4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 112.623500] eth0: renamed from tmpbb681 [ 112.639463] IPv6: ADDRCONF(NETDEV_CHANGE): lxc5dce95c5b357: link becomes ready [ 112.712848] eth0: renamed from tmp7636e [ 112.734422] IPv6: ADDRCONF(NETDEV_CHANGE): lxc871d7ab135ad: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:02:49 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:02:50 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:02:51 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 118.311105] kauditd_printk_skb: 3830 callbacks suppressed [ 118.311109] audit: type=1334 audit(1696273373.369:3985): prog-id=1650 op=LOAD [ 118.316307] audit: type=1300 audit(1696273373.369:3985): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffffd414058 a2=74 a3=d items=0 ppid=4248 pid=4322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.327435] audit: type=1327 audit(1696273373.369:3985): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 118.336269] audit: type=1334 audit(1696273373.372:3986): prog-id=1650 op=UNLOAD [ 118.339200] audit: type=1334 audit(1696273373.372:3987): prog-id=1651 op=LOAD [ 118.342183] audit: type=1300 audit(1696273373.372:3987): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffffd414038 a2=80 a3=0 items=0 ppid=4248 pid=4322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.353204] audit: type=1327 audit(1696273373.372:3987): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 118.367221] audit: type=1334 audit(1696273373.374:3988): prog-id=1651 op=UNLOAD [ 118.371041] audit: type=1334 audit(1696273373.375:3989): prog-id=1652 op=LOAD [ 118.373696] audit: type=1300 audit(1696273373.375:3989): arch=c00000b7 syscall=280 success=yes exit=32 a0=5 a1=fffffd413d78 a2=80 a3=0 items=0 ppid=4248 pid=4322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.545123] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:02:57 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:02:58 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 142.134693] kauditd_printk_skb: 342 callbacks suppressed [ 142.134699] audit: type=1130 audit(1696273397.193:4109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.198:22-139.178.89.65:49130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 142.317857] audit: type=1101 audit(1696273397.376:4110): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.331561] audit: type=1103 audit(1696273397.390:4111): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.342417] audit: type=1006 audit(1696273397.390:4112): pid=4684 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 142.350411] audit: type=1300 audit(1696273397.390:4112): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc09ee150 a2=3 a3=1 items=0 ppid=1 pid=4684 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.361606] audit: type=1327 audit(1696273397.390:4112): proctitle=737368643A20636F7265205B707269765D [ 142.370601] audit: type=1105 audit(1696273397.422:4113): pid=4684 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.382009] audit: type=1103 audit(1696273397.429:4114): pid=4687 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.779467] audit: type=1106 audit(1696273397.838:4115): pid=4684 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.802912] audit: type=1104 audit(1696273397.850:4116): pid=4684 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.417921] kauditd_printk_skb: 3905 callbacks suppressed [ 147.417925] audit: type=1325 audit(1696273402.476:5952): table=filter:245 family=2 entries=1 op=nft_register_chain pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 147.425799] audit: type=1300 audit(1696273402.476:5952): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=ffffd96d22c0 a2=0 a3=ffffb8b0f5c0 items=0 ppid=4716 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.438058] audit: type=1327 audit(1696273402.476:5952): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F494E505554004F4C445F43494C49554D5F494E505554 [ 147.444156] audit: type=1325 audit(1696273402.497:5953): table=filter:246 family=2 entries=1 op=nft_register_chain pid=5016 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 147.449916] audit: type=1300 audit(1696273402.497:5953): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=fffffe876340 a2=0 a3=ffffa37795c0 items=0 ppid=4716 pid=5016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.461631] audit: type=1327 audit(1696273402.497:5953): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F4F5554505554004F4C445F43494C49554D5F4F5554505554 [ 147.486894] audit: type=1325 audit(1696273402.545:5954): table=raw:247 family=2 entries=1 op=nft_register_chain pid=5019 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 147.493042] audit: type=1300 audit(1696273402.545:5954): arch=c00000b7 syscall=211 success=yes exit=144 a0=3 a1=ffffeed51ec0 a2=0 a3=ffff9b92d5c0 items=0 ppid=4716 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.505388] audit: type=1327 audit(1696273402.545:5954): proctitle=69707461626C6573002D770035002D7400726177002D450043494C49554D5F4F55545055545F726177004F4C445F43494C49554D5F4F55545055545F726177 [ 147.515915] audit: type=1325 audit(1696273402.574:5955): table=nat:248 family=2 entries=1 op=nft_register_chain pid=5022 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 148.341050] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 148.653001] eth0: renamed from tmp0d846 [ 148.661245] IPv6: ADDRCONF(NETDEV_CHANGE): lxca4499dd4df27: link becomes ready [ 148.679519] eth0: renamed from tmp6ce45 [ 148.697110] IPv6: ADDRCONF(NETDEV_CHANGE): lxc208ae7d517ad: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:03:25 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:03:26 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 152.803263] kauditd_printk_skb: 278 callbacks suppressed [ 152.803268] audit: type=1130 audit(1696273407.862:6048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.198:22-139.178.89.65:57042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.992072] audit: type=1101 audit(1696273408.051:6049): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.005298] audit: type=1103 audit(1696273408.064:6050): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.015916] audit: type=1006 audit(1696273408.064:6051): pid=5255 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 153.022273] audit: type=1300 audit(1696273408.064:6051): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca281df0 a2=3 a3=1 items=0 ppid=1 pid=5255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.033650] audit: type=1327 audit(1696273408.064:6051): proctitle=737368643A20636F7265205B707269765D [ 153.053445] audit: type=1105 audit(1696273408.112:6052): pid=5255 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.066504] audit: type=1103 audit(1696273408.125:6053): pid=5258 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.339311] audit: type=1106 audit(1696273408.398:6054): pid=5255 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.351159] audit: type=1104 audit(1696273408.398:6055): pid=5255 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.363055] kauditd_printk_skb: 1 callbacks suppressed [ 163.363060] audit: type=1130 audit(1696273418.422:6057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.198:22-139.178.89.65:41736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.549531] audit: type=1101 audit(1696273418.608:6058): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.559998] audit: type=1103 audit(1696273418.612:6059): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.570366] audit: type=1006 audit(1696273418.612:6060): pid=5268 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 163.579167] audit: type=1300 audit(1696273418.612:6060): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4b8bbe0 a2=3 a3=1 items=0 ppid=1 pid=5268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.590131] audit: type=1327 audit(1696273418.612:6060): proctitle=737368643A20636F7265205B707269765D [ 163.606815] audit: type=1105 audit(1696273418.665:6061): pid=5268 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.618810] audit: type=1103 audit(1696273418.672:6062): pid=5271 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.902424] audit: type=1106 audit(1696273418.961:6063): pid=5268 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.914175] audit: type=1104 audit(1696273418.964:6064): pid=5268 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.929529] kauditd_printk_skb: 1 callbacks suppressed [ 173.929534] audit: type=1130 audit(1696273428.987:6066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.198:22-139.178.89.65:36336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 174.124002] audit: type=1101 audit(1696273429.183:6067): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.134249] audit: type=1103 audit(1696273429.189:6068): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.144595] audit: type=1006 audit(1696273429.189:6069): pid=5281 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 174.152199] audit: