Feb 9 14:29:14.550813 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Thu Feb 8 21:14:17 -00 2024 Feb 9 14:29:14.550826 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 9 14:29:14.550833 kernel: BIOS-provided physical RAM map: Feb 9 14:29:14.550837 kernel: BIOS-e820: [mem 0x0000000000000000-0x00000000000997ff] usable Feb 9 14:29:14.550841 kernel: BIOS-e820: [mem 0x0000000000099800-0x000000000009ffff] reserved Feb 9 14:29:14.550845 kernel: BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved Feb 9 14:29:14.550849 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003fffffff] usable Feb 9 14:29:14.550853 kernel: BIOS-e820: [mem 0x0000000040000000-0x00000000403fffff] reserved Feb 9 14:29:14.550857 kernel: BIOS-e820: [mem 0x0000000040400000-0x00000000825ddfff] usable Feb 9 14:29:14.550861 kernel: BIOS-e820: [mem 0x00000000825de000-0x00000000825defff] ACPI NVS Feb 9 14:29:14.550866 kernel: BIOS-e820: [mem 0x00000000825df000-0x00000000825dffff] reserved Feb 9 14:29:14.550869 kernel: BIOS-e820: [mem 0x00000000825e0000-0x000000008afccfff] usable Feb 9 14:29:14.550873 kernel: BIOS-e820: [mem 0x000000008afcd000-0x000000008c0b1fff] reserved Feb 9 14:29:14.550877 kernel: BIOS-e820: [mem 0x000000008c0b2000-0x000000008c23afff] usable Feb 9 14:29:14.550882 kernel: BIOS-e820: [mem 0x000000008c23b000-0x000000008c66cfff] ACPI NVS Feb 9 14:29:14.550887 kernel: BIOS-e820: [mem 0x000000008c66d000-0x000000008eefefff] reserved Feb 9 14:29:14.550891 kernel: BIOS-e820: [mem 0x000000008eeff000-0x000000008eefffff] usable Feb 9 14:29:14.550896 kernel: BIOS-e820: [mem 0x000000008ef00000-0x000000008fffffff] reserved Feb 9 14:29:14.550900 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved Feb 9 14:29:14.550904 kernel: BIOS-e820: [mem 0x00000000fe000000-0x00000000fe010fff] reserved Feb 9 14:29:14.550908 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved Feb 9 14:29:14.550912 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Feb 9 14:29:14.550916 kernel: BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved Feb 9 14:29:14.550921 kernel: BIOS-e820: [mem 0x0000000100000000-0x000000086effffff] usable Feb 9 14:29:14.550925 kernel: NX (Execute Disable) protection: active Feb 9 14:29:14.550929 kernel: SMBIOS 3.2.1 present. Feb 9 14:29:14.550934 kernel: DMI: Supermicro SYS-5019C-MR-PH004/X11SCM-F, BIOS 1.9 09/16/2022 Feb 9 14:29:14.550938 kernel: tsc: Detected 3400.000 MHz processor Feb 9 14:29:14.550943 kernel: tsc: Detected 3399.906 MHz TSC Feb 9 14:29:14.550947 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Feb 9 14:29:14.550952 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Feb 9 14:29:14.550956 kernel: last_pfn = 0x86f000 max_arch_pfn = 0x400000000 Feb 9 14:29:14.550961 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Feb 9 14:29:14.550965 kernel: last_pfn = 0x8ef00 max_arch_pfn = 0x400000000 Feb 9 14:29:14.550970 kernel: Using GB pages for direct mapping Feb 9 14:29:14.550974 kernel: ACPI: Early table checksum verification disabled Feb 9 14:29:14.550979 kernel: ACPI: RSDP 0x00000000000F05B0 000024 (v02 SUPERM) Feb 9 14:29:14.550983 kernel: ACPI: XSDT 0x000000008C54E0C8 00010C (v01 SUPERM SUPERM 01072009 AMI 00010013) Feb 9 14:29:14.550988 kernel: ACPI: FACP 0x000000008C58A670 000114 (v06 01072009 AMI 00010013) Feb 9 14:29:14.550992 kernel: ACPI: DSDT 0x000000008C54E268 03C404 (v02 SUPERM SMCI--MB 01072009 INTL 20160527) Feb 9 14:29:14.550998 kernel: ACPI: FACS 0x000000008C66CF80 000040 Feb 9 14:29:14.551003 kernel: ACPI: APIC 0x000000008C58A788 00012C (v04 01072009 AMI 00010013) Feb 9 14:29:14.551009 kernel: ACPI: FPDT 0x000000008C58A8B8 000044 (v01 01072009 AMI 00010013) Feb 9 14:29:14.551013 kernel: ACPI: FIDT 0x000000008C58A900 00009C (v01 SUPERM SMCI--MB 01072009 AMI 00010013) Feb 9 14:29:14.551018 kernel: ACPI: MCFG 0x000000008C58A9A0 00003C (v01 SUPERM SMCI--MB 01072009 MSFT 00000097) Feb 9 14:29:14.551023 kernel: ACPI: SPMI 0x000000008C58A9E0 000041 (v05 SUPERM SMCI--MB 00000000 AMI. 00000000) Feb 9 14:29:14.551028 kernel: ACPI: SSDT 0x000000008C58AA28 001B1C (v02 CpuRef CpuSsdt 00003000 INTL 20160527) Feb 9 14:29:14.551032 kernel: ACPI: SSDT 0x000000008C58C548 0031C6 (v02 SaSsdt SaSsdt 00003000 INTL 20160527) Feb 9 14:29:14.551037 kernel: ACPI: SSDT 0x000000008C58F710 00232B (v02 PegSsd PegSsdt 00001000 INTL 20160527) Feb 9 14:29:14.551042 kernel: ACPI: HPET 0x000000008C591A40 000038 (v01 SUPERM SMCI--MB 00000002 01000013) Feb 9 14:29:14.551047 kernel: ACPI: SSDT 0x000000008C591A78 000FAE (v02 SUPERM Ther_Rvp 00001000 INTL 20160527) Feb 9 14:29:14.551052 kernel: ACPI: SSDT 0x000000008C592A28 0008F4 (v02 INTEL xh_mossb 00000000 INTL 20160527) Feb 9 14:29:14.551057 kernel: ACPI: UEFI 0x000000008C593320 000042 (v01 SUPERM SMCI--MB 00000002 01000013) Feb 9 14:29:14.551061 kernel: ACPI: LPIT 0x000000008C593368 000094 (v01 SUPERM SMCI--MB 00000002 01000013) Feb 9 14:29:14.551066 kernel: ACPI: SSDT 0x000000008C593400 0027DE (v02 SUPERM PtidDevc 00001000 INTL 20160527) Feb 9 14:29:14.551071 kernel: ACPI: SSDT 0x000000008C595BE0 0014E2 (v02 SUPERM TbtTypeC 00000000 INTL 20160527) Feb 9 14:29:14.551075 kernel: ACPI: DBGP 0x000000008C5970C8 000034 (v01 SUPERM SMCI--MB 00000002 01000013) Feb 9 14:29:14.551080 kernel: ACPI: DBG2 0x000000008C597100 000054 (v00 SUPERM SMCI--MB 00000002 01000013) Feb 9 14:29:14.551086 kernel: ACPI: SSDT 0x000000008C597158 001B67 (v02 SUPERM UsbCTabl 00001000 INTL 20160527) Feb 9 14:29:14.551091 kernel: ACPI: DMAR 0x000000008C598CC0 000070 (v01 INTEL EDK2 00000002 01000013) Feb 9 14:29:14.551095 kernel: ACPI: SSDT 0x000000008C598D30 000144 (v02 Intel ADebTabl 00001000 INTL 20160527) Feb 9 14:29:14.551100 kernel: ACPI: TPM2 0x000000008C598E78 000034 (v04 SUPERM SMCI--MB 00000001 AMI 00000000) Feb 9 14:29:14.551105 kernel: ACPI: SSDT 0x000000008C598EB0 000D8F (v02 INTEL SpsNm 00000002 INTL 20160527) Feb 9 14:29:14.551109 kernel: ACPI: WSMT 0x000000008C599C40 000028 (v01 SUPERM 01072009 AMI 00010013) Feb 9 14:29:14.551114 kernel: ACPI: EINJ 0x000000008C599C68 000130 (v01 AMI AMI.EINJ 00000000 AMI. 00000000) Feb 9 14:29:14.551119 kernel: ACPI: ERST 0x000000008C599D98 000230 (v01 AMIER AMI.ERST 00000000 AMI. 00000000) Feb 9 14:29:14.551123 kernel: ACPI: BERT 0x000000008C599FC8 000030 (v01 AMI AMI.BERT 00000000 AMI. 00000000) Feb 9 14:29:14.551129 kernel: ACPI: HEST 0x000000008C599FF8 00027C (v01 AMI AMI.HEST 00000000 AMI. 00000000) Feb 9 14:29:14.551134 kernel: ACPI: SSDT 0x000000008C59A278 000162 (v01 SUPERM SMCCDN 00000000 INTL 20181221) Feb 9 14:29:14.551138 kernel: ACPI: Reserving FACP table memory at [mem 0x8c58a670-0x8c58a783] Feb 9 14:29:14.551143 kernel: ACPI: Reserving DSDT table memory at [mem 0x8c54e268-0x8c58a66b] Feb 9 14:29:14.551148 kernel: ACPI: Reserving FACS table memory at [mem 0x8c66cf80-0x8c66cfbf] Feb 9 14:29:14.551153 kernel: ACPI: Reserving APIC table memory at [mem 0x8c58a788-0x8c58a8b3] Feb 9 14:29:14.551157 kernel: ACPI: Reserving FPDT table memory at [mem 0x8c58a8b8-0x8c58a8fb] Feb 9 14:29:14.551162 kernel: ACPI: Reserving FIDT table memory at [mem 0x8c58a900-0x8c58a99b] Feb 9 14:29:14.551167 kernel: ACPI: Reserving MCFG table memory at [mem 0x8c58a9a0-0x8c58a9db] Feb 9 14:29:14.551172 kernel: ACPI: Reserving SPMI table memory at [mem 0x8c58a9e0-0x8c58aa20] Feb 9 14:29:14.551177 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58aa28-0x8c58c543] Feb 9 14:29:14.551181 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58c548-0x8c58f70d] Feb 9 14:29:14.551186 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58f710-0x8c591a3a] Feb 9 14:29:14.551191 kernel: ACPI: Reserving HPET table memory at [mem 0x8c591a40-0x8c591a77] Feb 9 14:29:14.551195 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c591a78-0x8c592a25] Feb 9 14:29:14.551200 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c592a28-0x8c59331b] Feb 9 14:29:14.551204 kernel: ACPI: Reserving UEFI table memory at [mem 0x8c593320-0x8c593361] Feb 9 14:29:14.551210 kernel: ACPI: Reserving LPIT table memory at [mem 0x8c593368-0x8c5933fb] Feb 9 14:29:14.551215 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c593400-0x8c595bdd] Feb 9 14:29:14.551219 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c595be0-0x8c5970c1] Feb 9 14:29:14.551224 kernel: ACPI: Reserving DBGP table memory at [mem 0x8c5970c8-0x8c5970fb] Feb 9 14:29:14.551229 kernel: ACPI: Reserving DBG2 table memory at [mem 0x8c597100-0x8c597153] Feb 9 14:29:14.551233 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c597158-0x8c598cbe] Feb 9 14:29:14.551238 kernel: ACPI: Reserving DMAR table memory at [mem 0x8c598cc0-0x8c598d2f] Feb 9 14:29:14.551243 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c598d30-0x8c598e73] Feb 9 14:29:14.551247 kernel: ACPI: Reserving TPM2 table memory at [mem 0x8c598e78-0x8c598eab] Feb 9 14:29:14.551253 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c598eb0-0x8c599c3e] Feb 9 14:29:14.551257 kernel: ACPI: Reserving WSMT table memory at [mem 0x8c599c40-0x8c599c67] Feb 9 14:29:14.551262 kernel: ACPI: Reserving EINJ table memory at [mem 0x8c599c68-0x8c599d97] Feb 9 14:29:14.551267 kernel: ACPI: Reserving ERST table memory at [mem 0x8c599d98-0x8c599fc7] Feb 9 14:29:14.551272 kernel: ACPI: Reserving BERT table memory at [mem 0x8c599fc8-0x8c599ff7] Feb 9 14:29:14.551276 kernel: ACPI: Reserving HEST table memory at [mem 0x8c599ff8-0x8c59a273] Feb 9 14:29:14.551284 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c59a278-0x8c59a3d9] Feb 9 14:29:14.551290 kernel: No NUMA configuration found Feb 9 14:29:14.551311 kernel: Faking a node at [mem 0x0000000000000000-0x000000086effffff] Feb 9 14:29:14.551317 kernel: NODE_DATA(0) allocated [mem 0x86effa000-0x86effffff] Feb 9 14:29:14.551322 kernel: Zone ranges: Feb 9 14:29:14.551326 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Feb 9 14:29:14.551331 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Feb 9 14:29:14.551335 kernel: Normal [mem 0x0000000100000000-0x000000086effffff] Feb 9 14:29:14.551340 kernel: Movable zone start for each node Feb 9 14:29:14.551345 kernel: Early memory node ranges Feb 9 14:29:14.551349 kernel: node 0: [mem 0x0000000000001000-0x0000000000098fff] Feb 9 14:29:14.551354 kernel: node 0: [mem 0x0000000000100000-0x000000003fffffff] Feb 9 14:29:14.551358 kernel: node 0: [mem 0x0000000040400000-0x00000000825ddfff] Feb 9 14:29:14.551364 kernel: node 0: [mem 0x00000000825e0000-0x000000008afccfff] Feb 9 14:29:14.551368 kernel: node 0: [mem 0x000000008c0b2000-0x000000008c23afff] Feb 9 14:29:14.551373 kernel: node 0: [mem 0x000000008eeff000-0x000000008eefffff] Feb 9 14:29:14.551377 kernel: node 0: [mem 0x0000000100000000-0x000000086effffff] Feb 9 14:29:14.551382 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000086effffff] Feb 9 14:29:14.551387 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Feb 9 14:29:14.551395 kernel: On node 0, zone DMA: 103 pages in unavailable ranges Feb 9 14:29:14.551401 kernel: On node 0, zone DMA32: 1024 pages in unavailable ranges Feb 9 14:29:14.551406 kernel: On node 0, zone DMA32: 2 pages in unavailable ranges Feb 9 14:29:14.551411 kernel: On node 0, zone DMA32: 4325 pages in unavailable ranges Feb 9 14:29:14.551417 kernel: On node 0, zone DMA32: 11460 pages in unavailable ranges Feb 9 14:29:14.551422 kernel: On node 0, zone Normal: 4352 pages in unavailable ranges Feb 9 14:29:14.551427 kernel: On node 0, zone Normal: 4096 pages in unavailable ranges Feb 9 14:29:14.551432 kernel: ACPI: PM-Timer IO Port: 0x1808 Feb 9 14:29:14.551436 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Feb 9 14:29:14.551441 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Feb 9 14:29:14.551446 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Feb 9 14:29:14.551452 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Feb 9 14:29:14.551457 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Feb 9 14:29:14.551462 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Feb 9 14:29:14.551467 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Feb 9 14:29:14.551471 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Feb 9 14:29:14.551476 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Feb 9 14:29:14.551481 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Feb 9 14:29:14.551486 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Feb 9 14:29:14.551491 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Feb 9 14:29:14.551497 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Feb 9 14:29:14.551501 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Feb 9 14:29:14.551506 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Feb 9 14:29:14.551511 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Feb 9 14:29:14.551516 kernel: IOAPIC[0]: apic_id 2, version 32, address 0xfec00000, GSI 0-119 Feb 9 14:29:14.551521 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Feb 9 14:29:14.551526 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Feb 9 14:29:14.551531 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Feb 9 14:29:14.551536 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Feb 9 14:29:14.551542 kernel: TSC deadline timer available Feb 9 14:29:14.551546 kernel: smpboot: Allowing 16 CPUs, 0 hotplug CPUs Feb 9 14:29:14.551551 kernel: [mem 0x90000000-0xdfffffff] available for PCI devices Feb 9 14:29:14.551556 kernel: Booting paravirtualized kernel on bare hardware Feb 9 14:29:14.551561 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Feb 9 14:29:14.551566 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:16 nr_node_ids:1 Feb 9 14:29:14.551571 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u262144 Feb 9 14:29:14.551576 kernel: pcpu-alloc: s185624 r8192 d31464 u262144 alloc=1*2097152 Feb 9 14:29:14.551581 kernel: pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 12 13 14 15 Feb 9 14:29:14.551587 kernel: Built 1 zonelists, mobility grouping on. Total pages: 8232415 Feb 9 14:29:14.551592 kernel: Policy zone: Normal Feb 9 14:29:14.551597 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 9 14:29:14.551602 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 9 14:29:14.551607 kernel: Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes, linear) Feb 9 14:29:14.551612 kernel: Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear) Feb 9 14:29:14.551617 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 9 14:29:14.551622 kernel: Memory: 32724720K/33452980K available (12294K kernel code, 2275K rwdata, 13700K rodata, 45496K init, 4048K bss, 728000K reserved, 0K cma-reserved) Feb 9 14:29:14.551628 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=16, Nodes=1 Feb 9 14:29:14.551633 kernel: ftrace: allocating 34475 entries in 135 pages Feb 9 14:29:14.551638 kernel: ftrace: allocated 135 pages with 4 groups Feb 9 14:29:14.551643 kernel: rcu: Hierarchical RCU implementation. Feb 9 14:29:14.551648 kernel: rcu: RCU event tracing is enabled. Feb 9 14:29:14.551654 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=16. Feb 9 14:29:14.551659 kernel: Rude variant of Tasks RCU enabled. Feb 9 14:29:14.551664 kernel: Tracing variant of Tasks RCU enabled. Feb 9 14:29:14.551669 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 9 14:29:14.551674 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=16 Feb 9 14:29:14.551679 kernel: NR_IRQS: 33024, nr_irqs: 2184, preallocated irqs: 16 Feb 9 14:29:14.551684 kernel: random: crng init done Feb 9 14:29:14.551689 kernel: Console: colour dummy device 80x25 Feb 9 14:29:14.551694 kernel: printk: console [tty0] enabled Feb 9 14:29:14.551699 kernel: printk: console [ttyS1] enabled Feb 9 14:29:14.551704 kernel: ACPI: Core revision 20210730 Feb 9 14:29:14.551709 kernel: hpet: HPET dysfunctional in PC10. Force disabled. Feb 9 14:29:14.551714 kernel: APIC: Switch to symmetric I/O mode setup Feb 9 14:29:14.551720 kernel: DMAR: Host address width 39 Feb 9 14:29:14.551725 kernel: DMAR: DRHD base: 0x000000fed91000 flags: 0x1 Feb 9 14:29:14.551730 kernel: DMAR: dmar0: reg_base_addr fed91000 ver 1:0 cap d2008c40660462 ecap f050da Feb 9 14:29:14.551735 kernel: DMAR: RMRR base: 0x0000008cf18000 end: 0x0000008d161fff Feb 9 14:29:14.551740 kernel: DMAR-IR: IOAPIC id 2 under DRHD base 0xfed91000 IOMMU 0 Feb 9 14:29:14.551745 kernel: DMAR-IR: HPET id 0 under DRHD base 0xfed91000 Feb 9 14:29:14.551750 kernel: DMAR-IR: Queued invalidation will be enabled to support x2apic and Intr-remapping. Feb 9 14:29:14.551754 kernel: DMAR-IR: Enabled IRQ remapping in x2apic mode Feb 9 14:29:14.551759 kernel: x2apic enabled Feb 9 14:29:14.551765 kernel: Switched APIC routing to cluster x2apic. Feb 9 14:29:14.551770 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x3101f59f5e6, max_idle_ns: 440795259996 ns Feb 9 14:29:14.551775 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 6799.81 BogoMIPS (lpj=3399906) Feb 9 14:29:14.551780 kernel: CPU0: Thermal monitoring enabled (TM1) Feb 9 14:29:14.551785 kernel: process: using mwait in idle threads Feb 9 14:29:14.551790 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Feb 9 14:29:14.551795 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Feb 9 14:29:14.551800 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Feb 9 14:29:14.551805 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Feb 9 14:29:14.551810 kernel: Spectre V2 : Mitigation: Enhanced IBRS Feb 9 14:29:14.551815 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Feb 9 14:29:14.551820 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Feb 9 14:29:14.551825 kernel: RETBleed: Mitigation: Enhanced IBRS Feb 9 14:29:14.551830 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Feb 9 14:29:14.551835 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Feb 9 14:29:14.551839 kernel: TAA: Mitigation: TSX disabled Feb 9 14:29:14.551844 kernel: MMIO Stale Data: Mitigation: Clear CPU buffers Feb 9 14:29:14.551849 kernel: SRBDS: Mitigation: Microcode Feb 9 14:29:14.551854 kernel: GDS: Vulnerable: No microcode Feb 9 14:29:14.551859 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Feb 9 14:29:14.551865 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Feb 9 14:29:14.551869 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Feb 9 14:29:14.551874 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Feb 9 14:29:14.551879 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Feb 9 14:29:14.551884 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Feb 9 14:29:14.551889 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Feb 9 14:29:14.551894 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Feb 9 14:29:14.551899 kernel: x86/fpu: Enabled xstate features 0x1f, context size is 960 bytes, using 'compacted' format. Feb 9 14:29:14.551904 kernel: Freeing SMP alternatives memory: 32K Feb 9 14:29:14.551908 kernel: pid_max: default: 32768 minimum: 301 Feb 9 14:29:14.551913 kernel: LSM: Security Framework initializing Feb 9 14:29:14.551918 kernel: SELinux: Initializing. Feb 9 14:29:14.551924 kernel: Mount-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 9 14:29:14.551929 kernel: Mountpoint-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 9 14:29:14.551934 kernel: smpboot: Estimated ratio of average max frequency by base frequency (times 1024): 1445 Feb 9 14:29:14.551938 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Feb 9 14:29:14.551944 kernel: Performance Events: PEBS fmt3+, Skylake events, 32-deep LBR, full-width counters, Intel PMU driver. Feb 9 14:29:14.551949 kernel: ... version: 4 Feb 9 14:29:14.551954 kernel: ... bit width: 48 Feb 9 14:29:14.551959 kernel: ... generic registers: 4 Feb 9 14:29:14.551964 kernel: ... value mask: 0000ffffffffffff Feb 9 14:29:14.551968 kernel: ... max period: 00007fffffffffff Feb 9 14:29:14.551974 kernel: ... fixed-purpose events: 3 Feb 9 14:29:14.551979 kernel: ... event mask: 000000070000000f Feb 9 14:29:14.551984 kernel: signal: max sigframe size: 2032 Feb 9 14:29:14.551989 kernel: rcu: Hierarchical SRCU implementation. Feb 9 14:29:14.551994 kernel: NMI watchdog: Enabled. Permanently consumes one hw-PMU counter. Feb 9 14:29:14.551999 kernel: smp: Bringing up secondary CPUs ... Feb 9 14:29:14.552004 kernel: x86: Booting SMP configuration: Feb 9 14:29:14.552009 kernel: .... node #0, CPUs: #1 #2 #3 #4 #5 #6 #7 #8 Feb 9 14:29:14.552014 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Feb 9 14:29:14.552020 kernel: #9 #10 #11 #12 #13 #14 #15 Feb 9 14:29:14.552025 kernel: smp: Brought up 1 node, 16 CPUs Feb 9 14:29:14.552030 kernel: smpboot: Max logical packages: 1 Feb 9 14:29:14.552035 kernel: smpboot: Total of 16 processors activated (108796.99 BogoMIPS) Feb 9 14:29:14.552040 kernel: devtmpfs: initialized Feb 9 14:29:14.552045 kernel: x86/mm: Memory block size: 128MB Feb 9 14:29:14.552050 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x825de000-0x825defff] (4096 bytes) Feb 9 14:29:14.552055 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x8c23b000-0x8c66cfff] (4399104 bytes) Feb 9 14:29:14.552060 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 9 14:29:14.552065 kernel: futex hash table entries: 4096 (order: 6, 262144 bytes, linear) Feb 9 14:29:14.552070 kernel: pinctrl core: initialized pinctrl subsystem Feb 9 14:29:14.552075 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 9 14:29:14.552080 kernel: audit: initializing netlink subsys (disabled) Feb 9 14:29:14.552085 kernel: audit: type=2000 audit(1707488949.040:1): state=initialized audit_enabled=0 res=1 Feb 9 14:29:14.552090 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 9 14:29:14.552095 kernel: thermal_sys: Registered thermal governor 'user_space' Feb 9 14:29:14.552100 kernel: cpuidle: using governor menu Feb 9 14:29:14.552106 kernel: ACPI: bus type PCI registered Feb 9 14:29:14.552111 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 9 14:29:14.552116 kernel: dca service started, version 1.12.1 Feb 9 14:29:14.552121 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xe0000000-0xefffffff] (base 0xe0000000) Feb 9 14:29:14.552126 kernel: PCI: MMCONFIG at [mem 0xe0000000-0xefffffff] reserved in E820 Feb 9 14:29:14.552131 kernel: PCI: Using configuration type 1 for base access Feb 9 14:29:14.552135 kernel: ENERGY_PERF_BIAS: Set to 'normal', was 'performance' Feb 9 14:29:14.552140 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Feb 9 14:29:14.552145 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 9 14:29:14.552151 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 9 14:29:14.552156 kernel: ACPI: Added _OSI(Module Device) Feb 9 14:29:14.552161 kernel: ACPI: Added _OSI(Processor Device) Feb 9 14:29:14.552166 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 9 14:29:14.552171 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 9 14:29:14.552176 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 9 14:29:14.552181 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 9 14:29:14.552186 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 9 14:29:14.552191 kernel: ACPI: 12 ACPI AML tables successfully acquired and loaded Feb 9 14:29:14.552196 kernel: ACPI: Dynamic OEM Table Load: Feb 9 14:29:14.552201 kernel: ACPI: SSDT 0xFFFF9F2700213C00 0000F4 (v02 PmRef Cpu0Psd 00003000 INTL 20160527) Feb 9 14:29:14.552206 kernel: ACPI: \_SB_.PR00: _OSC native thermal LVT Acked Feb 9 14:29:14.552211 kernel: ACPI: Dynamic OEM Table Load: Feb 9 14:29:14.552216 kernel: ACPI: SSDT 0xFFFF9F2701AE2000 000400 (v02 PmRef Cpu0Cst 00003001 INTL 20160527) Feb 9 14:29:14.552221 kernel: ACPI: Dynamic OEM Table Load: Feb 9 14:29:14.552226 kernel: ACPI: SSDT 0xFFFF9F2701A58800 000683 (v02 PmRef Cpu0Ist 00003000 INTL 20160527) Feb 9 14:29:14.552231 kernel: ACPI: Dynamic OEM Table Load: Feb 9 14:29:14.552236 kernel: ACPI: SSDT 0xFFFF9F2701A59800 0005FC (v02 PmRef ApIst 00003000 INTL 20160527) Feb 9 14:29:14.552240 kernel: ACPI: Dynamic OEM Table Load: Feb 9 14:29:14.552246 kernel: ACPI: SSDT 0xFFFF9F270014D000 000AB0 (v02 PmRef ApPsd 00003000 INTL 20160527) Feb 9 14:29:14.552251 kernel: ACPI: Dynamic OEM Table Load: Feb 9 14:29:14.552256 kernel: ACPI: SSDT 0xFFFF9F2701AE6800 00030A (v02 PmRef ApCst 00003000 INTL 20160527) Feb 9 14:29:14.552261 kernel: ACPI: Interpreter enabled Feb 9 14:29:14.552266 kernel: ACPI: PM: (supports S0 S5) Feb 9 14:29:14.552271 kernel: ACPI: Using IOAPIC for interrupt routing Feb 9 14:29:14.552275 kernel: HEST: Enabling Firmware First mode for corrected errors. Feb 9 14:29:14.552280 kernel: mce: [Firmware Bug]: Ignoring request to disable invalid MCA bank 14. Feb 9 14:29:14.552288 kernel: HEST: Table parsing has been initialized. Feb 9 14:29:14.552294 kernel: GHES: APEI firmware first mode is enabled by APEI bit and WHEA _OSC. Feb 9 14:29:14.552299 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Feb 9 14:29:14.552304 kernel: ACPI: Enabled 9 GPEs in block 00 to 7F Feb 9 14:29:14.552309 kernel: ACPI: PM: Power Resource [USBC] Feb 9 14:29:14.552314 kernel: ACPI: PM: Power Resource [V0PR] Feb 9 14:29:14.552319 kernel: ACPI: PM: Power Resource [V1PR] Feb 9 14:29:14.552324 kernel: ACPI: PM: Power Resource [V2PR] Feb 9 14:29:14.552329 kernel: ACPI: PM: Power Resource [WRST] Feb 9 14:29:14.552334 kernel: ACPI: PM: Power Resource [FN00] Feb 9 14:29:14.552339 kernel: ACPI: PM: Power Resource [FN01] Feb 9 14:29:14.552344 kernel: ACPI: PM: Power Resource [FN02] Feb 9 14:29:14.552349 kernel: ACPI: PM: Power Resource [FN03] Feb 9 14:29:14.552354 kernel: ACPI: PM: Power Resource [FN04] Feb 9 14:29:14.552359 kernel: ACPI: PM: Power Resource [PIN] Feb 9 14:29:14.552364 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-fe]) Feb 9 14:29:14.552430 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 9 14:29:14.552474 kernel: acpi PNP0A08:00: _OSC: platform does not support [AER] Feb 9 14:29:14.552517 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability LTR] Feb 9 14:29:14.552524 kernel: PCI host bridge to bus 0000:00 Feb 9 14:29:14.552567 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Feb 9 14:29:14.552604 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Feb 9 14:29:14.552640 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Feb 9 14:29:14.552676 kernel: pci_bus 0000:00: root bus resource [mem 0x90000000-0xdfffffff window] Feb 9 14:29:14.552712 kernel: pci_bus 0000:00: root bus resource [mem 0xfc800000-0xfe7fffff window] Feb 9 14:29:14.552750 kernel: pci_bus 0000:00: root bus resource [bus 00-fe] Feb 9 14:29:14.552799 kernel: pci 0000:00:00.0: [8086:3e31] type 00 class 0x060000 Feb 9 14:29:14.552845 kernel: pci 0000:00:01.0: [8086:1901] type 01 class 0x060400 Feb 9 14:29:14.552888 kernel: pci 0000:00:01.0: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.552934 kernel: pci 0000:00:08.0: [8086:1911] type 00 class 0x088000 Feb 9 14:29:14.552975 kernel: pci 0000:00:08.0: reg 0x10: [mem 0x9551f000-0x9551ffff 64bit] Feb 9 14:29:14.553025 kernel: pci 0000:00:12.0: [8086:a379] type 00 class 0x118000 Feb 9 14:29:14.553067 kernel: pci 0000:00:12.0: reg 0x10: [mem 0x9551e000-0x9551efff 64bit] Feb 9 14:29:14.553112 kernel: pci 0000:00:14.0: [8086:a36d] type 00 class 0x0c0330 Feb 9 14:29:14.553154 kernel: pci 0000:00:14.0: reg 0x10: [mem 0x95500000-0x9550ffff 64bit] Feb 9 14:29:14.553197 kernel: pci 0000:00:14.0: PME# supported from D3hot D3cold Feb 9 14:29:14.553242 kernel: pci 0000:00:14.2: [8086:a36f] type 00 class 0x050000 Feb 9 14:29:14.553291 kernel: pci 0000:00:14.2: reg 0x10: [mem 0x95512000-0x95513fff 64bit] Feb 9 14:29:14.553342 kernel: pci 0000:00:14.2: reg 0x18: [mem 0x9551d000-0x9551dfff 64bit] Feb 9 14:29:14.553398 kernel: pci 0000:00:15.0: [8086:a368] type 00 class 0x0c8000 Feb 9 14:29:14.553449 kernel: pci 0000:00:15.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Feb 9 14:29:14.553504 kernel: pci 0000:00:15.1: [8086:a369] type 00 class 0x0c8000 Feb 9 14:29:14.553556 kernel: pci 0000:00:15.1: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Feb 9 14:29:14.553611 kernel: pci 0000:00:16.0: [8086:a360] type 00 class 0x078000 Feb 9 14:29:14.553664 kernel: pci 0000:00:16.0: reg 0x10: [mem 0x9551a000-0x9551afff 64bit] Feb 9 14:29:14.553716 kernel: pci 0000:00:16.0: PME# supported from D3hot Feb 9 14:29:14.553773 kernel: pci 0000:00:16.1: [8086:a361] type 00 class 0x078000 Feb 9 14:29:14.553824 kernel: pci 0000:00:16.1: reg 0x10: [mem 0x95519000-0x95519fff 64bit] Feb 9 14:29:14.553874 kernel: pci 0000:00:16.1: PME# supported from D3hot Feb 9 14:29:14.553929 kernel: pci 0000:00:16.4: [8086:a364] type 00 class 0x078000 Feb 9 14:29:14.553982 kernel: pci 0000:00:16.4: reg 0x10: [mem 0x95518000-0x95518fff 64bit] Feb 9 14:29:14.554033 kernel: pci 0000:00:16.4: PME# supported from D3hot Feb 9 14:29:14.554086 kernel: pci 0000:00:17.0: [8086:a352] type 00 class 0x010601 Feb 9 14:29:14.554138 kernel: pci 0000:00:17.0: reg 0x10: [mem 0x95510000-0x95511fff] Feb 9 14:29:14.554190 kernel: pci 0000:00:17.0: reg 0x14: [mem 0x95517000-0x955170ff] Feb 9 14:29:14.554241 kernel: pci 0000:00:17.0: reg 0x18: [io 0x6050-0x6057] Feb 9 14:29:14.554294 kernel: pci 0000:00:17.0: reg 0x1c: [io 0x6040-0x6043] Feb 9 14:29:14.554353 kernel: pci 0000:00:17.0: reg 0x20: [io 0x6020-0x603f] Feb 9 14:29:14.554407 kernel: pci 0000:00:17.0: reg 0x24: [mem 0x95516000-0x955167ff] Feb 9 14:29:14.554457 kernel: pci 0000:00:17.0: PME# supported from D3hot Feb 9 14:29:14.554514 kernel: pci 0000:00:1b.0: [8086:a340] type 01 class 0x060400 Feb 9 14:29:14.554566 kernel: pci 0000:00:1b.0: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.554623 kernel: pci 0000:00:1b.4: [8086:a32c] type 01 class 0x060400 Feb 9 14:29:14.554675 kernel: pci 0000:00:1b.4: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.554732 kernel: pci 0000:00:1b.5: [8086:a32d] type 01 class 0x060400 Feb 9 14:29:14.554785 kernel: pci 0000:00:1b.5: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.554839 kernel: pci 0000:00:1c.0: [8086:a338] type 01 class 0x060400 Feb 9 14:29:14.554891 kernel: pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.554948 kernel: pci 0000:00:1c.3: [8086:a33b] type 01 class 0x060400 Feb 9 14:29:14.555001 kernel: pci 0000:00:1c.3: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.555055 kernel: pci 0000:00:1e.0: [8086:a328] type 00 class 0x078000 Feb 9 14:29:14.555108 kernel: pci 0000:00:1e.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Feb 9 14:29:14.555165 kernel: pci 0000:00:1f.0: [8086:a309] type 00 class 0x060100 Feb 9 14:29:14.555222 kernel: pci 0000:00:1f.4: [8086:a323] type 00 class 0x0c0500 Feb 9 14:29:14.555274 kernel: pci 0000:00:1f.4: reg 0x10: [mem 0x95514000-0x955140ff 64bit] Feb 9 14:29:14.555327 kernel: pci 0000:00:1f.4: reg 0x20: [io 0xefa0-0xefbf] Feb 9 14:29:14.555382 kernel: pci 0000:00:1f.5: [8086:a324] type 00 class 0x0c8000 Feb 9 14:29:14.555433 kernel: pci 0000:00:1f.5: reg 0x10: [mem 0xfe010000-0xfe010fff] Feb 9 14:29:14.555491 kernel: pci 0000:01:00.0: [15b3:1015] type 00 class 0x020000 Feb 9 14:29:14.555547 kernel: pci 0000:01:00.0: reg 0x10: [mem 0x92000000-0x93ffffff 64bit pref] Feb 9 14:29:14.555600 kernel: pci 0000:01:00.0: reg 0x30: [mem 0x95200000-0x952fffff pref] Feb 9 14:29:14.555653 kernel: pci 0000:01:00.0: PME# supported from D3cold Feb 9 14:29:14.555708 kernel: pci 0000:01:00.0: reg 0x1a4: [mem 0x00000000-0x000fffff 64bit pref] Feb 9 14:29:14.555761 kernel: pci 0000:01:00.0: VF(n) BAR0 space: [mem 0x00000000-0x007fffff 64bit pref] (contains BAR0 for 8 VFs) Feb 9 14:29:14.555820 kernel: pci 0000:01:00.1: [15b3:1015] type 00 class 0x020000 Feb 9 14:29:14.555924 kernel: pci 0000:01:00.1: reg 0x10: [mem 0x90000000-0x91ffffff 64bit pref] Feb 9 14:29:14.555979 kernel: pci 0000:01:00.1: reg 0x30: [mem 0x95100000-0x951fffff pref] Feb 9 14:29:14.556032 kernel: pci 0000:01:00.1: PME# supported from D3cold Feb 9 14:29:14.556083 kernel: pci 0000:01:00.1: reg 0x1a4: [mem 0x00000000-0x000fffff 64bit pref] Feb 9 14:29:14.556126 kernel: pci 0000:01:00.1: VF(n) BAR0 space: [mem 0x00000000-0x007fffff 64bit pref] (contains BAR0 for 8 VFs) Feb 9 14:29:14.556169 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Feb 9 14:29:14.556210 kernel: pci 0000:00:01.0: bridge window [mem 0x95100000-0x952fffff] Feb 9 14:29:14.556251 kernel: pci 0000:00:01.0: bridge window [mem 0x90000000-0x93ffffff 64bit pref] Feb 9 14:29:14.556301 kernel: pci 0000:00:1b.0: PCI bridge to [bus 02] Feb 9 14:29:14.556352 kernel: pci 0000:03:00.0: [8086:1533] type 00 class 0x020000 Feb 9 14:29:14.556396 kernel: pci 0000:03:00.0: reg 0x10: [mem 0x95400000-0x9547ffff] Feb 9 14:29:14.556438 kernel: pci 0000:03:00.0: reg 0x18: [io 0x5000-0x501f] Feb 9 14:29:14.556480 kernel: pci 0000:03:00.0: reg 0x1c: [mem 0x95480000-0x95483fff] Feb 9 14:29:14.556524 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.556566 kernel: pci 0000:00:1b.4: PCI bridge to [bus 03] Feb 9 14:29:14.556608 kernel: pci 0000:00:1b.4: bridge window [io 0x5000-0x5fff] Feb 9 14:29:14.556652 kernel: pci 0000:00:1b.4: bridge window [mem 0x95400000-0x954fffff] Feb 9 14:29:14.556699 kernel: pci 0000:04:00.0: [8086:1533] type 00 class 0x020000 Feb 9 14:29:14.556744 kernel: pci 0000:04:00.0: reg 0x10: [mem 0x95300000-0x9537ffff] Feb 9 14:29:14.556787 kernel: pci 0000:04:00.0: reg 0x18: [io 0x4000-0x401f] Feb 9 14:29:14.556831 kernel: pci 0000:04:00.0: reg 0x1c: [mem 0x95380000-0x95383fff] Feb 9 14:29:14.556874 kernel: pci 0000:04:00.0: PME# supported from D0 D3hot D3cold Feb 9 14:29:14.556916 kernel: pci 0000:00:1b.5: PCI bridge to [bus 04] Feb 9 14:29:14.556956 kernel: pci 0000:00:1b.5: bridge window [io 0x4000-0x4fff] Feb 9 14:29:14.557001 kernel: pci 0000:00:1b.5: bridge window [mem 0x95300000-0x953fffff] Feb 9 14:29:14.557043 kernel: pci 0000:00:1c.0: PCI bridge to [bus 05] Feb 9 14:29:14.557090 kernel: pci 0000:06:00.0: [1a03:1150] type 01 class 0x060400 Feb 9 14:29:14.557134 kernel: pci 0000:06:00.0: enabling Extended Tags Feb 9 14:29:14.557179 kernel: pci 0000:06:00.0: supports D1 D2 Feb 9 14:29:14.557221 kernel: pci 0000:06:00.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 9 14:29:14.557263 kernel: pci 0000:00:1c.3: PCI bridge to [bus 06-07] Feb 9 14:29:14.557309 kernel: pci 0000:00:1c.3: bridge window [io 0x3000-0x3fff] Feb 9 14:29:14.557354 kernel: pci 0000:00:1c.3: bridge window [mem 0x94000000-0x950fffff] Feb 9 14:29:14.557399 kernel: pci_bus 0000:07: extended config space not accessible Feb 9 14:29:14.557449 kernel: pci 0000:07:00.0: [1a03:2000] type 00 class 0x030000 Feb 9 14:29:14.557495 kernel: pci 0000:07:00.0: reg 0x10: [mem 0x94000000-0x94ffffff] Feb 9 14:29:14.557541 kernel: pci 0000:07:00.0: reg 0x14: [mem 0x95000000-0x9501ffff] Feb 9 14:29:14.557586 kernel: pci 0000:07:00.0: reg 0x18: [io 0x3000-0x307f] Feb 9 14:29:14.557631 kernel: pci 0000:07:00.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Feb 9 14:29:14.557678 kernel: pci 0000:07:00.0: supports D1 D2 Feb 9 14:29:14.557723 kernel: pci 0000:07:00.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 9 14:29:14.557766 kernel: pci 0000:06:00.0: PCI bridge to [bus 07] Feb 9 14:29:14.557809 kernel: pci 0000:06:00.0: bridge window [io 0x3000-0x3fff] Feb 9 14:29:14.557853 kernel: pci 0000:06:00.0: bridge window [mem 0x94000000-0x950fffff] Feb 9 14:29:14.557860 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 0 Feb 9 14:29:14.557866 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 1 Feb 9 14:29:14.557873 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 0 Feb 9 14:29:14.557878 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 0 Feb 9 14:29:14.557884 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 0 Feb 9 14:29:14.557889 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 0 Feb 9 14:29:14.557894 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 0 Feb 9 14:29:14.557899 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 0 Feb 9 14:29:14.557905 kernel: iommu: Default domain type: Translated Feb 9 14:29:14.557910 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Feb 9 14:29:14.557954 kernel: pci 0000:07:00.0: vgaarb: setting as boot VGA device Feb 9 14:29:14.558000 kernel: pci 0000:07:00.