLZwIaofyaCaPSAhPmDsc/r+9ZqyZHcU1dygu1ikY (ECDSA) SSH host key: SHA256:HzKA96zedXGfl7461HWIIuCJNou3pkAUi4qCOsvGchU (ED25519) eth0: 172.31.29.33 fe80::440:4bff:fe43:7135 ip-172-31-29-33 login: [ 322.689218] kauditd_printk_skb: 104 callbacks suppressed [ 322.689222] audit: type=1130 audit(1696275333.309:16281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.33:22-103.94.250.174:47292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 322.884093] audit: type=1130 audit(1696275333.504:16282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.33:22-103.94.250.174:47294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 324.172052] audit: type=1100 audit(1696275334.792:16283): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="pi" exe="/usr/sbin/sshd" hostname=103.94.250.174 addr=103.94.250.174 terminal=ssh res=failed' [ 324.402098] audit: type=1100 audit(1696275335.022:16284): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="pi" exe="/usr/sbin/sshd" hostname=103.94.250.174 addr=103.94.250.174 terminal=ssh res=failed' [ 326.606839] audit: type=1131 audit(1696275337.227:16285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.33:22-103.94.250.174:47294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 328.378087] audit: type=1131 audit(1696275338.998:16286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.33:22-103.94.250.174:47292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 341.947379] audit: type=1334 audit(1696275352.567:16287): prog-id=6794 op=LOAD [ 341.949179] audit: type=1300 audit(1696275352.567:16287): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4982d60 a2=74 a3=7fffe4982d60 items=0 ppid=8618 pid=8677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 341.957536] audit: type=1327 audit(1696275352.567:16287): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 341.959979] audit: type=1334 audit(1696275352.568:16288): prog-id=6794 op=UNLOAD [ 341.961712] audit: type=1334 audit(1696275352.568:16289): prog-id=6795 op=LOAD [ 341.963469] audit: type=1300 audit(1696275352.568:16289): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4981de0 a2=90 a3=2 items=0 ppid=8618 pid=8677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 341.973201] audit: type=1327 audit(1696275352.568:16289): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 341.975647] audit: type=1334 audit(1696275352.569:16290): prog-id=6795 op=UNLOAD [ 341.977371] audit: type=1334 audit(1696275352.570:16291): prog-id=6796 op=LOAD [ 341.979216] audit: type=1300 audit(1696275352.570:16291): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4981de0 a2=90 a3=2 items=0 ppid=8618 pid=8677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 366.912356] kauditd_printk_skb: 2556 callbacks suppressed [ 366.912359] audit: type=1106 audit(1696275377.533:17505): pid=1919 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 366.923053] audit: type=1104 audit(1696275377.533:17506): pid=1919 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 366.928953] audit: type=1131 audit(1696275377.534:17507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.29.33:22-139.178.89.65:52660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-addon\x2dconfig.slice. [ OK ] Removed slice system-addon\x2drun.slice. [ OK ] Removed slice system-modprobe.slice. [ OK ] Removed slice system-sshd.slice. [ OK ] Removed slice system-system\x2dcloudinit.slice. [ OK ] Stopped target multi-user.target. [ OK ] Stopped target getty.target. [ OK ] Stopped target machines.target. [ OK ] Stopped target nss-lookup.target. [ OK ] Stopped target remote-cryptsetup.target. [ OK ] Stopped target timers.target. [ OK ] Stopped logrotate.timer. [ OK ] Stopped mdadm.timer. [ OK ] Stopped systemd-tmpfiles-clean.timer. [ OK ] Stopped target time-set.target. [ OK ] Stopped target user-config.target. [ OK ] Stopped target system-config.target. Unmounting boot.mount... Stopping amazon-ssm-agent.service... [ OK ] Stopped coreos-metadata-sshkeys@core.service. [ OK ] Removed slice system-coreos\x2dmetadata\x2dsshkeys.slice. Stopping docker.service... Stopping getty@tty1.service... Stopping kubelet.service... Stopping locksmithd.service... Stopping polkit.service... [ OK ] Stopped prepare-cni-plugins.service. [ OK ] Stopped prepare-critools.service. Stopping serial-[ OK ] Stopped sshd-keygen.service. [ 367.078916] audit: type=1131 audit(1696275377.683:17508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 367.084277] audit: type=1131 audit(1696275377.693:17509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-cni-plugins comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 367.089574] audit: type=1131 audit(1696275377.693:17510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-critools comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 367.089581] audit: type=1131 audit(1696275377.705:17511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping systemd-logind.service... [ OK ] Stopped systemd-machine-id-commit.service. [ 367.119353] audit: type=1131 audit(1696275377.740:17512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped target first-boot-complete.target. Stopping systemd-random-seed.service... [ OK ] Stopped update-ssh-keys-after-ignition.service. [ 367.149138] audit: type=1131 audit(1696275377.769:17513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=update-ssh-keys-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping user@500.service... [ OK ] Stopped systemd-logind.service. [ 367.195647] audit: type=1131 audit(1696275377.816:17514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped amazon-ssm-agent.service. [ OK ] Stopped locksmithd.service. [ OK ] Stopped polkit.service. [ OK ] Stopped getty@tty1.service. [ OK ] Stopped serial-getty@ttyS0.service. [ OK ] Stopped user@500.service. [ OK ] Stopped docker.service. [ OK ] Stopped kubelet.service. [ OK ] Unmounted boot.mount. [ OK ] Stopped systemd-random-seed.service. [ OK ] Removed slice system-getty.slice. [ OK ] Removed slice system-serial\x2dgetty.slice. [ OK ] Stopped target network-online.target. Stopping containerd.service... [ OK ] Stopped systemd-fsck@dev-d…2dlabel-EFI\x2dSYSTEM.service. [ OK ] Stopped systemd-networkd-wait-online.service. Stopping systemd-user-sessions.service... Stopping update-engine.service... Stopping user-runtime-dir@500.service... [ OK ] Stopped containerd.service. [ OK ] Stopped systemd-user-sessions.service. [ OK ] Stopped target network.target. [ OK ] Stopped target remote-fs.target. Stopping systemd-networkd.service... [ OK ] Unmounted run-user-500.mount. [ OK ] Stopped user-runtime-dir@500.service. [ OK ] Stopped systemd-networkd.service. [ OK ] Removed slice user-500.slice. [ OK ] Stopped target network-pre.target. Stopping dbus.service... [ OK ] Stopped systemd-network-generator.service. [ OK ] Stopped update-engine.service. [ OK ] Stopped dbus.service. [ OK ] Stopped target basic.target. [ OK ] Stopped target paths.target. [ OK ] Stopped motdgen.path. [ OK ] Stopped user-cloudinit@var…car\x2dinstall-user_data.path. [ OK ] Stopped target slices.target. [ OK ] Removed slice user.slice. [ OK ] Stopped target sockets.target. [ OK ] Closed dbus.socket. [ OK ] Closed docker.socket. [ OK ] Closed sshd.socket. [ OK ] Stopped target sysinit.target. [ OK ] Unset automount proc-sys-fs-binfmt_misc.automount. [ OK ] Stopped target integritysetup.target. [ OK ] Stopped target veritysetup.target. [ OK ] Closed systemd-networkd.socket. Stopping audit-rules.service... Stopping systemd-resolved.service... [ OK ] Stopped systemd-sysctl.service. [ OK ] Closed systemd-coredump.socket. [ OK ] Stopped systemd-modules-load.service. Stopping systemd-timesyncd.service... [ OK ] Stopped systemd-update-done.service. [ OK ] Stopped ldconfig.service. [ OK ] Stopped systemd-boot-update.service. [ OK ] Stopped systemd-hwdb-update.service. [ OK ] Stopped systemd-journal-catalog-update.service. Stopping systemd-update-utmp.service... [ OK ] Unmounted run-credentials-…stemd\x2dsysctl.service.mount. [ OK ] Stopped systemd-resolved.service. [ OK ] Stopped systemd-timesyncd.service. [ OK ] Stopped audit-rules.service. [ OK ] Stopped systemd-update-utmp.service. [ OK ] Stopped systemd-tmpfiles-setup.service. [ OK ] Stopped target local-fs.target. Unmounting media.mount... Unmounting run-cilium-cgroupv2.mount... Unmounting run-containerd-…a3eb8c5d494413e0d-shm.mount... Unmounting run-containerd-…51a2945be6fc2afb3-shm.mount... Unmounting run-containerd-…f484310bc8d4989da-shm.mount... Unmounting run-containerd-…034821ca83b6570bb-shm.mount... Unmounting run-containerd-…b8c5d494413e0d-rootfs.mount... Unmounting run-containerd-…2945be6fc2afb3-rootfs.mount... Unmounting run-containerd-…ee9a366d064e10-rootfs.mount... Unmounting run-containerd-…8799812ba2f718-rootfs.mount... Unmounting run-containerd-…c791cb44027878-rootfs.mount... Unmounting run-containerd-…b126bd540c3091-rootfs.mount... Unmounting run-containerd-…4310bc8d4989da-rootfs.mount... Unmounting run-containerd-…821ca83b6570bb-rootfs.mount... Unmounting run-credentials…d\x2dsysusers.service.mount... Unmounting run-credentials…iles\x2dsetup.service.mount... Unmounting run-credentials…dsetup\x2ddev.service.mount... Unmounting run-torcx-unpack.mount... Unmounting tmp.mount... Unmounting usr-share-oem.