type=1300 audit(1696273429.189:6069): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe66a7400 a2=3 a3=1 items=0 ppid=1 pid=5281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.164807] audit: type=1327 audit(1696273429.189:6069): proctitle=737368643A20636F7265205B707269765D [ 174.172221] audit: type=1105 audit(1696273429.228:6070): pid=5281 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.190010] audit: type=1103 audit(1696273429.231:6071): pid=5284 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.448587] audit: type=1106 audit(1696273429.507:6072): pid=5281 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.471585] audit: type=1104 audit(1696273429.513:6073): pid=5281 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.286886] kauditd_printk_skb: 3863 callbacks suppressed [ 179.286891] audit: type=1334 audit(1696273434.345:7899): prog-id=3304 op=LOAD [ 179.291576] audit: type=1300 audit(1696273434.345:7899): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdd3d46d8 a2=74 a3=d items=0 ppid=5421 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.302308] audit: type=1327 audit(1696273434.345:7899): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 179.310847] audit: type=1334 audit(1696273434.348:7900): prog-id=3304 op=UNLOAD [ 179.313549] audit: type=1334 audit(1696273434.348:7901): prog-id=3305 op=LOAD [ 179.316194] audit: type=1300 audit(1696273434.348:7901): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdd3d46b8 a2=80 a3=0 items=0 ppid=5421 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.327715] audit: type=1327 audit(1696273434.348:7901): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 179.340809] audit: type=1334 audit(1696273434.351:7902): prog-id=3305 op=UNLOAD [ 179.345894] audit: type=1334 audit(1696273434.351:7903): prog-id=3306 op=LOAD [ 179.349871] audit: type=1300 audit(1696273434.351:7903): arch=c00000b7 syscall=280 success=yes exit=32 a0=5 a1=ffffdd3d43f8 a2=80 a3=0 items=0 ppid=5421 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.459083] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 182.285190] eth0: renamed from tmp1fc1a [ 182.292610] IPv6: ADDRCONF(NETDEV_CHANGE): lxc078dd7d15adc: link becomes ready [ 182.416190] eth0: renamed from tmp6abf2 [ 182.426920] IPv6: ADDRCONF(NETDEV_CHANGE): lxc5282bf822e82: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:03:59 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:04:00 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 187.872836] kauditd_printk_skb: 342 callbacks suppressed [ 187.872841] audit: type=1130 audit(1696273442.932:8023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.198:22-139.178.89.65:41188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.062538] audit: type=1101 audit(1696273443.122:8024): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.076765] audit: type=1103 audit(1696273443.135:8025): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.087223] audit: type=1006 audit(1696273443.135:8026): pid=5907 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 188.093559] audit: type=1300 audit(1696273443.135:8026): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd183a950 a2=3 a3=1 items=0 ppid=1 pid=5907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.104025] audit: type=1327 audit(1696273443.135:8026): proctitle=737368643A20636F7265205B707269765D [ 188.129359] audit: type=1105 audit(1696273443.189:8027): pid=5907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.144439] audit: type=1103 audit(1696273443.194:8028): pid=5910 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.398250] audit: type=1106 audit(1696273443.458:8029): pid=5907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.411205] audit: type=1104 audit(1696273443.458:8030): pid=5907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.420934] kauditd_printk_skb: 1 callbacks suppressed [ 198.420939] audit: type=1130 audit(1696273453.480:8032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.198:22-139.178.89.65:47310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.611388] audit: type=1101 audit(1696273453.671:8033): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.621624] audit: type=1103 audit(1696273453.671:8034): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.631616] audit: type=1006 audit(1696273453.671:8035): pid=5922 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 198.637707] audit: type=1300 audit(1696273453.671:8035): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec861f40 a2=3 a3=1 items=0 ppid=1 pid=5922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.648346] audit: type=1327 audit(1696273453.671:8035): proctitle=737368643A20636F7265205B707269765D [ 198.671119] audit: type=1105 audit(1696273453.731:8036): pid=5922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.686982] audit: type=1103 audit(1696273453.745:8037): pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.945160] audit: type=1106 audit(1696273454.005:8038): pid=5922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.962701] audit: type=1104 audit(1696273454.007:8039): pid=5922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 208.969135] kauditd_printk_skb: 1 callbacks suppressed [ 208.969140] audit: type=1130 audit(1696273464.029:8041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.198:22-139.178.89.65:44324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.154401] audit: type=1101 audit(1696273464.214:8042): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.167484] audit: type=1103 audit(1696273464.227:8043): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.177392] audit: type=1006 audit(1696273464.227:8044): pid=5934 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 209.183996] audit: type=1300 audit(1696273464.227:8044): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd0e6cb0 a2=3 a3=1 items=0 ppid=1 pid=5934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.194743] audit: type=1327 audit(1696273464.227:8044): proctitle=737368643A20636F7265205B707269765D [ 209.216445] audit: type=1105 audit(1696273464.276:8045): pid=5934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.241529] audit: type=1103 audit(1696273464.284:8046): pid=5937 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.481410] audit: type=1106 audit(1696273464.541:8047): pid=5934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.496012] audit: type=1104 audit(1696273464.541:8048): pid=5934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.506922] kauditd_printk_skb: 1 callbacks suppressed [ 219.506927] audit: type=1130 audit(1696273474.565:8050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.198:22-139.178.89.65:37304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 219.691550] audit: type=1101 audit(1696273474.750:8051): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.701932] audit: type=1103 audit(1696273474.753:8052): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.721256] audit: type=1006 audit(1696273474.754:8053): pid=5972 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 219.735408] audit: type=1300 audit(1696273474.754:8053): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2a93740 a2=3 a3=1 items=0 ppid=1 pid=5972 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.746454] audit: type=1327 audit(1696273474.754:8053): proctitle=737368643A20636F7265205B707269765D [ 219.749906] audit: type=1105 audit(1696273474.784:8054): pid=5972 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.761875] audit: type=1103 audit(1696273474.793:8055): pid=5975 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.997993] audit: type=1106 audit(1696273475.056:8056): pid=5972 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 220.016407] audit: type=1104 audit(1696273475.058:8057): pid=5972 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.020281] kauditd_printk_skb: 1 callbacks suppressed [ 230.020286] audit: type=1130 audit(1696273485.078:8059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.198:22-139.178.89.65:53864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 230.209252] audit: type=1101 audit(1696273485.267:8060): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.222505] audit: type=1103 audit(1696273485.281:8061): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.232776] audit: type=1006 audit(1696273485.281:8062): pid=5985 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 230.239142] audit: type=1300 audit(1696273485.281:8062): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9a33080 a2=3 a3=1 items=0 ppid=1 pid=5985 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 230.249849] audit: type=1327 audit(1696273485.281:8062): proctitle=737368643A20636F7265205B707269765D [ 230.267647] audit: type=1105 audit(1696273485.326:8063): pid=5985 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.286921] audit: type=1103 audit(1696273485.334:8064): pid=5988 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.538471] audit: type=1106 