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Feb 9 14:29:14.558045 kernel: pci 0000:07:00.0: vgaarb: bridge control possible Feb 9 14:29:14.558053 kernel: vgaarb: loaded Feb 9 14:29:14.558058 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 9 14:29:14.558064 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 9 14:29:14.558069 kernel: PTP clock support registered Feb 9 14:29:14.558074 kernel: PCI: Using ACPI for IRQ routing Feb 9 14:29:14.558080 kernel: PCI: pci_cache_line_size set to 64 bytes Feb 9 14:29:14.558085 kernel: e820: reserve RAM buffer [mem 0x00099800-0x0009ffff] Feb 9 14:29:14.558091 kernel: e820: reserve RAM buffer [mem 0x825de000-0x83ffffff] Feb 9 14:29:14.558096 kernel: e820: reserve RAM buffer [mem 0x8afcd000-0x8bffffff] Feb 9 14:29:14.558102 kernel: e820: reserve RAM buffer [mem 0x8c23b000-0x8fffffff] Feb 9 14:29:14.558107 kernel: e820: reserve RAM buffer [mem 0x8ef00000-0x8fffffff] Feb 9 14:29:14.558112 kernel: e820: reserve RAM buffer [mem 0x86f000000-0x86fffffff] Feb 9 14:29:14.558117 kernel: clocksource: Switched to clocksource tsc-early Feb 9 14:29:14.558122 kernel: VFS: Disk quotas dquot_6.6.0 Feb 9 14:29:14.558127 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 9 14:29:14.558133 kernel: pnp: PnP ACPI init Feb 9 14:29:14.558178 kernel: system 00:00: [mem 0x40000000-0x403fffff] has been reserved Feb 9 14:29:14.558220 kernel: pnp 00:02: [dma 0 disabled] Feb 9 14:29:14.558261 kernel: pnp 00:03: [dma 0 disabled] Feb 9 14:29:14.558306 kernel: system 00:04: [io 0x0680-0x069f] has been reserved Feb 9 14:29:14.558345 kernel: system 00:04: [io 0x164e-0x164f] has been reserved Feb 9 14:29:14.558386 kernel: system 00:05: [io 0x1854-0x1857] has been reserved Feb 9 14:29:14.558430 kernel: system 00:06: [mem 0xfed10000-0xfed17fff] has been reserved Feb 9 14:29:14.558469 kernel: system 00:06: [mem 0xfed18000-0xfed18fff] has been reserved Feb 9 14:29:14.558506 kernel: system 00:06: [mem 0xfed19000-0xfed19fff] has been reserved Feb 9 14:29:14.558544 kernel: system 00:06: [mem 0xe0000000-0xefffffff] has been reserved Feb 9 14:29:14.558580 kernel: system 00:06: [mem 0xfed20000-0xfed3ffff] has been reserved Feb 9 14:29:14.558618 kernel: system 00:06: [mem 0xfed90000-0xfed93fff] could not be reserved Feb 9 14:29:14.558656 kernel: system 00:06: [mem 0xfed45000-0xfed8ffff] has been reserved Feb 9 14:29:14.558695 kernel: system 00:06: [mem 0xfee00000-0xfeefffff] could not be reserved Feb 9 14:29:14.558736 kernel: system 00:07: [io 0x1800-0x18fe] could not be reserved Feb 9 14:29:14.558773 kernel: system 00:07: [mem 0xfd000000-0xfd69ffff] has been reserved Feb 9 14:29:14.558810 kernel: system 00:07: [mem 0xfd6c0000-0xfd6cffff] has been reserved Feb 9 14:29:14.558847 kernel: system 00:07: [mem 0xfd6f0000-0xfdffffff] has been reserved Feb 9 14:29:14.558885 kernel: system 00:07: [mem 0xfe000000-0xfe01ffff] could not be reserved Feb 9 14:29:14.558922 kernel: system 00:07: [mem 0xfe200000-0xfe7fffff] has been reserved Feb 9 14:29:14.558961 kernel: system 00:07: [mem 0xff000000-0xffffffff] has been reserved Feb 9 14:29:14.559001 kernel: system 00:08: [io 0x2000-0x20fe] has been reserved Feb 9 14:29:14.559009 kernel: pnp: PnP ACPI: found 10 devices Feb 9 14:29:14.559014 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Feb 9 14:29:14.559020 kernel: NET: Registered PF_INET protocol family Feb 9 14:29:14.559025 kernel: IP idents hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 9 14:29:14.559030 kernel: tcp_listen_portaddr_hash hash table entries: 16384 (order: 6, 262144 bytes, linear) Feb 9 14:29:14.559036 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 9 14:29:14.559042 kernel: TCP established hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 9 14:29:14.559048 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Feb 9 14:29:14.559053 kernel: TCP: Hash tables configured (established 262144 bind 65536) Feb 9 14:29:14.559058 kernel: UDP hash table entries: 16384 (order: 7, 524288 bytes, linear) Feb 9 14:29:14.559064 kernel: UDP-Lite hash table entries: 16384 (order: 7, 524288 bytes, linear) Feb 9 14:29:14.559069 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 9 14:29:14.559074 kernel: NET: Registered PF_XDP protocol family Feb 9 14:29:14.559116 kernel: pci 0000:00:15.0: BAR 0: assigned [mem 0x95515000-0x95515fff 64bit] Feb 9 14:29:14.559161 kernel: pci 0000:00:15.1: BAR 0: assigned [mem 0x9551b000-0x9551bfff 64bit] Feb 9 14:29:14.559202 kernel: pci 0000:00:1e.0: BAR 0: assigned [mem 0x9551c000-0x9551cfff 64bit] Feb 9 14:29:14.559246 kernel: pci 0000:01:00.0: BAR 7: no space for [mem size 0x00800000 64bit pref] Feb 9 14:29:14.559294 kernel: pci 0000:01:00.0: BAR 7: failed to assign [mem size 0x00800000 64bit pref] Feb 9 14:29:14.559349 kernel: pci 0000:01:00.1: BAR 7: no space for [mem size 0x00800000 64bit pref] Feb 9 14:29:14.559402 kernel: pci 0000:01:00.1: BAR 7: failed to assign [mem size 0x00800000 64bit pref] Feb 9 14:29:14.559453 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Feb 9 14:29:14.559504 kernel: pci 0000:00:01.0: bridge window [mem 0x95100000-0x952fffff] Feb 9 14:29:14.559558 kernel: pci 0000:00:01.0: bridge window [mem 0x90000000-0x93ffffff 64bit pref] Feb 9 14:29:14.559610 kernel: pci 0000:00:1b.0: PCI bridge to [bus 02] Feb 9 14:29:14.559660 kernel: pci 0000:00:1b.4: PCI bridge to [bus 03] Feb 9 14:29:14.559712 kernel: pci 0000:00:1b.4: bridge window [io 0x5000-0x5fff] Feb 9 14:29:14.559763 kernel: pci 0000:00:1b.4: bridge window [mem 0x95400000-0x954fffff] Feb 9 14:29:14.559818 kernel: pci 0000:00:1b.5: PCI bridge to [bus 04] Feb 9 14:29:14.559869 kernel: pci 0000:00:1b.5: bridge window [io 0x4000-0x4fff] Feb 9 14:29:14.559922 kernel: pci 0000:00:1b.5: bridge window [mem 0x95300000-0x953fffff] Feb 9 14:29:14.559973 kernel: pci 0000:00:1c.0: PCI bridge to [bus 05] Feb 9 14:29:14.560026 kernel: pci 0000:06:00.0: PCI bridge to [bus 07] Feb 9 14:29:14.560079 kernel: pci 0000:06:00.0: bridge window [io 0x3000-0x3fff] Feb 9 14:29:14.560132 kernel: pci 0000:06:00.0: bridge window [mem 0x94000000-0x950fffff] Feb 9 14:29:14.560183 kernel: pci 0000:00:1c.3: PCI bridge to [bus 06-07] Feb 9 14:29:14.560234 kernel: pci 0000:00:1c.3: bridge window [io 0x3000-0x3fff] Feb 9 14:29:14.560291 kernel: pci 0000:00:1c.3: bridge window [mem 0x94000000-0x950fffff] Feb 9 14:29:14.560338 kernel: pci_bus 0000:00: Some PCI device resources are unassigned, try booting with pci=realloc Feb 9 14:29:14.560384 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Feb 9 14:29:14.560429 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Feb 9 14:29:14.560473 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Feb 9 14:29:14.560518 kernel: pci_bus 0000:00: resource 7 [mem 0x90000000-0xdfffffff window] Feb 9 14:29:14.560563 kernel: pci_bus 0000:00: resource 8 [mem 0xfc800000-0xfe7fffff window] Feb 9 14:29:14.560615 kernel: pci_bus 0000:01: resource 1 [mem 0x95100000-0x952fffff] Feb 9 14:29:14.560665 kernel: pci_bus 0000:01: resource 2 [mem 0x90000000-0x93ffffff 64bit pref] Feb 9 14:29:14.560716 kernel: pci_bus 0000:03: resource 0 [io 0x5000-0x5fff] Feb 9 14:29:14.560765 kernel: pci_bus 0000:03: resource 1 [mem 0x95400000-0x954fffff] Feb 9 14:29:14.560816 kernel: pci_bus 0000:04: resource 0 [io 0x4000-0x4fff] Feb 9 14:29:14.560865 kernel: pci_bus 0000:04: resource 1 [mem 0x95300000-0x953fffff] Feb 9 14:29:14.560921 kernel: pci_bus 0000:06: resource 0 [io 0x3000-0x3fff] Feb 9 14:29:14.560971 kernel: pci_bus 0000:06: resource 1 [mem 0x94000000-0x950fffff] Feb 9 14:29:14.561021 kernel: pci_bus 0000:07: resource 0 [io 0x3000-0x3fff] Feb 9 14:29:14.561071 kernel: pci_bus 0000:07: resource 1 [mem 0x94000000-0x950fffff] Feb 9 14:29:14.561081 kernel: PCI: CLS 64 bytes, default 64 Feb 9 14:29:14.561088 kernel: DMAR: No ATSR found Feb 9 14:29:14.561094 kernel: DMAR: No SATC found Feb 9 14:29:14.561101 kernel: DMAR: dmar0: Using Queued invalidation Feb 9 14:29:14.561151 kernel: pci 0000:00:00.0: Adding to iommu group 0 Feb 9 14:29:14.561204 kernel: pci 0000:00:01.0: Adding to iommu group 1 Feb 9 14:29:14.561256 kernel: pci 0000:00:08.0: Adding to iommu group 2 Feb 9 14:29:14.561312 kernel: pci 0000:00:12.0: Adding to iommu group 3 Feb 9 14:29:14.561366 kernel: pci 0000:00:14.0: Adding to iommu group 4 Feb 9 14:29:14.561417 kernel: pci 0000:00:14.2: Adding to iommu group 4 Feb 9 14:29:14.561469 kernel: pci 0000:00:15.0: Adding to iommu group 5 Feb 9 14:29:14.561513 kernel: pci 0000:00:15.1: Adding to iommu group 5 Feb 9 14:29:14.561555 kernel: pci 0000:00:16.0: Adding to iommu group 6 Feb 9 14:29:14.561599 kernel: pci 0000:00:16.1: Adding to iommu group 6 Feb 9 14:29:14.561640 kernel: pci 0000:00:16.4: Adding to iommu group 6 Feb 9 14:29:14.561681 kernel: pci 0000:00:17.0: Adding to iommu group 7 Feb 9 14:29:14.561722 kernel: pci 0000:00:1b.0: Adding to iommu group 8 Feb 9 14:29:14.561764 kernel: pci 0000:00:1b.4: Adding to iommu group 9 Feb 9 14:29:14.561804 kernel: pci 0000:00:1b.5: Adding to iommu group 10 Feb 9 14:29:14.561846 kernel: pci 0000:00:1c.0: Adding to iommu group 11 Feb 9 14:29:14.561886 kernel: pci 0000:00:1c.3: Adding to iommu group 12 Feb 9 14:29:14.561928 kernel: pci 0000:00:1e.0: Adding to iommu group 13 Feb 9 14:29:14.561970 kernel: pci 0000:00:1f.0: Adding to iommu group 14 Feb 9 14:29:14.562011 kernel: pci 0000:00:1f.4: Adding to iommu group 14 Feb 9 14:29:14.562052 kernel: pci 0000:00:1f.5: Adding to iommu group 14 Feb 9 14:29:14.562095 kernel: pci 0000:01:00.0: Adding to iommu group 1 Feb 9 14:29:14.562138 kernel: pci 0000:01:00.1: Adding to iommu group 1 Feb 9 14:29:14.562180 kernel: pci 0000:03:00.0: Adding to iommu group 15 Feb 9 14:29:14.562224 kernel: pci 0000:04:00.0: Adding to iommu group 16 Feb 9 14:29:14.562270 kernel: pci 0000:06:00.0: Adding to iommu group 17 Feb 9 14:29:14.562321 kernel: pci 0000:07:00.0: Adding to iommu group 17 Feb 9 14:29:14.562329 kernel: DMAR: Intel(R) Virtualization Technology for Directed I/O Feb 9 14:29:14.562334 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Feb 9 14:29:14.562340 kernel: software IO TLB: mapped [mem 0x0000000086fcd000-0x000000008afcd000] (64MB) Feb 9 14:29:14.562345 kernel: RAPL PMU: API unit is 2^-32 Joules, 3 fixed counters, 655360 ms ovfl timer Feb 9 14:29:14.562350 kernel: RAPL PMU: hw unit of domain pp0-core 2^-14 Joules Feb 9 14:29:14.562355 kernel: RAPL PMU: hw unit of domain package 2^-14 Joules Feb 9 14:29:14.562362 kernel: RAPL PMU: hw unit of domain dram 2^-14 Joules Feb 9 14:29:14.562406 kernel: platform rtc_cmos: registered platform RTC device (no PNP device found) Feb 9 14:29:14.562415 kernel: Initialise system trusted keyrings Feb 9 14:29:14.562420 kernel: workingset: timestamp_bits=39 max_order=23 bucket_order=0 Feb 9 14:29:14.562425 kernel: Key type asymmetric registered Feb 9 14:29:14.562430 kernel: Asymmetric key parser 'x509' registered Feb 9 14:29:14.562435 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 9 14:29:14.562441 kernel: io scheduler mq-deadline registered Feb 9 14:29:14.562447 kernel: io scheduler kyber registered Feb 9 14:29:14.562452 kernel: io scheduler bfq registered Feb 9 14:29:14.562493 kernel: pcieport 0000:00:01.0: PME: Signaling with IRQ 121 Feb 9 14:29:14.562536 kernel: pcieport 0000:00:1b.0: PME: Signaling with IRQ 122 Feb 9 14:29:14.562578 kernel: pcieport 0000:00:1b.4: PME: Signaling with IRQ 123 Feb 9 14:29:14.562620 kernel: pcieport 0000:00:1b.5: PME: Signaling with IRQ 124 Feb 9 14:29:14.562660 kernel: pcieport 0000:00:1c.0: PME: Signaling with IRQ 125 Feb 9 14:29:14.562703 kernel: pcieport 0000:00:1c.3: PME: Signaling with IRQ 126 Feb 9 14:29:14.562751 kernel: thermal LNXTHERM:00: registered as thermal_zone0 Feb 9 14:29:14.562759 kernel: ACPI: thermal: Thermal Zone [TZ00] (28 C) Feb 9 14:29:14.562765 kernel: ERST: Error Record Serialization Table (ERST) support is initialized. Feb 9 14:29:14.562770 kernel: pstore: Registered erst as persistent store backend Feb 9 14:29:14.562776 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Feb 9 14:29:14.562781 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 9 14:29:14.562786 kernel: 00:02: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Feb 9 14:29:14.562792 kernel: 00:03: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Feb 9 14:29:14.562798 kernel: hpet_acpi_add: no address or irqs in _CRS Feb 9 14:29:14.562841 kernel: tpm_tis MSFT0101:00: 2.0 TPM (device-id 0x1B, rev-id 16) Feb 9 14:29:14.562849 kernel: i8042: PNP: No PS/2 controller found. Feb 9 14:29:14.562886 kernel: rtc_cmos rtc_cmos: RTC can wake from S4 Feb 9 14:29:14.562924 kernel: rtc_cmos rtc_cmos: registered as rtc0 Feb 9 14:29:14.562962 kernel: rtc_cmos rtc_cmos: setting system clock to 2024-02-09T14:29:13 UTC (1707488953) Feb 9 14:29:14.562999 kernel: rtc_cmos rtc_cmos: alarms up to one month, y3k, 114 bytes nvram Feb 9 14:29:14.563007 kernel: fail to initialize ptp_kvm Feb 9 14:29:14.563013 kernel: intel_pstate: Intel P-state driver initializing Feb 9 14:29:14.563019 kernel: intel_pstate: Disabling energy efficiency optimization Feb 9 14:29:14.563024 kernel: intel_pstate: HWP enabled Feb 9 14:29:14.563030 kernel: vesafb: mode is 1024x768x8, linelength=1024, pages=0 Feb 9 14:29:14.563035 kernel: vesafb: scrolling: redraw Feb 9 14:29:14.563040 kernel: vesafb: Pseudocolor: size=0:8:8:8, shift=0:0:0:0 Feb 9 14:29:14.563045 kernel: vesafb: framebuffer at 0x94000000, mapped to 0x00000000ef2f21ed, using 768k, total 768k Feb 9 14:29:14.563051 kernel: Console: switching to colour frame buffer device 128x48 Feb 9 14:29:14.563056 kernel: fb0: VESA VGA frame buffer device Feb 9 14:29:14.563062 kernel: NET: Registered PF_INET6 protocol family Feb 9 14:29:14.563067 kernel: Segment Routing with IPv6 Feb 9 14:29:14.563072 kernel: In-situ OAM (IOAM) with IPv6 Feb 9 14:29:14.563078 kernel: NET: Registered PF_PACKET protocol family Feb 9 14:29:14.563083 kernel: Key type dns_resolver registered Feb 9 14:29:14.563088 kernel: microcode: sig=0x906ed, pf=0x2, revision=0xf4 Feb 9 14:29:14.563093 kernel: microcode: Microcode Update Driver: v2.2. Feb 9 14:29:14.563099 kernel: IPI shorthand broadcast: enabled Feb 9 14:29:14.563104 kernel: sched_clock: Marking stable (1678952740, 1339810980)->(4439125619, -1420361899) Feb 9 14:29:14.563110 kernel: registered taskstats version 1 Feb 9 14:29:14.563115 kernel: Loading compiled-in X.509 certificates Feb 9 14:29:14.563121 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: e9d857ae0e8100c174221878afd1046acbb054a6' Feb 9 14:29:14.563126 kernel: Key type .fscrypt registered Feb 9 14:29:14.563131 kernel: Key type fscrypt-provisioning registered Feb 9 14:29:14.563136 kernel: pstore: Using crash dump compression: deflate Feb 9 14:29:14.563141 kernel: ima: Allocated hash algorithm: sha1 Feb 9 14:29:14.563147 kernel: ima: No architecture policies found Feb 9 14:29:14.563152 kernel: Freeing unused kernel image (initmem) memory: 45496K Feb 9 14:29:14.563158 kernel: Write protecting the kernel read-only data: 28672k Feb 9 14:29:14.563163 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Feb 9 14:29:14.563168 kernel: Freeing unused kernel image (rodata/data gap) memory: 636K Feb 9 14:29:14.563174 kernel: Run /init as init process Feb 9 14:29:14.563179 kernel: with arguments: Feb 9 14:29:14.563184 kernel: /init Feb 9 14:29:14.563189 kernel: with environment: Feb 9 14:29:14.563195 kernel: HOME=/ Feb 9 14:29:14.563200 kernel: TERM=linux Feb 9 14:29:14.563206 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 9 14:29:14.563212 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 14:29:14.563219 systemd[1]: Detected architecture x86-64. Feb 9 14:29:14.563224 systemd[1]: Running in initrd. Feb 9 14:29:14.563230 systemd[1]: No hostname configured, using default hostname. Feb 9 14:29:14.563235 systemd[1]: Hostname set to . Feb 9 14:29:14.563240 systemd[1]: Initializing machine ID from random generator. Feb 9 14:29:14.563247 systemd[1]: Queued start job for default target initrd.target. Feb 9 14:29:14.563252 systemd[1]: Started systemd-ask-password-console.path. Feb 9 14:29:14.563257 systemd[1]: Reached target cryptsetup.target. Feb 9 14:29:14.563262 systemd[1]: Reached target paths.target. Feb 9 14:29:14.563268 systemd[1]: Reached target slices.target. Feb 9 14:29:14.563273 systemd[1]: Reached target swap.target. Feb 9 14:29:14.563278 systemd[1]: Reached target timers.target. Feb 9 14:29:14.563287 systemd[1]: Listening on iscsid.socket. Feb 9 14:29:14.563294 systemd[1]: Listening on iscsiuio.socket. Feb 9 14:29:14.563299 systemd[1]: Listening on systemd-journald-audit.socket. Feb 9 14:29:14.563305 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 9 14:29:14.563310 systemd[1]: Listening on systemd-journald.socket. Feb 9 14:29:14.563316 kernel: tsc: Refined TSC clocksource calibration: 3407.998 MHz Feb 9 14:29:14.563321 systemd[1]: Listening on systemd-networkd.socket. Feb 9 14:29:14.563326 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd208cfc, max_idle_ns: 440795283699 ns Feb 9 14:29:14.563332 kernel: clocksource: Switched to clocksource tsc Feb 9 14:29:14.563338 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 14:29:14.563343 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 14:29:14.563349 systemd[1]: Reached target sockets.target. Feb 9 14:29:14.563354 systemd[1]: Starting kmod-static-nodes.service... Feb 9 14:29:14.563360 systemd[1]: Finished network-cleanup.service. Feb 9 14:29:14.563365 systemd[1]: Starting systemd-fsck-usr.service... Feb 9 14:29:14.563371 systemd[1]: Starting systemd-journald.service... Feb 9 14:29:14.563376 systemd[1]: Starting systemd-modules-load.service... Feb 9 14:29:14.563383 systemd-journald[266]: Journal started Feb 9 14:29:14.563410 systemd-journald[266]: Runtime Journal (/run/log/journal/a307ae5e12c948aa8dfd111b057cb24e) is 8.0M, max 640.1M, 632.1M free. Feb 9 14:29:14.564815 systemd-modules-load[267]: Inserted module 'overlay' Feb 9 14:29:14.570000 audit: BPF prog-id=6 op=LOAD Feb 9 14:29:14.589324 kernel: audit: type=1334 audit(1707488954.570:2): prog-id=6 op=LOAD Feb 9 14:29:14.589352 systemd[1]: Starting systemd-resolved.service... Feb 9 14:29:14.638316 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 9 14:29:14.638332 systemd[1]: Starting systemd-vconsole-setup.service... Feb 9 14:29:14.669330 kernel: Bridge firewalling registered Feb 9 14:29:14.669348 systemd[1]: Started systemd-journald.service. Feb 9 14:29:14.683338 systemd-modules-load[267]: Inserted module 'br_netfilter' Feb 9 14:29:14.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.689221 systemd-resolved[269]: Positive Trust Anchors: Feb 9 14:29:14.788276 kernel: audit: type=1130 audit(1707488954.690:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.788293 kernel: SCSI subsystem initialized Feb 9 14:29:14.788301 kernel: audit: type=1130 audit(1707488954.742:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.689228 systemd-resolved[269]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 14:29:14.899165 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 9 14:29:14.899179 kernel: audit: type=1130 audit(1707488954.813:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.899187 kernel: device-mapper: uevent: version 1.0.3 Feb 9 14:29:14.899194 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 9 14:29:14.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.689247 systemd-resolved[269]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 14:29:14.980503 kernel: audit: type=1130 audit(1707488954.914:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.690810 systemd-resolved[269]: Defaulting to hostname 'linux'. Feb 9 14:29:15.034375 kernel: audit: type=1130 audit(1707488954.988:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.691497 systemd[1]: Started systemd-resolved.service. Feb 9 14:29:15.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.743459 systemd[1]: Finished kmod-static-nodes.service. Feb 9 14:29:15.104528 kernel: audit: type=1130 audit(1707488955.041:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:14.814444 systemd[1]: Finished systemd-fsck-usr.service. Feb 9 14:29:14.912286 systemd-modules-load[267]: Inserted module 'dm_multipath' Feb 9 14:29:14.915482 systemd[1]: Finished systemd-modules-load.service. Feb 9 14:29:14.989582 systemd[1]: Finished systemd-vconsole-setup.service. Feb 9 14:29:15.042569 systemd[1]: Reached target nss-lookup.target. Feb 9 14:29:15.097822 systemd[1]: Starting dracut-cmdline-ask.service... Feb 9 14:29:15.111795 systemd[1]: Starting systemd-sysctl.service... Feb 9 14:29:15.118989 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 14:29:15.119712 systemd[1]: Finished systemd-sysctl.service. Feb 9 14:29:15.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:15.121873 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 14:29:15.168517 kernel: audit: type=1130 audit(1707488955.118:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:15.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:15.183640 systemd[1]: Finished dracut-cmdline-ask.service. Feb 9 14:29:15.251323 kernel: audit: type=1130 audit(1707488955.182:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:15.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:15.242890 systemd[1]: Starting dracut-cmdline.service... Feb 9 14:29:15.263398 dracut-cmdline[291]: dracut-dracut-053 Feb 9 14:29:15.263398 dracut-cmdline[291]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Feb 9 14:29:15.263398 dracut-cmdline[291]: BEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=ae7db544026ede4699ee2036449b75950d3fb7929b25a6731d0ad396f1aa37c9 Feb 9 14:29:15.331375 kernel: Loading iSCSI transport class v2.0-870. Feb 9 14:29:15.331387 kernel: iscsi: registered transport (tcp) Feb 9 14:29:15.382539 kernel: iscsi: registered transport (qla4xxx) Feb 9 14:29:15.382559 kernel: QLogic iSCSI HBA Driver Feb 9 14:29:15.398673 systemd[1]: Finished dracut-cmdline.service. Feb 9 14:29:15.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:15.409015 systemd[1]: Starting dracut-pre-udev.service... Feb 9 14:29:15.464288 kernel: raid6: avx2x4 gen() 48859 MB/s Feb 9 14:29:15.499287 kernel: raid6: avx2x4 xor() 17416 MB/s Feb 9 14:29:15.534287 kernel: raid6: avx2x2 gen() 53898 MB/s Feb 9 14:29:15.569318 kernel: raid6: avx2x2 xor() 32160 MB/s Feb 9 14:29:15.604318 kernel: raid6: avx2x1 gen() 45272 MB/s Feb 9 14:29:15.639369 kernel: raid6: avx2x1 xor() 27919 MB/s Feb 9 14:29:15.673287 kernel: raid6: sse2x4 gen() 21344 MB/s Feb 9 14:29:15.707370 kernel: raid6: sse2x4 xor() 11991 MB/s Feb 9 14:29:15.741317 kernel: raid6: sse2x2 gen() 21663 MB/s Feb 9 14:29:15.775366 kernel: raid6: sse2x2 xor() 13450 MB/s Feb 9 14:29:15.809371 kernel: raid6: sse2x1 gen() 18300 MB/s Feb 9 14:29:15.861372 kernel: raid6: sse2x1 xor() 8926 MB/s Feb 9 14:29:15.861389 kernel: raid6: using algorithm avx2x2 gen() 53898 MB/s Feb 9 14:29:15.861397 kernel: raid6: .... xor() 32160 MB/s, rmw enabled Feb 9 14:29:15.879565 kernel: raid6: using avx2x2 recovery algorithm Feb 9 14:29:15.926362 kernel: xor: automatically using best checksumming function avx Feb 9 14:29:16.004314 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Feb 9 14:29:16.009475 systemd[1]: Finished dracut-pre-udev.service. Feb 9 14:29:16.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:16.018000 audit: BPF prog-id=7 op=LOAD Feb 9 14:29:16.018000 audit: BPF prog-id=8 op=LOAD Feb 9 14:29:16.020168 systemd[1]: Starting systemd-udevd.service... Feb 9 14:29:16.028751 systemd-udevd[473]: Using default interface naming scheme 'v252'. Feb 9 14:29:16.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:16.035592 systemd[1]: Started systemd-udevd.service. Feb 9 14:29:16.075412 dracut-pre-trigger[485]: rd.md=0: removing MD RAID activation Feb 9 14:29:16.051998 systemd[1]: Starting dracut-pre-trigger.service... Feb 9 14:29:16.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:16.084109 systemd[1]: Finished dracut-pre-trigger.service. Feb 9 14:29:16.094740 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 14:29:16.146685 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 14:29:16.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:16.175317 kernel: cryptd: max_cpu_qlen set to 1000 Feb 9 14:29:16.177289 kernel: libata version 3.00 loaded. Feb 9 14:29:16.212876 kernel: ACPI: bus type USB registered Feb 9 14:29:16.212912 kernel: usbcore: registered new interface driver usbfs Feb 9 14:29:16.212922 kernel: usbcore: registered new interface driver hub Feb 9 14:29:16.248697 kernel: usbcore: registered new device driver usb Feb 9 14:29:16.249293 kernel: AVX2 version of gcm_enc/dec engaged. Feb 9 14:29:16.282648 kernel: AES CTR mode by8 optimization enabled Feb 9 14:29:16.283289 kernel: ahci 0000:00:17.0: version 3.0 Feb 9 14:29:16.320914 kernel: igb: Intel(R) Gigabit Ethernet Network Driver Feb 9 14:29:16.320943 kernel: ahci 0000:00:17.0: AHCI 0001.0301 32 slots 7 ports 6 Gbps 0x7f impl SATA mode Feb 9 14:29:16.321018 kernel: igb: Copyright (c) 2007-2014 Intel Corporation. Feb 9 14:29:16.321026 kernel: ahci 0000:00:17.0: flags: 64bit ncq sntf clo only pio slum part ems deso sadm sds apst Feb 9 14:29:16.397335 kernel: mlx5_core 0000:01:00.0: firmware version: 14.27.1016 Feb 9 14:29:16.397434 kernel: mlx5_core 0000:01:00.0: 63.008 Gb/s available PCIe bandwidth (8.0 GT/s PCIe x8 link) Feb 9 14:29:16.397501 kernel: pps pps0: new PPS source ptp0 Feb 9 14:29:16.425288 kernel: scsi host0: ahci Feb 9 14:29:16.425322 kernel: igb 0000:03:00.0: added PHC on eth0 Feb 9 14:29:16.440141 kernel: scsi host1: ahci Feb 9 14:29:16.453004 kernel: igb 0000:03:00.0: Intel(R) Gigabit Ethernet Network Connection Feb 9 14:29:16.453287 kernel: scsi host2: ahci Feb 9 14:29:16.482668 kernel: igb 0000:03:00.0: eth0: (PCIe:2.5Gb/s:Width x1) 3c:ec:ef:6a:ef:4a Feb 9 14:29:16.499544 kernel: scsi host3: ahci Feb 9 14:29:16.511527 kernel: igb 0000:03:00.0: eth0: PBA No: 010000-000 Feb 9 14:29:16.511603 kernel: scsi host4: ahci Feb 9 14:29:16.537194 kernel: igb 0000:03:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s) Feb 9 14:29:16.537316 kernel: scsi host5: ahci Feb 9 14:29:16.538286 kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Feb 9 14:29:16.538370 kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 1 Feb 9 14:29:16.539286 kernel: xhci_hcd 0000:00:14.0: hcc params 0x200077c1 hci version 0x110 quirks 0x0000000000009810 Feb 9 14:29:16.539371 kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Feb 9 14:29:16.539453 kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 2 Feb 9 14:29:16.539530 kernel: xhci_hcd 0000:00:14.0: Host supports USB 3.1 Enhanced SuperSpeed Feb 9 14:29:16.539600 kernel: hub 1-0:1.0: USB hub found Feb 9 14:29:16.539688 kernel: hub 1-0:1.0: 16 ports detected Feb 9 14:29:16.540287 kernel: hub 2-0:1.0: USB hub found Feb 9 14:29:16.540380 kernel: hub 2-0:1.0: 10 ports detected Feb 9 14:29:16.540459 kernel: usb: port power management may be unreliable Feb 9 14:29:16.622455 kernel: pps pps1: new PPS source ptp1 Feb 9 14:29:16.622548 kernel: scsi host6: ahci Feb 9 14:29:16.622569 kernel: igb 0000:04:00.0: added PHC on eth1 Feb 9 14:29:16.652823 kernel: ata1: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516100 irq 127 Feb 9 14:29:16.664612 kernel: igb 0000:04:00.0: Intel(R) Gigabit Ethernet Network Connection Feb 9 14:29:16.664710 kernel: ata2: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516180 irq 127 Feb 9 14:29:16.669289 kernel: mlx5_core 0000:01:00.0: E-Switch: Total vports 10, per vport: max uc(1024) max mc(16384) Feb 9 14:29:16.676794 kernel: igb 0000:04:00.0: eth1: (PCIe:2.5Gb/s:Width x1) 3c:ec:ef:6a:ef:4b Feb 9 14:29:16.684330 kernel: mlx5_core 0000:01:00.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Feb 9 14:29:16.688638 kernel: ata3: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516200 irq 127 Feb 9 14:29:16.714457 kernel: igb 0000:04:00.0: eth1: PBA No: 010000-000 Feb 9 14:29:16.714531 kernel: ata4: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516280 irq 127 Feb 9 14:29:16.726796 kernel: igb 0000:04:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s) Feb 9 14:29:16.782351 kernel: igb 0000:04:00.0 eno2: renamed from eth1 Feb 9 14:29:16.782423 kernel: ata5: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516300 irq 127 Feb 9 14:29:16.782432 kernel: usb 1-14: new high-speed USB device number 2 using xhci_hcd Feb 9 14:29:16.885989 kernel: mlx5_core 0000:01:00.0: Supported tc offload range - chains: 4294967294, prios: 4294967295 Feb 9 14:29:16.886062 kernel: ata6: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516380 irq 127 Feb 9 14:29:16.935985 kernel: hub 1-14:1.0: USB hub found Feb 9 14:29:16.936065 kernel: ata7: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516400 irq 127 Feb 9 14:29:16.936349 kernel: hub 1-14:1.0: 4 ports detected Feb 9 14:29:17.085317 kernel: igb 0000:03:00.0 eno1: renamed from eth0 Feb 9 14:29:17.137008 kernel: mlx5_core 0000:01:00.1: firmware version: 14.27.1016 Feb 9 14:29:17.137090 kernel: mlx5_core 0000:01:00.1: 63.008 Gb/s available PCIe bandwidth (8.0 GT/s PCIe x8 link) Feb 9 14:29:17.281288 kernel: ata7: SATA link down (SStatus 0 SControl 300) Feb 9 14:29:17.281313 kernel: ata6: SATA link down (SStatus 0 SControl 300) Feb 9 14:29:17.297316 kernel: ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Feb 9 14:29:17.313308 kernel: ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Feb 9 14:29:17.330288 kernel: ata5: SATA link down (SStatus 0 SControl 300) Feb 9 14:29:17.346316 kernel: usb 1-14.1: new low-speed USB device number 3 using xhci_hcd Feb 9 14:29:17.346342 kernel: ata4: SATA link down (SStatus 0 SControl 300) Feb 9 14:29:17.378322 kernel: ata3: SATA link down (SStatus 0 SControl 300) Feb 9 14:29:17.394344 kernel: ata2.00: ATA-11: Micron_5300_MTFDDAK480TDT, D3MU001, max UDMA/133 Feb 9 14:29:17.411320 kernel: ata1.00: ATA-11: Micron_5300_MTFDDAK480TDT, D3MU001, max UDMA/133 Feb 9 14:29:17.429330 kernel: mlx5_core 0000:01:00.1: E-Switch: Total vports 10, per vport: max uc(1024) max mc(16384) Feb 9 14:29:17.448311 kernel: ata2.00: 937703088 sectors, multi 16: LBA48 NCQ (depth 32), AA Feb 9 14:29:17.479539 kernel: port_module: 9 callbacks suppressed Feb 9 14:29:17.479554 kernel: mlx5_core 0000:01:00.1: Port module event: module 1, Cable plugged Feb 9 14:29:17.479625 kernel: ata2.00: Features: NCQ-prio Feb 9 14:29:17.497315 kernel: mlx5_core 0000:01:00.1: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Feb 9 14:29:17.497386 kernel: ata1.00: 937703088 sectors, multi 16: LBA48 NCQ (depth 32), AA Feb 9 14:29:17.561602 kernel: ata1.00: Features: NCQ-prio Feb 9 14:29:17.562321 kernel: hid: raw HID events driver (C) Jiri Kosina Feb 9 14:29:17.578338 kernel: ata2.00: configured for UDMA/133 Feb 9 14:29:17.592333 kernel: ata1.00: configured for UDMA/133 Feb 9 14:29:17.607348 kernel: scsi 0:0:0:0: Direct-Access ATA Micron_5300_MTFD U001 PQ: 0 ANSI: 5 Feb 9 14:29:17.626329 kernel: scsi 1:0:0:0: Direct-Access ATA Micron_5300_MTFD U001 PQ: 0 ANSI: 5 Feb 9 14:29:17.680305 kernel: usbcore: registered new interface driver usbhid Feb 9 14:29:17.680346 kernel: usbhid: USB HID core driver Feb 9 14:29:17.717343 kernel: input: HID 0557:2419 as /devices/pci0000:00/0000:00:14.0/usb1/1-14/1-14.1/1-14.1:1.0/0003:0557:2419.0001/input/input0 Feb 9 14:29:17.717372 kernel: mlx5_core 0000:01:00.1: Supported tc offload range - chains: 4294967294, prios: 4294967295 Feb 9 14:29:17.738289 kernel: ata1.00: Enabling discard_zeroes_data Feb 9 14:29:17.753941 kernel: ata2.00: Enabling discard_zeroes_data Feb 9 14:29:17.769615 kernel: hid-generic 0003:0557:2419.0001: input,hidraw0: USB HID v1.00 Keyboard [HID 0557:2419] on usb-0000:00:14.0-14.1/input0 Feb 9 14:29:17.769846 kernel: sd 0:0:0:0: [sda] 937703088 512-byte logical blocks: (480 GB/447 GiB) Feb 9 14:29:17.770023 kernel: sd 1:0:0:0: [sdb] 937703088 512-byte logical blocks: (480 GB/447 GiB) Feb 9 14:29:17.770194 kernel: sd 1:0:0:0: [sdb] 4096-byte physical blocks Feb 9 14:29:17.770372 kernel: sd 1:0:0:0: [sdb] Write Protect is off Feb 9 14:29:17.770533 kernel: sd 1:0:0:0: [sdb] Mode Sense: 00 3a 00 00 Feb 9 14:29:17.770695 kernel: sd 1:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Feb 9 14:29:17.770848 kernel: ata2.00: Enabling discard_zeroes_data Feb 9 14:29:17.770863 kernel: ata2.00: Enabling discard_zeroes_data Feb 9 14:29:17.770876 kernel: sd 1:0:0:0: [sdb] Attached SCSI disk Feb 9 14:29:17.822561 kernel: input: HID 0557:2419 as /devices/pci0000:00/0000:00:14.0/usb1/1-14/1-14.1/1-14.1:1.1/0003:0557:2419.0002/input/input1 Feb 9 14:29:17.822592 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Feb 9 14:29:17.857559 kernel: hid-generic 0003:0557:2419.0002: input,hidraw1: USB HID v1.00 Mouse [HID 0557:2419] on usb-0000:00:14.0-14.1/input1 Feb 9 14:29:17.857841 kernel: sd 0:0:0:0: [sda] Write Protect is off Feb 9 14:29:18.057452 kernel: sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00 Feb 9 14:29:18.057570 kernel: sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Feb 9 14:29:18.073340 kernel: ata1.00: Enabling discard_zeroes_data Feb 9 14:29:18.109472 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 9 14:29:18.109488 kernel: GPT:9289727 != 937703087 Feb 9 14:29:18.109496 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 9 14:29:18.126931 kernel: GPT:9289727 != 937703087 Feb 9 14:29:18.141833 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 9 14:29:18.158313 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Feb 9 14:29:18.191215 kernel: ata1.00: Enabling discard_zeroes_data Feb 9 14:29:18.191229 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Feb 9 14:29:18.227289 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: renamed from eth0 Feb 9 14:29:18.255150 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 9 14:29:18.294568 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by (udev-worker) (541) Feb 9 14:29:18.294582 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: renamed from eth1 Feb 9 14:29:18.273341 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 9 14:29:18.276965 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 9 14:29:18.308222 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 9 14:29:18.340731 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 14:29:18.347085 systemd[1]: Starting disk-uuid.service... Feb 9 14:29:18.400375 kernel: ata1.00: Enabling discard_zeroes_data Feb 9 14:29:18.400392 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Feb 9 14:29:18.400402 kernel: ata1.00: Enabling discard_zeroes_data Feb 9 14:29:18.400485 disk-uuid[691]: Primary Header is updated. Feb 9 14:29:18.400485 disk-uuid[691]: Secondary Entries is updated. Feb 9 14:29:18.400485 disk-uuid[691]: Secondary Header is updated. Feb 9 14:29:18.459370 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Feb 9 14:29:18.459380 kernel: ata1.00: Enabling discard_zeroes_data Feb 9 14:29:18.459387 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Feb 9 14:29:19.408337 kernel: ata1.00: Enabling discard_zeroes_data Feb 9 14:29:19.427343 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Feb 9 14:29:19.427357 disk-uuid[692]: The operation has completed successfully. Feb 9 14:29:19.464694 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 9 14:29:19.559660 kernel: audit: type=1130 audit(1707488959.470:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.559674 kernel: audit: type=1131 audit(1707488959.470:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.464736 systemd[1]: Finished disk-uuid.service. Feb 9 14:29:19.588324 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Feb 9 14:29:19.479287 systemd[1]: Starting verity-setup.service... Feb 9 14:29:19.652168 systemd[1]: Found device dev-mapper-usr.device. Feb 9 14:29:19.664617 systemd[1]: Mounting sysusr-usr.mount... Feb 9 14:29:19.676541 systemd[1]: Finished verity-setup.service. Feb 9 14:29:19.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.741289 kernel: audit: type=1130 audit(1707488959.690:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.799019 systemd[1]: Mounted sysusr-usr.mount. Feb 9 14:29:19.813548 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 9 14:29:19.806607 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 9 14:29:19.892495 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Feb 9 14:29:19.892512 kernel: BTRFS info (device sda6): using free space tree Feb 9 14:29:19.892520 kernel: BTRFS info (device sda6): has skinny extents Feb 9 14:29:19.892527 kernel: BTRFS info (device sda6): enabling ssd optimizations Feb 9 14:29:19.806981 systemd[1]: Starting ignition-setup.service... Feb 9 14:29:19.829745 systemd[1]: Starting parse-ip-for-networkd.service... Feb 9 14:29:19.