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dm62dc.mount... [ OK ] Unmounted media.mount. [ OK ] Unmounted run-cilium-cgroupv2.mount. [ OK ] Unmounted run-containerd-i…47a3eb8c5d494413e0d-shm.mount. [ OK ] Unmounted run-containerd-i…a051a2945be6fc2afb3-shm.mount. [ OK ] Unmounted run-containerd-i…4ff484310bc8d4989da-shm.mount. [ OK ] Unmounted run-containerd-i…4e034821ca83b6570bb-shm.mount. [ OK ] Unmounted run-containerd-i…3eb8c5d494413e0d-rootfs.mount. [ OK ] Unmounted run-containerd-i…1a2945be6fc2afb3-rootfs.mount. [ OK ] Unmounted run-containerd-i…e0ee9a366d064e10-rootfs.mount. [ OK ] Unmounted run-containerd-i…f38799812ba2f718-rootfs.mount. [ OK ] Unmounted run-containerd-i…1ac791cb44027878-rootfs.mount. [ OK ] Unmounted run-containerd-i…beb126bd540c3091-rootfs.mount. [ OK ] Unmounted run-containerd-i…484310bc8d4989da-rootfs.mount. [ OK ] Unmounted run-containerd-i…34821ca83b6570bb-rootfs.mount. [ OK ] Unmounted run-credentials-…emd\x2dsysusers.service.mount. [ OK ] Unmounted run-credentials-…pfiles\x2dsetup.service.mount. [ OK ] Unmounted run-credentials-…x2dsetup\x2ddev.service.mount. [FAILED] Failed unmounting run-torcx-unpack.mount. [ OK ] Unmounted tmp.mount. [ OK ] Unmounted usr-share-oem.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dm62dc.mount. [ OK ] Stopped target swap.target. [ OK ] Reached target umount.target. [ OK ] Stopped systemd-fsck@dev-disk-by\x2dlabel-OEM.service. [ OK ] Removed slice system-systemd\x2dfsck.slice. [ OK ] Stopped target local-fs-pre.target. [ OK ] Stopped lvm2-activation.service. [ OK ] Stopped target cryptsetup.target. [ OK ] Stopped systemd-ask-password-console.path. [ OK ] Stopped systemd-ask-password-wall.path. [ OK ] Stopped lvm2-activation-early.service. [ OK ] Stopped systemd-tmpfiles-setup-dev.service. [ OK ] Stopped systemd-sysusers.service. [ OK ] Stopped systemd-remount-fs.service. [ OK ] Reached target shutdown.target. [ OK ] Reached target final.target. [ OK ] Finished systemd-poweroff.service. [ OK ] Reached target poweroff.target. [ 367.933478] systemd-shutdown[1]: Syncing filesystems and block devices. [ 367.993526] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 368.004844] systemd-journald[1436]: Received SIGTERM from PID 1 (systemd-shutdow). [ 369.049204] systemd-shutdown[1]: Sending SIGKILL to remaining processes... [ 369.054003] systemd-shutdown[1]: Unmounting file systems. [ 369.056636] (sd-umount)[9023]: Unmounting '/run/torcx/unpack'. [ 369.087515] (sd-remount)[9024]: Remounting '/' read-only with options 'seclabel'. [ 369.097541] (sd-remount)[9024]: Failed to remount '/' read-only: Device or resource busy [ 369.100771] (sd-remount)[9025]: Remounting '/' read-only with options 'seclabel'. [ 369.102775] (sd-remount)[9025]: Failed to remount '/' read-only: Device or resource busy [ 369.107813] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 369.109314] systemd-shutdown[1]: Deactivating swaps. [ 369.114769] systemd-shutdown[1]: All swaps deactivated. [ 369.115847] systemd-shutdown[1]: Detaching loop devices. [ 369.117455] systemd-shutdown[1]: All loop devices detached. [ 369.118661] systemd-shutdown[1]: Stopping MD devices. [ 369.119844] systemd-shutdown[1]: All MD devices stopped. [ 369.121029] systemd-shutdown[1]: Detaching DM devices. [ 369.122273] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 369.123935] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 369.125750] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 369.127235] systemd-shutdown[1]: Unmounting file systems. [ 369.129074] (sd-remount)[9026]: Remounting '/' read-only with options 'seclabel'. [ 369.130886] (sd-remount)[9026]: Failed to remount '/' read-only: Device or resource busy [ 369.132748] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 369.134362] systemd-shutdown[1]: Detaching DM devices. [ 369.135765] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 369.137010] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 369.138619] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 369.140061] systemd-shutdown[1]: Unmounting file systems. [ 369.142232] (sd-remount)[9027]: Remounting '/' read-only with options 'seclabel'. [ 369.143892] (sd-remount)[9027]: Failed to remount '/' read-only: Device or resource busy [ 369.145938] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 369.147538] systemd-shutdown[1]: Detaching DM devices. [ 369.148837] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 369.150074] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 369.151766] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 369.153063] systemd-shutdown[1]: Cannot finalize remaining file systems, DM devices, continuing. [ 369.170906] systemd-shutdown[1]: Failed to finalize file systems, DM devices, ignoring. [ 369.173149] systemd-shutdown[1]: Syncing filesystems and block devices. [ 369.176830] systemd-shutdown[1]: Powering off. [ 369.307191] ACPI: PM: Preparing to enter system sleep state S5 [ 369.308549] reboot: Power down