audit(1696273485.597:8065): pid=5985 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.555069] audit: type=1104 audit(1696273485.600:8066): pid=5985 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 231.621285] systemd-journald[1436]: Data hash table of /var/log/journal/ec213631d5f77fe28852e2b57e4a50d2/system.journal has a fill level at 75.0 (33392 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 231.629417] systemd-journald[1436]: /var/log/journal/ec213631d5f77fe28852e2b57e4a50d2/system.journal: Journal header limits reached or header out-of-date, rotating. [ 235.350807] kauditd_printk_skb: 3893 callbacks suppressed [ 235.350811] audit: type=1325 audit(1696273490.409:9914): table=filter:433 family=2 entries=1 op=nft_register_chain pid=6305 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 235.358531] audit: type=1300 audit(1696273490.409:9914): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=fffff04c5f20 a2=0 a3=ffffb22c75c0 items=0 ppid=6018 pid=6305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.370242] audit: type=1327 audit(1696273490.409:9914): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F494E505554004F4C445F43494C49554D5F494E505554 [ 235.376111] audit: type=1325 audit(1696273490.425:9915): table=filter:434 family=2 entries=1 op=nft_register_chain pid=6308 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 235.381781] audit: type=1300 audit(1696273490.425:9915): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=ffffeba948a0 a2=0 a3=ffff86d8c5c0 items=0 ppid=6018 pid=6308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.393476] audit: type=1327 audit(1696273490.425:9915): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F4F5554505554004F4C445F43494C49554D5F4F5554505554 [ 235.412972] audit: type=1325 audit(1696273490.471:9916): table=raw:435 family=2 entries=1 op=nft_register_chain pid=6311 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 235.419025] audit: type=1300 audit(1696273490.471:9916): arch=c00000b7 syscall=211 success=yes exit=144 a0=3 a1=ffffd0827d10 a2=0 a3=ffffa93bc5c0 items=0 ppid=6018 pid=6311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.431138] audit: type=1327 audit(1696273490.471:9916): proctitle=69707461626C6573002D770035002D7400726177002D450043494C49554D5F4F55545055545F726177004F4C445F43494C49554D5F4F55545055545F726177 [ 235.442903] audit: type=1325 audit(1696273490.501:9917): table=nat:436 family=2 entries=1 op=nft_register_chain pid=6314 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 236.221090] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 236.964496] eth0: renamed from tmp88b15 [ 236.981211] IPv6: ADDRCONF(NETDEV_CHANGE): lxc7051faa266d1: link becomes ready [ 237.070472] eth0: renamed from tmpff36f [ 237.084499] IPv6: ADDRCONF(NETDEV_CHANGE): lxc4e444bbfb247: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:04:54 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:04:55 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 240.562956] kauditd_printk_skb: 278 callbacks suppressed [ 240.562961] audit: type=1130 audit(1696273495.621:10010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.198:22-139.178.89.65:33370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 240.741527] audit: type=1101 audit(1696273495.800:10011): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 240.755465] audit: type=1103 audit(1696273495.814:10012): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 240.766641] audit: type=1006 audit(1696273495.814:10013): pid=6591 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 240.773140] audit: type=1300 audit(1696273495.814:10013): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2ca6660 a2=3 a3=1 items=0 ppid=1 pid=6591 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 240.783929] audit: type=1327 audit(1696273495.814:10013): proctitle=737368643A20636F7265205B707269765D [ 240.806281] audit: type=1105 audit(1696273495.864:10014): pid=6591 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 240.825068] audit: type=1103 audit(1696273495.869:10015): pid=6594 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 241.073350] audit: type=1106 audit(1696273496.131:10016): pid=6591 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 241.089161] audit: type=1104 audit(1696273496.132:10017): pid=6591 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.098843] kauditd_printk_skb: 1 callbacks suppressed [ 251.098847] audit: type=1130 audit(1696273506.157:10019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.198:22-139.178.89.65:54082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 251.289838] audit: type=1101 audit(1696273506.348:10020): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.303394] audit: type=1103 audit(1696273506.361:10021): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.314151] audit: type=1006 audit(1696273506.362:10022): pid=6603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 251.320873] audit: type=1300 audit(1696273506.362:10022): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd86b0230 a2=3 a3=1 items=0 ppid=1 pid=6603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 251.331714] audit: type=1327 audit(1696273506.362:10022): proctitle=737368643A20636F7265205B707269765D [ 251.356106] audit: type=1105 audit(1696273506.414:10023): pid=6603 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.372386] audit: type=1103 audit(1696273506.429:10024): pid=6606 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.627054] audit: type=1106 audit(1696273506.685:10025): pid=6603 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.640002] audit: type=1104 audit(1696273506.688:10026): pid=6603 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.651665] kauditd_printk_skb: 1 callbacks suppressed [ 261.651669] audit: type=1130 audit(1696273516.711:10028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.198:22-139.178.89.65:32846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 261.838570] audit: type=1101 audit(1696273516.898:10029): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.851969] audit: type=1103 audit(1696273516.911:10030): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.862855] audit: type=1006 audit(1696273516.911:10031): pid=6628 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 261.869268] audit: type=1300 audit(1696273516.911:10031): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff784d9b0 a2=3 a3=1 items=0 ppid=1 pid=6628 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 261.880406] audit: type=1327 audit(1696273516.911:10031): proctitle=737368643A20636F7265205B707269765D [ 261.901744] audit: type=1105 audit(1696273516.961:10032): pid=6628 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.915231] audit: type=1103 audit(1696273516.975:10033): pid=6631 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 262.176743] audit: type=1106 audit(1696273517.236:10034): pid=6628 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 262.189215] audit: type=1104 audit(1696273517.238:10035): pid=6628 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.199689] kauditd_printk_skb: 1 callbacks suppressed [ 272.199694] audit: type=1130 audit(1696273527.258:10037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.198:22-139.178.89.65:38220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 272.379646] audit: type=1101 audit(1696273527.439:10038): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.393070] audit: type=1103 audit(1696273527.452:10039): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.403673] audit: type=1006 audit(1696273527.452:10040): pid=6669 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 272.411135] audit: type=1300 audit(1696273527.452:10040): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccaa4fb0 a2=3 a3=1 items=0 ppid=1 pid=6669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 272.422682] audit: type=1327 audit(1696273527.452:10040): proctitle=737368643A20636F7265205B707269765D [ 272.444977] audit: type=1105 audit(1696273527.503:10041): pid=6669 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.458097] audit: type=1103 audit(1696273527.517:10042): pid=6672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.715247] audit: type=1106 audit(1696273527.774:10043): pid=6669 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.729737] audit: type=1104 audit(1696273527.777:10044): pid=6669 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.433855] kauditd_printk_skb: 9 callbacks suppressed [ 278.433860] audit: type=1106 audit(1696273533.493:10052): pid=6682 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.448755] audit: type=1104 audit(1696273533.493:10053): pid=6682 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.460782] audit: type=1131 audit(1696273533.496:10054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.198:22-139.178.89.65:38230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.473811] audit: type=1130 