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.900745 systemd[1]: Finished ignition-setup.service. Feb 9 14:29:20.017452 kernel: audit: type=1130 audit(1707488959.916:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.017542 kernel: audit: type=1130 audit(1707488959.969:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:19.917645 systemd[1]: Finished parse-ip-for-networkd.service. Feb 9 14:29:20.047285 kernel: audit: type=1334 audit(1707488960.024:24): prog-id=9 op=LOAD Feb 9 14:29:20.024000 audit: BPF prog-id=9 op=LOAD Feb 9 14:29:19.970965 systemd[1]: Starting ignition-fetch-offline.service... Feb 9 14:29:20.026112 systemd[1]: Starting systemd-networkd.service... Feb 9 14:29:20.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.061750 systemd-networkd[880]: lo: Link UP Feb 9 14:29:20.136527 kernel: audit: type=1130 audit(1707488960.069:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.092966 ignition[869]: Ignition 2.14.0 Feb 9 14:29:20.061752 systemd-networkd[880]: lo: Gained carrier Feb 9 14:29:20.092970 ignition[869]: Stage: fetch-offline Feb 9 14:29:20.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.062031 systemd-networkd[880]: Enumeration completed Feb 9 14:29:20.289762 kernel: audit: type=1130 audit(1707488960.161:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.289850 kernel: audit: type=1130 audit(1707488960.219:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.289858 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Feb 9 14:29:20.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.092995 ignition[869]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 14:29:20.313183 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp1s0f1np1: link becomes ready Feb 9 14:29:20.062075 systemd[1]: Started systemd-networkd.service. Feb 9 14:29:20.093008 ignition[869]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Feb 9 14:29:20.062825 systemd-networkd[880]: enp1s0f1np1: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 14:29:20.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.100799 ignition[869]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Feb 9 14:29:20.070430 systemd[1]: Reached target network.target. Feb 9 14:29:20.370455 iscsid[898]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 9 14:29:20.370455 iscsid[898]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Feb 9 14:29:20.370455 iscsid[898]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 9 14:29:20.370455 iscsid[898]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 9 14:29:20.370455 iscsid[898]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 9 14:29:20.370455 iscsid[898]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 9 14:29:20.370455 iscsid[898]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 9 14:29:20.543465 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: Link up Feb 9 14:29:20.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:20.100866 ignition[869]: parsed url from cmdline: "" Feb 9 14:29:20.105288 unknown[869]: fetched base config from "system" Feb 9 14:29:20.100868 ignition[869]: no config URL provided Feb 9 14:29:20.105317 unknown[869]: fetched user config from "system" Feb 9 14:29:20.100871 ignition[869]: reading system config file "/usr/lib/ignition/user.ign" Feb 9 14:29:20.128976 systemd[1]: Starting iscsiuio.service... Feb 9 14:29:20.100884 ignition[869]: parsing config with SHA512: 9a5373579dc7f5b1a3c39cbc3c87884f45abb029eb8525a932efae6e8d9afeaae4a5778f5b3898c096d060148461d207acfc7d3f3ac909d576cca278c9d5823c Feb 9 14:29:20.143594 systemd[1]: Started iscsiuio.service. Feb 9 14:29:20.105488 ignition[869]: fetch-offline: fetch-offline passed Feb 9 14:29:20.162571 systemd[1]: Finished ignition-fetch-offline.service. Feb 9 14:29:20.105490 ignition[869]: POST message to Packet Timeline Feb 9 14:29:20.220539 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Feb 9 14:29:20.105495 ignition[869]: POST Status error: resource requires networking Feb 9 14:29:20.220974 systemd[1]: Starting ignition-kargs.service... Feb 9 14:29:20.105524 ignition[869]: Ignition finished successfully Feb 9 14:29:20.291224 systemd-networkd[880]: enp1s0f0np0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 14:29:20.294129 ignition[888]: Ignition 2.14.0 Feb 9 14:29:20.303946 systemd[1]: Starting iscsid.service... Feb 9 14:29:20.294132 ignition[888]: Stage: kargs Feb 9 14:29:20.327439 systemd[1]: Started iscsid.service. Feb 9 14:29:20.294187 ignition[888]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 14:29:20.341886 systemd[1]: Starting dracut-initqueue.service... Feb 9 14:29:20.294196 ignition[888]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Feb 9 14:29:20.360506 systemd[1]: Finished dracut-initqueue.service. Feb 9 14:29:20.295538 ignition[888]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Feb 9 14:29:20.383569 systemd[1]: Reached target remote-fs-pre.target. Feb 9 14:29:20.297110 ignition[888]: kargs: kargs passed Feb 9 14:29:20.394549 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 14:29:20.297113 ignition[888]: POST message to Packet Timeline Feb 9 14:29:20.436572 systemd[1]: Reached target remote-fs.target. Feb 9 14:29:20.297123 ignition[888]: GET https://metadata.packet.net/metadata: attempt #1 Feb 9 14:29:20.459110 systemd[1]: Starting dracut-pre-mount.service... Feb 9 14:29:20.300476 ignition[888]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:37325->[::1]:53: read: connection refused Feb 9 14:29:20.489594 systemd[1]: Finished dracut-pre-mount.service. Feb 9 14:29:20.500895 ignition[888]: GET https://metadata.packet.net/metadata: attempt #2 Feb 9 14:29:20.525691 systemd-networkd[880]: eno2: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 14:29:20.501582 ignition[888]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:54903->[::1]:53: read: connection refused Feb 9 14:29:20.554915 systemd-networkd[880]: eno1: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 14:29:20.585748 systemd-networkd[880]: enp1s0f1np1: Link UP Feb 9 14:29:20.586146 systemd-networkd[880]: enp1s0f1np1: Gained carrier Feb 9 14:29:20.599764 systemd-networkd[880]: enp1s0f0np0: Link UP Feb 9 14:29:20.600113 systemd-networkd[880]: eno2: Link UP Feb 9 14:29:20.600459 systemd-networkd[880]: eno1: Link UP Feb 9 14:29:20.902069 ignition[888]: GET https://metadata.packet.net/metadata: attempt #3 Feb 9 14:29:20.903605 ignition[888]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:40098->[::1]:53: read: connection refused Feb 9 14:29:21.313131 systemd-networkd[880]: enp1s0f0np0: Gained carrier Feb 9 14:29:21.321404 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp1s0f0np0: link becomes ready Feb 9 14:29:21.357489 systemd-networkd[880]: enp1s0f0np0: DHCPv4 address 147.75.49.59/31, gateway 147.75.49.58 acquired from 145.40.83.140 Feb 9 14:29:21.704538 ignition[888]: GET https://metadata.packet.net/metadata: attempt #4 Feb 9 14:29:21.705959 ignition[888]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:41657->[::1]:53: read: connection refused Feb 9 14:29:21.995874 systemd-networkd[880]: enp1s0f1np1: Gained IPv6LL Feb 9 14:29:22.571874 systemd-networkd[880]: enp1s0f0np0: Gained IPv6LL Feb 9 14:29:23.307595 ignition[888]: GET https://metadata.packet.net/metadata: attempt #5 Feb 9 14:29:23.308982 ignition[888]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:38845->[::1]:53: read: connection refused Feb 9 14:29:26.512249 ignition[888]: GET https://metadata.packet.net/metadata: attempt #6 Feb 9 14:29:26.554020 ignition[888]: GET result: OK Feb 9 14:29:26.774893 ignition[888]: Ignition finished successfully Feb 9 14:29:26.779576 systemd[1]: Finished ignition-kargs.service. Feb 9 14:29:26.862431 kernel: kauditd_printk_skb: 3 callbacks suppressed Feb 9 14:29:26.862447 kernel: audit: type=1130 audit(1707488966.790:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:26.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:26.800231 ignition[916]: Ignition 2.14.0 Feb 9 14:29:26.793567 systemd[1]: Starting ignition-disks.service... Feb 9 14:29:26.800235 ignition[916]: Stage: disks Feb 9 14:29:26.800353 ignition[916]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 14:29:26.800382 ignition[916]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Feb 9 14:29:26.801813 ignition[916]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Feb 9 14:29:26.803060 ignition[916]: disks: disks passed Feb 9 14:29:26.803063 ignition[916]: POST message to Packet Timeline Feb 9 14:29:26.803074 ignition[916]: GET https://metadata.packet.net/metadata: attempt #1 Feb 9 14:29:26.832652 ignition[916]: GET result: OK Feb 9 14:29:27.014579 ignition[916]: Ignition finished successfully Feb 9 14:29:27.017794 systemd[1]: Finished ignition-disks.service. Feb 9 14:29:27.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.029872 systemd[1]: Reached target initrd-root-device.target. Feb 9 14:29:27.106572 kernel: audit: type=1130 audit(1707488967.028:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.091529 systemd[1]: Reached target local-fs-pre.target. Feb 9 14:29:27.091564 systemd[1]: Reached target local-fs.target. Feb 9 14:29:27.116499 systemd[1]: Reached target sysinit.target. Feb 9 14:29:27.130498 systemd[1]: Reached target basic.target. Feb 9 14:29:27.144215 systemd[1]: Starting systemd-fsck-root.service... Feb 9 14:29:27.162947 systemd-fsck[932]: ROOT: clean, 602/553520 files, 56014/553472 blocks Feb 9 14:29:27.176728 systemd[1]: Finished systemd-fsck-root.service. Feb 9 14:29:27.264231 kernel: audit: type=1130 audit(1707488967.184:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.264245 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 9 14:29:27.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.190855 systemd[1]: Mounting sysroot.mount... Feb 9 14:29:27.272686 systemd[1]: Mounted sysroot.mount. Feb 9 14:29:27.285845 systemd[1]: Reached target initrd-root-fs.target. Feb 9 14:29:27.303142 systemd[1]: Mounting sysroot-usr.mount... Feb 9 14:29:27.319507 systemd[1]: Starting flatcar-metadata-hostname.service... Feb 9 14:29:27.333140 systemd[1]: Starting flatcar-static-network.service... Feb 9 14:29:27.347533 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 9 14:29:27.347623 systemd[1]: Reached target ignition-diskful.target. Feb 9 14:29:27.366683 systemd[1]: Mounted sysroot-usr.mount. Feb 9 14:29:27.390090 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 14:29:27.521160 kernel: BTRFS: device label OEM devid 1 transid 16 /dev/sda6 scanned by mount (941) Feb 9 14:29:27.521175 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Feb 9 14:29:27.521187 kernel: BTRFS info (device sda6): using free space tree Feb 9 14:29:27.521199 kernel: BTRFS info (device sda6): has skinny extents Feb 9 14:29:27.521206 kernel: BTRFS info (device sda6): enabling ssd optimizations Feb 9 14:29:27.521268 coreos-metadata[940]: Feb 09 14:29:27.456 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Feb 9 14:29:27.521268 coreos-metadata[940]: Feb 09 14:29:27.478 INFO Fetch successful Feb 9 14:29:27.646302 kernel: audit: type=1130 audit(1707488967.528:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.646315 kernel: audit: type=1130 audit(1707488967.590:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.646367 coreos-metadata[939]: Feb 09 14:29:27.456 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Feb 9 14:29:27.646367 coreos-metadata[939]: Feb 09 14:29:27.479 INFO Fetch successful Feb 9 14:29:27.646367 coreos-metadata[939]: Feb 09 14:29:27.496 INFO wrote hostname ci-3510.3.2-a-bd33f5a690 to /sysroot/etc/hostname Feb 9 14:29:27.803612 kernel: audit: type=1130 audit(1707488967.661:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.803626 kernel: audit: type=1131 audit(1707488967.661:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.401676 systemd[1]: Starting initrd-setup-root.service... Feb 9 14:29:27.445504 systemd[1]: Finished initrd-setup-root.service. Feb 9 14:29:27.844461 initrd-setup-root[948]: cut: /sysroot/etc/passwd: No such file or directory Feb 9 14:29:27.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.531669 systemd[1]: Finished flatcar-metadata-hostname.service. Feb 9 14:29:27.920559 kernel: audit: type=1130 audit(1707488967.852:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.920578 initrd-setup-root[956]: cut: /sysroot/etc/group: No such file or directory Feb 9 14:29:27.591766 systemd[1]: flatcar-static-network.service: Deactivated successfully. Feb 9 14:29:27.940552 initrd-setup-root[964]: cut: /sysroot/etc/shadow: No such file or directory Feb 9 14:29:27.950513 ignition[1014]: INFO : Ignition 2.14.0 Feb 9 14:29:27.950513 ignition[1014]: INFO : Stage: mount Feb 9 14:29:27.950513 ignition[1014]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 14:29:27.950513 ignition[1014]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Feb 9 14:29:27.950513 ignition[1014]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Feb 9 14:29:27.950513 ignition[1014]: INFO : mount: mount passed Feb 9 14:29:27.950513 ignition[1014]: INFO : POST message to Packet Timeline Feb 9 14:29:27.950513 ignition[1014]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Feb 9 14:29:27.950513 ignition[1014]: INFO : GET result: OK Feb 9 14:29:27.591852 systemd[1]: Finished flatcar-static-network.service. Feb 9 14:29:28.050628 initrd-setup-root[972]: cut: /sysroot/etc/gshadow: No such file or directory Feb 9 14:29:27.662641 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 14:29:27.788093 systemd[1]: Starting ignition-mount.service... Feb 9 14:29:27.822858 systemd[1]: Starting sysroot-boot.service... Feb 9 14:29:27.837996 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Feb 9 14:29:27.838042 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Feb 9 14:29:28.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.158175 ignition[1014]: INFO : Ignition finished successfully Feb 9 14:29:28.173372 kernel: audit: type=1130 audit(1707488968.100:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:27.841538 systemd[1]: Finished sysroot-boot.service. Feb 9 14:29:28.217407 kernel: BTRFS: device label OEM devid 1 transid 17 /dev/sda6 scanned by mount (1031) Feb 9 14:29:28.217418 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Feb 9 14:29:28.091853 systemd[1]: Finished ignition-mount.service. Feb 9 14:29:28.269359 kernel: BTRFS info (device sda6): using free space tree Feb 9 14:29:28.269369 kernel: BTRFS info (device sda6): has skinny extents Feb 9 14:29:28.269377 kernel: BTRFS info (device sda6): enabling ssd optimizations Feb 9 14:29:28.103851 systemd[1]: Starting ignition-files.service... Feb 9 14:29:28.167094 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 14:29:28.301455 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 14:29:28.341037 ignition[1050]: INFO : Ignition 2.14.0 Feb 9 14:29:28.341037 ignition[1050]: INFO : Stage: files Feb 9 14:29:28.341037 ignition[1050]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 14:29:28.341037 ignition[1050]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Feb 9 14:29:28.341037 ignition[1050]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Feb 9 14:29:28.341037 ignition[1050]: DEBUG : files: compiled without relabeling support, skipping Feb 9 14:29:28.341037 ignition[1050]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 9 14:29:28.341037 ignition[1050]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 9 14:29:28.341037 ignition[1050]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 9 14:29:28.341037 ignition[1050]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 9 14:29:28.341037 ignition[1050]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 9 14:29:28.341037 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 14:29:28.341037 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 14:29:28.341037 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/systemd/system/packet-phone-home.service" Feb 9 14:29:28.341037 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): oem config not found in "/usr/share/oem", looking on oem partition Feb 9 14:29:28.341037 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1964142445" Feb 9 14:29:28.341037 ignition[1050]: CRITICAL : files: createFilesystemsFiles: createFiles: op(4): op(5): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1964142445": device or resource busy Feb 9 14:29:28.341037 ignition[1050]: ERROR : files: createFilesystemsFiles: createFiles: op(4): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1964142445", trying btrfs: device or resource busy Feb 9 14:29:28.341037 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): op(6): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1964142445" Feb 9 14:29:28.634593 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1059) Feb 9 14:29:28.326552 unknown[1050]: wrote ssh authorized keys file for user: core Feb 9 14:29:28.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.700861 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): op(6): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1964142445" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): op(7): [started] unmounting "/mnt/oem1964142445" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): op(7): [finished] unmounting "/mnt/oem1964142445" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/systemd/system/packet-phone-home.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(8): [started] processing unit "coreos-metadata-sshkeys@.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(8): [finished] processing unit "coreos-metadata-sshkeys@.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(9): [started] processing unit "packet-phone-home.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(9): [finished] processing unit "packet-phone-home.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(a): [started] processing unit "etcd-member.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(a): op(b): [started] writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(a): op(b): [finished] writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(a): [finished] processing unit "etcd-member.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(c): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(c): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(d): [started] setting preset to enabled for "packet-phone-home.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(d): [finished] setting preset to enabled for "packet-phone-home.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(e): [started] setting preset to enabled for "etcd-member.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: op(e): [finished] setting preset to enabled for "etcd-member.service" Feb 9 14:29:28.700861 ignition[1050]: INFO : files: createResultFile: createFiles: op(f): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 9 14:29:29.098581 kernel: audit: type=1130 audit(1707488968.641:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.632026 systemd[1]: Finished ignition-files.service. Feb 9 14:29:29.112681 ignition[1050]: INFO : files: createResultFile: createFiles: op(f): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 9 14:29:29.112681 ignition[1050]: INFO : files: files passed Feb 9 14:29:29.112681 ignition[1050]: INFO : POST message to Packet Timeline Feb 9 14:29:29.112681 ignition[1050]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Feb 9 14:29:29.112681 ignition[1050]: INFO : GET result: OK Feb 9 14:29:29.112681 ignition[1050]: INFO : Ignition finished successfully Feb 9 14:29:28.648864 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 9 14:29:28.709567 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 9 14:29:29.265591 initrd-setup-root-after-ignition[1081]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 9 14:29:28.709876 systemd[1]: Starting ignition-quench.service... Feb 9 14:29:28.747559 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 9 14:29:29.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.772727 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 9 14:29:28.772814 systemd[1]: Finished ignition-quench.service. Feb 9 14:29:29.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.798818 systemd[1]: Reached target ignition-complete.target. Feb 9 14:29:29.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.821387 systemd[1]: Starting initrd-parse-etc.service... Feb 9 14:29:28.857980 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 9 14:29:28.858052 systemd[1]: Finished initrd-parse-etc.service. Feb 9 14:29:28.879659 systemd[1]: Reached target initrd-fs.target. Feb 9 14:29:28.908593 systemd[1]: Reached target initrd.target. Feb 9 14:29:28.935746 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 9 14:29:29.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.937940 systemd[1]: Starting dracut-pre-pivot.service... Feb 9 14:29:29.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.948537 systemd[1]: Finished dracut-pre-pivot.service. Feb 9 14:29:29.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:28.969199 systemd[1]: Starting initrd-cleanup.service... Feb 9 14:29:29.510413 ignition[1096]: INFO : Ignition 2.14.0 Feb 9 14:29:29.510413 ignition[1096]: INFO : Stage: umount Feb 9 14:29:29.510413 ignition[1096]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 9 14:29:29.510413 ignition[1096]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Feb 9 14:29:29.510413 ignition[1096]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Feb 9 14:29:29.510413 ignition[1096]: INFO : umount: umount passed Feb 9 14:29:29.510413 ignition[1096]: INFO : POST message to Packet Timeline Feb 9 14:29:29.510413 ignition[1096]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Feb 9 14:29:29.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.004094 systemd[1]: Stopped target nss-lookup.target. Feb 9 14:29:29.662678 ignition[1096]: INFO : GET result: OK Feb 9 14:29:29.018863 systemd[1]: Stopped target remote-cryptsetup.target. Feb 9 14:29:29.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.040928 systemd[1]: Stopped target timers.target. Feb 9 14:29:29.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.060879 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 9 14:29:29.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.716000 audit: BPF prog-id=6 op=UNLOAD Feb 9 14:29:29.061236 systemd[1]: Stopped dracut-pre-pivot.service. Feb 9 14:29:29.083171 systemd[1]: Stopped target initrd.target. Feb 9 14:29:29.754681 ignition[1096]: INFO : Ignition finished successfully Feb 9 14:29:29.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.105889 systemd[1]: Stopped target basic.target. Feb 9 14:29:29.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.119976 systemd[1]: Stopped target ignition-complete.target. Feb 9 14:29:29.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.144873 systemd[1]: Stopped target ignition-diskful.target. Feb 9 14:29:29.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.160873 systemd[1]: Stopped target initrd-root-device.target. Feb 9 14:29:29.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.178882 systemd[1]: Stopped target remote-fs.target. Feb 9 14:29:29.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.197864 systemd[1]: Stopped target remote-fs-pre.target. Feb 9 14:29:29.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.213900 systemd[1]: Stopped target sysinit.target. Feb 9 14:29:29.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.230889 systemd[1]: Stopped target local-fs.target. Feb 9 14:29:29.248881 systemd[1]: Stopped target local-fs-pre.target. Feb 9 14:29:29.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.273874 systemd[1]: Stopped target swap.target. Feb 9 14:29:29.295770 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 9 14:29:29.296135 systemd[1]: Stopped dracut-pre-mount.service. Feb 9 14:29:29.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.312107 systemd[1]: Stopped target cryptsetup.target. Feb 9 14:29:29.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.327774 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 9 14:29:29.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.328141 systemd[1]: Stopped dracut-initqueue.service. Feb 9 14:29:29.345034 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 9 14:29:30.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.345408 systemd[1]: Stopped ignition-fetch-offline.service. Feb 9 14:29:30.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.361076 systemd[1]: Stopped target paths.target. Feb 9 14:29:30.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.375704 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 9 14:29:30.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:30.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.379468 systemd[1]: Stopped systemd-ask-password-console.path. Feb 9 14:29:30.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:29.391871 systemd[1]: Stopped target slices.target. Feb 9 14:29:29.406849 systemd[1]: Stopped target sockets.target. Feb 9 14:29:29.422832 systemd[1]: iscsid.socket: Deactivated successfully. Feb 9 14:29:29.423082 systemd[1]: Closed iscsid.socket. Feb 9 14:29:29.436953 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 9 14:29:29.437337 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 9 14:29:29.453978 systemd[1]: ignition-files.service: Deactivated successfully. Feb 9 14:29:29.454336 systemd[1]: Stopped ignition-files.service. Feb 9 14:29:30.181416 iscsid[898]: iscsid shutting down. Feb 9 14:29:29.472971 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Feb 9 14:29:29.473342 systemd[1]: Stopped flatcar-metadata-hostname.service. Feb 9 14:29:29.491053 systemd[1]: Stopping ignition-mount.service... Feb 9 14:29:29.502442 systemd[1]: Stopping iscsiuio.service... Feb 9 14:29:29.517990 systemd[1]: Stopping sysroot-boot.service... Feb 9 14:29:29.524421 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 9 14:29:29.524526 systemd[1]: Stopped systemd-udev-trigger.service. Feb 9 14:29:29.536717 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 9 14:29:29.536838 systemd[1]: Stopped dracut-pre-trigger.service. Feb 9 14:29:29.559722 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 9 14:29:29.561242 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 9 14:29:29.561479 systemd[1]: Stopped iscsiuio.service. Feb 9 14:29:29.588861 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 9 14:29:29.589097 systemd[1]: Stopped sysroot-boot.service. Feb 9 14:29:29.606714 systemd[1]: Stopped target network.target. Feb 9 14:29:29.621739 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 9 14:29:29.621839 systemd[1]: Closed iscsiuio.socket. Feb 9 14:29:29.636900 systemd[1]: Stopping systemd-networkd.service... Feb 9 14:29:29.651438 systemd-networkd[880]: enp1s0f0np0: DHCPv6 lease lost Feb 9 14:29:29.654721 systemd[1]: Stopping systemd-resolved.service... Feb 9 14:29:29.659397 systemd-networkd[880]: enp1s0f1np1: DHCPv6 lease lost Feb 9 14:29:29.670258 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 9 14:29:30.180000 audit: BPF prog-id=9 op=UNLOAD Feb 9 14:29:29.670537 systemd[1]: Stopped systemd-resolved.service. Feb 9 14:29:29.685323 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 9 14:29:29.685589 systemd[1]: Stopped systemd-networkd.service. Feb 9 14:29:29.702212 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 9 14:29:29.702458 systemd[1]: Finished initrd-cleanup.service. Feb 9 14:29:29.719788 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 9 14:29:30.182289 systemd-journald[266]: Received SIGTERM from PID 1 (n/a). Feb 9 14:29:29.719879 systemd[1]: Closed systemd-networkd.socket. Feb 9 14:29:29.735272 systemd[1]: Stopping network-cleanup.service... Feb 9 14:29:29.747490 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 9 14:29:29.747636 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 9 14:29:29.762663 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 9 14:29:29.762794 systemd[1]: Stopped systemd-sysctl.service. Feb 9 14:29:29.778971 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 9 14:29:29.779112 systemd[1]: Stopped systemd-modules-load.service. Feb 9 14:29:29.797569 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 9 14:29:29.798408 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 9 14:29:29.798456 systemd[1]: Stopped ignition-mount.service. Feb 9 14:29:29.811047 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 9 14:29:29.811087 systemd[1]: Stopped ignition-disks.service. Feb 9 14:29:29.826522 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 9 14:29:29.826576 systemd[1]: Stopped ignition-kargs.service. Feb 9 14:29:29.842511 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 9 14:29:29.842568 systemd[1]: Stopped ignition-setup.service. Feb 9 14:29:29.857641 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 9 14:29:29.857765 systemd[1]: Stopped initrd-setup-root.service. Feb 9 14:29:29.873586 systemd[1]: Stopping systemd-udevd.service... Feb 9 14:29:29.887543 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 9 14:29:29.887618 systemd[1]: Stopped systemd-udevd.service. Feb 9 14:29:29.895093 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 9 14:29:29.895130 systemd[1]: Closed systemd-udevd-control.socket. Feb 9 14:29:29.916557 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 9 14:29:29.916650 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 9 14:29:29.931537 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 9 14:29:29.931663 systemd[1]: Stopped dracut-pre-udev.service. Feb 9 14:29:29.947599 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 9 14:29:29.947731 systemd[1]: Stopped dracut-cmdline.service. Feb 9 14:29:29.962600 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 9 14:29:29.962728 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 9 14:29:29.979341 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 9 14:29:29.993372 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 9 14:29:29.993400 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 9 14:29:30.007428 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 9 14:29:30.007456 systemd[1]: Stopped kmod-static-nodes.service. Feb 9 14:29:30.025585 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 9 14:29:30.025718 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 9 14:29:30.044071 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Feb 9 14:29:30.045370 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 9 14:29:30.045576 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 9 14:29:30.057136 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 9 14:29:30.057375 systemd[1]: Stopped network-cleanup.service. Feb 9 14:29:30.074967 systemd[1]: Reached target initrd-switch-root.target. Feb 9 14:29:30.092106 systemd[1]: Starting initrd-switch-root.service... Feb 9 14:29:30.128947 systemd[1]: Switching root. Feb 9 14:29:30.183592 systemd-journald[266]: Journal stopped Feb 9 14:29:34.094413 kernel: SELinux: Class mctp_socket not defined in policy. Feb 9 14:29:34.094427 kernel: SELinux: Class anon_inode not defined in policy. Feb 9 14:29:34.094436 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 9 14:29:34.094442 kernel: SELinux: policy capability network_peer_controls=1 Feb 9 14:29:34.094447 kernel: SELinux: policy capability open_perms=1 Feb 9 14:29:34.094452 kernel: SELinux: policy capability extended_socket_class=1 Feb 9 14:29:34.094459 kernel: SELinux: policy capability always_check_network=0 Feb 9 14:29:34.094464 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 9 14:29:34.094470 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 9 14:29:34.094476 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 9 14:29:34.094482 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 9 14:29:34.094488 systemd[1]: Successfully loaded SELinux policy in 298.254ms. Feb 9 14:29:34.094495 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 5.764ms. Feb 9 14:29:34.094502 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 14:29:34.094510 systemd[1]: Detected architecture x86-64. Feb 9 14:29:34.094516 systemd[1]: Detected first boot. Feb 9 14:29:34.094522 systemd[1]: Hostname set to . Feb 9 14:29:34.094528 systemd[1]: Initializing machine ID from random generator. Feb 9 14:29:34.094534 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 9 14:29:34.094540 systemd[1]: Populated /etc with preset unit settings. Feb 9 14:29:34.094547 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 14:29:34.094554 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 14:29:34.094561 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 14:29:34.094568 kernel: kauditd_printk_skb: 58 callbacks suppressed Feb 9 14:29:34.094573 kernel: audit: type=1334 audit(1707488972.401:92): prog-id=12 op=LOAD Feb 9 14:29:34.094579 kernel: audit: type=1334 audit(1707488972.401:93): prog-id=3 op=UNLOAD Feb 9 14:29:34.094585 kernel: audit: type=1334 audit(1707488972.443:94): prog-id=13 op=LOAD Feb 9 14:29:34.094591 kernel: audit: type=1334 audit(1707488972.485:95): prog-id=14 op=LOAD Feb 9 14:29:34.094597 systemd[1]: iscsid.service: Deactivated successfully. Feb 9 14:29:34.094604 kernel: audit: type=1334 audit(1707488972.485:96): prog-id=4 op=UNLOAD Feb 9 14:29:34.094610 systemd[1]: Stopped iscsid.service. Feb 9 14:29:34.094616 kernel: audit: type=1334 audit(1707488972.485:97): prog-id=5 op=UNLOAD Feb 9 14:29:34.094622 kernel: audit: type=1131 audit(1707488972.485:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.094627 kernel: audit: type=1131 audit(1707488972.636:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.094633 kernel: audit: type=1334 audit(1707488972.683:100): prog-id=12 op=UNLOAD Feb 9 14:29:34.094639 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 9 14:29:34.094647 systemd[1]: Stopped initrd-switch-root.service. Feb 9 14:29:34.094653 kernel: audit: type=1130 audit(1707488972.752:101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.094659 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 9 14:29:34.094665 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 9 14:29:34.094673 systemd[1]: Created slice system-addon\x2drun.slice. Feb 9 14:29:34.094680 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Feb 9 14:29:34.094687 systemd[1]: Created slice system-getty.slice. Feb 9 14:29:34.094694 systemd[1]: Created slice system-modprobe.slice. Feb 9 14:29:34.094701 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 9 14:29:34.094707 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 9 14:29:34.094714 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 9 14:29:34.094720 systemd[1]: Created slice user.slice. Feb 9 14:29:34.094727 systemd[1]: Started systemd-ask-password-console.path. Feb 9 14:29:34.094733 systemd[1]: Started systemd-ask-password-wall.path. Feb 9 14:29:34.094740 systemd[1]: Set up automount boot.automount. Feb 9 14:29:34.094746 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 9 14:29:34.094754 systemd[1]: Stopped target initrd-switch-root.target. Feb 9 14:29:34.094760 systemd[1]: Stopped target initrd-fs.target. Feb 9 14:29:34.094767 systemd[1]: Stopped target initrd-root-fs.target. Feb 9 14:29:34.094773 systemd[1]: Reached target integritysetup.target. Feb 9 14:29:34.094780 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 14:29:34.094787 systemd[1]: Reached target remote-fs.target. Feb 9 14:29:34.094793 systemd[1]: Reached target slices.target. Feb 9 14:29:34.094800 systemd[1]: Reached target swap.target. Feb 9 14:29:34.094807 systemd[1]: Reached target torcx.target. Feb 9 14:29:34.094814 systemd[1]: Reached target veritysetup.target. Feb 9 14:29:34.094820 systemd[1]: Listening on systemd-coredump.socket. Feb 9 14:29:34.094827 systemd[1]: Listening on systemd-initctl.socket. Feb 9 14:29:34.094835 systemd[1]: Listening on systemd-networkd.socket. Feb 9 14:29:34.094841 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 14:29:34.094848 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 14:29:34.094854 systemd[1]: Listening on systemd-userdbd.socket. Feb 9 14:29:34.094861 systemd[1]: Mounting dev-hugepages.mount... Feb 9 14:29:34.094868 systemd[1]: Mounting dev-mqueue.mount... Feb 9 14:29:34.094874 systemd[1]: Mounting media.mount... Feb 9 14:29:34.094881 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 9 14:29:34.094888 systemd[1]: Mounting sys-kernel-debug.mount... Feb 9 14:29:34.094895 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 9 14:29:34.094902 systemd[1]: Mounting tmp.mount... Feb 9 14:29:34.094908 systemd[1]: Starting flatcar-tmpfiles.service... Feb 9 14:29:34.094915 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 9 14:29:34.094922 systemd[1]: Starting kmod-static-nodes.service... Feb 9 14:29:34.094928 systemd[1]: Starting modprobe@configfs.service... Feb 9 14:29:34.094935 systemd[1]: Starting modprobe@dm_mod.service... Feb 9 14:29:34.094941 systemd[1]: Starting modprobe@drm.service... Feb 9 14:29:34.094948 systemd[1]: Starting modprobe@efi_pstore.service... Feb 9 14:29:34.094955 systemd[1]: Starting modprobe@fuse.service... Feb 9 14:29:34.094962 kernel: fuse: init (API version 7.34) Feb 9 14:29:34.094968 systemd[1]: Starting modprobe@loop.service... Feb 9 14:29:34.094975 kernel: loop: module loaded Feb 9 14:29:34.094981 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 9 14:29:34.094988 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 9 14:29:34.094995 systemd[1]: Stopped systemd-fsck-root.service. Feb 9 14:29:34.095001 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 9 14:29:34.095008 systemd[1]: Stopped systemd-fsck-usr.service. Feb 9 14:29:34.095015 systemd[1]: Stopped systemd-journald.service. Feb 9 14:29:34.095022 systemd[1]: Starting systemd-journald.service... Feb 9 14:29:34.095029 systemd[1]: Starting systemd-modules-load.service... Feb 9 14:29:34.095037 systemd-journald[1249]: Journal started Feb 9 14:29:34.095063 systemd-journald[1249]: Runtime Journal (/run/log/journal/d57cc56c5dea4578bb8d48cec4b250a2) is 8.0M, max 640.1M, 632.1M free. Feb 9 14:29:30.553000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 9 14:29:30.810000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Feb 9 14:29:30.