audit(1696273533.520:10055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.198:22-139.178.89.65:38236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.677884] audit: type=1101 audit(1696273533.737:10056): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.691466] audit: type=1103 audit(1696273533.750:10057): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.702119] audit: type=1006 audit(1696273533.751:10058): pid=7012 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 278.708427] audit: type=1300 audit(1696273533.751:10058): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8296f90 a2=3 a3=1 items=0 ppid=1 pid=7012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 278.719060] audit: type=1327 audit(1696273533.751:10058): proctitle=737368643A20636F7265205B707269765D [ 278.741218] audit: type=1105 audit(1696273533.800:10059): pid=7012 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 287.033610] kauditd_printk_skb: 1 callbacks suppressed [ 287.033614] audit: type=1334 audit(1696273542.093:10061): prog-id=4145 op=LOAD [ 287.038278] audit: type=1300 audit(1696273542.093:10061): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0023178 a2=74 a3=0 items=0 ppid=7336 pid=7392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 287.049587] audit: type=1327 audit(1696273542.093:10061): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 287.053542] audit: type=1334 audit(1696273542.093:10062): prog-id=4145 op=UNLOAD [ 287.056315] audit: type=1334 audit(1696273542.093:10063): prog-id=4146 op=LOAD [ 287.059094] audit: type=1300 audit(1696273542.093:10063): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe00221b8 a2=90 a3=2 items=0 ppid=7336 pid=7392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 287.070419] audit: type=1327 audit(1696273542.093:10063): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 287.074413] audit: type=1334 audit(1696273542.096:10064): prog-id=4146 op=UNLOAD [ 287.077327] audit: type=1334 audit(1696273542.096:10065): prog-id=4147 op=LOAD [ 287.080071] audit: type=1300 audit(1696273542.096:10065): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe00221b8 a2=90 a3=2 items=0 ppid=7336 pid=7392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 288.027883] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106(gcm-aes-ce))) [ 292.069335] kauditd_printk_skb: 3953 callbacks suppressed [ 292.069340] audit: type=1325 audit(1696273547.129:11916): table=filter:536 family=2 entries=1 op=nft_register_chain pid=7689 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.081118] audit: type=1300 audit(1696273547.129:11916): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=ffffce4a1750 a2=0 a3=ffff89f175c0 items=0 ppid=7336 pid=7689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 292.098220] audit: type=1327 audit(1696273547.129:11916): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F464F5257415244004F4C445F43494C49554D5F464F5257415244 [ 292.105845] audit: type=1325 audit(1696273547.157:11917): table=filter:537 family=2 entries=1 op=nft_register_chain pid=7696 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.114080] audit: type=1300 audit(1696273547.157:11917): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffccb9cf40 a2=0 a3=ffffa54cf5c0 items=0 ppid=7336 pid=7696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 292.126676] audit: type=1327 audit(1696273547.157:11917): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F494E505554 [ 292.132196] audit: type=1325 audit(1696273547.171:11918): table=filter:538 family=2 entries=1 op=nft_register_chain pid=7698 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.138531] audit: type=1300 audit(1696273547.171:11918): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc8447330 a2=0 a3=ffff8b6385c0 items=0 ppid=7336 pid=7698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 292.150898] audit: type=1327 audit(1696273547.171:11918): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F4F5554505554 [ 292.156232] audit: type=1325 audit(1696273547.174:11919): table=raw:539 family=2 entries=1 op=nft_register_chain pid=7700 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.900879] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 293.920424] eth0: renamed from tmpd76d7 [ 293.936546] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 293.938961] IPv6: ADDRCONF(NETDEV_CHANGE): lxcff5634232ac6: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:05:50 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:05:51 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 297.070150] kauditd_printk_skb: 3916 callbacks suppressed [ 297.070155] audit: type=1334 audit(1696273552.130:13738): prog-id=5743 op=LOAD [ 297.075053] audit: type=1300 audit(1696273552.130:13738): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffceeb8ef8 a2=90 a3=2 items=0 ppid=8069 pid=8148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 297.086477] audit: type=1327 audit(1696273552.130:13738): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 297.090591] audit: type=1334 audit(1696273552.135:13739): prog-id=5743 op=UNLOAD [ 297.093687] audit: type=1334 audit(1696273552.135:13740): prog-id=5744 op=LOAD [ 297.096868] audit: type=1300 audit(1696273552.135:13740): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffceeb8ef8 a2=90 a3=2 items=0 ppid=8069 pid=8148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 297.121374] audit: type=1327 audit(1696273552.135:13740): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 297.127744] audit: type=1334 audit(1696273552.146:13741): prog-id=5744 op=UNLOAD [ 297.152105] audit: type=1334 audit(1696273552.146:13742): prog-id=5745 op=LOAD [ 297.158968] audit: type=1300 audit(1696273552.146:13742): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffceeb8ef8 a2=90 a3=2 items=0 ppid=8069 pid=8148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 301.800379] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 302.149926] kauditd_printk_skb: 660 callbacks suppressed [ 302.149931] audit: type=1400 audit(1696273557.210:13996): avc: denied { open } for pid=8069 comm="cilium-agent" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=0 [ 302.163163] audit: type=1300 audit(1696273557.210:13996): arch=c00000b7 syscall=241 success=no exit=-13 a0=40008f9728 a1=ffffffffffffffff a2=0 a3=ffffffffffffffff items=0 ppid=7033 pid=8069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 302.187048] audit: type=1327 audit(1696273557.210:13996): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:05:59 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:06:00 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:04:00 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 187.872836] kauditd_printk_skb: 342 callbacks suppressed [ 187.872841] audit: type=1130 audit(1696273442.932:8023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.198:22-139.178.89.65:41188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.062538] audit: type=1101 audit(1696273443.122:8024): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.076765] audit: type=1103 audit(1696273443.135:8025): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.087223] audit: type=1006 audit(1696273443.135:8026): pid=5907 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 188.093559] audit: type=1300 audit(1696273443.135:8026): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd183a950 a2=3 a3=1 items=0 ppid=1 pid=5907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.104025] audit: type=1327 audit(1696273443.135:8026): proctitle=737368643A20636F7265205B707269765D [ 188.129359] audit: type=1105 audit(1696273443.189:8027): pid=5907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.144439] audit: type=1103 audit(1696273443.194:8028): pid=5910 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.398250] audit: type=1106 audit(1696273443.458:8029): pid=5907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.411205] audit: type=1104 audit(1696273443.458:8030): pid=5907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.420934] kauditd_printk_skb: 1 callbacks suppressed [ 198.420939] audit: type=1130 audit(1696273453.480:8032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.198:22-139.178.89.65:47310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.611388] audit: type=1101 audit(1696273453.671:8033): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.621624] audit: type=1103 audit(1696273453.671:8034): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.631616] audit: type=1006 audit(1696273453.671:8035): pid=5922 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 198.637707] audit: type=1300 audit(1696273453.671:8035): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec861f40 a2=3 a3=1 items=0 ppid=1 pid=5922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.648346] audit: type=1327 audit(1696273453.671:8035): proctitle=737368643A20636F7265205B707269765D [ 198.671119] audit: type=1105 audit(1696273453.731:8036): pid=5922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.686982] audit: type=1103 