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 14:29:30.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 14:29:30.813000 audit: BPF prog-id=10 op=LOAD Feb 9 14:29:30.813000 audit: BPF prog-id=10 op=UNLOAD Feb 9 14:29:30.813000 audit: BPF prog-id=11 op=LOAD Feb 9 14:29:30.813000 audit: BPF prog-id=11 op=UNLOAD Feb 9 14:29:30.883000 audit[1138]: AVC avc: denied { associate } for pid=1138 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 9 14:29:30.883000 audit[1138]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001a58e2 a1=c00002ce58 a2=c00002b100 a3=32 items=0 ppid=1121 pid=1138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:30.883000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 14:29:30.907000 audit[1138]: AVC avc: denied { associate } for pid=1138 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 9 14:29:30.907000 audit[1138]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001a59b9 a2=1ed a3=0 items=2 ppid=1121 pid=1138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:30.907000 audit: CWD cwd="/" Feb 9 14:29:30.907000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:30.907000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:30.907000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 14:29:32.401000 audit: BPF prog-id=12 op=LOAD Feb 9 14:29:32.401000 audit: BPF prog-id=3 op=UNLOAD Feb 9 14:29:32.443000 audit: BPF prog-id=13 op=LOAD Feb 9 14:29:32.485000 audit: BPF prog-id=14 op=LOAD Feb 9 14:29:32.485000 audit: BPF prog-id=4 op=UNLOAD Feb 9 14:29:32.485000 audit: BPF prog-id=5 op=UNLOAD Feb 9 14:29:32.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:32.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:32.683000 audit: BPF prog-id=12 op=UNLOAD Feb 9 14:29:32.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:32.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.066000 audit: BPF prog-id=15 op=LOAD Feb 9 14:29:34.067000 audit: BPF prog-id=16 op=LOAD Feb 9 14:29:34.067000 audit: BPF prog-id=17 op=LOAD Feb 9 14:29:34.067000 audit: BPF prog-id=13 op=UNLOAD Feb 9 14:29:34.067000 audit: BPF prog-id=14 op=UNLOAD Feb 9 14:29:34.091000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 9 14:29:34.091000 audit[1249]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7fff9e1b8470 a2=4000 a3=7fff9e1b850c items=0 ppid=1 pid=1249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:34.091000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 9 14:29:30.882821 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 14:29:32.400819 systemd[1]: Queued start job for default target multi-user.target. Feb 9 14:29:30.883210 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 14:29:32.487103 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 9 14:29:30.883221 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 14:29:30.883238 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 9 14:29:30.883244 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 9 14:29:30.883261 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 9 14:29:30.883267 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 9 14:29:30.883435 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 9 14:29:30.883456 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 14:29:30.883463 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 14:29:30.883929 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 9 14:29:30.883948 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 9 14:29:30.883958 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 9 14:29:30.883966 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 9 14:29:30.883974 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 9 14:29:30.883981 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:30Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 9 14:29:32.070216 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:32Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 14:29:32.070357 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:32Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 14:29:32.070412 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:32Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 14:29:32.070501 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:32Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 14:29:32.070534 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:32Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 9 14:29:32.070569 /usr/lib/systemd/system-generators/torcx-generator[1138]: time="2024-02-09T14:29:32Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 9 14:29:34.126488 systemd[1]: Starting systemd-network-generator.service... Feb 9 14:29:34.148333 systemd[1]: Starting systemd-remount-fs.service... Feb 9 14:29:34.170336 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 14:29:34.202848 systemd[1]: verity-setup.service: Deactivated successfully. Feb 9 14:29:34.202867 systemd[1]: Stopped verity-setup.service. Feb 9 14:29:34.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.237334 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 9 14:29:34.251334 systemd[1]: Started systemd-journald.service. Feb 9 14:29:34.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.259927 systemd[1]: Mounted dev-hugepages.mount. Feb 9 14:29:34.267567 systemd[1]: Mounted dev-mqueue.mount. Feb 9 14:29:34.274541 systemd[1]: Mounted media.mount. Feb 9 14:29:34.281557 systemd[1]: Mounted sys-kernel-debug.mount. Feb 9 14:29:34.290533 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 9 14:29:34.299529 systemd[1]: Mounted tmp.mount. Feb 9 14:29:34.306602 systemd[1]: Finished flatcar-tmpfiles.service. Feb 9 14:29:34.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.315705 systemd[1]: Finished kmod-static-nodes.service. Feb 9 14:29:34.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.324800 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 9 14:29:34.324928 systemd[1]: Finished modprobe@configfs.service. Feb 9 14:29:34.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.334091 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 9 14:29:34.334402 systemd[1]: Finished modprobe@dm_mod.service. Feb 9 14:29:34.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.343089 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 9 14:29:34.343397 systemd[1]: Finished modprobe@drm.service. Feb 9 14:29:34.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.352097 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 9 14:29:34.352409 systemd[1]: Finished modprobe@efi_pstore.service. Feb 9 14:29:34.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.361198 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 9 14:29:34.361512 systemd[1]: Finished modprobe@fuse.service. Feb 9 14:29:34.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.370095 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 9 14:29:34.370429 systemd[1]: Finished modprobe@loop.service. Feb 9 14:29:34.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.380158 systemd[1]: Finished systemd-modules-load.service. Feb 9 14:29:34.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.389102 systemd[1]: Finished systemd-network-generator.service. Feb 9 14:29:34.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.399096 systemd[1]: Finished systemd-remount-fs.service. Feb 9 14:29:34.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.409116 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 14:29:34.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.418579 systemd[1]: Reached target network-pre.target. Feb 9 14:29:34.429065 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 9 14:29:34.438014 systemd[1]: Mounting sys-kernel-config.mount... Feb 9 14:29:34.445509 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 9 14:29:34.446413 systemd[1]: Starting systemd-hwdb-update.service... Feb 9 14:29:34.455741 systemd[1]: Starting systemd-journal-flush.service... Feb 9 14:29:34.464563 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 9 14:29:34.466974 systemd[1]: Starting systemd-random-seed.service... Feb 9 14:29:34.467609 systemd-journald[1249]: Time spent on flushing to /var/log/journal/d57cc56c5dea4578bb8d48cec4b250a2 is 14.914ms for 1555 entries. Feb 9 14:29:34.467609 systemd-journald[1249]: System Journal (/var/log/journal/d57cc56c5dea4578bb8d48cec4b250a2) is 8.0M, max 195.6M, 187.6M free. Feb 9 14:29:34.507921 systemd-journald[1249]: Received client request to flush runtime journal. Feb 9 14:29:34.482436 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 9 14:29:34.482908 systemd[1]: Starting systemd-sysctl.service... Feb 9 14:29:34.491994 systemd[1]: Starting systemd-sysusers.service... Feb 9 14:29:34.499890 systemd[1]: Starting systemd-udev-settle.service... Feb 9 14:29:34.507431 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 9 14:29:34.515528 systemd[1]: Mounted sys-kernel-config.mount. Feb 9 14:29:34.523498 systemd[1]: Finished systemd-journal-flush.service. Feb 9 14:29:34.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.531487 systemd[1]: Finished systemd-random-seed.service. Feb 9 14:29:34.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.539465 systemd[1]: Finished systemd-sysctl.service. Feb 9 14:29:34.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.547489 systemd[1]: Finished systemd-sysusers.service. Feb 9 14:29:34.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.556474 systemd[1]: Reached target first-boot-complete.target. Feb 9 14:29:34.565029 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 14:29:34.574288 udevadm[1264]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Feb 9 14:29:34.584981 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 14:29:34.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.767015 systemd[1]: Finished systemd-hwdb-update.service. Feb 9 14:29:34.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.774000 audit: BPF prog-id=18 op=LOAD Feb 9 14:29:34.774000 audit: BPF prog-id=19 op=LOAD Feb 9 14:29:34.774000 audit: BPF prog-id=7 op=UNLOAD Feb 9 14:29:34.774000 audit: BPF prog-id=8 op=UNLOAD Feb 9 14:29:34.776581 systemd[1]: Starting systemd-udevd.service... Feb 9 14:29:34.788364 systemd-udevd[1269]: Using default interface naming scheme 'v252'. Feb 9 14:29:34.808815 systemd[1]: Started systemd-udevd.service. Feb 9 14:29:34.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.819581 systemd[1]: Condition check resulted in dev-ttyS1.device being skipped. Feb 9 14:29:34.818000 audit: BPF prog-id=20 op=LOAD Feb 9 14:29:34.820713 systemd[1]: Starting systemd-networkd.service... Feb 9 14:29:34.853624 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input2 Feb 9 14:29:34.853700 kernel: ACPI: button: Sleep Button [SLPB] Feb 9 14:29:34.852000 audit: BPF prog-id=21 op=LOAD Feb 9 14:29:34.852000 audit: BPF prog-id=22 op=LOAD Feb 9 14:29:34.852000 audit: BPF prog-id=23 op=LOAD Feb 9 14:29:34.854352 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Feb 9 14:29:34.854387 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1290) Feb 9 14:29:34.854561 systemd[1]: Starting systemd-userdbd.service... Feb 9 14:29:34.891340 kernel: ACPI: button: Power Button [PWRF] Feb 9 14:29:34.905289 kernel: IPMI message handler: version 39.2 Feb 9 14:29:34.932408 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 14:29:34.936291 kernel: mousedev: PS/2 mouse device common for all mice Feb 9 14:29:34.955102 systemd[1]: Started systemd-userdbd.service. Feb 9 14:29:34.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:34.976295 kernel: ipmi device interface Feb 9 14:29:34.858000 audit[1285]: AVC avc: denied { confidentiality } for pid=1285 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Feb 9 14:29:34.858000 audit[1285]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=7fbe16923010 a1=4d8bc a2=7fbe185ccbc5 a3=5 items=42 ppid=1269 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:34.858000 audit: CWD cwd="/" Feb 9 14:29:34.858000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=1 name=(null) inode=10021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=2 name=(null) inode=10021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=3 name=(null) inode=10022 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=4 name=(null) inode=10021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=5 name=(null) inode=10023 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=6 name=(null) inode=10021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=7 name=(null) inode=10024 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=8 name=(null) inode=10024 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=9 name=(null) inode=10025 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=10 name=(null) inode=10024 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=11 name=(null) inode=10026 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=12 name=(null) inode=10024 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=13 name=(null) inode=10027 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=14 name=(null) inode=10024 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=15 name=(null) inode=10028 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=16 name=(null) inode=10024 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=17 name=(null) inode=10029 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=18 name=(null) inode=10021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=19 name=(null) inode=10030 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=20 name=(null) inode=10030 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=21 name=(null) inode=10031 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=22 name=(null) inode=10030 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=23 name=(null) inode=10032 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=24 name=(null) inode=10030 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=25 name=(null) inode=10033 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=26 name=(null) inode=10030 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=27 name=(null) inode=10034 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=28 name=(null) inode=10030 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=29 name=(null) inode=10035 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=30 name=(null) inode=10021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=31 name=(null) inode=10036 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=32 name=(null) inode=10036 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=33 name=(null) inode=10037 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=34 name=(null) inode=10036 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=35 name=(null) inode=10038 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=36 name=(null) inode=10036 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=37 name=(null) inode=10039 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=38 name=(null) inode=10036 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=39 name=(null) inode=10040 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=40 name=(null) inode=10036 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PATH item=41 name=(null) inode=10041 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 14:29:34.858000 audit: PROCTITLE proctitle="(udev-worker)" Feb 9 14:29:35.023319 kernel: i801_smbus 0000:00:1f.4: SPD Write Disable is set Feb 9 14:29:35.023443 kernel: i801_smbus 0000:00:1f.4: SMBus using PCI interrupt Feb 9 14:29:35.056288 kernel: i2c i2c-0: 2/4 memory slots populated (from DMI) Feb 9 14:29:35.061289 kernel: ipmi_si: IPMI System Interface driver Feb 9 14:29:35.061314 kernel: mei_me 0000:00:16.0: Device doesn't have valid ME Interface Feb 9 14:29:35.061412 kernel: mei_me 0000:00:16.4: Device doesn't have valid ME Interface Feb 9 14:29:35.091799 kernel: ipmi_si dmi-ipmi-si.0: ipmi_platform: probing via SMBIOS Feb 9 14:29:35.141917 kernel: ipmi_platform: ipmi_si: SMBIOS: io 0xca2 regsize 1 spacing 1 irq 0 Feb 9 14:29:35.141946 kernel: ipmi_si: Adding SMBIOS-specified kcs state machine Feb 9 14:29:35.173749 kernel: ipmi_si IPI0001:00: ipmi_platform: probing via ACPI Feb 9 14:29:35.174034 kernel: iTCO_vendor_support: vendor-support=0 Feb 9 14:29:35.174055 kernel: ipmi_si IPI0001:00: ipmi_platform: [io 0x0ca2] regsize 1 spacing 1 irq 0 Feb 9 14:29:35.229855 systemd-networkd[1307]: bond0: netdev ready Feb 9 14:29:35.231903 systemd-networkd[1307]: lo: Link UP Feb 9 14:29:35.231906 systemd-networkd[1307]: lo: Gained carrier Feb 9 14:29:35.232370 systemd-networkd[1307]: Enumeration completed Feb 9 14:29:35.232449 systemd[1]: Started systemd-networkd.service. Feb 9 14:29:35.232649 systemd-networkd[1307]: bond0: Configuring with /etc/systemd/network/05-bond0.network. Feb 9 14:29:35.235044 systemd-networkd[1307]: enp1s0f1np1: Configuring with /etc/systemd/network/10-1c:34:da:42:76:1d.network. Feb 9 14:29:35.249863 kernel: iTCO_wdt iTCO_wdt: Found a Intel PCH TCO device (Version=6, TCOBASE=0x0400) Feb 9 14:29:35.249962 kernel: ipmi_si dmi-ipmi-si.0: Removing SMBIOS-specified kcs state machine in favor of ACPI Feb 9 14:29:35.250031 kernel: iTCO_wdt iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0) Feb 9 14:29:35.250094 kernel: ipmi_si: Adding ACPI-specified kcs state machine Feb 9 14:29:35.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.302021 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 9 14:29:35.304181 kernel: ipmi_si: Trying ACPI-specified kcs state machine at i/o address 0xca2, slave address 0x20, irq 0 Feb 9 14:29:35.346755 kernel: intel_rapl_common: Found RAPL domain package Feb 9 14:29:35.346807 kernel: intel_rapl_common: Found RAPL domain core Feb 9 14:29:35.346840 kernel: ipmi_si IPI0001:00: The BMC does not support clearing the recv irq bit, compensating, but the BMC needs to be fixed. Feb 9 14:29:35.346990 kernel: intel_rapl_common: Found RAPL domain dram Feb 9 14:29:35.450350 kernel: ipmi_si IPI0001:00: IPMI message handler: Found new BMC (man_id: 0x002a7c, prod_id: 0x1b0f, dev_id: 0x20) Feb 9 14:29:35.545288 kernel: ipmi_si IPI0001:00: IPMI kcs interface initialized Feb 9 14:29:35.564299 kernel: ipmi_ssif: IPMI SSIF Interface driver Feb 9 14:29:35.564367 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Feb 9 14:29:35.602287 kernel: bond0: (slave enp1s0f1np1): Enslaving as a backup interface with an up link Feb 9 14:29:35.604955 systemd-networkd[1307]: enp1s0f0np0: Configuring with /etc/systemd/network/10-1c:34:da:42:76:1c.network. Feb 9 14:29:35.624587 systemd[1]: Finished systemd-udev-settle.service. Feb 9 14:29:35.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.636174 systemd[1]: Starting lvm2-activation-early.service... Feb 9 14:29:35.675543 lvm[1376]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 14:29:35.682299 kernel: bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond Feb 9 14:29:35.706772 systemd[1]: Finished lvm2-activation-early.service. Feb 9 14:29:35.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.715435 systemd[1]: Reached target cryptsetup.target. Feb 9 14:29:35.723998 systemd[1]: Starting lvm2-activation.service... Feb 9 14:29:35.726267 lvm[1377]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 14:29:35.752727 systemd[1]: Finished lvm2-activation.service. Feb 9 14:29:35.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.761404 systemd[1]: Reached target local-fs-pre.target. Feb 9 14:29:35.769409 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 9 14:29:35.769423 systemd[1]: Reached target local-fs.target. Feb 9 14:29:35.777390 systemd[1]: Reached target machines.target. Feb 9 14:29:35.785959 systemd[1]: Starting ldconfig.service... Feb 9 14:29:35.802966 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 9 14:29:35.803033 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 14:29:35.804355 systemd[1]: Starting systemd-boot-update.service... Feb 9 14:29:35.810342 kernel: bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond Feb 9 14:29:35.816832 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 9 14:29:35.826961 systemd[1]: Starting systemd-machine-id-commit.service... Feb 9 14:29:35.827153 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 9 14:29:35.827192 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 9 14:29:35.827791 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 9 14:29:35.828024 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1379 (bootctl) Feb 9 14:29:35.828649 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 9 14:29:35.834712 systemd-tmpfiles[1383]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 9 14:29:35.837447 systemd-tmpfiles[1383]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 9 14:29:35.838627 systemd-tmpfiles[1383]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 9 14:29:35.844359 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 9 14:29:35.844653 systemd[1]: Finished systemd-machine-id-commit.service. Feb 9 14:29:35.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.848706 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 9 14:29:35.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.908696 systemd-fsck[1387]: fsck.fat 4.2 (2021-01-31) Feb 9 14:29:35.908696 systemd-fsck[1387]: /dev/sda1: 789 files, 115332/258078 clusters Feb 9 14:29:35.909420 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 9 14:29:35.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.921391 systemd[1]: Mounting boot.mount... Feb 9 14:29:35.932286 systemd[1]: Mounted boot.mount. Feb 9 14:29:35.949528 systemd[1]: Finished systemd-boot-update.service. Feb 9 14:29:35.960288 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: Link up Feb 9 14:29:35.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.977452 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 9 14:29:35.983287 kernel: bond0: (slave enp1s0f0np0): Enslaving as a backup interface with an up link Feb 9 14:29:35.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:35.999118 systemd[1]: Starting audit-rules.service... Feb 9 14:29:36.002323 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready Feb 9 14:29:36.003669 systemd-networkd[1307]: bond0: Link UP Feb 9 14:29:36.003858 systemd-networkd[1307]: enp1s0f1np1: Link UP Feb 9 14:29:36.003978 systemd-networkd[1307]: enp1s0f1np1: Gained carrier Feb 9 14:29:36.004943 systemd-networkd[1307]: enp1s0f1np1: Reconfiguring with /etc/systemd/network/10-1c:34:da:42:76:1c.network. Feb 9 14:29:36.016106 systemd[1]: Starting clean-ca-certificates.service... Feb 9 14:29:36.016000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 9 14:29:36.016000 audit[1406]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd1aa0cc70 a2=420 a3=0 items=0 ppid=1390 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:36.016000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 9 14:29:36.018220 augenrules[1406]: No rules Feb 9 14:29:36.042985 kernel: bond0: (slave enp1s0f1np1): link status definitely up, 10000 Mbps full duplex Feb 9 14:29:36.043019 kernel: bond0: active interface up! Feb 9 14:29:36.043043 kernel: bond0: (slave enp1s0f0np0): link status definitely up, 10000 Mbps full duplex Feb 9 14:29:36.059949 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 9 14:29:36.072250 systemd[1]: Starting systemd-resolved.service... Feb 9 14:29:36.080263 systemd[1]: Starting systemd-timesyncd.service... Feb 9 14:29:36.082851 ldconfig[1378]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 9 14:29:36.087876 systemd[1]: Starting systemd-update-utmp.service... Feb 9 14:29:36.094659 systemd[1]: Finished ldconfig.service. Feb 9 14:29:36.101513 systemd[1]: Finished audit-rules.service. Feb 9 14:29:36.108477 systemd[1]: Finished clean-ca-certificates.service. Feb 9 14:29:36.116494 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 9 14:29:36.128258 systemd[1]: Starting systemd-update-done.service... Feb 9 14:29:36.135366 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 9 14:29:36.135570 systemd[1]: Finished systemd-update-utmp.service. Feb 9 14:29:36.136305 systemd-networkd[1307]: enp1s0f0np0: Link UP Feb 9 14:29:36.136458 systemd-networkd[1307]: bond0: Gained carrier Feb 9 14:29:36.136544 systemd-networkd[1307]: enp1s0f0np0: Gained carrier Feb 9 14:29:36.143511 systemd[1]: Finished systemd-update-done.service. Feb 9 14:29:36.153746 systemd[1]: Started systemd-timesyncd.service. Feb 9 14:29:36.155187 systemd-resolved[1412]: Positive Trust Anchors: Feb 9 14:29:36.155194 systemd-resolved[1412]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 14:29:36.155215 systemd-resolved[1412]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 14:29:36.156467 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.156501 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.156661 systemd-networkd[1307]: enp1s0f1np1: Link DOWN Feb 9 14:29:36.156664 systemd-networkd[1307]: enp1s0f1np1: Lost carrier Feb 9 14:29:36.159114 systemd-resolved[1412]: Using system hostname 'ci-3510.3.2-a-bd33f5a690'. Feb 9 14:29:36.162592 systemd[1]: Started systemd-resolved.service. Feb 9 14:29:36.179417 systemd[1]: Reached target network.target. Feb 9 14:29:36.185347 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Feb 9 14:29:36.185380 kernel: bond0: (slave enp1s0f1np1): invalid new link 1 on slave Feb 9 14:29:36.185501 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.185636 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.210411 systemd[1]: Reached target nss-lookup.target. Feb 9 14:29:36.219328 systemd[1]: Reached target sysinit.target. Feb 9 14:29:36.228365 systemd[1]: Started motdgen.path. Feb 9 14:29:36.236332 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 9 14:29:36.246323 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 9 14:29:36.255328 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 9 14:29:36.255344 systemd[1]: Reached target paths.target. Feb 9 14:29:36.262363 systemd[1]: Reached target time-set.target. Feb 9 14:29:36.270397 systemd[1]: Started logrotate.timer. Feb 9 14:29:36.277416 systemd[1]: Started mdadm.timer. Feb 9 14:29:36.284350 systemd[1]: Reached target timers.target. Feb 9 14:29:36.291471 systemd[1]: Listening on dbus.socket. Feb 9 14:29:36.298941 systemd[1]: Starting docker.socket... Feb 9 14:29:36.305959 systemd[1]: Listening on sshd.socket. Feb 9 14:29:36.312406 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 14:29:36.312648 systemd[1]: Listening on docker.socket. Feb 9 14:29:36.319405 systemd[1]: Reached target sockets.target. Feb 9 14:29:36.327371 systemd[1]: Reached target basic.target. Feb 9 14:29:36.334343 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 14:29:36.334358 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 14:29:36.334796 systemd[1]: Starting containerd.service... Feb 9 14:29:36.341755 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Feb 9 14:29:36.356742 systemd[1]: Starting coreos-metadata.service... Feb 9 14:29:36.363288 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Feb 9 14:29:36.369631 coreos-metadata[1421]: Feb 09 14:29:36.369 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Feb 9 14:29:36.378018 systemd[1]: Starting dbus.service... Feb 9 14:29:36.386098 coreos-metadata[1424]: Feb 09 14:29:36.386 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Feb 9 14:29:36.386287 kernel: bond0: (slave enp1s0f1np1): speed changed to 0 on port 1 Feb 9 14:29:36.389499 systemd-networkd[1307]: enp1s0f1np1: Link UP Feb 9 14:29:36.389503 systemd-networkd[1307]: enp1s0f1np1: Gained carrier Feb 9 14:29:36.392007 systemd[1]: Starting enable-oem-cloudinit.service... Feb 9 14:29:36.396486 jq[1430]: false Feb 9 14:29:36.396841 dbus-daemon[1428]: [system] SELinux support is enabled Feb 9 14:29:36.399490 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.399550 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.399584 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.399727 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:36.404965 systemd[1]: Starting extend-filesystems.service... Feb 9 14:29:36.412653 extend-filesystems[1431]: Found sda Feb 9 14:29:36.412653 extend-filesystems[1431]: Found sda1 Feb 9 14:29:36.456030 kernel: bond0: (slave enp1s0f1np1): link status up again after 200 ms Feb 9 14:29:36.456049 kernel: bond0: (slave enp1s0f1np1): link status definitely up, 10000 Mbps full duplex Feb 9 14:29:36.456061 kernel: EXT4-fs (sda9): resizing filesystem from 553472 to 116605649 blocks Feb 9 14:29:36.416440 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 9 14:29:36.456118 extend-filesystems[1431]: Found sda2 Feb 9 14:29:36.456118 extend-filesystems[1431]: Found sda3 Feb 9 14:29:36.456118 extend-filesystems[1431]: Found usr Feb 9 14:29:36.456118 extend-filesystems[1431]: Found sda4 Feb 9 14:29:36.456118 extend-filesystems[1431]: Found sda6 Feb 9 14:29:36.456118 extend-filesystems[1431]: Found sda7 Feb 9 14:29:36.456118 extend-filesystems[1431]: Found sda9 Feb 9 14:29:36.456118 extend-filesystems[1431]: Checking size of /dev/sda9 Feb 9 14:29:36.456118 extend-filesystems[1431]: Resized partition /dev/sda9 Feb 9 14:29:36.417186 systemd[1]: Starting motdgen.service... Feb 9 14:29:36.554485 extend-filesystems[1439]: resize2fs 1.46.5 (30-Dec-2021) Feb 9 14:29:36.467977 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 9 14:29:36.484002 systemd[1]: Starting sshd-keygen.service... Feb 9 14:29:36.510033 systemd[1]: Starting systemd-logind.service... Feb 9 14:29:36.529323 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 14:29:36.529896 systemd[1]: Starting tcsd.service... Feb 9 14:29:36.569710 jq[1458]: true Feb 9 14:29:36.533671 systemd-logind[1455]: Watching system buttons on /dev/input/event3 (Power Button) Feb 9 14:29:36.533681 systemd-logind[1455]: Watching system buttons on /dev/input/event2 (Sleep Button) Feb 9 14:29:36.533691 systemd-logind[1455]: Watching system buttons on /dev/input/event0 (HID 0557:2419) Feb 9 14:29:36.533792 systemd-logind[1455]: New seat seat0. Feb 9 14:29:36.536686 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 9 14:29:36.537034 systemd[1]: Starting update-engine.service... Feb 9 14:29:36.561934 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 9 14:29:36.577604 systemd[1]: Started dbus.service. Feb 9 14:29:36.586066 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 9 14:29:36.586155 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 9 14:29:36.586322 systemd[1]: motdgen.service: Deactivated successfully. Feb 9 14:29:36.586404 systemd[1]: Finished motdgen.service. Feb 9 14:29:36.586445 update_engine[1457]: I0209 14:29:36.584573 1457 main.cc:92] Flatcar Update Engine starting Feb 9 14:29:36.589618 update_engine[1457]: I0209 14:29:36.589607 1457 update_check_scheduler.cc:74] Next update check in 3m50s Feb 9 14:29:36.593457 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 9 14:29:36.593534 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 9 14:29:36.603752 jq[1460]: true Feb 9 14:29:36.604686 dbus-daemon[1428]: [system] Successfully activated service 'org.freedesktop.systemd1' Feb 9 14:29:36.608752 systemd[1]: Started update-engine.service. Feb 9 14:29:36.612672 env[1461]: time="2024-02-09T14:29:36.612648811Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 9 14:29:36.616511 systemd[1]: tcsd.service: Skipped due to 'exec-condition'. Feb 9 14:29:36.616603 systemd[1]: Condition check resulted in tcsd.service being skipped. Feb 9 14:29:36.621096 env[1461]: time="2024-02-09T14:29:36.621051406Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 9 14:29:36.621936 env[1461]: time="2024-02-09T14:29:36.621899600Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 9 14:29:36.622485 env[1461]: time="2024-02-09T14:29:36.622464638Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 9 14:29:36.622514 env[1461]: time="2024-02-09T14:29:36.622484763Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 9 14:29:36.623167 systemd[1]: Started systemd-logind.service. Feb 9 14:29:36.624456 env[1461]: time="2024-02-09T14:29:36.624438844Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 14:29:36.624456 env[1461]: time="2024-02-09T14:29:36.624451745Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 9 14:29:36.624504 env[1461]: time="2024-02-09T14:29:36.624464460Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 9 14:29:36.624504 env[1461]: time="2024-02-09T14:29:36.624471231Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 9 14:29:36.624545 env[1461]: time="2024-02-09T14:29:36.624527768Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 9 14:29:36.624710 env[1461]: time="2024-02-09T14:29:36.624665036Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 9 14:29:36.624741 env[1461]: time="2024-02-09T14:29:36.624730631Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 14:29:36.624761 env[1461]: time="2024-02-09T14:29:36.624740704Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 9 14:29:36.626558 env[1461]: time="2024-02-09T14:29:36.626526258Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 9 14:29:36.626558 env[1461]: time="2024-02-09T14:29:36.626535963Z" level=info msg="metadata content store policy set" policy=shared Feb 9 14:29:36.630846 bash[1486]: Updated "/home/core/.ssh/authorized_keys" Feb 9 14:29:36.631467 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 9 14:29:36.635089 env[1461]: time="2024-02-09T14:29:36.635078927Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 9 14:29:36.635119 env[1461]: time="2024-02-09T14:29:36.635093276Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 9 14:29:36.635119 env[1461]: time="2024-02-09T14:29:36.635100905Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 9 14:29:36.635154 env[1461]: time="2024-02-09T14:29:36.635117406Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635154 env[1461]: time="2024-02-09T14:29:36.635126191Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635154 env[1461]: time="2024-02-09T14:29:36.635133385Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635154 env[1461]: time="2024-02-09T14:29:36.635140211Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635154 env[1461]: time="2024-02-09T14:29:36.635150954Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635229 env[1461]: time="2024-02-09T14:29:36.635161627Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635229 env[1461]: time="2024-02-09T14:29:36.635170781Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635229 env[1461]: time="2024-02-09T14:29:36.635177457Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635229 env[1461]: time="2024-02-09T14:29:36.635183799Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 9 14:29:36.635289 env[1461]: time="2024-02-09T14:29:36.635229769Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 9 14:29:36.635289 env[1461]: time="2024-02-09T14:29:36.635271707Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 9 14:29:36.635415 env[1461]: time="2024-02-09T14:29:36.635407989Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 9 14:29:36.635438 env[1461]: time="2024-02-09T14:29:36.635425315Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635438 env[1461]: time="2024-02-09T14:29:36.635433196Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 9 14:29:36.635468 env[1461]: time="2024-02-09T14:29:36.635457341Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635483 env[1461]: time="2024-02-09T14:29:36.635467522Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635483 env[1461]: time="2024-02-09T14:29:36.635475132Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635483 env[1461]: time="2024-02-09T14:29:36.635481714Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635526 env[1461]: time="2024-02-09T14:29:36.635487785Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635526 env[1461]: time="2024-02-09T14:29:36.635496423Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635526 env[1461]: time="2024-02-09T14:29:36.635502816Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635526 env[1461]: time="2024-02-09T14:29:36.635508808Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635526 env[1461]: time="2024-02-09T14:29:36.635521423Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 9 14:29:36.635605 env[1461]: time="2024-02-09T14:29:36.635586396Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635605 env[1461]: time="2024-02-09T14:29:36.635598168Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635635 env[1461]: time="2024-02-09T14:29:36.635604777Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635635 env[1461]: time="2024-02-09T14:29:36.635623509Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 9 14:29:36.635635 env[1461]: time="2024-02-09T14:29:36.635632338Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 9 14:29:36.635682 env[1461]: time="2024-02-09T14:29:36.635638818Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 9 14:29:36.635682 env[1461]: time="2024-02-09T14:29:36.635649455Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 9 14:29:36.635682 env[1461]: time="2024-02-09T14:29:36.635672614Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 9 14:29:36.635807 env[1461]: time="2024-02-09T14:29:36.635781898Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.635814137Z" level=info msg="Connect containerd service" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.635832776Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636098880Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636178436Z" level=info msg="Start subscribing containerd event" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636206495Z" level=info msg="Start recovering state" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636218525Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636237696Z" level=info msg="Start event monitor" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636238990Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636244146Z" level=info msg="Start snapshots syncer" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636249312Z" level=info msg="Start cni network conf syncer for default" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636254064Z" level=info msg="Start streaming server" Feb 9 14:29:36.637372 env[1461]: time="2024-02-09T14:29:36.636260298Z" level=info msg="containerd successfully booted in 0.023963s" Feb 9 14:29:36.641368 systemd[1]: Started containerd.service. Feb 9 14:29:36.650035 systemd[1]: Started locksmithd.service. Feb 9 14:29:36.656402 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 9 14:29:36.656494 systemd[1]: Reached target system-config.target. Feb 9 14:29:36.664405 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 9 14:29:36.664475 systemd[1]: Reached target user-config.target. Feb 9 14:29:36.705858 locksmithd[1497]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 9 14:29:36.936329 kernel: EXT4-fs (sda9): resized filesystem to 116605649 Feb 9 14:29:36.964742 extend-filesystems[1439]: Filesystem at /dev/sda9 is mounted on /; on-line resizing required Feb 9 14:29:36.964742 extend-filesystems[1439]: old_desc_blocks = 1, new_desc_blocks = 56 Feb 9 14:29:36.964742 extend-filesystems[1439]: The filesystem on /dev/sda9 is now 116605649 (4k) blocks long. Feb 9 14:29:37.001375 extend-filesystems[1431]: Resized filesystem in /dev/sda9 Feb 9 14:29:37.001375 extend-filesystems[1431]: Found sdb Feb 9 14:29:36.965241 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 9 14:29:36.965380 systemd[1]: Finished extend-filesystems.service. Feb 9 14:29:37.025921 sshd_keygen[1454]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 9 14:29:37.037547 systemd[1]: Finished sshd-keygen.service. Feb 9 14:29:37.045219 systemd[1]: Starting issuegen.service... Feb 9 14:29:37.052563 systemd[1]: issuegen.service: Deactivated successfully. Feb 9 14:29:37.052636 systemd[1]: Finished issuegen.service. Feb 9 14:29:37.060106 systemd[1]: Starting systemd-user-sessions.service... Feb 9 14:29:37.068576 systemd[1]: Finished systemd-user-sessions.service. Feb 9 14:29:37.076986 systemd[1]: Started getty@tty1.service. Feb 9 14:29:37.083946 systemd[1]: Started serial-getty@ttyS1.service. Feb 9 14:29:37.092584 systemd[1]: Reached target getty.target. Feb 9 14:29:37.739355 systemd-networkd[1307]: bond0: Gained IPv6LL Feb 9 14:29:37.739587 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:37.867518 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:37.867667 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:37.868493 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 9 14:29:37.878559 systemd[1]: Reached target network-online.target. Feb 9 14:29:38.812467 kernel: mlx5_core 0000:01:00.0: lag map port 1:1 port 2:2 shared_fdb:0 Feb 9 14:29:42.105838 login[1518]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Feb 9 14:29:42.113315 login[1517]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Feb 9 14:29:42.113682 systemd[1]: Created slice user-500.slice. Feb 9 14:29:42.114218 systemd[1]: Starting user-runtime-dir@500.service... Feb 9 14:29:42.115210 systemd-logind[1455]: New session 1 of user core. Feb 9 14:29:42.117245 systemd-logind[1455]: New session 2 of user core. Feb 9 14:29:42.119392 systemd[1]: Finished user-runtime-dir@500.service. Feb 9 14:29:42.120029 systemd[1]: Starting user@500.service... Feb 9 14:29:42.121743 (systemd)[1522]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:42.187861 systemd[1522]: Queued start job for default target default.target. Feb 9 14:29:42.188100 systemd[1522]: Reached target paths.target. Feb 9 14:29:42.188112 systemd[1522]: Reached target sockets.target. Feb 9 14:29:42.188120 systemd[1522]: Reached target timers.target. Feb 9 14:29:42.188128 systemd[1522]: Reached target basic.target. Feb 9 14:29:42.188146 systemd[1522]: Reached target default.target. Feb 9 14:29:42.188160 systemd[1522]: Startup finished in 63ms. Feb 9 14:29:42.188207 systemd[1]: Started user@500.service. Feb 9 14:29:42.188776 systemd[1]: Started session-1.scope. Feb 9 14:29:42.189115 systemd[1]: Started session-2.scope. Feb 9 14:29:42.540574 coreos-metadata[1421]: Feb 09 14:29:42.540 INFO Failed to fetch: error sending request for url (https://metadata.packet.net/metadata): error trying to connect: dns error: failed to lookup address information: Name or service not known Feb 9 14:29:42.541340 coreos-metadata[1424]: Feb 09 14:29:42.540 INFO Failed to fetch: error sending request for url (https://metadata.packet.net/metadata): error trying to connect: dns error: failed to lookup address information: Name or service not known Feb 9 14:29:43.541139 coreos-metadata[1424]: Feb 09 14:29:43.541 INFO Fetching https://metadata.packet.net/metadata: Attempt #2 Feb 9 14:29:43.541431 coreos-metadata[1421]: Feb 09 14:29:43.541 INFO Fetching https://metadata.packet.net/metadata: Attempt #2 Feb 9 14:29:43.993639 kernel: mlx5_core 0000:01:00.0: modify lag map port 1:2 port 2:2 Feb 9 14:29:43.993789 kernel: mlx5_core 0000:01:00.0: modify lag map port 1:1 port 2:2 Feb 9 14:29:44.612055 coreos-metadata[1421]: Feb 09 14:29:44.612 INFO Fetch successful Feb 9 14:29:44.612299 coreos-metadata[1424]: Feb 09 14:29:44.612 INFO Fetch successful Feb 9 14:29:44.634736 systemd[1]: Finished coreos-metadata.service. Feb 9 14:29:44.635482 unknown[1421]: wrote ssh authorized keys file for user: core Feb 9 14:29:44.635721 systemd[1]: Starting etcd-member.service... Feb 9 14:29:44.636468 systemd[1]: Started packet-phone-home.service. Feb 9 14:29:44.644907 curl[1545]: % Total % Received % Xferd Average Speed Time Time Time Current Feb 9 14:29:44.644907 curl[1545]: Dload Upload Total Spent Left Speed Feb 9 14:29:44.648924 update-ssh-keys[1546]: Updated "/home/core/.ssh/authorized_keys" Feb 9 14:29:44.649249 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Feb 9 14:29:44.651875 systemd[1]: Starting docker.service... Feb 9 14:29:44.669164 env[1561]: time="2024-02-09T14:29:44.669108930Z" level=info msg="Starting up" Feb 9 14:29:44.669943 env[1561]: time="2024-02-09T14:29:44.669902913Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 14:29:44.669943 env[1561]: time="2024-02-09T14:29:44.669912957Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 14:29:44.669943 env[1561]: time="2024-02-09T14:29:44.669925754Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 14:29:44.669943 env[1561]: time="2024-02-09T14:29:44.669931558Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 14:29:44.671393 env[1561]: time="2024-02-09T14:29:44.671339915Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 14:29:44.671393 env[1561]: time="2024-02-09T14:29:44.671362005Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 14:29:44.671393 env[1561]: time="2024-02-09T14:29:44.671368797Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 14:29:44.671393 env[1561]: time="2024-02-09T14:29:44.671373093Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 14:29:44.685644 env[1561]: time="2024-02-09T14:29:44.685634827Z" level=info msg="Loading containers: start." Feb 9 14:29:44.799393 kernel: Initializing XFRM netlink socket Feb 9 14:29:44.826382 curl[1545]: \u000d 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0\u000d 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 Feb 9 14:29:44.827381 systemd[1]: packet-phone-home.service: Deactivated successfully. Feb 9 14:29:44.844680 env[1561]: time="2024-02-09T14:29:44.844658171Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 9 14:29:44.845454 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:44.845525 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:44.848839 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:44.848946 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:44.901505 systemd-networkd[1307]: docker0: Link UP Feb 9 14:29:44.901690 systemd-timesyncd[1413]: Network configuration changed, trying to establish connection. Feb 9 14:29:44.907220 env[1561]: time="2024-02-09T14:29:44.907202819Z" level=info msg="Loading containers: done." Feb 9 14:29:44.914365 env[1561]: time="2024-02-09T14:29:44.914314232Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 9 14:29:44.914479 env[1561]: time="2024-02-09T14:29:44.914442603Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 9 14:29:44.914518 env[1561]: time="2024-02-09T14:29:44.914510571Z" level=info msg="Daemon has completed initialization" Feb 9 14:29:44.924508 systemd[1]: Started docker.service. Feb 9 14:29:44.931579 env[1561]: time="2024-02-09T14:29:44.931483485Z" level=info msg="API listen on /run/docker.sock" Feb 9 14:29:44.932656 etcd-wrapper[1550]: Error response from daemon: No such container: etcd-member Feb 9 14:29:44.962232 etcd-wrapper[1688]: Error: No such container: etcd-member Feb 9 14:29:45.048610 etcd-wrapper[1710]: Unable to find image 'quay.io/coreos/etcd:v3.5.0' locally Feb 9 14:29:45.182750 systemd[1]: Created slice system-sshd.slice. Feb 9 14:29:45.185615 systemd[1]: Started sshd@0-147.75.49.59:22-147.75.109.163:51734.service. Feb 9 14:29:45.268990 sshd[1722]: Accepted publickey for core from 147.75.109.163 port 51734 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:45.269738 sshd[1722]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:45.271864 systemd-logind[1455]: New session 3 of user core. Feb 9 14:29:45.272315 systemd[1]: Started session-3.scope. Feb 9 14:29:45.319474 systemd[1]: Started sshd@1-147.75.49.59:22-147.75.109.163:51748.service. Feb 9 14:29:45.353014 sshd[1727]: Accepted publickey for core from 147.75.109.163 port 51748 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:45.353759 sshd[1727]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:45.355917 systemd-logind[1455]: New session 4 of user core. Feb 9 14:29:45.356351 systemd[1]: Started session-4.scope. Feb 9 14:29:45.407082 sshd[1727]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:45.410170 systemd[1]: sshd@1-147.75.49.59:22-147.75.109.163:51748.service: Deactivated successfully. Feb 9 14:29:45.410860 systemd[1]: session-4.scope: Deactivated successfully. Feb 9 14:29:45.411518 systemd-logind[1455]: Session 4 logged out. Waiting for processes to exit. Feb 9 14:29:45.412735 systemd[1]: Started sshd@2-147.75.49.59:22-147.75.109.163:51754.service. Feb 9 14:29:45.413649 systemd-logind[1455]: Removed session 4. Feb 9 14:29:45.476364 sshd[1733]: Accepted publickey for core from 147.75.109.163 port 51754 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:45.477813 sshd[1733]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:45.482455 systemd-logind[1455]: New session 5 of user core. Feb 9 14:29:45.483597 systemd[1]: Started session-5.scope. Feb 9 14:29:45.541776 sshd[1733]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:45.542977 systemd[1]: sshd@2-147.75.49.59:22-147.75.109.163:51754.service: Deactivated successfully. Feb 9 14:29:45.543360 systemd[1]: session-5.scope: Deactivated successfully. Feb 9 14:29:45.543671 systemd-logind[1455]: Session 5 logged out. Waiting for processes to exit. Feb 9 14:29:45.544110 systemd-logind[1455]: Removed session 5. Feb 9 14:29:46.358698 etcd-wrapper[1710]: v3.5.0: Pulling from coreos/etcd Feb 9 14:29:46.663820 etcd-wrapper[1710]: 1813d21adc01: Pulling fs layer Feb 9 14:29:46.663820 etcd-wrapper[1710]: 6e96907ab677: Pulling fs layer Feb 9 14:29:46.663820 etcd-wrapper[1710]: 444ed0ea8673: Pulling fs layer Feb 9 14:29:46.663820 etcd-wrapper[1710]: 0fd2df5633f0: Pulling fs layer Feb 9 14:29:46.663820 etcd-wrapper[1710]: 8cc22b9456bb: Pulling fs layer Feb 9 14:29:46.664576 etcd-wrapper[1710]: 7ac70aecd290: Pulling fs layer Feb 9 14:29:46.664576 etcd-wrapper[1710]: 4b376c64dfe4: Pulling fs layer Feb 9 14:29:46.664576 etcd-wrapper[1710]: 8cc22b9456bb: Waiting Feb 9 14:29:46.664576 etcd-wrapper[1710]: 4b376c64dfe4: Waiting Feb 9 14:29:46.664576 etcd-wrapper[1710]: 7ac70aecd290: Waiting Feb 9 14:29:46.664576 etcd-wrapper[1710]: 0fd2df5633f0: Waiting Feb 9 14:29:47.027962 etcd-wrapper[1710]: 444ed0ea8673: Verifying Checksum Feb 9 14:29:47.027962 etcd-wrapper[1710]: 444ed0ea8673: Download complete Feb 9 14:29:47.036226 etcd-wrapper[1710]: 6e96907ab677: Verifying Checksum Feb 9 14:29:47.036226 etcd-wrapper[1710]: 6e96907ab677: Download complete Feb 9 14:29:47.070527 etcd-wrapper[1710]: 1813d21adc01: Verifying Checksum Feb 9 14:29:47.070527 etcd-wrapper[1710]: 1813d21adc01: Download complete Feb 9 14:29:47.339177 etcd-wrapper[1710]: 8cc22b9456bb: Verifying Checksum Feb 9 14:29:47.339177 etcd-wrapper[1710]: 8cc22b9456bb: Download complete Feb 9 14:29:47.362285 etcd-wrapper[1710]: 0fd2df5633f0: Download complete Feb 9 14:29:47.373762 etcd-wrapper[1710]: 7ac70aecd290: Verifying Checksum Feb 9 14:29:47.373762 etcd-wrapper[1710]: 7ac70aecd290: Download complete Feb 9 14:29:47.573696 etcd-wrapper[1710]: 1813d21adc01: Pull complete Feb 9 14:29:47.640112 etcd-wrapper[1710]: 4b376c64dfe4: Verifying Checksum Feb 9 14:29:47.640112 etcd-wrapper[1710]: 4b376c64dfe4: Download complete Feb 9 14:29:47.766395 systemd[1]: var-lib-docker-overlay2-1610104701fce502cb96fde07de1efd8bd828c49236c2e9165663cb5d0c9fe64-merged.mount: Deactivated successfully. Feb 9 14:29:47.994626 etcd-wrapper[1710]: 6e96907ab677: Pull complete Feb 9 14:29:48.061283 systemd[1]: Started sshd@3-147.75.49.59:22-171.244.37.97:36034.service. Feb 9 14:29:48.152500 systemd[1]: var-lib-docker-overlay2-8ffd466717413ce1c3cbc844a5587e1f604501917233a51d22d94f501b9f29f2-merged.mount: Deactivated successfully. Feb 9 14:29:48.193932 etcd-wrapper[1710]: 444ed0ea8673: Pull complete Feb 9 14:29:48.396998 etcd-wrapper[1710]: 0fd2df5633f0: Pull complete Feb 9 14:29:48.421795 etcd-wrapper[1710]: 8cc22b9456bb: Pull complete Feb 9 14:29:48.466114 etcd-wrapper[1710]: 7ac70aecd290: Pull complete Feb 9 14:29:48.496520 etcd-wrapper[1710]: 4b376c64dfe4: Pull complete Feb 9 14:29:48.499485 etcd-wrapper[1710]: Digest: sha256:28759af54acd6924b2191dc1a1d096e2fa2e219717a21b9d8edf89717db3631b Feb 9 14:29:48.500460 etcd-wrapper[1710]: Status: Downloaded newer image for quay.io/coreos/etcd:v3.5.0 Feb 9 14:29:48.551021 env[1461]: time="2024-02-09T14:29:48.550948183Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 14:29:48.551021 env[1461]: time="2024-02-09T14:29:48.550973455Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 14:29:48.551021 env[1461]: time="2024-02-09T14:29:48.550982688Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 14:29:48.551333 env[1461]: time="2024-02-09T14:29:48.551058783Z" level=info msg="starting signal loop" namespace=moby path=/run/containerd/io.containerd.runtime.v2.task/moby/44890266e829ddbaa5978209607ecdd9738430600e639c54bddb8cdd156ed433 pid=1907 runtime=io.containerd.runc.v2 Feb 9 14:29:48.571681 systemd[1]: Started docker-44890266e829ddbaa5978209607ecdd9738430600e639c54bddb8cdd156ed433.scope. Feb 9 14:29:48.576961 systemd[1]: var-lib-docker-overlay2-e7f3c9f147fffdc3ffbcef821982ba73d078ced6211057fd16f315430c8b7850-merged.mount: Deactivated successfully. Feb 9 14:29:48.633763 etcd-wrapper[1710]: {"level":"info","ts":1707488988.633493,"caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_DATA_DIR","variable-value":"/var/lib/etcd"} Feb 9 14:29:48.633763 etcd-wrapper[1710]: {"level":"info","ts":1707488988.6335568,"caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_NAME","variable-value":"d57cc56c5dea4578bb8d48cec4b250a2"} Feb 9 14:29:48.633763 etcd-wrapper[1710]: {"level":"warn","ts":1707488988.6335855,"caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_URL=quay.io/coreos/etcd"} Feb 9 14:29:48.633763 etcd-wrapper[1710]: {"level":"warn","ts":1707488988.6335924,"caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_TAG=v3.5.0"} Feb 9 14:29:48.633763 etcd-wrapper[1710]: {"level":"warn","ts":1707488988.6335986,"caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_USER=etcd"} Feb 9 14:29:48.633763 etcd-wrapper[1710]: {"level":"warn","ts":1707488988.6336033,"caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_SSL_DIR=/etc/ssl/certs"} Feb 9 14:29:48.634039 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.633Z","caller":"etcdmain/etcd.go:72","msg":"Running: ","args":["/usr/local/bin/etcd","--listen-client-urls=http://0.0.0.0:2379","--advertise-client-urls=http://10.67.80.7:2379"]} Feb 9 14:29:48.634039 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.633Z","caller":"embed/etcd.go:131","msg":"configuring peer listeners","listen-peer-urls":["http://localhost:2380"]} Feb 9 14:29:48.634417 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.634Z","caller":"embed/etcd.go:139","msg":"configuring client listeners","listen-client-urls":["http://0.0.0.0:2379"]} Feb 9 14:29:48.634552 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.634Z","caller":"embed/etcd.go:307","msg":"starting an etcd server","etcd-version":"3.5.0","git-sha":"946a5a6f2","go-version":"go1.16.3","go-os":"linux","go-arch":"amd64","max-cpu-set":16,"max-cpu-available":16,"member-initialized":false,"name":"d57cc56c5dea4578bb8d48cec4b250a2","data-dir":"/var/lib/etcd","wal-dir":"","wal-dir-dedicated":"","member-dir":"/var/lib/etcd/member","force-new-cluster":false,"heartbeat-interval":"100ms","election-timeout":"1s","initial-election-tick-advance":true,"snapshot-count":100000,"snapshot-catchup-entries":5000,"initial-advertise-peer-urls":["http://localhost:2380"],"listen-peer-urls":["http://localhost:2380"],"advertise-client-urls":["http://10.67.80.7:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[],"cors":["*"],"host-whitelist":["*"],"initial-cluster":"d57cc56c5dea4578bb8d48cec4b250a2=http://localhost:2380","initial-cluster-state":"new","initial-cluster-token":"etcd-cluster","quota-size-bytes":2147483648,"pre-vote":true,"initial-corrupt-check":false,"corrupt-check-time-interval":"0s","auto-compaction-mode":"periodic","auto-compaction-retention":"0s","auto-compaction-interval":"0s","discovery-url":"","discovery-proxy":"","downgrade-check-interval":"5s"} Feb 9 14:29:48.635458 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.635Z","caller":"etcdserver/backend.go:81","msg":"opened backend db","path":"/var/lib/etcd/member/snap/db","took":"739.499µs"} Feb 9 14:29:48.654357 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.653Z","caller":"etcdserver/raft.go:448","msg":"starting local member","local-member-id":"8e9e05c52164694d","cluster-id":"cdf818194e3a8c32"} Feb 9 14:29:48.654357 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.654Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=()"} Feb 9 14:29:48.654357 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.654Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became follower at term 0"} Feb 9 14:29:48.654357 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.654Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"newRaft 8e9e05c52164694d [peers: [], term: 0, commit: 0, applied: 0, lastindex: 0, lastterm: 0]"} Feb 9 14:29:48.654357 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.654Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became follower at term 1"} Feb 9 14:29:48.654357 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.654Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=(10276657743932975437)"} Feb 9 14:29:48.655299 etcd-wrapper[1710]: {"level":"warn","ts":"2024-02-09T14:29:48.655Z","caller":"auth/store.go:1220","msg":"simple token is not cryptographically signed"} Feb 9 14:29:48.655978 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.655Z","caller":"mvcc/kvstore.go:415","msg":"kvstore restored","current-rev":1} Feb 9 14:29:48.656349 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.656Z","caller":"etcdserver/quota.go:94","msg":"enabled backend quota with default value","quota-name":"v3-applier","quota-size-bytes":2147483648,"quota-size":"2.1 GB"} Feb 9 14:29:48.656741 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.656Z","caller":"etcdserver/server.go:843","msg":"starting etcd server","local-member-id":"8e9e05c52164694d","local-server-version":"3.5.0","cluster-version":"to_be_decided"} Feb 9 14:29:48.656741 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.656Z","caller":"etcdserver/server.go:728","msg":"started as single-node; fast-forwarding election ticks","local-member-id":"8e9e05c52164694d","forward-ticks":9,"forward-duration":"900ms","election-ticks":10,"election-timeout":"1s"} Feb 9 14:29:48.657706 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.657Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=(10276657743932975437)"} Feb 9 14:29:48.658107 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.657Z","caller":"membership/cluster.go:393","msg":"added member","cluster-id":"cdf818194e3a8c32","local-member-id":"8e9e05c52164694d","added-peer-id":"8e9e05c52164694d","added-peer-peer-urls":["http://localhost:2380"]} Feb 9 14:29:48.660524 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.660Z","caller":"embed/etcd.go:276","msg":"now serving peer/client/metrics","local-member-id":"8e9e05c52164694d","initial-advertise-peer-urls":["http://localhost:2380"],"listen-peer-urls":["http://localhost:2380"],"advertise-client-urls":["http://10.67.80.7:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[]} Feb 9 14:29:48.660524 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.660Z","caller":"embed/etcd.go:580","msg":"serving peer traffic","address":"127.0.0.1:2380"} Feb 9 14:29:48.660524 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:48.660Z","caller":"embed/etcd.go:552","msg":"cmux::serve","address":"127.0.0.1:2380"} Feb 9 14:29:49.555083 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.554Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d is starting a new election at term 1"} Feb 9 14:29:49.555083 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.554Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became pre-candidate at term 1"} Feb 9 14:29:49.555083 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.554Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d received MsgPreVoteResp from 8e9e05c52164694d at term 1"} Feb 9 14:29:49.555083 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.554Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became candidate at term 2"} Feb 9 14:29:49.555083 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.554Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d received MsgVoteResp from 8e9e05c52164694d at term 2"} Feb 9 14:29:49.555083 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.554Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became leader at term 2"} Feb 9 14:29:49.555083 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.554Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"raft.node: 8e9e05c52164694d elected leader 8e9e05c52164694d at term 2"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.555Z","caller":"etcdserver/server.go:2027","msg":"published local member to cluster through raft","local-member-id":"8e9e05c52164694d","local-member-attributes":"{Name:d57cc56c5dea4578bb8d48cec4b250a2 ClientURLs:[http://10.67.80.7:2379]}","request-path":"/0/members/8e9e05c52164694d/attributes","cluster-id":"cdf818194e3a8c32","publish-timeout":"7s"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.555Z","caller":"etcdserver/server.go:2476","msg":"setting up initial cluster version using v2 API","cluster-version":"3.5"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.555Z","caller":"embed/serve.go:98","msg":"ready to serve client requests"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.555Z","caller":"membership/cluster.go:531","msg":"set initial cluster version","cluster-id":"cdf818194e3a8c32","local-member-id":"8e9e05c52164694d","cluster-version":"3.5"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.555Z","caller":"etcdmain/main.go:47","msg":"notifying init daemon"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.555Z","caller":"api/capability.go:75","msg":"enabled capabilities for version","cluster-version":"3.5"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.556Z","caller":"etcdserver/server.go:2500","msg":"cluster version is updated","cluster-version":"3.5"} Feb 9 14:29:49.557219 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.556Z","caller":"etcdmain/main.go:53","msg":"successfully notified init daemon"} Feb 9 14:29:49.556435 systemd[1]: Started etcd-member.service. Feb 9 14:29:49.559517 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:29:49.557Z","caller":"embed/serve.go:140","msg":"serving client traffic insecurely; this is strongly discouraged!","address":"[::]:2379"} Feb 9 14:29:49.557701 systemd[1]: Reached target multi-user.target. Feb 9 14:29:49.561113 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 9 14:29:49.564990 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 9 14:29:49.565093 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 9 14:29:49.565195 systemd[1]: Startup finished in 1.849s (kernel) + 16.404s (initrd) + 19.327s (userspace) = 37.581s. Feb 9 14:29:49.820373 sshd[1800]: Invalid user rohan from 171.244.37.97 port 36034 Feb 9 14:29:49.826313 sshd[1800]: pam_faillock(sshd:auth): User unknown Feb 9 14:29:49.827217 sshd[1800]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:29:49.827330 sshd[1800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:29:49.828150 sshd[1800]: pam_faillock(sshd:auth): User unknown Feb 9 14:29:51.909817 sshd[1800]: Failed password for invalid user rohan from 171.244.37.97 port 36034 ssh2 Feb 9 14:29:52.239038 sshd[1800]: Received disconnect from 171.244.37.97 port 36034:11: Bye Bye [preauth] Feb 9 14:29:52.239038 sshd[1800]: Disconnected from invalid user rohan 171.244.37.97 port 36034 [preauth] Feb 9 14:29:52.241601 systemd[1]: sshd@3-147.75.49.59:22-171.244.37.97:36034.service: Deactivated successfully. Feb 9 14:29:55.551326 systemd[1]: Started sshd@4-147.75.49.59:22-147.75.109.163:52914.service. Feb 9 14:29:55.583996 sshd[1954]: Accepted publickey for core from 147.75.109.163 port 52914 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:55.584863 sshd[1954]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:55.587765 systemd-logind[1455]: New session 6 of user core. Feb 9 14:29:55.588474 systemd[1]: Started session-6.scope. Feb 9 14:29:55.642988 sshd[1954]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:55.644460 systemd[1]: sshd@4-147.75.49.59:22-147.75.109.163:52914.service: Deactivated successfully. Feb 9 14:29:55.644791 systemd[1]: session-6.scope: Deactivated successfully. Feb 9 14:29:55.645125 systemd-logind[1455]: Session 6 logged out. Waiting for processes to exit. Feb 9 14:29:55.645681 systemd[1]: Started sshd@5-147.75.49.59:22-147.75.109.163:52926.service. Feb 9 14:29:55.646130 systemd-logind[1455]: Removed session 6. Feb 9 14:29:55.678197 sshd[1960]: Accepted publickey for core from 147.75.109.163 port 52926 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:55.679052 sshd[1960]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:55.681876 systemd-logind[1455]: New session 7 of user core. Feb 9 14:29:55.682528 systemd[1]: Started session-7.scope. Feb 9 14:29:55.736526 sshd[1960]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:55.743101 systemd[1]: sshd@5-147.75.49.59:22-147.75.109.163:52926.service: Deactivated successfully. Feb 9 14:29:55.744811 systemd[1]: session-7.scope: Deactivated successfully. Feb 9 14:29:55.746521 systemd-logind[1455]: Session 7 logged out. Waiting for processes to exit. Feb 9 14:29:55.749415 systemd[1]: Started sshd@6-147.75.49.59:22-147.75.109.163:52938.service. Feb 9 14:29:55.752059 systemd-logind[1455]: Removed session 7. Feb 9 14:29:55.849159 sshd[1966]: Accepted publickey for core from 147.75.109.163 port 52938 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:55.850465 sshd[1966]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:55.854655 systemd-logind[1455]: New session 8 of user core. Feb 9 14:29:55.855613 systemd[1]: Started session-8.scope. Feb 9 14:29:55.922924 sshd[1966]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:55.931184 systemd[1]: sshd@6-147.75.49.59:22-147.75.109.163:52938.service: Deactivated successfully. Feb 9 14:29:55.932788 systemd[1]: session-8.scope: Deactivated successfully. Feb 9 14:29:55.934382 systemd-logind[1455]: Session 8 logged out. Waiting for processes to exit. Feb 9 14:29:55.936999 systemd[1]: Started sshd@7-147.75.49.59:22-147.75.109.163:52952.service. Feb 9 14:29:55.939254 systemd-logind[1455]: Removed session 8. Feb 9 14:29:55.994852 sshd[1972]: Accepted publickey for core from 147.75.109.163 port 52952 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:55.995512 sshd[1972]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:55.997669 systemd-logind[1455]: New session 9 of user core. Feb 9 14:29:55.998073 systemd[1]: Started session-9.scope. Feb 9 14:29:56.077790 sudo[1975]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 9 14:29:56.078399 sudo[1975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 14:29:56.098939 dbus-daemon[1428]: \xd0\xfd\xe3\xf9fU: received setenforce notice (enforcing=-379397856) Feb 9 14:29:56.103926 sudo[1975]: pam_unix(sudo:session): session closed for user root Feb 9 14:29:56.109489 sshd[1972]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:56.116583 systemd[1]: sshd@7-147.75.49.59:22-147.75.109.163:52952.service: Deactivated successfully. Feb 9 14:29:56.118229 systemd[1]: session-9.scope: Deactivated successfully. Feb 9 14:29:56.120089 systemd-logind[1455]: Session 9 logged out. Waiting for processes to exit. Feb 9 14:29:56.122730 systemd[1]: Started sshd@8-147.75.49.59:22-147.75.109.163:52966.service. Feb 9 14:29:56.124980 systemd-logind[1455]: Removed session 9. Feb 9 14:29:56.159520 sshd[1979]: Accepted publickey for core from 147.75.109.163 port 52966 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:56.160206 sshd[1979]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:56.162552 systemd-logind[1455]: New session 10 of user core. Feb 9 14:29:56.162992 systemd[1]: Started session-10.scope. Feb 9 14:29:56.224057 sudo[1983]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 9 14:29:56.224654 sudo[1983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 14:29:56.231551 sudo[1983]: pam_unix(sudo:session): session closed for user root Feb 9 14:29:56.243871 sudo[1982]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 9 14:29:56.244475 sudo[1982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 14:29:56.268444 systemd[1]: Stopping audit-rules.service... Feb 9 14:29:56.269000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 14:29:56.271436 auditctl[1986]: No rules Feb 9 14:29:56.272200 systemd[1]: audit-rules.service: Deactivated successfully. Feb 9 14:29:56.272681 systemd[1]: Stopped audit-rules.service. Feb 9 14:29:56.276531 systemd[1]: Starting audit-rules.service... Feb 9 14:29:56.277011 kernel: kauditd_printk_skb: 107 callbacks suppressed Feb 9 14:29:56.277179 kernel: audit: type=1305 audit(1707488996.269:160): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 14:29:56.269000 audit[1986]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffed68d6180 a2=420 a3=0 items=0 ppid=1 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:56.307895 augenrules[2003]: No rules Feb 9 14:29:56.308424 systemd[1]: Finished audit-rules.service. Feb 9 14:29:56.309128 sudo[1982]: pam_unix(sudo:session): session closed for user root Feb 9 14:29:56.310332 sshd[1979]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:56.312628 systemd[1]: sshd@8-147.75.49.59:22-147.75.109.163:52966.service: Deactivated successfully. Feb 9 14:29:56.313099 systemd[1]: session-10.scope: Deactivated successfully. Feb 9 14:29:56.313580 systemd-logind[1455]: Session 10 logged out. Waiting for processes to exit. Feb 9 14:29:56.314373 systemd[1]: Started sshd@9-147.75.49.59:22-147.75.109.163:52980.service. Feb 9 14:29:56.315033 systemd-logind[1455]: Removed session 10. Feb 9 14:29:56.324162 kernel: audit: type=1300 audit(1707488996.269:160): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffed68d6180 a2=420 a3=0 items=0 ppid=1 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:56.324205 kernel: audit: type=1327 audit(1707488996.269:160): proctitle=2F7362696E2F617564697463746C002D44 Feb 9 14:29:56.269000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 9 14:29:56.333687 kernel: audit: type=1131 audit(1707488996.269:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.356123 kernel: audit: type=1130 audit(1707488996.307:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.360291 sshd[2009]: Accepted publickey for core from 147.75.109.163 port 52980 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:56.361587 sshd[2009]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:56.363741 systemd-logind[1455]: New session 11 of user core. Feb 9 14:29:56.364157 systemd[1]: Started session-11.scope. Feb 9 14:29:56.378573 kernel: audit: type=1106 audit(1707488996.307:163): pid=1982 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.307000 audit[1982]: USER_END pid=1982 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.404628 kernel: audit: type=1104 audit(1707488996.307:164): pid=1982 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.307000 audit[1982]: CRED_DISP pid=1982 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.409563 sshd[2009]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:56.411142 systemd[1]: sshd@9-147.75.49.59:22-147.75.109.163:52980.service: Deactivated successfully. Feb 9 14:29:56.411440 systemd[1]: session-11.scope: Deactivated successfully. Feb 9 14:29:56.411742 systemd-logind[1455]: Session 11 logged out. Waiting for processes to exit. Feb 9 14:29:56.412249 systemd[1]: Started sshd@10-147.75.49.59:22-147.75.109.163:52982.service. Feb 9 14:29:56.412643 systemd-logind[1455]: Removed session 11. Feb 9 14:29:56.428251 kernel: audit: type=1106 audit(1707488996.309:165): pid=1979 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.309000 audit[1979]: USER_END pid=1979 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.460555 kernel: audit: type=1104 audit(1707488996.309:166): pid=1979 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.309000 audit[1979]: CRED_DISP pid=1979 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.486615 kernel: audit: type=1131 audit(1707488996.309:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-147.75.49.59:22-147.75.109.163:52966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-147.75.49.59:22-147.75.109.163:52966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.487233 sshd[2017]: Accepted publickey for core from 147.75.109.163 port 52982 ssh2: RSA SHA256:U9TXCuLWmaN/vK3Q2mHS688pTPlFTaEaiETkjLfvCUc Feb 9 14:29:56.488649 sshd[2017]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 14:29:56.490898 systemd-logind[1455]: New session 12 of user core. Feb 9 14:29:56.491280 systemd[1]: Started session-12.scope. Feb 9 14:29:56.