audit(1696273453.745:8037): pid=5925 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.945160] audit: type=1106 audit(1696273454.005:8038): pid=5922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.962701] audit: type=1104 audit(1696273454.007:8039): pid=5922 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 208.969135] kauditd_printk_skb: 1 callbacks suppressed [ 208.969140] audit: type=1130 audit(1696273464.029:8041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.198:22-139.178.89.65:44324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.154401] audit: type=1101 audit(1696273464.214:8042): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.167484] audit: type=1103 audit(1696273464.227:8043): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.177392] audit: type=1006 audit(1696273464.227:8044): pid=5934 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 209.183996] audit: type=1300 audit(1696273464.227:8044): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd0e6cb0 a2=3 a3=1 items=0 ppid=1 pid=5934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.194743] audit: type=1327 audit(1696273464.227:8044): proctitle=737368643A20636F7265205B707269765D [ 209.216445] audit: type=1105 audit(1696273464.276:8045): pid=5934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.241529] audit: type=1103 audit(1696273464.284:8046): pid=5937 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.481410] audit: type=1106 audit(1696273464.541:8047): pid=5934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.496012] audit: type=1104 audit(1696273464.541:8048): pid=5934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.506922] kauditd_printk_skb: 1 callbacks suppressed [ 219.506927] audit: type=1130 audit(1696273474.565:8050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.198:22-139.178.89.65:37304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 219.691550] audit: type=1101 audit(1696273474.750:8051): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.701932] audit: type=1103 audit(1696273474.753:8052): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.721256] audit: type=1006 audit(1696273474.754:8053): pid=5972 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 219.735408] audit: type=1300 audit(1696273474.754:8053): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2a93740 a2=3 a3=1 items=0 ppid=1 pid=5972 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.746454] audit: type=1327 audit(1696273474.754:8053): proctitle=737368643A20636F7265205B707269765D [ 219.749906] audit: type=1105 audit(1696273474.784:8054): pid=5972 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.761875] audit: type=1103 audit(1696273474.793:8055): pid=5975 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 219.997993] audit: type=1106 audit(1696273475.056:8056): pid=5972 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 220.016407] audit: type=1104 audit(1696273475.058:8057): pid=5972 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.020281] kauditd_printk_skb: 1 callbacks suppressed [ 230.020286] audit: type=1130 audit(1696273485.078:8059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.198:22-139.178.89.65:53864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 230.209252] audit: type=1101 audit(1696273485.267:8060): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.222505] audit: type=1103 audit(1696273485.281:8061): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.232776] audit: type=1006 audit(1696273485.281:8062): pid=5985 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 230.239142] audit: type=1300 audit(1696273485.281:8062): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9a33080 a2=3 a3=1 items=0 ppid=1 pid=5985 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 230.249849] audit: type=1327 audit(1696273485.281:8062): proctitle=737368643A20636F7265205B707269765D [ 230.267647] audit: type=1105 audit(1696273485.326:8063): pid=5985 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.286921] audit: type=1103 audit(1696273485.334:8064): pid=5988 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.538471] audit: type=1106 audit(1696273485.597:8065): pid=5985 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 230.555069] audit: type=1104 audit(1696273485.600:8066): pid=5985 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 231.621285] systemd-journald[1436]: Data hash table of /var/log/journal/ec213631d5f77fe28852e2b57e4a50d2/system.journal has a fill level at 75.0 (33392 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 231.629417] systemd-journald[1436]: /var/log/journal/ec213631d5f77fe28852e2b57e4a50d2/system.journal: Journal header limits reached or header out-of-date, rotating. [ 235.350807] kauditd_printk_skb: 3893 callbacks suppressed [ 235.350811] audit: type=1325 audit(1696273490.409:9914): table=filter:433 family=2 entries=1 op=nft_register_chain pid=6305 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 235.358531] audit: type=1300 audit(1696273490.409:9914): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=fffff04c5f20 a2=0 a3=ffffb22c75c0 items=0 ppid=6018 pid=6305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.370242] audit: type=1327 audit(1696273490.409:9914): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F494E505554004F4C445F43494C49554D5F494E505554 [ 235.376111] audit: type=1325 audit(1696273490.425:9915): table=filter:434 family=2 entries=1 op=nft_register_chain pid=6308 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 235.381781] audit: type=1300 audit(1696273490.425:9915): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=ffffeba948a0 a2=0 a3=ffff86d8c5c0 items=0 ppid=6018 pid=6308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.393476] audit: type=1327 audit(1696273490.425:9915): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F4F5554505554004F4C445F43494C49554D5F4F5554505554 [ 235.412972] audit: type=1325 audit(1696273490.471:9916): table=raw:435 family=2 entries=1 op=nft_register_chain pid=6311 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 235.419025] audit: type=1300 audit(1696273490.471:9916): arch=c00000b7 syscall=211 success=yes exit=144 a0=3 a1=ffffd0827d10 a2=0 a3=ffffa93bc5c0 items=0 ppid=6018 pid=6311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.431138] audit: type=1327 audit(1696273490.471:9916): proctitle=69707461626C6573002D770035002D7400726177002D450043494C49554D5F4F55545055545F726177004F4C445F43494C49554D5F4F55545055545F726177 [ 235.442903] audit: type=1325 audit(1696273490.501:9917): table=nat:436 family=2 entries=1 op=nft_register_chain pid=6314 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 236.221090] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 236.964496] eth0: renamed from tmp88b15 [ 236.981211] IPv6: ADDRCONF(NETDEV_CHANGE): lxc7051faa266d1: link becomes ready [ 237.070472] eth0: renamed from tmpff36f [ 237.084499] IPv6: ADDRCONF(NETDEV_CHANGE): lxc4e444bbfb247: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:04:54 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:04:55 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 240.562956] kauditd_printk_skb: 278 callbacks suppressed [ 240.562961] audit: type=1130 audit(1696273495.621:10010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.198:22-139.178.89.65:33370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 240.741527] audit: type=1101 audit(1696273495.800:10011): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 240.755465] audit: type=1103 audit(1696273495.814:10012): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 240.766641] audit: type=1006 audit(1696273495.814:10013): pid=6591 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 240.773140] audit: type=1300 audit(1696273495.814:10013): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2ca6660 a2=3 a3=1 items=0 ppid=1 pid=6591 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 240.783929] audit: type=1327 audit(1696273495.814:10013): proctitle=737368643A20636F7265205B707269765D [ 240.806281] audit: type=1105 audit(1696273495.864:10014): pid=6591 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 240.825068] audit: type=1103 audit(1696273495.869:10015): pid=6594 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 241.073350] audit: type=1106 audit(1696273496.131:10016): pid=6591 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 241.089161] audit: type=1104 audit(1696273496.132:10017): pid=6591 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.098843] kauditd_printk_skb: 1 callbacks suppressed [ 251.098847] audit: type=1130 audit(1696273506.157:10019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.198:22-139.178.89.65:54082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 251.289838] audit: type=1101 audit(1696273506.348:10020): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.303394] audit: type=1103 audit(1696273506.361:10021): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.314151] audit: type=1006 audit(1696273506.362:10022): pid=6603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 251.320873] audit: type=1300 audit(1696273506.362:10022): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd86b0230 a2=3 a3=1 items=0 ppid=1 pid=6603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 251.331714] audit: type=1327 audit(1696273506.362:10022): proctitle=737368643A20636F7265205B707269765D [ 251.356106] audit: type=1105 audit(1696273506.414:10023): pid=6603 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.372386] audit: type=1103 audit(1696273506.429:10024): pid=6606 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.627054] audit: type=1106 audit(1696273506.685:10025): pid=6603 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 251.640002] audit: type=1104 audit(1696273506.688:10026): pid=6603 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.651665] kauditd_printk_skb: 1 callbacks suppressed [ 261.651669] audit: type=1130 audit(1696273516.711:10028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.198:22-139.178.89.65:32846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 261.838570] audit: type=1101 audit(1696273516.898:10029): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.851969] audit: type=1103 audit(1696273516.911:10030): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.862855] audit: type=1006 audit(1696273516.911:10031): pid=6628 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 261.869268] audit: type=1300 audit(1696273516.911:10031): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff784d9b0 a2=3 a3=1 items=0 ppid=1 pid=6628 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 261.880406] audit: type=1327 audit(1696273516.911:10031): proctitle=737368643A20636F7265205B707269765D [ 261.901744] audit: type=1105 audit(1696273516.961:10032): pid=6628 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 261.915231] audit: type=1103 audit(1696273516.975:10033): pid=6631 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 262.176743] audit: type=1106 audit(1696273517.236:10034): pid=6628 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 262.189215] audit: type=1104 audit(1696273517.238:10035): pid=6628 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.199689] kauditd_printk_skb: 1 callbacks suppressed [ 272.199694] audit: type=1130 audit(1696273527.258:10037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.198:22-139.178.89.65:38220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 272.379646] audit: type=1101 audit(1696273527.439:10038): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.393070] audit: type=1103 audit(1696273527.452:10039): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.403673] audit: type=1006 audit(1696273527.452:10040): pid=6669 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 272.411135] audit: type=1300 audit(1696273527.452:10040): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccaa4fb0 a2=3 a3=1 items=0 ppid=1 pid=6669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 272.422682] audit: type=1327 audit(1696273527.452:10040): proctitle=737368643A20636F7265205B707269765D [ 272.444977] audit: type=1105 audit(1696273527.503:10041): pid=6669 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.458097] audit: type=1103 audit(1696273527.517:10042): pid=6672 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.715247] audit: type=1106 audit(1696273527.774:10043): pid=6669 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 272.729737] audit: type=1104 audit(1696273527.777:10044): pid=6669 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.433855] kauditd_printk_skb: 9 callbacks suppressed [ 278.433860] audit: type=1106 audit(1696273533.493:10052): pid=6682 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.448755] audit: type=1104 audit(1696273533.493:10053): pid=6682 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.460782] audit: type=1131 audit(1696273533.496:10054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.198:22-139.178.89.65:38230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.473811] audit: type=1130 audit(1696273533.520:10055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.198:22-139.178.89.65:38236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.677884] audit: type=1101 audit(1696273533.737:10056): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.691466] audit: type=1103 audit(1696273533.750:10057): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.702119] audit: type=1006 audit(1696273533.751:10058): pid=7012 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 278.708427] audit: type=1300 audit(1696273533.751:10058): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8296f90 a2=3 a3=1 items=0 ppid=1 pid=7012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 278.719060] audit: type=1327 audit(1696273533.751:10058): proctitle=737368643A20636F7265205B707269765D [ 278.741218] audit: type=1105 audit(1696273533.800:10059): pid=7012 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 287.033610] kauditd_printk_skb: 1 callbacks suppressed [ 287.033614] audit: type=1334 audit(1696273542.093:10061): prog-id=4145 op=LOAD [ 287.038278] audit: type=1300 audit(1696273542.093:10061): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0023178 a2=74 a3=0 items=0 ppid=7336 pid=7392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 287.049587] audit: type=1327 audit(1696273542.093:10061): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 287.053542] audit: type=1334 audit(1696273542.093:10062): prog-id=4145 op=UNLOAD [ 287.056315] audit: type=1334 audit(1696273542.093:10063): prog-id=4146 op=LOAD [ 287.059094] audit: type=1300 audit(1696273542.093:10063): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe00221b8 a2=90 a3=2 items=0 ppid=7336 pid=7392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 287.070419] audit: type=1327 audit(1696273542.093:10063): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 287.074413] audit: type=1334 audit(1696273542.096:10064): prog-id=4146 op=UNLOAD [ 287.077327] audit: type=1334 audit(1696273542.096:10065): prog-id=4147 op=LOAD [ 287.080071] audit: type=1300 audit(1696273542.096:10065): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe00221b8 a2=90 a3=2 items=0 ppid=7336 pid=7392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 288.027883] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106(gcm-aes-ce))) [ 292.069335] kauditd_printk_skb: 3953 callbacks suppressed [ 292.069340] audit: type=1325 audit(1696273547.129:11916): table=filter:536 family=2 entries=1 op=nft_register_chain pid=7689 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.081118] audit: type=1300 audit(1696273547.129:11916): arch=c00000b7 syscall=211 success=yes exit=148 a0=3 a1=ffffce4a1750 a2=0 a3=ffff89f175c0 items=0 ppid=7336 pid=7689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 292.098220] audit: type=1327 audit(1696273547.129:11916): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F464F5257415244004F4C445F43494C49554D5F464F5257415244 [ 292.105845] audit: type=1325 audit(1696273547.157:11917): table=filter:537 family=2 entries=1 op=nft_register_chain pid=7696 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.114080] audit: type=1300 audit(1696273547.157:11917): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffccb9cf40 a2=0 a3=ffffa54cf5c0 items=0 ppid=7336 pid=7696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 292.126676] audit: type=1327 audit(1696273547.157:11917): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F494E505554 [ 292.132196] audit: type=1325 audit(1696273547.171:11918): table=filter:538 family=2 entries=1 op=nft_register_chain pid=7698 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.138531] audit: type=1300 audit(1696273547.171:11918): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc8447330 a2=0 a3=ffff8b6385c0 items=0 ppid=7336 pid=7698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 292.150898] audit: type=1327 audit(1696273547.171:11918): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F4F5554505554 [ 292.156232] audit: type=1325 audit(1696273547.174:11919): table=raw:539 family=2 entries=1 op=nft_register_chain pid=7700 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 292.900879] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 293.920424] eth0: renamed from tmpd76d7 [ 293.936546] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 293.938961] IPv6: ADDRCONF(NETDEV_CHANGE): lxcff5634232ac6: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:05:50 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:05:51 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 297.070150] kauditd_printk_skb: 3916 callbacks suppressed [ 297.070155] audit: type=1334 audit(1696273552.130:13738): prog-id=5743 op=LOAD [ 297.075053] audit: type=1300 audit(1696273552.130:13738): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffceeb8ef8 a2=90 a3=2 items=0 ppid=8069 pid=8148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 