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-147.75.49.59:22-147.75.109.163:52980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.359000 audit[2009]: USER_ACCT pid=2009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.360000 audit[2009]: CRED_ACQ pid=2009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.360000 audit[2009]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff36154840 a2=3 a3=0 items=0 ppid=1 pid=2009 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:56.360000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 14:29:56.365000 audit[2009]: USER_START pid=2009 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.365000 audit[2011]: CRED_ACQ pid=2011 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.408000 audit[2009]: USER_END pid=2009 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.408000 audit[2009]: CRED_DISP pid=2009 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-147.75.49.59:22-147.75.109.163:52980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-147.75.49.59:22-147.75.109.163:52982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.486000 audit[2017]: USER_ACCT pid=2017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.487000 audit[2017]: CRED_ACQ pid=2017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.487000 audit[2017]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf2d3cd80 a2=3 a3=0 items=0 ppid=1 pid=2017 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 14:29:56.487000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 14:29:56.492000 audit[2017]: USER_START pid=2017 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.492000 audit[2019]: CRED_ACQ pid=2019 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.887854 sshd[2017]: pam_unix(sshd:session): session closed for user core Feb 9 14:29:56.888000 audit[2017]: USER_END pid=2017 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.889000 audit[2017]: CRED_DISP pid=2017 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 9 14:29:56.893556 systemd[1]: sshd@10-147.75.49.59:22-147.75.109.163:52982.service: Deactivated successfully. Feb 9 14:29:56.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-147.75.49.59:22-147.75.109.163:52982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:56.895264 systemd[1]: session-12.scope: Deactivated successfully. Feb 9 14:29:56.897021 systemd-logind[1455]: Session 12 logged out. Waiting for processes to exit. Feb 9 14:29:56.899229 systemd-logind[1455]: Removed session 12. Feb 9 14:29:58.818664 systemd[1]: Started sshd@11-147.75.49.59:22-43.156.11.162:52578.service. Feb 9 14:29:58.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-147.75.49.59:22-43.156.11.162:52578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:29:59.827335 sshd[2042]: Invalid user tehchunaik from 43.156.11.162 port 52578 Feb 9 14:29:59.833472 sshd[2042]: pam_faillock(sshd:auth): User unknown Feb 9 14:29:59.834232 sshd[2042]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:29:59.834249 sshd[2042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:29:59.834507 sshd[2042]: pam_faillock(sshd:auth): User unknown Feb 9 14:29:59.833000 audit[2042]: USER_AUTH pid=2042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tehchunaik" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:30:01.955973 sshd[2042]: Failed password for invalid user tehchunaik from 43.156.11.162 port 52578 ssh2 Feb 9 14:30:04.216717 sshd[2042]: Received disconnect from 43.156.11.162 port 52578:11: Bye Bye [preauth] Feb 9 14:30:04.216717 sshd[2042]: Disconnected from invalid user tehchunaik 43.156.11.162 port 52578 [preauth] Feb 9 14:30:04.219358 systemd[1]: sshd@11-147.75.49.59:22-43.156.11.162:52578.service: Deactivated successfully. Feb 9 14:30:04.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-147.75.49.59:22-43.156.11.162:52578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:04.225479 kernel: kauditd_printk_skb: 24 callbacks suppressed Feb 9 14:30:04.225513 kernel: audit: type=1131 audit(1707489004.218:188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-147.75.49.59:22-43.156.11.162:52578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:04.468380 systemd[1]: Started sshd@12-147.75.49.59:22-186.7.75.15:54487.service. Feb 9 14:30:04.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-147.75.49.59:22-186.7.75.15:54487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:04.544335 kernel: audit: type=1130 audit(1707489004.467:189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-147.75.49.59:22-186.7.75.15:54487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:09.462451 sshd[2046]: Invalid user shruti from 186.7.75.15 port 54487 Feb 9 14:30:09.468622 sshd[2046]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:09.469743 sshd[2046]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:30:09.469832 sshd[2046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.7.75.15 Feb 9 14:30:09.470262 sshd[2046]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:09.469000 audit[2046]: USER_AUTH pid=2046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shruti" exe="/usr/sbin/sshd" hostname=186.7.75.15 addr=186.7.75.15 terminal=ssh res=failed' Feb 9 14:30:09.548340 kernel: audit: type=1100 audit(1707489009.469:190): pid=2046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shruti" exe="/usr/sbin/sshd" hostname=186.7.75.15 addr=186.7.75.15 terminal=ssh res=failed' Feb 9 14:30:10.611595 systemd[1]: Started sshd@13-147.75.49.59:22-101.43.88.44:39082.service. Feb 9 14:30:10.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-147.75.49.59:22-101.43.88.44:39082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:10.693287 kernel: audit: type=1130 audit(1707489010.610:191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-147.75.49.59:22-101.43.88.44:39082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:11.484186 sshd[2049]: Invalid user han from 101.43.88.44 port 39082 Feb 9 14:30:11.490256 sshd[2049]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:11.491253 sshd[2049]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:30:11.491374 sshd[2049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:30:11.492265 sshd[2049]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:11.491000 audit[2049]: USER_AUTH pid=2049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="han" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:30:11.578464 kernel: audit: type=1100 audit(1707489011.491:192): pid=2049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="han" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:30:11.631512 sshd[2046]: Failed password for invalid user shruti from 186.7.75.15 port 54487 ssh2 Feb 9 14:30:12.631885 sshd[2046]: Received disconnect from 186.7.75.15 port 54487:11: Bye Bye [preauth] Feb 9 14:30:12.631885 sshd[2046]: Disconnected from invalid user shruti 186.7.75.15 port 54487 [preauth] Feb 9 14:30:12.634350 systemd[1]: sshd@12-147.75.49.59:22-186.7.75.15:54487.service: Deactivated successfully. Feb 9 14:30:12.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-147.75.49.59:22-186.7.75.15:54487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:12.723492 kernel: audit: type=1131 audit(1707489012.633:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-147.75.49.59:22-186.7.75.15:54487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:13.594069 sshd[2049]: Failed password for invalid user han from 101.43.88.44 port 39082 ssh2 Feb 9 14:30:14.950420 systemd[1]: Started sshd@14-147.75.49.59:22-43.224.48.86:53006.service. Feb 9 14:30:14.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-147.75.49.59:22-43.224.48.86:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:15.041511 kernel: audit: type=1130 audit(1707489014.949:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-147.75.49.59:22-43.224.48.86:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:15.148609 sshd[2049]: Received disconnect from 101.43.88.44 port 39082:11: Bye Bye [preauth] Feb 9 14:30:15.148609 sshd[2049]: Disconnected from invalid user han 101.43.88.44 port 39082 [preauth] Feb 9 14:30:15.150870 systemd[1]: sshd@13-147.75.49.59:22-101.43.88.44:39082.service: Deactivated successfully. Feb 9 14:30:15.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-147.75.49.59:22-101.43.88.44:39082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:15.248494 kernel: audit: type=1131 audit(1707489015.150:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-147.75.49.59:22-101.43.88.44:39082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:14.703168 systemd-resolved[1412]: Clock change detected. Flushing caches. Feb 9 14:30:14.766427 systemd-journald[1249]: Time jumped backwards, rotating. Feb 9 14:30:14.703218 systemd-timesyncd[1413]: Contacted time server [2607:7c80:54:3::32]:123 (2.flatcar.pool.ntp.org). Feb 9 14:30:14.703241 systemd-timesyncd[1413]: Initial clock synchronization to Fri 2024-02-09 14:30:14.703112 UTC. Feb 9 14:30:15.494635 sshd[2053]: Invalid user samkhodro from 43.224.48.86 port 53006 Feb 9 14:30:15.500636 sshd[2053]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:15.501585 sshd[2053]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:30:15.501672 sshd[2053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:30:15.502710 sshd[2053]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:15.502000 audit[2053]: USER_AUTH pid=2053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="samkhodro" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:30:15.593685 kernel: audit: type=1100 audit(1707489015.502:196): pid=2053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="samkhodro" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:30:17.152827 sshd[2053]: Failed password for invalid user samkhodro from 43.224.48.86 port 53006 ssh2 Feb 9 14:30:17.680968 sshd[2053]: Received disconnect from 43.224.48.86 port 53006:11: Bye Bye [preauth] Feb 9 14:30:17.680968 sshd[2053]: Disconnected from invalid user samkhodro 43.224.48.86 port 53006 [preauth] Feb 9 14:30:17.683456 systemd[1]: sshd@14-147.75.49.59:22-43.224.48.86:53006.service: Deactivated successfully. Feb 9 14:30:17.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-147.75.49.59:22-43.224.48.86:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:17.775680 kernel: audit: type=1131 audit(1707489017.683:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-147.75.49.59:22-43.224.48.86:53006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:19.702198 systemd[1]: Started sshd@15-147.75.49.59:22-43.134.180.37:56434.service. Feb 9 14:30:19.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-147.75.49.59:22-43.134.180.37:56434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:19.792485 kernel: audit: type=1130 audit(1707489019.701:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-147.75.49.59:22-43.134.180.37:56434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:20.787114 sshd[2059]: Invalid user dncsteel from 43.134.180.37 port 56434 Feb 9 14:30:20.793295 sshd[2059]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:20.794373 sshd[2059]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:30:20.794495 sshd[2059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:30:20.795511 sshd[2059]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:20.795000 audit[2059]: USER_AUTH pid=2059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="dncsteel" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:30:20.887470 kernel: audit: type=1100 audit(1707489020.795:199): pid=2059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="dncsteel" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:30:21.455283 update_engine[1457]: I0209 14:30:21.455166 1457 update_attempter.cc:509] Updating boot flags... Feb 9 14:30:22.465747 sshd[2059]: Failed password for invalid user dncsteel from 43.134.180.37 port 56434 ssh2 Feb 9 14:30:23.877103 sshd[2059]: Received disconnect from 43.134.180.37 port 56434:11: Bye Bye [preauth] Feb 9 14:30:23.877103 sshd[2059]: Disconnected from invalid user dncsteel 43.134.180.37 port 56434 [preauth] Feb 9 14:30:23.879606 systemd[1]: sshd@15-147.75.49.59:22-43.134.180.37:56434.service: Deactivated successfully. Feb 9 14:30:23.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-147.75.49.59:22-43.134.180.37:56434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:23.971672 kernel: audit: type=1131 audit(1707489023.879:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-147.75.49.59:22-43.134.180.37:56434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:54.417373 systemd[1]: Started sshd@16-147.75.49.59:22-171.244.37.97:60552.service. Feb 9 14:30:54.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-147.75.49.59:22-171.244.37.97:60552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:54.508508 kernel: audit: type=1130 audit(1707489054.415:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-147.75.49.59:22-171.244.37.97:60552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:30:55.989912 sshd[2082]: Invalid user wuxiaojing from 171.244.37.97 port 60552 Feb 9 14:30:55.995929 sshd[2082]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:55.996978 sshd[2082]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:30:55.997067 sshd[2082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:30:55.998098 sshd[2082]: pam_faillock(sshd:auth): User unknown Feb 9 14:30:55.996000 audit[2082]: USER_AUTH pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wuxiaojing" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:30:56.090678 kernel: audit: type=1100 audit(1707489055.996:202): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wuxiaojing" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:30:58.807088 sshd[2082]: Failed password for invalid user wuxiaojing from 171.244.37.97 port 60552 ssh2 Feb 9 14:31:00.009912 sshd[2082]: Received disconnect from 171.244.37.97 port 60552:11: Bye Bye [preauth] Feb 9 14:31:00.009912 sshd[2082]: Disconnected from invalid user wuxiaojing 171.244.37.97 port 60552 [preauth] Feb 9 14:31:00.012400 systemd[1]: sshd@16-147.75.49.59:22-171.244.37.97:60552.service: Deactivated successfully. Feb 9 14:31:00.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-147.75.49.59:22-171.244.37.97:60552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:00.104469 kernel: audit: type=1131 audit(1707489060.011:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-147.75.49.59:22-171.244.37.97:60552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:03.401334 systemd[1]: Started sshd@17-147.75.49.59:22-43.156.11.162:52000.service. Feb 9 14:31:03.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-147.75.49.59:22-43.156.11.162:52000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:03.493469 kernel: audit: type=1130 audit(1707489063.399:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-147.75.49.59:22-43.156.11.162:52000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:04.454509 sshd[2086]: Invalid user tickuser from 43.156.11.162 port 52000 Feb 9 14:31:04.460420 sshd[2086]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:04.461535 sshd[2086]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:31:04.461623 sshd[2086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:31:04.462565 sshd[2086]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:04.461000 audit[2086]: USER_AUTH pid=2086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tickuser" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:31:04.555523 kernel: audit: type=1100 audit(1707489064.461:205): pid=2086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tickuser" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:31:06.840323 sshd[2086]: Failed password for invalid user tickuser from 43.156.11.162 port 52000 ssh2 Feb 9 14:31:07.810241 systemd[1]: Started sshd@18-147.75.49.59:22-177.148.230.13:41892.service. Feb 9 14:31:07.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-147.75.49.59:22-177.148.230.13:41892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:07.902470 kernel: audit: type=1130 audit(1707489067.808:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-147.75.49.59:22-177.148.230.13:41892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:08.711505 sshd[2086]: Received disconnect from 43.156.11.162 port 52000:11: Bye Bye [preauth] Feb 9 14:31:08.711505 sshd[2086]: Disconnected from invalid user tickuser 43.156.11.162 port 52000 [preauth] Feb 9 14:31:08.713950 systemd[1]: sshd@17-147.75.49.59:22-43.156.11.162:52000.service: Deactivated successfully. Feb 9 14:31:08.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-147.75.49.59:22-43.156.11.162:52000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:08.806546 kernel: audit: type=1131 audit(1707489068.712:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-147.75.49.59:22-43.156.11.162:52000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:08.846370 sshd[2089]: Invalid user ashutosh from 177.148.230.13 port 41892 Feb 9 14:31:08.847583 sshd[2089]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:08.847809 sshd[2089]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:31:08.847828 sshd[2089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:31:08.848002 sshd[2089]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:08.846000 audit[2089]: USER_AUTH pid=2089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ashutosh" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:31:08.940676 kernel: audit: type=1100 audit(1707489068.846:208): pid=2089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ashutosh" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:31:10.773999 sshd[2089]: Failed password for invalid user ashutosh from 177.148.230.13 port 41892 ssh2 Feb 9 14:31:11.876084 sshd[2089]: Received disconnect from 177.148.230.13 port 41892:11: Bye Bye [preauth] Feb 9 14:31:11.876084 sshd[2089]: Disconnected from invalid user ashutosh 177.148.230.13 port 41892 [preauth] Feb 9 14:31:11.878674 systemd[1]: sshd@18-147.75.49.59:22-177.148.230.13:41892.service: Deactivated successfully. Feb 9 14:31:11.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-147.75.49.59:22-177.148.230.13:41892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:11.971675 kernel: audit: type=1131 audit(1707489071.877:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-147.75.49.59:22-177.148.230.13:41892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:15.470695 systemd[1]: Started sshd@19-147.75.49.59:22-177.148.230.13:46482.service. Feb 9 14:31:15.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-147.75.49.59:22-177.148.230.13:46482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:15.562469 kernel: audit: type=1130 audit(1707489075.469:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-147.75.49.59:22-177.148.230.13:46482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:16.500302 sshd[2096]: Invalid user ashutosh from 177.148.230.13 port 46482 Feb 9 14:31:16.506391 sshd[2096]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:16.507530 sshd[2096]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:31:16.507613 sshd[2096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:31:16.508253 sshd[2096]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:16.506000 audit[2096]: USER_AUTH pid=2096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ashutosh" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:31:16.602663 kernel: audit: type=1100 audit(1707489076.506:211): pid=2096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ashutosh" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:31:18.534351 sshd[2096]: Failed password for invalid user ashutosh from 177.148.230.13 port 46482 ssh2 Feb 9 14:31:18.662187 systemd[1]: Started sshd@20-147.75.49.59:22-101.43.88.44:57746.service. Feb 9 14:31:18.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-147.75.49.59:22-101.43.88.44:57746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:18.755470 kernel: audit: type=1130 audit(1707489078.660:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-147.75.49.59:22-101.43.88.44:57746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:19.519112 sshd[2096]: Received disconnect from 177.148.230.13 port 46482:11: Bye Bye [preauth] Feb 9 14:31:19.519112 sshd[2096]: Disconnected from invalid user ashutosh 177.148.230.13 port 46482 [preauth] Feb 9 14:31:19.521609 systemd[1]: sshd@19-147.75.49.59:22-177.148.230.13:46482.service: Deactivated successfully. Feb 9 14:31:19.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-147.75.49.59:22-177.148.230.13:46482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:19.576923 sshd[2099]: Invalid user hussen from 101.43.88.44 port 57746 Feb 9 14:31:19.578179 sshd[2099]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:19.578387 sshd[2099]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:31:19.578402 sshd[2099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:31:19.578623 sshd[2099]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:19.577000 audit[2099]: USER_AUTH pid=2099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="hussen" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:31:19.707539 kernel: audit: type=1131 audit(1707489079.520:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-147.75.49.59:22-177.148.230.13:46482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:19.707569 kernel: audit: type=1100 audit(1707489079.577:214): pid=2099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="hussen" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:31:20.200153 systemd[1]: Started sshd@21-147.75.49.59:22-43.224.48.86:34256.service. Feb 9 14:31:20.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-147.75.49.59:22-43.224.48.86:34256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:20.293688 kernel: audit: type=1130 audit(1707489080.198:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-147.75.49.59:22-43.224.48.86:34256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:21.290943 sshd[2103]: Invalid user acabanas from 43.224.48.86 port 34256 Feb 9 14:31:21.296896 sshd[2103]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:21.297842 sshd[2103]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:31:21.297931 sshd[2103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:31:21.298972 sshd[2103]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:21.297000 audit[2103]: USER_AUTH pid=2103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="acabanas" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:31:21.393604 kernel: audit: type=1100 audit(1707489081.297:216): pid=2103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="acabanas" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:31:22.016283 sshd[2099]: Failed password for invalid user hussen from 101.43.88.44 port 57746 ssh2 Feb 9 14:31:23.009149 sshd[2103]: Failed password for invalid user acabanas from 43.224.48.86 port 34256 ssh2 Feb 9 14:31:23.140696 sshd[2099]: Received disconnect from 101.43.88.44 port 57746:11: Bye Bye [preauth] Feb 9 14:31:23.140696 sshd[2099]: Disconnected from invalid user hussen 101.43.88.44 port 57746 [preauth] Feb 9 14:31:23.143159 systemd[1]: sshd@20-147.75.49.59:22-101.43.88.44:57746.service: Deactivated successfully. Feb 9 14:31:23.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-147.75.49.59:22-101.43.88.44:57746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:23.234390 sshd[2103]: Received disconnect from 43.224.48.86 port 34256:11: Bye Bye [preauth] Feb 9 14:31:23.234390 sshd[2103]: Disconnected from invalid user acabanas 43.224.48.86 port 34256 [preauth] Feb 9 14:31:23.234865 systemd[1]: sshd@21-147.75.49.59:22-43.224.48.86:34256.service: Deactivated successfully. Feb 9 14:31:23.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-147.75.49.59:22-43.224.48.86:34256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:23.327698 kernel: audit: type=1131 audit(1707489083.142:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-147.75.49.59:22-101.43.88.44:57746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:23.327730 kernel: audit: type=1131 audit(1707489083.233:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-147.75.49.59:22-43.224.48.86:34256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:28.842316 systemd[1]: Started sshd@22-147.75.49.59:22-218.92.0.33:55060.service. Feb 9 14:31:28.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-147.75.49.59:22-218.92.0.33:55060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:28.935522 kernel: audit: type=1130 audit(1707489088.840:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-147.75.49.59:22-218.92.0.33:55060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:28.991224 sshd[2108]: Unable to negotiate with 218.92.0.33 port 55060: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Feb 9 14:31:28.991746 systemd[1]: sshd@22-147.75.49.59:22-218.92.0.33:55060.service: Deactivated successfully. Feb 9 14:31:28.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-147.75.49.59:22-218.92.0.33:55060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:29.082673 kernel: audit: type=1131 audit(1707489088.990:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-147.75.49.59:22-218.92.0.33:55060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:50.916982 systemd[1]: Started sshd@23-147.75.49.59:22-43.134.180.37:50558.service. Feb 9 14:31:50.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-147.75.49.59:22-43.134.180.37:50558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:51.010687 kernel: audit: type=1130 audit(1707489110.915:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-147.75.49.59:22-43.134.180.37:50558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:51.953128 sshd[2116]: Invalid user daeryuk from 43.134.180.37 port 50558 Feb 9 14:31:51.959320 sshd[2116]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:51.960312 sshd[2116]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:31:51.960400 sshd[2116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:31:51.961314 sshd[2116]: pam_faillock(sshd:auth): User unknown Feb 9 14:31:51.960000 audit[2116]: USER_AUTH pid=2116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="daeryuk" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:31:52.055687 kernel: audit: type=1100 audit(1707489111.960:222): pid=2116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="daeryuk" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:31:53.792026 sshd[2116]: Failed password for invalid user daeryuk from 43.134.180.37 port 50558 ssh2 Feb 9 14:31:55.402510 sshd[2116]: Received disconnect from 43.134.180.37 port 50558:11: Bye Bye [preauth] Feb 9 14:31:55.402510 sshd[2116]: Disconnected from invalid user daeryuk 43.134.180.37 port 50558 [preauth] Feb 9 14:31:55.405036 systemd[1]: sshd@23-147.75.49.59:22-43.134.180.37:50558.service: Deactivated successfully. Feb 9 14:31:55.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-147.75.49.59:22-43.134.180.37:50558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:31:55.498558 kernel: audit: type=1131 audit(1707489115.404:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-147.75.49.59:22-43.134.180.37:50558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:01.371032 systemd[1]: Started sshd@24-147.75.49.59:22-171.244.37.97:51876.service. Feb 9 14:32:01.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-147.75.49.59:22-171.244.37.97:51876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:01.464682 kernel: audit: type=1130 audit(1707489121.369:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-147.75.49.59:22-171.244.37.97:51876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:02.487662 sshd[2122]: Invalid user odilon from 171.244.37.97 port 51876 Feb 9 14:32:02.493785 sshd[2122]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:02.494860 sshd[2122]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:32:02.494949 sshd[2122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:32:02.495968 sshd[2122]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:02.494000 audit[2122]: USER_AUTH pid=2122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="odilon" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:32:02.590689 kernel: audit: type=1100 audit(1707489122.494:225): pid=2122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="odilon" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:32:04.501744 sshd[2122]: Failed password for invalid user odilon from 171.244.37.97 port 51876 ssh2 Feb 9 14:32:05.018340 sshd[2122]: Received disconnect from 171.244.37.97 port 51876:11: Bye Bye [preauth] Feb 9 14:32:05.018340 sshd[2122]: Disconnected from invalid user odilon 171.244.37.97 port 51876 [preauth] Feb 9 14:32:05.020877 systemd[1]: sshd@24-147.75.49.59:22-171.244.37.97:51876.service: Deactivated successfully. Feb 9 14:32:05.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-147.75.49.59:22-171.244.37.97:51876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:05.114679 kernel: audit: type=1131 audit(1707489125.019:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-147.75.49.59:22-171.244.37.97:51876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:09.676635 systemd[1]: Started sshd@25-147.75.49.59:22-43.156.11.162:55370.service. Feb 9 14:32:09.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-147.75.49.59:22-43.156.11.162:55370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:09.770692 kernel: audit: type=1130 audit(1707489129.675:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-147.75.49.59:22-43.156.11.162:55370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:10.703699 sshd[2127]: Invalid user rohan from 43.156.11.162 port 55370 Feb 9 14:32:10.704892 sshd[2127]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:10.705102 sshd[2127]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:32:10.705118 sshd[2127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:32:10.705293 sshd[2127]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:10.703000 audit[2127]: USER_AUTH pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rohan" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:32:10.798685 kernel: audit: type=1100 audit(1707489130.703:228): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rohan" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:32:12.144324 sshd[2127]: Failed password for invalid user rohan from 43.156.11.162 port 55370 ssh2 Feb 9 14:32:13.073271 sshd[2127]: Received disconnect from 43.156.11.162 port 55370:11: Bye Bye [preauth] Feb 9 14:32:13.073271 sshd[2127]: Disconnected from invalid user rohan 43.156.11.162 port 55370 [preauth] Feb 9 14:32:13.075789 systemd[1]: sshd@25-147.75.49.59:22-43.156.11.162:55370.service: Deactivated successfully. Feb 9 14:32:13.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-147.75.49.59:22-43.156.11.162:55370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:13.169662 kernel: audit: type=1131 audit(1707489133.075:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-147.75.49.59:22-43.156.11.162:55370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:25.302726 systemd[1]: Started sshd@26-147.75.49.59:22-101.43.88.44:48164.service. Feb 9 14:32:25.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-147.75.49.59:22-101.43.88.44:48164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:25.396665 kernel: audit: type=1130 audit(1707489145.302:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-147.75.49.59:22-101.43.88.44:48164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:26.156359 sshd[2131]: Invalid user babram from 101.43.88.44 port 48164 Feb 9 14:32:26.162438 sshd[2131]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:26.163610 sshd[2131]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:32:26.163702 sshd[2131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:32:26.164585 sshd[2131]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:26.164000 audit[2131]: USER_AUTH pid=2131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="babram" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:32:26.257682 kernel: audit: type=1100 audit(1707489146.164:231): pid=2131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="babram" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:32:26.827032 systemd[1]: Started sshd@27-147.75.49.59:22-43.224.48.86:43739.service. Feb 9 14:32:26.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-147.75.49.59:22-43.224.48.86:43739 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:26.920690 kernel: audit: type=1130 audit(1707489146.826:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-147.75.49.59:22-43.224.48.86:43739 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:27.926039 sshd[2134]: Invalid user sambo from 43.224.48.86 port 43739 Feb 9 14:32:27.932172 sshd[2134]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:27.933205 sshd[2134]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:32:27.933295 sshd[2134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:32:27.934213 sshd[2134]: pam_faillock(sshd:auth): User unknown Feb 9 14:32:27.933000 audit[2134]: USER_AUTH pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sambo" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:32:28.027509 kernel: audit: type=1100 audit(1707489147.933:233): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sambo" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:32:28.466659 sshd[2131]: Failed password for invalid user babram from 101.43.88.44 port 48164 ssh2 Feb 9 14:32:29.704921 sshd[2134]: Failed password for invalid user sambo from 43.224.48.86 port 43739 ssh2 Feb 9 14:32:30.032740 sshd[2131]: Received disconnect from 101.43.88.44 port 48164:11: Bye Bye [preauth] Feb 9 14:32:30.032740 sshd[2131]: Disconnected from invalid user babram 101.43.88.44 port 48164 [preauth] Feb 9 14:32:30.035116 systemd[1]: sshd@26-147.75.49.59:22-101.43.88.44:48164.service: Deactivated successfully. Feb 9 14:32:30.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-147.75.49.59:22-101.43.88.44:48164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:30.128683 kernel: audit: type=1131 audit(1707489150.035:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-147.75.49.59:22-101.43.88.44:48164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:30.923962 sshd[2134]: Received disconnect from 43.224.48.86 port 43739:11: Bye Bye [preauth] Feb 9 14:32:30.923962 sshd[2134]: Disconnected from invalid user sambo 43.224.48.86 port 43739 [preauth] Feb 9 14:32:30.926488 systemd[1]: sshd@27-147.75.49.59:22-43.224.48.86:43739.service: Deactivated successfully. Feb 9 14:32:30.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-147.75.49.59:22-43.224.48.86:43739 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:32:31.020658 kernel: audit: type=1131 audit(1707489150.926:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-147.75.49.59:22-43.224.48.86:43739 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:09.207938 systemd[1]: Started sshd@28-147.75.49.59:22-171.244.37.97:52258.service. Feb 9 14:33:09.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-147.75.49.59:22-171.244.37.97:52258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:09.300481 kernel: audit: type=1130 audit(1707489189.207:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-147.75.49.59:22-171.244.37.97:52258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:10.975060 sshd[2140]: Invalid user toolday from 171.244.37.97 port 52258 Feb 9 14:33:10.981102 sshd[2140]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:10.982242 sshd[2140]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:33:10.982330 sshd[2140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:33:10.983257 sshd[2140]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:10.982000 audit[2140]: USER_AUTH pid=2140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="toolday" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:33:11.077692 kernel: audit: type=1100 audit(1707489190.982:237): pid=2140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="toolday" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:33:12.658433 sshd[2140]: Failed password for invalid user toolday from 171.244.37.97 port 52258 ssh2 Feb 9 14:33:13.469177 systemd[1]: Started sshd@29-147.75.49.59:22-43.156.11.162:35044.service. Feb 9 14:33:13.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-147.75.49.59:22-43.156.11.162:35044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:13.562526 kernel: audit: type=1130 audit(1707489193.468:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-147.75.49.59:22-43.156.11.162:35044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:14.515230 sshd[2140]: Received disconnect from 171.244.37.97 port 52258:11: Bye Bye [preauth] Feb 9 14:33:14.515230 sshd[2140]: Disconnected from invalid user toolday 171.244.37.97 port 52258 [preauth] Feb 9 14:33:14.517768 systemd[1]: sshd@28-147.75.49.59:22-171.244.37.97:52258.service: Deactivated successfully. Feb 9 14:33:14.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-147.75.49.59:22-171.244.37.97:52258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:14.521247 sshd[2143]: Invalid user ggsteel from 43.156.11.162 port 35044 Feb 9 14:33:14.523474 sshd[2143]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:14.523748 sshd[2143]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:33:14.523789 sshd[2143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:33:14.524023 sshd[2143]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:14.523000 audit[2143]: USER_AUTH pid=2143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ggsteel" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:33:14.700783 kernel: audit: type=1131 audit(1707489194.517:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-147.75.49.59:22-171.244.37.97:52258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:14.700814 kernel: audit: type=1100 audit(1707489194.523:240): pid=2143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ggsteel" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:33:16.414618 sshd[2143]: Failed password for invalid user ggsteel from 43.156.11.162 port 35044 ssh2 Feb 9 14:33:16.829366 sshd[2143]: Received disconnect from 43.156.11.162 port 35044:11: Bye Bye [preauth] Feb 9 14:33:16.829366 sshd[2143]: Disconnected from invalid user ggsteel 43.156.11.162 port 35044 [preauth] Feb 9 14:33:16.831987 systemd[1]: sshd@29-147.75.49.59:22-43.156.11.162:35044.service: Deactivated successfully. Feb 9 14:33:16.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-147.75.49.59:22-43.156.11.162:35044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:16.925678 kernel: audit: type=1131 audit(1707489196.831:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-147.75.49.59:22-43.156.11.162:35044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:18.590821 systemd[1]: Started sshd@30-147.75.49.59:22-43.134.180.37:44682.service. Feb 9 14:33:18.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-147.75.49.59:22-43.134.180.37:44682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:18.683486 kernel: audit: type=1130 audit(1707489198.590:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-147.75.49.59:22-43.134.180.37:44682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:19.666873 sshd[2150]: Invalid user samkhodro from 43.134.180.37 port 44682 Feb 9 14:33:19.672915 sshd[2150]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:19.674037 sshd[2150]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:33:19.674125 sshd[2150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:33:19.675194 sshd[2150]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:19.674000 audit[2150]: USER_AUTH pid=2150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="samkhodro" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:33:19.769594 kernel: audit: type=1100 audit(1707489199.674:243): pid=2150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="samkhodro" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:33:21.586019 sshd[2150]: Failed password for invalid user samkhodro from 43.134.180.37 port 44682 ssh2 Feb 9 14:33:21.849512 sshd[2150]: Received disconnect from 43.134.180.37 port 44682:11: Bye Bye [preauth] Feb 9 14:33:21.849512 sshd[2150]: Disconnected from invalid user samkhodro 43.134.180.37 port 44682 [preauth] Feb 9 14:33:21.851949 systemd[1]: sshd@30-147.75.49.59:22-43.134.180.37:44682.service: Deactivated successfully. Feb 9 14:33:21.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-147.75.49.59:22-43.134.180.37:44682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:21.945676 kernel: audit: type=1131 audit(1707489201.851:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-147.75.49.59:22-43.134.180.37:44682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:26.530447 update_engine[1457]: I0209 14:33:26.530330 1457 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Feb 9 14:33:26.530447 update_engine[1457]: I0209 14:33:26.530409 1457 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Feb 9 14:33:26.531396 update_engine[1457]: I0209 14:33:26.531147 1457 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Feb 9 14:33:26.532219 update_engine[1457]: I0209 14:33:26.532145 1457 omaha_request_params.cc:62] Current group set to lts Feb 9 14:33:26.532491 update_engine[1457]: I0209 14:33:26.532444 1457 update_attempter.cc:499] Already updated boot flags. Skipping. Feb 9 14:33:26.532491 update_engine[1457]: I0209 14:33:26.532482 1457 update_attempter.cc:643] Scheduling an action processor start. Feb 9 14:33:26.532714 update_engine[1457]: I0209 14:33:26.532522 1457 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Feb 9 14:33:26.532714 update_engine[1457]: I0209 14:33:26.532593 1457 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Feb 9 14:33:26.532891 update_engine[1457]: I0209 14:33:26.532729 1457 omaha_request_action.cc:270] Posting an Omaha request to disabled Feb 9 14:33:26.532891 update_engine[1457]: I0209 14:33:26.532747 1457 omaha_request_action.cc:271] Request: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: Feb 9 14:33:26.532891 update_engine[1457]: I0209 14:33:26.532757 1457 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 9 14:33:26.533813 locksmithd[1497]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Feb 9 14:33:26.536021 update_engine[1457]: I0209 14:33:26.535924 1457 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 9 14:33:26.536246 update_engine[1457]: E0209 14:33:26.536201 1457 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 9 14:33:26.536406 update_engine[1457]: I0209 14:33:26.536370 1457 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Feb 9 14:33:30.467796 systemd[1]: Started sshd@31-147.75.49.59:22-43.224.48.86:53222.service. Feb 9 14:33:30.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-147.75.49.59:22-43.224.48.86:53222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:30.561683 kernel: audit: type=1130 audit(1707489210.467:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-147.75.49.59:22-43.224.48.86:53222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:31.565997 sshd[2154]: Invalid user darkman from 43.224.48.86 port 53222 Feb 9 14:33:31.572023 sshd[2154]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:31.572970 sshd[2154]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:33:31.573058 sshd[2154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:33:31.573929 sshd[2154]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:31.573000 audit[2154]: USER_AUTH pid=2154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="darkman" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:33:31.668683 kernel: audit: type=1100 audit(1707489211.573:246): pid=2154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="darkman" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:33:33.464955 sshd[2154]: Failed password for invalid user darkman from 43.224.48.86 port 53222 ssh2 Feb 9 14:33:35.513189 sshd[2154]: Received disconnect from 43.224.48.86 port 53222:11: Bye Bye [preauth] Feb 9 14:33:35.513189 sshd[2154]: Disconnected from invalid user darkman 43.224.48.86 port 53222 [preauth] Feb 9 14:33:35.515726 systemd[1]: sshd@31-147.75.49.59:22-43.224.48.86:53222.service: Deactivated successfully. Feb 9 14:33:35.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-147.75.49.59:22-43.224.48.86:53222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:35.609679 kernel: audit: type=1131 audit(1707489215.515:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-147.75.49.59:22-43.224.48.86:53222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:36.440559 update_engine[1457]: I0209 14:33:36.440428 1457 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 9 14:33:36.441318 update_engine[1457]: I0209 14:33:36.440904 1457 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 9 14:33:36.441318 update_engine[1457]: E0209 14:33:36.441107 1457 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 9 14:33:36.441318 update_engine[1457]: I0209 14:33:36.441275 1457 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Feb 9 14:33:36.534628 systemd[1]: Started sshd@32-147.75.49.59:22-101.43.88.44:38608.service. Feb 9 14:33:36.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-147.75.49.59:22-101.43.88.44:38608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:36.626680 kernel: audit: type=1130 audit(1707489216.534:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-147.75.49.59:22-101.43.88.44:38608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:37.294009 sshd[2158]: Invalid user shisteve from 101.43.88.44 port 38608 Feb 9 14:33:37.300223 sshd[2158]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:37.301215 sshd[2158]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:33:37.301304 sshd[2158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:33:37.302318 sshd[2158]: pam_faillock(sshd:auth): User unknown Feb 9 14:33:37.302000 audit[2158]: USER_AUTH pid=2158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shisteve" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:33:37.396686 kernel: audit: type=1100 audit(1707489217.302:249): pid=2158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shisteve" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:33:39.683853 sshd[2158]: Failed password for invalid user shisteve from 101.43.88.44 port 38608 ssh2 Feb 9 14:33:40.320591 sshd[2158]: Received disconnect from 101.43.88.44 port 38608:11: Bye Bye [preauth] Feb 9 14:33:40.320591 sshd[2158]: Disconnected from invalid user shisteve 101.43.88.44 port 38608 [preauth] Feb 9 14:33:40.323235 systemd[1]: sshd@32-147.75.49.59:22-101.43.88.44:38608.service: Deactivated successfully. Feb 9 14:33:40.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-147.75.49.59:22-101.43.88.44:38608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:40.415657 kernel: audit: type=1131 audit(1707489220.323:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-147.75.49.59:22-101.43.88.44:38608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:33:46.440643 update_engine[1457]: I0209 14:33:46.440526 1457 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 9 14:33:46.441491 update_engine[1457]: I0209 14:33:46.440985 1457 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 9 14:33:46.441491 update_engine[1457]: E0209 14:33:46.441184 1457 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 9 14:33:46.441491 update_engine[1457]: I0209 14:33:46.441354 1457 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Feb 9 14:33:56.439711 update_engine[1457]: I0209 14:33:56.439595 1457 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 9 14:33:56.440585 update_engine[1457]: I0209 14:33:56.440055 1457 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 9 14:33:56.440585 update_engine[1457]: E0209 14:33:56.440261 1457 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 9 14:33:56.440585 update_engine[1457]: I0209 14:33:56.440410 1457 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Feb 9 14:33:56.440585 update_engine[1457]: I0209 14:33:56.440426 1457 omaha_request_action.cc:621] Omaha request response: Feb 9 14:33:56.440965 update_engine[1457]: E0209 14:33:56.440589 1457 omaha_request_action.cc:640] Omaha request network transfer failed. Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440619 1457 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440629 1457 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440637 1457 update_attempter.cc:306] Processing Done. Feb 9 14:33:56.440965 update_engine[1457]: E0209 14:33:56.440661 1457 update_attempter.cc:619] Update failed. Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440670 1457 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440680 1457 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440688 1457 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440840 1457 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440891 1457 omaha_request_action.cc:270] Posting an Omaha request to disabled Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440901 1457 omaha_request_action.cc:271] Request: Feb 9 14:33:56.440965 update_engine[1457]: Feb 9 14:33:56.440965 update_engine[1457]: Feb 9 14:33:56.440965 update_engine[1457]: Feb 9 14:33:56.440965 update_engine[1457]: Feb 9 14:33:56.440965 update_engine[1457]: Feb 9 14:33:56.440965 update_engine[1457]: Feb 9 14:33:56.440965 update_engine[1457]: I0209 14:33:56.440910 1457 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441219 1457 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 9 14:33:56.442509 update_engine[1457]: E0209 14:33:56.441381 1457 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441534 1457 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441550 1457 omaha_request_action.cc:621] Omaha request response: Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441561 1457 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441569 1457 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441577 1457 update_attempter.cc:306] Processing Done. Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441584 1457 update_attempter.cc:310] Error event sent. Feb 9 14:33:56.442509 update_engine[1457]: I0209 14:33:56.441612 1457 update_check_scheduler.cc:74] Next update check in 42m13s Feb 9 14:33:56.443345 locksmithd[1497]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Feb 9 14:33:56.443345 locksmithd[1497]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Feb 9 14:34:14.679381 systemd[1]: Started sshd@33-147.75.49.59:22-171.244.37.97:60630.service. Feb 9 14:34:14.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-147.75.49.59:22-171.244.37.97:60630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:14.772489 kernel: audit: type=1130 audit(1707489254.677:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-147.75.49.59:22-171.244.37.97:60630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:16.025308 sshd[2165]: Invalid user willy from 171.244.37.97 port 60630 Feb 9 14:34:16.031447 sshd[2165]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:16.032515 sshd[2165]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:34:16.032604 sshd[2165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:34:16.033601 sshd[2165]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:16.032000 audit[2165]: USER_AUTH pid=2165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="willy" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:34:16.127688 kernel: audit: type=1100 audit(1707489256.032:252): pid=2165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="willy" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:34:16.548791 systemd[1]: Started sshd@34-147.75.49.59:22-43.156.11.162:33314.service. Feb 9 14:34:16.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-147.75.49.59:22-43.156.11.162:33314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:16.641470 kernel: audit: type=1130 audit(1707489256.547:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-147.75.49.59:22-43.156.11.162:33314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:17.572733 sshd[2168]: Invalid user toolday from 43.156.11.162 port 33314 Feb 9 14:34:17.578886 sshd[2168]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:17.579870 sshd[2168]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:34:17.579957 sshd[2168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:34:17.580406 sshd[2168]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:17.578000 audit[2168]: USER_AUTH pid=2168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="toolday" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:34:17.674540 kernel: audit: type=1100 audit(1707489257.578:254): pid=2168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="toolday" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:34:17.768676 sshd[2165]: Failed password for invalid user willy from 171.244.37.97 port 60630 ssh2 Feb 9 14:34:19.119935 sshd[2168]: Failed password for invalid user toolday from 43.156.11.162 port 33314 ssh2 Feb 9 14:34:19.266225 sshd[2165]: Received disconnect from 171.244.37.97 port 60630:11: Bye Bye [preauth] Feb 9 14:34:19.266225 sshd[2165]: Disconnected from invalid user willy 171.244.37.97 port 60630 [preauth] Feb 9 14:34:19.268729 systemd[1]: sshd@33-147.75.49.59:22-171.244.37.97:60630.service: Deactivated successfully. Feb 9 14:34:19.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-147.75.49.59:22-171.244.37.97:60630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:19.362680 kernel: audit: type=1131 audit(1707489259.267:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-147.75.49.59:22-171.244.37.97:60630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:19.382003 sshd[2168]: Received disconnect from 43.156.11.162 port 33314:11: Bye Bye [preauth] Feb 9 14:34:19.382003 sshd[2168]: Disconnected from invalid user toolday 43.156.11.162 port 33314 [preauth] Feb 9 14:34:19.382430 systemd[1]: sshd@34-147.75.49.59:22-43.156.11.162:33314.service: Deactivated successfully. Feb 9 14:34:19.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-147.75.49.59:22-43.156.11.162:33314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:19.473572 kernel: audit: type=1131 audit(1707489259.381:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-147.75.49.59:22-43.156.11.162:33314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:28.321213 systemd[1]: Started sshd@35-147.75.49.59:22-177.148.230.13:36652.service. Feb 9 14:34:28.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-147.75.49.59:22-177.148.230.13:36652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:28.414683 kernel: audit: type=1130 audit(1707489268.319:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-147.75.49.59:22-177.148.230.13:36652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:29.330315 sshd[2177]: Invalid user mamazdashti from 177.148.230.13 port 36652 Feb 9 14:34:29.331570 sshd[2177]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:29.331815 sshd[2177]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:34:29.331830 sshd[2177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:34:29.332013 sshd[2177]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:29.330000 audit[2177]: USER_AUTH pid=2177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mamazdashti" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:34:29.425680 kernel: audit: type=1100 audit(1707489269.330:258): pid=2177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mamazdashti" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:34:30.851245 sshd[2177]: Failed password for invalid user mamazdashti from 177.148.230.13 port 36652 ssh2 Feb 9 14:34:31.842784 sshd[2177]: Received disconnect from 177.148.230.13 port 36652:11: Bye Bye [preauth] Feb 9 14:34:31.842784 sshd[2177]: Disconnected from invalid user mamazdashti 177.148.230.13 port 36652 [preauth] Feb 9 14:34:31.845419 systemd[1]: sshd@35-147.75.49.59:22-177.148.230.13:36652.service: Deactivated successfully. Feb 9 14:34:31.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-147.75.49.59:22-177.148.230.13:36652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:31.938678 kernel: audit: type=1131 audit(1707489271.844:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-147.75.49.59:22-177.148.230.13:36652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:37.238489 systemd[1]: Started sshd@36-147.75.49.59:22-43.224.48.86:34471.service. Feb 9 14:34:37.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-147.75.49.59:22-43.224.48.86:34471 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:37.331680 kernel: audit: type=1130 audit(1707489277.237:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-147.75.49.59:22-43.224.48.86:34471 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:37.453735 systemd[1]: Started sshd@37-147.75.49.59:22-177.148.230.13:43136.service. Feb 9 14:34:37.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-147.75.49.59:22-177.148.230.13:43136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:37.546469 kernel: audit: type=1130 audit(1707489277.452:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-147.75.49.59:22-177.148.230.13:43136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:38.339238 sshd[2183]: Invalid user myu from 43.224.48.86 port 34471 Feb 9 14:34:38.345207 sshd[2183]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:38.346439 sshd[2183]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:34:38.346555 sshd[2183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:34:38.347517 sshd[2183]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:38.346000 audit[2183]: USER_AUTH pid=2183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="myu" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:34:38.440684 kernel: audit: type=1100 audit(1707489278.346:262): pid=2183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="myu" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:34:38.489362 sshd[2186]: Invalid user mamazdashti from 177.148.230.13 port 43136 Feb 9 14:34:38.490608 sshd[2186]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:38.490863 sshd[2186]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:34:38.490882 sshd[2186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:34:38.491080 sshd[2186]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:38.489000 audit[2186]: USER_AUTH pid=2186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mamazdashti" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:34:38.584684 kernel: audit: type=1100 audit(1707489278.489:263): pid=2186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mamazdashti" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:34:40.102851 sshd[2183]: Failed password for invalid user myu from 43.224.48.86 port 34471 ssh2 Feb 9 14:34:40.245855 sshd[2186]: Failed password for invalid user mamazdashti from 177.148.230.13 port 43136 ssh2 Feb 9 14:34:40.775430 sshd[2183]: Received disconnect from 43.224.48.86 port 34471:11: Bye Bye [preauth] Feb 9 14:34:40.775430 sshd[2183]: Disconnected from invalid user myu 43.224.48.86 port 34471 [preauth] Feb 9 14:34:40.777994 systemd[1]: sshd@36-147.75.49.59:22-43.224.48.86:34471.service: Deactivated successfully. Feb 9 14:34:40.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-147.75.49.59:22-43.224.48.86:34471 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:40.871688 kernel: audit: type=1131 audit(1707489280.776:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-147.75.49.59:22-43.224.48.86:34471 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:41.009243 sshd[2186]: Received disconnect from 177.148.230.13 port 43136:11: Bye Bye [preauth] Feb 9 14:34:41.009243 sshd[2186]: Disconnected from invalid user mamazdashti 177.148.230.13 port 43136 [preauth] Feb 9 14:34:41.011837 systemd[1]: sshd@37-147.75.49.59:22-177.148.230.13:43136.service: Deactivated successfully. Feb 9 14:34:41.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-147.75.49.59:22-177.148.230.13:43136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:41.112663 kernel: audit: type=1131 audit(1707489281.010:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-147.75.49.59:22-177.148.230.13:43136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:50.272140 systemd[1]: Started sshd@38-147.75.49.59:22-101.43.88.44:57276.service. Feb 9 14:34:50.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-147.75.49.59:22-101.43.88.44:57276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:50.364675 kernel: audit: type=1130 audit(1707489290.271:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-147.75.49.59:22-101.43.88.44:57276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:51.181318 sshd[2191]: Invalid user nayely from 101.43.88.44 port 57276 Feb 9 14:34:51.187278 sshd[2191]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:51.188352 sshd[2191]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:34:51.188440 sshd[2191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:34:51.189350 sshd[2191]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:51.188000 audit[2191]: USER_AUTH pid=2191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nayely" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:34:51.282677 kernel: audit: type=1100 audit(1707489291.188:267): pid=2191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nayely" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:34:51.437194 systemd[1]: Started sshd@39-147.75.49.59:22-43.134.180.37:38806.service. Feb 9 14:34:51.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-147.75.49.59:22-43.134.180.37:38806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:51.530685 kernel: audit: type=1130 audit(1707489291.436:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-147.75.49.59:22-43.134.180.37:38806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:52.517124 sshd[2194]: Invalid user rajabi from 43.134.180.37 port 38806 Feb 9 14:34:52.518360 sshd[2194]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:52.518658 sshd[2194]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:34:52.518694 sshd[2194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:34:52.518924 sshd[2194]: pam_faillock(sshd:auth): User unknown Feb 9 14:34:52.518000 audit[2194]: USER_AUTH pid=2194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rajabi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:34:52.611678 kernel: audit: type=1100 audit(1707489292.518:269): pid=2194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rajabi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:34:52.729126 sshd[2191]: Failed password for invalid user nayely from 101.43.88.44 port 57276 ssh2 Feb 9 14:34:53.660539 sshd[2191]: Received disconnect from 101.43.88.44 port 57276:11: Bye Bye [preauth] Feb 9 14:34:53.660539 sshd[2191]: Disconnected from invalid user nayely 101.43.88.44 port 57276 [preauth] Feb 9 14:34:53.663053 systemd[1]: sshd@38-147.75.49.59:22-101.43.88.44:57276.service: Deactivated successfully. Feb 9 14:34:53.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-147.75.49.59:22-101.43.88.44:57276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:53.756678 kernel: audit: type=1131 audit(1707489293.663:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-147.75.49.59:22-101.43.88.44:57276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:54.530152 sshd[2194]: Failed password for invalid user rajabi from 43.134.180.37 port 38806 ssh2 Feb 9 14:34:56.508832 sshd[2194]: Received disconnect from 43.134.180.37 port 38806:11: Bye Bye [preauth] Feb 9 14:34:56.508832 sshd[2194]: Disconnected from invalid user rajabi 43.134.180.37 port 38806 [preauth] Feb 9 14:34:56.511337 systemd[1]: sshd@39-147.75.49.59:22-43.134.180.37:38806.service: Deactivated successfully. Feb 9 14:34:56.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-147.75.49.59:22-43.134.180.37:38806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:34:56.604678 kernel: audit: type=1131 audit(1707489296.511:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-147.75.49.59:22-43.134.180.37:38806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:18.014054 systemd[1]: Started sshd@40-147.75.49.59:22-43.156.11.162:41178.service. Feb 9 14:35:18.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-147.75.49.59:22-43.156.11.162:41178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:18.106481 kernel: audit: type=1130 audit(1707489318.013:272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-147.75.49.59:22-43.156.11.162:41178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:19.113861 sshd[2202]: Invalid user ulisses from 43.156.11.162 port 41178 Feb 9 14:35:19.120011 sshd[2202]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:19.120964 sshd[2202]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:35:19.121051 sshd[2202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:35:19.122141 sshd[2202]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:19.121000 audit[2202]: USER_AUTH pid=2202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ulisses" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:35:19.215685 kernel: audit: type=1100 audit(1707489319.121:273): pid=2202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ulisses" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:35:21.064838 systemd[1]: Started sshd@41-147.75.49.59:22-171.244.37.97:46974.service. Feb 9 14:35:21.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-147.75.49.59:22-171.244.37.97:46974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:21.157470 kernel: audit: type=1130 audit(1707489321.064:274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-147.75.49.59:22-171.244.37.97:46974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:21.173363 sshd[2202]: Failed password for invalid user ulisses from 43.156.11.162 port 41178 ssh2 Feb 9 14:35:21.613325 systemd[1]: Started sshd@42-147.75.49.59:22-219.89.206.236:55036.service. Feb 9 14:35:21.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-147.75.49.59:22-219.89.206.236:55036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:21.705668 kernel: audit: type=1130 audit(1707489321.612:275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-147.75.49.59:22-219.89.206.236:55036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:22.312431 sshd[2205]: Invalid user ggsteel from 171.244.37.97 port 46974 Feb 9 14:35:22.318543 sshd[2205]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:22.319677 sshd[2205]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:35:22.319767 sshd[2205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:35:22.320719 sshd[2205]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:22.320000 audit[2205]: USER_AUTH pid=2205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ggsteel" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:35:22.413511 kernel: audit: type=1100 audit(1707489322.320:276): pid=2205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ggsteel" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:35:22.713808 sshd[2202]: Received disconnect from 43.156.11.162 port 41178:11: Bye Bye [preauth] Feb 9 14:35:22.713808 sshd[2202]: Disconnected from invalid user ulisses 43.156.11.162 port 41178 [preauth] Feb 9 14:35:22.716277 systemd[1]: sshd@40-147.75.49.59:22-43.156.11.162:41178.service: Deactivated successfully. Feb 9 14:35:22.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-147.75.49.59:22-43.156.11.162:41178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:22.815558 kernel: audit: type=1131 audit(1707489322.716:277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-147.75.49.59:22-43.156.11.162:41178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:24.116392 sshd[2205]: Failed password for invalid user ggsteel from 171.244.37.97 port 46974 ssh2 Feb 9 14:35:24.156897 sshd[2208]: Invalid user user from 219.89.206.236 port 55036 Feb 9 14:35:24.162865 sshd[2208]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:24.163846 sshd[2208]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:35:24.163934 sshd[2208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.89.206.236 Feb 9 14:35:24.164805 sshd[2208]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:24.164000 audit[2208]: USER_AUTH pid=2208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=219.89.206.236 addr=219.89.206.236 terminal=ssh res=failed' Feb 9 14:35:24.258533 kernel: audit: type=1100 audit(1707489324.164:278): pid=2208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=219.89.206.236 addr=219.89.206.236 terminal=ssh res=failed' Feb 9 14:35:24.640327 sshd[2205]: Received disconnect from 171.244.37.97 port 46974:11: Bye Bye [preauth] Feb 9 14:35:24.640327 sshd[2205]: Disconnected from invalid user ggsteel 171.244.37.97 port 46974 [preauth] Feb 9 14:35:24.642866 systemd[1]: sshd@41-147.75.49.59:22-171.244.37.97:46974.service: Deactivated successfully. Feb 9 14:35:24.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-147.75.49.59:22-171.244.37.97:46974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:24.735606 kernel: audit: type=1131 audit(1707489324.642:279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-147.75.49.59:22-171.244.37.97:46974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:25.900507 sshd[2208]: Failed password for invalid user user from 219.89.206.236 port 55036 ssh2 Feb 9 14:35:28.070493 sshd[2214]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:28.074747 sshd[2208]: Postponed keyboard-interactive for invalid user user from 219.89.206.236 port 55036 ssh2 [preauth] Feb 9 14:35:28.739830 sshd[2214]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:35:28.740887 sshd[2214]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:28.740000 audit[2214]: USER_AUTH pid=2214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=219.89.206.236 addr=219.89.206.236 terminal=ssh res=failed' Feb 9 14:35:28.833470 kernel: audit: type=1100 audit(1707489328.740:280): pid=2214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=219.89.206.236 addr=219.89.206.236 terminal=ssh res=failed' Feb 9 14:35:31.028286 sshd[2208]: PAM: Permission denied for illegal user user from 219.89.206.236 Feb 9 14:35:31.029190 sshd[2208]: Failed keyboard-interactive/pam for invalid user user from 219.89.206.236 port 55036 ssh2 Feb 9 14:35:31.677259 sshd[2208]: Connection closed by invalid user user 219.89.206.236 port 55036 [preauth] Feb 9 14:35:31.679940 systemd[1]: sshd@42-147.75.49.59:22-219.89.206.236:55036.service: Deactivated successfully. Feb 9 14:35:31.