297.086477] audit: type=1327 audit(1696273552.130:13738): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 297.090591] audit: type=1334 audit(1696273552.135:13739): prog-id=5743 op=UNLOAD [ 297.093687] audit: type=1334 audit(1696273552.135:13740): prog-id=5744 op=LOAD [ 297.096868] audit: type=1300 audit(1696273552.135:13740): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffceeb8ef8 a2=90 a3=2 items=0 ppid=8069 pid=8148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 297.121374] audit: type=1327 audit(1696273552.135:13740): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 297.127744] audit: type=1334 audit(1696273552.146:13741): prog-id=5744 op=UNLOAD [ 297.152105] audit: type=1334 audit(1696273552.146:13742): prog-id=5745 op=LOAD [ 297.158968] audit: type=1300 audit(1696273552.146:13742): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffceeb8ef8 a2=90 a3=2 items=0 ppid=8069 pid=8148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 301.800379] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 302.149926] kauditd_printk_skb: 660 callbacks suppressed [ 302.149931] audit: type=1400 audit(1696273557.210:13996): avc: denied { open } for pid=8069 comm="cilium-agent" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=0 [ 302.163163] audit: type=1300 audit(1696273557.210:13996): arch=c00000b7 syscall=241 success=no exit=-13 a0=40008f9728 a1=ffffffffffffffff a2=0 a3=ffffffffffffffff items=0 ppid=7033 pid=8069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 302.187048] audit: type=1327 audit(1696273557.210:13996): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:05:59 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:06:00 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 326.989726] audit: type=1334 audit(1696273582.050:13997): prog-id=5799 op=LOAD [ 326.993049] audit: type=1300 audit(1696273582.050:13997): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd570ace8 a2=74 a3=0 items=0 ppid=8698 pid=8753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 327.005266] audit: type=1327 audit(1696273582.050:13997): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 327.009407] audit: type=1334 audit(1696273582.052:13998): prog-id=5799 op=UNLOAD [ 327.012340] audit: type=1334 audit(1696273582.052:13999): prog-id=5800 op=LOAD [ 327.015274] audit: type=1300 audit(1696273582.052:13999): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd5709d28 a2=90 a3=2 items=0 ppid=8698 pid=8753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 327.026633] audit: type=1327 audit(1696273582.052:13999): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 327.030729] audit: type=1334 audit(1696273582.054:14000): prog-id=5800 op=UNLOAD [ 327.033618] audit: type=1334 audit(1696273582.054:14001): prog-id=5801 op=LOAD [ 327.036539] audit: type=1300 audit(1696273582.054:14001): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd5709d28 a2=90 a3=2 items=0 ppid=8698 pid=8753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 331.994601] kauditd_printk_skb: 4112 callbacks suppressed [ 331.994606] audit: type=1325 audit(1696273587.056:15911): table=mangle:821 family=2 entries=1 op=nft_register_rule pid=9108 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 332.007985] audit: type=1300 audit(1696273587.056:15911): arch=c00000b7 syscall=211 success=yes exit=720 a0=3 a1=ffffcbd9dbe0 a2=0 a3=ffff88ab85c0 items=0 ppid=8698 pid=9108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 332.020129] audit: type=1327 audit(1696273587.056:15911): proctitle=69707461626C6573002D770035002D74006D616E676C65002D410043494C49554D5F5052455F6D616E676C65002D7000746370002D6D006D61726B002D2D6D61726B0030783631616330323030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A205450524F585920746F20686F73742063696C69756D [ 332.030877] audit: type=1325 audit(1696273587.069:15912): table=mangle:822 family=2 entries=1 op=nft_register_rule pid=9109 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 332.036751] audit: type=1300 audit(1696273587.069:15912): arch=c00000b7 syscall=211 success=yes exit=720 a0=3 a1=ffffdc66d790 a2=0 a3=ffffa62485c0 items=0 ppid=8698 pid=9109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 332.049218] audit: type=1327 audit(1696273587.069:15912): proctitle=69707461626C6573002D770035002D74006D616E676C65002D410043494C49554D5F5052455F6D616E676C65002D7000756470002D6D006D61726B002D2D6D61726B0030783631616330323030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A205450524F585920746F20686F73742063696C69756D [ 332.059883] audit: type=1325 audit(1696273587.097:15913): table=nat:823 family=2 entries=1 op=nft_unregister_rule pid=9111 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 332.065679] audit: type=1300 audit(1696273587.097:15913): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=ffffc84d1810 a2=0 a3=ffff83fdd5c0 items=0 ppid=8698 pid=9111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 332.077697] audit: type=1327 audit(1696273587.097:15913): proctitle=69707461626C6573002D770035002D74006E6174002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F6E6174002D6A004F4C445F43494C49554D5F5052455F6E6174 [ 332.087019] audit: type=1325 audit(1696273587.098:15914): table=nat:824 family=2 entries=1 op=nft_unregister_rule pid=9112 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 332.771659] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 333.412955] eth0: renamed from tmpdd1e5 [ 333.422666] IPv6: ADDRCONF(NETDEV_CHANGE): lxc39df8d0c03f9: link becomes ready This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:06:30 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: This is ip-172-31-16-198 (Linux aarch64 5.15.132-flatcar) 19:06:31 SSH host key: SHA256:CIuvECtY5jWGS4bavXJqkGLDyL9b0dN9FrqoKawalG4 (RSA) SSH host key: SHA256:UKfMUk2HpgyXqA20VIcaax2pdJWKKpuwwW6L5GiNx9M (ECDSA) SSH host key: SHA256:OkUWQfk4FQhED0hCp1s+QcIVbqC1f8d4YYtCvih1Vek (ED25519) eth0: 172.31.16.198 fe80::421:acff:fe04:ed61 ip-172-31-16-198 login: [ 341.615657] kauditd_printk_skb: 170 callbacks suppressed [ 341.615662] audit: type=1106 audit(1696273596.676:15971): pid=7012 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 341.642409] audit: type=1104 audit(1696273596.676:15972): pid=7012 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 341.653415] audit: type=1131 audit(1696273596.690:15973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.198:22-139.178.89.65:38236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 344.590772] audit: type=1106 audit(1696273599.651:15974): pid=1927 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 344.608076] audit: type=1104 audit(1696273599.651:15975): pid=1927 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 344.620094] audit: type=1131 audit(1696273599.655:15976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.16.198:22-139.178.89.65:47592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-addon\x2dconfig.slice. [ OK ] Removed slice system-addon\x2drun.slice. [ OK ] Removed slice system-modprobe.slice. [ OK ] Removed slice system-sshd.slice. [ OK ] Removed slice system-system\x2dcloudinit.slice. [ OK ] Stopped target multi-user.target. [ OK ] Stopped target getty.target. [ OK ] Stopped target machines.target. [ OK ] Stopped target nss-lookup.target. [ OK ] Stopped target remote-cryptsetup.target. [ OK ] Stopped target timers.target. [ OK ] Stopped logrotate.timer. [ OK ] Stopped mdadm.timer. [ OK ] Stopped systemd-tmpfiles-clean.timer. [ OK ] Stopped target time-set.target. [ OK ] Stopped target user-config.target. [ OK ] Stopped target system-config.target. Unmounting boot.mount... Stopping amazon-ssm-agent.service... [ OK ] Stopped coreos-metadata-sshkeys@core.service. [ OK ] Removed slice system-coreos\x2dmetadata\x2dsshkeys.slice. Stopping docker.service... Stopping getty@tty1.service... [ 344.819368] audit: type=1131 audit(1696273599.864:15977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping kubelet.service... Stopping locksmithd.service... Stopping polkit.service... [ OK ] Stopped prepare-cni-plugins.service. [ 344.839208] audit: type=1131 audit(1696273599.900:15978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-cni-plugins comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped prepare-critools.service. Stopping serial-getty@ttyS0.service... [ OK ] Stopped sshd-keygen.service. Stopping systemd-logind.service... [ OK ] Stopped systemd-machine-id-commit.service. [ 344.859568] audit: type=1131 audit(1696273599.911:15979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-critools comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 344.872765] audit: type=1131 audit(1696273599.915:15980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped target first-boot-complete.target. Stopping systemd-random-seed.service... [ OK ] Stopped update-ssh-keys-after-ignition.service. Stopping user@500.service... [ OK ] Stopped amazon-ssm-agent.service. [ OK ] Stopped systemd-logind.service. [ OK ] Stopped polkit.service. [ OK ] Stopped locksmithd.service. [ OK ] Stopped getty@tty1.service. [ OK ] Stopped serial-getty@ttyS0.service. [ OK ] Stopped user@500.service. [ OK ] Stopped docker.service. [ OK ] Stopped kubelet.service. [ OK ] Unmounted boot.mount. [ OK ] Stopped systemd-random-seed.service. [ OK ] Removed slice system-getty.slice. [ OK ] Removed slice system-serial\x2dgetty.slice. [ OK ] Stopped target network-online.target. Stopping containerd.service... [ OK ] Stopped systemd-fsck@dev-d…2dlabel-EFI\x2dSYSTEM.service. [ OK ] Stopped systemd-networkd-wait-online.service. Stopping systemd-user-sessions.service... Stopping update-engine.service... Stopping user-runtime-dir@500.service... [ OK ] Stopped containerd.service. [ OK ] Stopped systemd-user-sessions.service. [ OK ] Unmounted run-user-500.mount. [ OK ] Stopped update-engine.service. [ OK ] Stopped user-runtime-dir@500.service. [ OK ] Removed slice user-500.slice. [ OK ] Stopped target network.target. [ OK ] Stopped target remote-fs.target. Stopping dbus.service... Stopping systemd-networkd.service... [ OK ] Stopped dbus.service. [ OK ] Stopped systemd-networkd.service. [ OK ] Stopped target basic.target. [ OK ] Stopped target network-pre.target. [ OK ] Stopped target paths.target. [ OK ] Stopped motdgen.path. [ OK ] Stopped user-cloudinit@var…car\x2dinstall-user_data.path. [ OK ] Stopped target slices.target. [ OK ] Removed slice user.slice. [ OK ] Stopped target sockets.target. [ OK ] Closed dbus.socket. [ OK ] Closed docker.socket. [ OK ] Closed sshd.socket. [ OK ] Stopped target sysinit.target. [ OK ] Unset automount proc-sys-fs-binfmt_misc.automount. [ OK ] Stopped target integritysetup.target. [ OK ] Stopped target veritysetup.target. [ OK ] Closed systemd-networkd.socket. Stopping audit-rules.service... [ OK ] Stopped systemd-network-generator.service. Stopping systemd-resolved.service... [ OK ] Stopped systemd-sysctl.service. [ OK ] Closed systemd-coredump.socket. [ OK ] Stopped systemd-modules-load.service. Stopping systemd-timesyncd.service... [ OK ] Stopped systemd-update-done.service. [ OK ] Stopped ldconfig.service. [ OK ] Stopped systemd-boot-update.service. [ OK ] Stopped systemd-hwdb-update.service. [ OK ] Stopped systemd-journal-catalog-update.service. Stopping systemd-update-utmp.service... [ OK ] Unmounted run-credentials-…stemd\x2dsysctl.service.mount. [ OK ] Stopped systemd-resolved.service. [ OK ] Stopped systemd-timesyncd.service. [ OK ] Stopped audit-rules.service. [ OK ] Stopped systemd-update-utmp.service. [ OK ] Stopped systemd-tmpfiles-setup.service. [ OK ] Stopped target local-fs.target. Unmounting media.mount... Unmounting run-cilium-cgroupv2.mount... Unmounting run-containerd-…ac6c41dadec5f6f41-shm.mount... Unmounting run-containerd-…ea38e66a987dffc76-shm.mount... Unmounting run-containerd-…d9534d2e311ad9d47-shm.mount... Unmounting run-containerd-…f3487bcde55dde189-shm.mount... Unmounting run-containerd-…79ecf7f73e64c1d8f-shm.mount... Unmounting run-containerd-…c41dadec5f6f41-rootfs.mount... Unmounting run-containerd-…58840726c51c8a-rootfs.mount... Unmounting run-containerd-…8e66a987dffc76-rootfs.mount... Unmounting run-containerd-…7e8ff798d0f38b-rootfs.mount... Unmounting run-containerd-…82c3fd8494f580-rootfs.mount... Unmounting run-containerd-…34d2e311ad9d47-rootfs.mount... Unmounting run-containerd-…87bcde55dde189-rootfs.mount... Unmounting run-containerd-…9f5e5403c47518-rootfs.mount... Unmounting run-credentials…d\x2dsysusers.service.mount... Unmounting run-credentials…iles\x2dsetup.service.mount... Unmounting run-credentials…dsetup\x2ddev.service.mount... Unmounting run-netns-cni\x…d390f\x2d2d980ac2fcd2.mount... Unmounting run-torcx-unpack.mount... Unmounting tmp.mount... Unmounting usr-share-oem.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dh4xcs.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dskzlz.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dx6b7s.mount... [ OK ] Unmounted media.mount. [ OK ] Unmounted run-cilium-cgroupv2.mount. [ OK ] Unmounted run-containerd-i…e6ea38e66a987dffc76-shm.mount. [ OK ] Unmounted run-containerd-i…5bd9534d2e311ad9d47-shm.mount. [ OK ] Unmounted run-containerd-i…b5f3487bcde55dde189-shm.mount. [ OK ] Unmounted run-containerd-i…c6c41dadec5f6f41-rootfs.mount. [ OK ] Unmounted run-containerd-i…f758840726c51c8a-rootfs.mount. [ OK ] Unmounted run-credentials-…pfiles\x2dsetup.service.mount. [FAILED] Failed unmounting run-torcx-unpack.mount. [ OK ] Unmounted run-containerd-i…ee79ecf7f73e64c1d8f-shm.mount. [ OK ] Unmounted run-containerd-i…d77e8ff798d0f38b-rootfs.mount. [ OK ] Unmounted run-credentials-…emd\x2dsysusers.service.mount. [ OK ] Unmounted run-containerd-i…a38e66a987dffc76-rootfs.mount. [ OK ] Unmounted run-containerd-i…a4ac6c41dadec5f6f41-shm.mount. [ OK ] Unmounted run-containerd-i…6e82c3fd8494f580-rootfs.mount. [ OK ] Unmounted run-containerd-i…9534d2e311ad9d47-rootfs.mount. [ OK ] Unmounted run-containerd-i…3487bcde55dde189-rootfs.mount. [ OK ] Unmounted run-containerd-i…949f5e5403c47518-rootfs.mount. [ OK ] Unmounted run-credentials-…x2dsetup\x2ddev.service.mount. [ OK ] Unmounted run-netns-cni\x2…x2d390f\x2d2d980ac2fcd2.mount. [ OK ] Unmounted tmp.mount. [ OK ] Unmounted usr-share-oem.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dh4xcs.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dskzlz.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dx6b7s.mount. [ OK ] Stopped target swap.target. [ OK ] Reached target umount.target. [ OK ] Stopped systemd-fsck@dev-disk-by\x2dlabel-OEM.service. [ OK ] Removed slice system-systemd\x2dfsck.slice. [ OK ] Stopped target local-fs-pre.target. [ OK ] Stopped lvm2-activation.service. [ OK ] Stopped target cryptsetup.target. [ OK ] Stopped systemd-ask-password-console.path. [ OK ] Stopped systemd-ask-password-wall.path. [ OK ] Stopped lvm2-activation-early.service. [ OK ] Stopped systemd-tmpfiles-setup-dev.service. [ OK ] Stopped systemd-sysusers.service. [ OK ] Stopped systemd-remount-fs.service. [ OK ] Reached target shutdown.target. [ OK ] Reached target final.target. [ OK ] Finished systemd-poweroff.service. [ OK ] Reached target poweroff.target. [ 345.954412] systemd-shutdown[1]: Syncing filesystems and block devices. [ 346.012954] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 346.039444] systemd-journald[1436]: Received SIGTERM from PID 1 (systemd-shutdow). [ 346.091274] systemd-shutdown[1]: Sending SIGKILL to remaining processes... [ 346.100882] systemd-shutdown[1]: Unmounting file systems. [ 346.105438] (sd-umount)[9495]: Unmounting '/run/torcx/unpack'. [ 346.144507] (sd-remount)[9496]: Remounting '/' read-only with options 'seclabel'. [ 346.163014] (sd-remount)[9496]: Failed to remount '/' read-only: Device or resource busy [ 346.171193] (sd-remount)[9497]: Remounting '/' read-only with options 'seclabel'. [ 346.174288] (sd-remount)[9497]: Failed to remount '/' read-only: Device or resource busy [ 346.177625] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 346.180114] systemd-shutdown[1]: Deactivating swaps. [ 346.182077] systemd-shutdown[1]: All swaps deactivated. [ 346.184037] systemd-shutdown[1]: Detaching loop devices. [ 346.187071] systemd-shutdown[1]: All loop devices detached. [ 346.189176] systemd-shutdown[1]: Stopping MD devices. [ 346.191157] systemd-shutdown[1]: All MD devices stopped. [ 346.193170] systemd-shutdown[1]: Detaching DM devices. [ 346.195456] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 346.197720] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 346.200726] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 346.203350] systemd-shutdown[1]: Unmounting file systems. [ 346.207754] (sd-remount)[9498]: Remounting '/' read-only with options 'seclabel'. [ 346.210781] (sd-remount)[9498]: Failed to remount '/' read-only: Device or resource busy [ 346.214150] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 346.216683] systemd-shutdown[1]: Detaching DM devices. [ 346.219025] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 346.221328] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 346.224275] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 346.226859] systemd-shutdown[1]: Unmounting file systems. [ 346.231338] (sd-remount)[9499]: Remounting '/' read-only with options 'seclabel'. [ 346.234358] (sd-remount)[9499]: Failed to remount '/' read-only: Device or resource busy [ 346.237628] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 346.240093] systemd-shutdown[1]: Detaching DM devices. [ 346.242486] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 346.244741] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 346.247693] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 346.250076] systemd-shutdown[1]: Cannot finalize remaining file systems, DM devices, continuing. [ 346.271421] systemd-shutdown[1]: Failed to finalize file systems, DM devices, ignoring. [ 346.274654] systemd-shutdown[1]: Syncing filesystems and block devices. [ 346.277151] systemd-shutdown[1]: Powering off. [ 346.418924] reboot: Power down