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-147.75.49.59:22-219.89.206.236:55036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:31.772469 kernel: audit: type=1131 audit(1707489331.679:281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-147.75.49.59:22-219.89.206.236:55036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:40.166325 systemd[1]: Started sshd@43-147.75.49.59:22-43.224.48.86:43952.service. Feb 9 14:35:40.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-147.75.49.59:22-43.224.48.86:43952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:40.259685 kernel: audit: type=1130 audit(1707489340.165:282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-147.75.49.59:22-43.224.48.86:43952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:41.278687 sshd[2217]: Invalid user mataei from 43.224.48.86 port 43952 Feb 9 14:35:41.284846 sshd[2217]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:41.285838 sshd[2217]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:35:41.285924 sshd[2217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:35:41.286794 sshd[2217]: pam_faillock(sshd:auth): User unknown Feb 9 14:35:41.286000 audit[2217]: USER_AUTH pid=2217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mataei" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:35:41.380682 kernel: audit: type=1100 audit(1707489341.286:283): pid=2217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mataei" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:35:43.358376 sshd[2217]: Failed password for invalid user mataei from 43.224.48.86 port 43952 ssh2 Feb 9 14:35:43.613660 sshd[2217]: Received disconnect from 43.224.48.86 port 43952:11: Bye Bye [preauth] Feb 9 14:35:43.613660 sshd[2217]: Disconnected from invalid user mataei 43.224.48.86 port 43952 [preauth] Feb 9 14:35:43.616165 systemd[1]: sshd@43-147.75.49.59:22-43.224.48.86:43952.service: Deactivated successfully. Feb 9 14:35:43.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-147.75.49.59:22-43.224.48.86:43952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:35:43.709684 kernel: audit: type=1131 audit(1707489343.616:284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-147.75.49.59:22-43.224.48.86:43952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:00.503986 systemd[1]: Started sshd@44-147.75.49.59:22-186.7.75.15:59241.service. Feb 9 14:36:00.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-147.75.49.59:22-186.7.75.15:59241 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:00.595468 kernel: audit: type=1130 audit(1707489360.502:285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-147.75.49.59:22-186.7.75.15:59241 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:07.394566 systemd[1]: Started sshd@45-147.75.49.59:22-101.43.88.44:47726.service. Feb 9 14:36:07.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-147.75.49.59:22-101.43.88.44:47726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:07.487684 kernel: audit: type=1130 audit(1707489367.393:286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-147.75.49.59:22-101.43.88.44:47726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:08.286451 sshd[2225]: Invalid user huangguoli from 101.43.88.44 port 47726 Feb 9 14:36:08.292540 sshd[2225]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:08.293528 sshd[2225]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:36:08.293616 sshd[2225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:36:08.294627 sshd[2225]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:08.293000 audit[2225]: USER_AUTH pid=2225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="huangguoli" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:36:08.387680 kernel: audit: type=1100 audit(1707489368.293:287): pid=2225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="huangguoli" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:36:09.738964 sshd[2225]: Failed password for invalid user huangguoli from 101.43.88.44 port 47726 ssh2 Feb 9 14:36:10.414416 sshd[2225]: Received disconnect from 101.43.88.44 port 47726:11: Bye Bye [preauth] Feb 9 14:36:10.414416 sshd[2225]: Disconnected from invalid user huangguoli 101.43.88.44 port 47726 [preauth] Feb 9 14:36:10.416892 systemd[1]: sshd@45-147.75.49.59:22-101.43.88.44:47726.service: Deactivated successfully. Feb 9 14:36:10.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-147.75.49.59:22-101.43.88.44:47726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:10.509534 kernel: audit: type=1131 audit(1707489370.415:288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-147.75.49.59:22-101.43.88.44:47726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:19.492579 systemd[1]: Started sshd@46-147.75.49.59:22-43.134.180.37:32924.service. Feb 9 14:36:19.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-147.75.49.59:22-43.134.180.37:32924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:19.586663 kernel: audit: type=1130 audit(1707489379.491:289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-147.75.49.59:22-43.134.180.37:32924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:20.540914 sshd[2230]: Invalid user mataei from 43.134.180.37 port 32924 Feb 9 14:36:20.547065 sshd[2230]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:20.548068 sshd[2230]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:36:20.548157 sshd[2230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:36:20.549198 sshd[2230]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:20.547000 audit[2230]: USER_AUTH pid=2230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mataei" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:36:20.642705 kernel: audit: type=1100 audit(1707489380.547:290): pid=2230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mataei" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:36:21.336525 systemd[1]: Started sshd@47-147.75.49.59:22-43.156.11.162:44838.service. Feb 9 14:36:21.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-147.75.49.59:22-43.156.11.162:44838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:21.428658 kernel: audit: type=1130 audit(1707489381.335:291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-147.75.49.59:22-43.156.11.162:44838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:22.309454 sshd[2230]: Failed password for invalid user mataei from 43.134.180.37 port 32924 ssh2 Feb 9 14:36:22.358661 sshd[2233]: Invalid user willy from 43.156.11.162 port 44838 Feb 9 14:36:22.364590 sshd[2233]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:22.365558 sshd[2233]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:36:22.365644 sshd[2233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:36:22.366730 sshd[2233]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:22.365000 audit[2233]: USER_AUTH pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="willy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:36:22.459673 kernel: audit: type=1100 audit(1707489382.365:292): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="willy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:36:22.862644 sshd[2230]: Received disconnect from 43.134.180.37 port 32924:11: Bye Bye [preauth] Feb 9 14:36:22.862644 sshd[2230]: Disconnected from invalid user mataei 43.134.180.37 port 32924 [preauth] Feb 9 14:36:22.865105 systemd[1]: sshd@46-147.75.49.59:22-43.134.180.37:32924.service: Deactivated successfully. Feb 9 14:36:22.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-147.75.49.59:22-43.134.180.37:32924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:22.958681 kernel: audit: type=1131 audit(1707489382.864:293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-147.75.49.59:22-43.134.180.37:32924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:24.734233 sshd[2233]: Failed password for invalid user willy from 43.156.11.162 port 44838 ssh2 Feb 9 14:36:25.575454 sshd[2233]: Received disconnect from 43.156.11.162 port 44838:11: Bye Bye [preauth] Feb 9 14:36:25.575454 sshd[2233]: Disconnected from invalid user willy 43.156.11.162 port 44838 [preauth] Feb 9 14:36:25.577964 systemd[1]: sshd@47-147.75.49.59:22-43.156.11.162:44838.service: Deactivated successfully. Feb 9 14:36:25.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-147.75.49.59:22-43.156.11.162:44838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:25.670514 kernel: audit: type=1131 audit(1707489385.576:294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-147.75.49.59:22-43.156.11.162:44838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:27.263535 systemd[1]: Started sshd@48-147.75.49.59:22-171.244.37.97:45950.service. Feb 9 14:36:27.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-147.75.49.59:22-171.244.37.97:45950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:27.356601 kernel: audit: type=1130 audit(1707489387.262:295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-147.75.49.59:22-171.244.37.97:45950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:28.882818 sshd[2241]: Invalid user ha from 171.244.37.97 port 45950 Feb 9 14:36:28.888389 sshd[2241]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:28.888706 sshd[2241]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:36:28.888746 sshd[2241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:36:28.888948 sshd[2241]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:28.887000 audit[2241]: USER_AUTH pid=2241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ha" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:36:28.981517 kernel: audit: type=1100 audit(1707489388.887:296): pid=2241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ha" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:36:30.744803 sshd[2241]: Failed password for invalid user ha from 171.244.37.97 port 45950 ssh2 Feb 9 14:36:31.109820 sshd[2241]: Received disconnect from 171.244.37.97 port 45950:11: Bye Bye [preauth] Feb 9 14:36:31.109820 sshd[2241]: Disconnected from invalid user ha 171.244.37.97 port 45950 [preauth] Feb 9 14:36:31.112181 systemd[1]: sshd@48-147.75.49.59:22-171.244.37.97:45950.service: Deactivated successfully. Feb 9 14:36:31.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-147.75.49.59:22-171.244.37.97:45950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:31.204677 kernel: audit: type=1131 audit(1707489391.111:297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-147.75.49.59:22-171.244.37.97:45950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:41.705889 sshd[2223]: Connection closed by 186.7.75.15 port 59241 [preauth] Feb 9 14:36:41.707898 systemd[1]: sshd@44-147.75.49.59:22-186.7.75.15:59241.service: Deactivated successfully. Feb 9 14:36:41.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-147.75.49.59:22-186.7.75.15:59241 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:41.799529 kernel: audit: type=1131 audit(1707489401.706:298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-147.75.49.59:22-186.7.75.15:59241 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:44.054395 systemd[1]: Started sshd@49-147.75.49.59:22-43.224.48.86:53436.service. Feb 9 14:36:44.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-147.75.49.59:22-43.224.48.86:53436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:44.146520 kernel: audit: type=1130 audit(1707489404.053:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-147.75.49.59:22-43.224.48.86:53436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:45.158593 sshd[2248]: Invalid user kostyamop from 43.224.48.86 port 53436 Feb 9 14:36:45.164579 sshd[2248]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:45.165573 sshd[2248]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:36:45.165661 sshd[2248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:36:45.166581 sshd[2248]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:45.165000 audit[2248]: USER_AUTH pid=2248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="kostyamop" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:36:45.259529 kernel: audit: type=1100 audit(1707489405.165:300): pid=2248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="kostyamop" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:36:47.358175 sshd[2248]: Failed password for invalid user kostyamop from 43.224.48.86 port 53436 ssh2 Feb 9 14:36:49.445165 sshd[2248]: Received disconnect from 43.224.48.86 port 53436:11: Bye Bye [preauth] Feb 9 14:36:49.445165 sshd[2248]: Disconnected from invalid user kostyamop 43.224.48.86 port 53436 [preauth] Feb 9 14:36:49.447666 systemd[1]: sshd@49-147.75.49.59:22-43.224.48.86:53436.service: Deactivated successfully. Feb 9 14:36:49.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-147.75.49.59:22-43.224.48.86:53436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:49.540534 kernel: audit: type=1131 audit(1707489409.446:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-147.75.49.59:22-43.224.48.86:53436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:52.810552 systemd[1]: Started sshd@50-147.75.49.59:22-219.92.10.208:48168.service. Feb 9 14:36:52.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-147.75.49.59:22-219.92.10.208:48168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:52.903680 kernel: audit: type=1130 audit(1707489412.809:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-147.75.49.59:22-219.92.10.208:48168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:53.986624 sshd[2252]: Invalid user lushan from 219.92.10.208 port 48168 Feb 9 14:36:53.992670 sshd[2252]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:53.993733 sshd[2252]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:36:53.993822 sshd[2252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:36:53.994873 sshd[2252]: pam_faillock(sshd:auth): User unknown Feb 9 14:36:53.993000 audit[2252]: USER_AUTH pid=2252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="lushan" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:36:54.087514 kernel: audit: type=1100 audit(1707489413.993:303): pid=2252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="lushan" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:36:56.618372 sshd[2252]: Failed password for invalid user lushan from 219.92.10.208 port 48168 ssh2 Feb 9 14:36:59.454889 sshd[2252]: Received disconnect from 219.92.10.208 port 48168:11: Bye Bye [preauth] Feb 9 14:36:59.454889 sshd[2252]: Disconnected from invalid user lushan 219.92.10.208 port 48168 [preauth] Feb 9 14:36:59.457404 systemd[1]: sshd@50-147.75.49.59:22-219.92.10.208:48168.service: Deactivated successfully. Feb 9 14:36:59.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-147.75.49.59:22-219.92.10.208:48168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:36:59.550679 kernel: audit: type=1131 audit(1707489419.456:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-147.75.49.59:22-219.92.10.208:48168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:01.906316 systemd[1]: Started sshd@51-147.75.49.59:22-177.148.230.13:42678.service. Feb 9 14:37:01.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-147.75.49.59:22-177.148.230.13:42678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:01.998660 kernel: audit: type=1130 audit(1707489421.904:305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-147.75.49.59:22-177.148.230.13:42678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:04.904020 sshd[2256]: Invalid user nihal from 177.148.230.13 port 42678 Feb 9 14:37:04.909964 sshd[2256]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:04.910919 sshd[2256]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:37:04.911007 sshd[2256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:37:04.911918 sshd[2256]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:04.910000 audit[2256]: USER_AUTH pid=2256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nihal" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:37:05.004678 kernel: audit: type=1100 audit(1707489424.910:306): pid=2256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nihal" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:37:06.711832 sshd[2256]: Failed password for invalid user nihal from 177.148.230.13 port 42678 ssh2 Feb 9 14:37:07.177135 sshd[2256]: Received disconnect from 177.148.230.13 port 42678:11: Bye Bye [preauth] Feb 9 14:37:07.177135 sshd[2256]: Disconnected from invalid user nihal 177.148.230.13 port 42678 [preauth] Feb 9 14:37:07.179674 systemd[1]: sshd@51-147.75.49.59:22-177.148.230.13:42678.service: Deactivated successfully. Feb 9 14:37:07.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-147.75.49.59:22-177.148.230.13:42678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:07.273686 kernel: audit: type=1131 audit(1707489427.178:307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-147.75.49.59:22-177.148.230.13:42678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:24.646384 systemd[1]: Started sshd@52-147.75.49.59:22-43.156.11.162:40436.service. Feb 9 14:37:24.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-147.75.49.59:22-43.156.11.162:40436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:24.738521 kernel: audit: type=1130 audit(1707489444.644:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-147.75.49.59:22-43.156.11.162:40436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:25.669117 sshd[2260]: Invalid user caizhy from 43.156.11.162 port 40436 Feb 9 14:37:25.675343 sshd[2260]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:25.676354 sshd[2260]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:37:25.676440 sshd[2260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:37:25.677350 sshd[2260]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:25.676000 audit[2260]: USER_AUTH pid=2260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="caizhy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:37:25.770682 kernel: audit: type=1100 audit(1707489445.676:309): pid=2260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="caizhy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:37:28.025173 sshd[2260]: Failed password for invalid user caizhy from 43.156.11.162 port 40436 ssh2 Feb 9 14:37:29.027800 sshd[2260]: Received disconnect from 43.156.11.162 port 40436:11: Bye Bye [preauth] Feb 9 14:37:29.027800 sshd[2260]: Disconnected from invalid user caizhy 43.156.11.162 port 40436 [preauth] Feb 9 14:37:29.030299 systemd[1]: sshd@52-147.75.49.59:22-43.156.11.162:40436.service: Deactivated successfully. Feb 9 14:37:29.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-147.75.49.59:22-43.156.11.162:40436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:29.123679 kernel: audit: type=1131 audit(1707489449.029:310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-147.75.49.59:22-43.156.11.162:40436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:29.614333 systemd[1]: Started sshd@53-147.75.49.59:22-101.43.88.44:38138.service. Feb 9 14:37:29.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-147.75.49.59:22-101.43.88.44:38138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:29.706469 kernel: audit: type=1130 audit(1707489449.613:311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-147.75.49.59:22-101.43.88.44:38138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:30.527524 sshd[2264]: Invalid user test1 from 101.43.88.44 port 38138 Feb 9 14:37:30.533528 sshd[2264]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:30.534695 sshd[2264]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:37:30.534786 sshd[2264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:37:30.535732 sshd[2264]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:30.534000 audit[2264]: USER_AUTH pid=2264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="test1" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:37:30.628683 kernel: audit: type=1100 audit(1707489450.534:312): pid=2264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="test1" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:37:33.239370 sshd[2264]: Failed password for invalid user test1 from 101.43.88.44 port 38138 ssh2 Feb 9 14:37:33.533978 sshd[2264]: Received disconnect from 101.43.88.44 port 38138:11: Bye Bye [preauth] Feb 9 14:37:33.533978 sshd[2264]: Disconnected from invalid user test1 101.43.88.44 port 38138 [preauth] Feb 9 14:37:33.536368 systemd[1]: sshd@53-147.75.49.59:22-101.43.88.44:38138.service: Deactivated successfully. Feb 9 14:37:33.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-147.75.49.59:22-101.43.88.44:38138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:33.629680 kernel: audit: type=1131 audit(1707489453.535:313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-147.75.49.59:22-101.43.88.44:38138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:35.724384 systemd[1]: Started sshd@54-147.75.49.59:22-171.244.37.97:36944.service. Feb 9 14:37:35.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-147.75.49.59:22-171.244.37.97:36944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:35.816525 kernel: audit: type=1130 audit(1707489455.722:314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-147.75.49.59:22-171.244.37.97:36944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:37.328191 sshd[2268]: Invalid user i from 171.244.37.97 port 36944 Feb 9 14:37:37.334330 sshd[2268]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:37.335337 sshd[2268]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:37:37.335425 sshd[2268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:37:37.336315 sshd[2268]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:37.335000 audit[2268]: USER_AUTH pid=2268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="i" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:37:37.429661 kernel: audit: type=1100 audit(1707489457.335:315): pid=2268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="i" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:37:39.332706 sshd[2268]: Failed password for invalid user i from 171.244.37.97 port 36944 ssh2 Feb 9 14:37:41.196384 sshd[2268]: Received disconnect from 171.244.37.97 port 36944:11: Bye Bye [preauth] Feb 9 14:37:41.196384 sshd[2268]: Disconnected from invalid user i 171.244.37.97 port 36944 [preauth] Feb 9 14:37:41.198907 systemd[1]: sshd@54-147.75.49.59:22-171.244.37.97:36944.service: Deactivated successfully. Feb 9 14:37:41.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-147.75.49.59:22-171.244.37.97:36944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:41.292552 kernel: audit: type=1131 audit(1707489461.197:316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-147.75.49.59:22-171.244.37.97:36944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:51.165471 systemd[1]: Started sshd@55-147.75.49.59:22-43.134.180.37:55292.service. Feb 9 14:37:51.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-147.75.49.59:22-43.134.180.37:55292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:51.258684 kernel: audit: type=1130 audit(1707489471.164:317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-147.75.49.59:22-43.134.180.37:55292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:52.208512 sshd[2272]: Invalid user tabrizi from 43.134.180.37 port 55292 Feb 9 14:37:52.214492 sshd[2272]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:52.215459 sshd[2272]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:37:52.215568 sshd[2272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:37:52.216443 sshd[2272]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:52.215000 audit[2272]: USER_AUTH pid=2272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tabrizi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:37:52.310691 kernel: audit: type=1100 audit(1707489472.215:318): pid=2272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tabrizi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:37:53.946469 systemd[1]: Started sshd@56-147.75.49.59:22-43.224.48.86:34684.service. Feb 9 14:37:53.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-147.75.49.59:22-43.224.48.86:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:54.039682 kernel: audit: type=1130 audit(1707489473.945:319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-147.75.49.59:22-43.224.48.86:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:54.272940 sshd[2272]: Failed password for invalid user tabrizi from 43.134.180.37 port 55292 ssh2 Feb 9 14:37:55.043846 sshd[2275]: Invalid user tac from 43.224.48.86 port 34684 Feb 9 14:37:55.049965 sshd[2275]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:55.050937 sshd[2275]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:37:55.051024 sshd[2275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:37:55.051922 sshd[2275]: pam_faillock(sshd:auth): User unknown Feb 9 14:37:55.050000 audit[2275]: USER_AUTH pid=2275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tac" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:37:55.144550 kernel: audit: type=1100 audit(1707489475.050:320): pid=2275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tac" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:37:56.445593 sshd[2272]: Received disconnect from 43.134.180.37 port 55292:11: Bye Bye [preauth] Feb 9 14:37:56.445593 sshd[2272]: Disconnected from invalid user tabrizi 43.134.180.37 port 55292 [preauth] Feb 9 14:37:56.448103 systemd[1]: sshd@55-147.75.49.59:22-43.134.180.37:55292.service: Deactivated successfully. Feb 9 14:37:56.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-147.75.49.59:22-43.134.180.37:55292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:56.541682 kernel: audit: type=1131 audit(1707489476.447:321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-147.75.49.59:22-43.134.180.37:55292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:57.519917 sshd[2275]: Failed password for invalid user tac from 43.224.48.86 port 34684 ssh2 Feb 9 14:37:58.843230 sshd[2275]: Received disconnect from 43.224.48.86 port 34684:11: Bye Bye [preauth] Feb 9 14:37:58.843230 sshd[2275]: Disconnected from invalid user tac 43.224.48.86 port 34684 [preauth] Feb 9 14:37:58.845789 systemd[1]: sshd@56-147.75.49.59:22-43.224.48.86:34684.service: Deactivated successfully. Feb 9 14:37:58.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-147.75.49.59:22-43.224.48.86:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:37:58.938670 kernel: audit: type=1131 audit(1707489478.845:322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-147.75.49.59:22-43.224.48.86:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:10.928973 systemd[1]: Started sshd@57-147.75.49.59:22-177.148.230.13:44650.service. Feb 9 14:38:10.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-147.75.49.59:22-177.148.230.13:44650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:11.022548 kernel: audit: type=1130 audit(1707489490.928:323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-147.75.49.59:22-177.148.230.13:44650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:11.373166 sshd[2281]: Connection closed by 177.148.230.13 port 44650 [preauth] Feb 9 14:38:11.373676 systemd[1]: sshd@57-147.75.49.59:22-177.148.230.13:44650.service: Deactivated successfully. Feb 9 14:38:11.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-147.75.49.59:22-177.148.230.13:44650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:11.466469 kernel: audit: type=1131 audit(1707489491.373:324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-147.75.49.59:22-177.148.230.13:44650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:32.663419 systemd[1]: Started sshd@58-147.75.49.59:22-43.156.11.162:54802.service. Feb 9 14:38:32.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-147.75.49.59:22-43.156.11.162:54802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:32.756535 kernel: audit: type=1130 audit(1707489512.663:325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-147.75.49.59:22-43.156.11.162:54802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:33.690816 sshd[2285]: Invalid user stu from 43.156.11.162 port 54802 Feb 9 14:38:33.696735 sshd[2285]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:33.697824 sshd[2285]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:38:33.697911 sshd[2285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:38:33.698899 sshd[2285]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:33.698000 audit[2285]: USER_AUTH pid=2285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="stu" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:38:33.791511 kernel: audit: type=1100 audit(1707489513.698:326): pid=2285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="stu" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:38:35.383930 sshd[2285]: Failed password for invalid user stu from 43.156.11.162 port 54802 ssh2 Feb 9 14:38:37.101659 sshd[2285]: Received disconnect from 43.156.11.162 port 54802:11: Bye Bye [preauth] Feb 9 14:38:37.101659 sshd[2285]: Disconnected from invalid user stu 43.156.11.162 port 54802 [preauth] Feb 9 14:38:37.104180 systemd[1]: sshd@58-147.75.49.59:22-43.156.11.162:54802.service: Deactivated successfully. Feb 9 14:38:37.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-147.75.49.59:22-43.156.11.162:54802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:37.197673 kernel: audit: type=1131 audit(1707489517.104:327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-147.75.49.59:22-43.156.11.162:54802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:40.321945 systemd[1]: Started sshd@59-147.75.49.59:22-171.244.37.97:56072.service. Feb 9 14:38:40.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-147.75.49.59:22-171.244.37.97:56072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:40.414536 kernel: audit: type=1130 audit(1707489520.321:328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-147.75.49.59:22-171.244.37.97:56072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:40.443920 systemd[1]: Started sshd@60-147.75.49.59:22-219.92.10.208:43924.service. Feb 9 14:38:40.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-147.75.49.59:22-219.92.10.208:43924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:40.535682 kernel: audit: type=1130 audit(1707489520.443:329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-147.75.49.59:22-219.92.10.208:43924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:41.630796 sshd[2294]: Invalid user feeri from 219.92.10.208 port 43924 Feb 9 14:38:41.636869 sshd[2294]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:41.637850 sshd[2294]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:38:41.637937 sshd[2294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:38:41.638833 sshd[2294]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:41.638000 audit[2294]: USER_AUTH pid=2294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="feeri" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:38:41.731553 kernel: audit: type=1100 audit(1707489521.638:330): pid=2294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="feeri" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:38:42.099041 sshd[2291]: Invalid user caizhy from 171.244.37.97 port 56072 Feb 9 14:38:42.105266 sshd[2291]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:42.106221 sshd[2291]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:38:42.106304 sshd[2291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:38:42.107155 sshd[2291]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:42.106000 audit[2291]: USER_AUTH pid=2291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="caizhy" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:38:42.207660 kernel: audit: type=1100 audit(1707489522.106:331): pid=2291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="caizhy" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:38:44.086883 sshd[2294]: Failed password for invalid user feeri from 219.92.10.208 port 43924 ssh2 Feb 9 14:38:44.358853 sshd[2291]: Failed password for invalid user caizhy from 171.244.37.97 port 56072 ssh2 Feb 9 14:38:45.550412 sshd[2291]: Received disconnect from 171.244.37.97 port 56072:11: Bye Bye [preauth] Feb 9 14:38:45.550412 sshd[2291]: Disconnected from invalid user caizhy 171.244.37.97 port 56072 [preauth] Feb 9 14:38:45.553011 systemd[1]: sshd@59-147.75.49.59:22-171.244.37.97:56072.service: Deactivated successfully. Feb 9 14:38:45.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-147.75.49.59:22-171.244.37.97:56072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:45.646603 kernel: audit: type=1131 audit(1707489525.553:332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-147.75.49.59:22-171.244.37.97:56072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:46.058054 sshd[2294]: Received disconnect from 219.92.10.208 port 43924:11: Bye Bye [preauth] Feb 9 14:38:46.058054 sshd[2294]: Disconnected from invalid user feeri 219.92.10.208 port 43924 [preauth] Feb 9 14:38:46.060668 systemd[1]: sshd@60-147.75.49.59:22-219.92.10.208:43924.service: Deactivated successfully. Feb 9 14:38:46.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-147.75.49.59:22-219.92.10.208:43924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:46.153538 kernel: audit: type=1131 audit(1707489526.060:333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-147.75.49.59:22-219.92.10.208:43924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:48.017820 systemd[1]: Started sshd@61-147.75.49.59:22-101.43.88.44:56766.service. Feb 9 14:38:48.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-147.75.49.59:22-101.43.88.44:56766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:48.109469 kernel: audit: type=1130 audit(1707489528.017:334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-147.75.49.59:22-101.43.88.44:56766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:48.849721 sshd[2299]: Invalid user hamidkh from 101.43.88.44 port 56766 Feb 9 14:38:48.855798 sshd[2299]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:48.856841 sshd[2299]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:38:48.856930 sshd[2299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:38:48.857826 sshd[2299]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:48.857000 audit[2299]: USER_AUTH pid=2299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="hamidkh" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:38:48.951684 kernel: audit: type=1100 audit(1707489528.857:335): pid=2299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="hamidkh" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:38:50.934441 sshd[2299]: Failed password for invalid user hamidkh from 101.43.88.44 port 56766 ssh2 Feb 9 14:38:52.460161 sshd[2299]: Received disconnect from 101.43.88.44 port 56766:11: Bye Bye [preauth] Feb 9 14:38:52.460161 sshd[2299]: Disconnected from invalid user hamidkh 101.43.88.44 port 56766 [preauth] Feb 9 14:38:52.462714 systemd[1]: sshd@61-147.75.49.59:22-101.43.88.44:56766.service: Deactivated successfully. Feb 9 14:38:52.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-147.75.49.59:22-101.43.88.44:56766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:52.555521 kernel: audit: type=1131 audit(1707489532.461:336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-147.75.49.59:22-101.43.88.44:56766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:58.587210 systemd[1]: Started sshd@62-147.75.49.59:22-43.224.48.86:44169.service. Feb 9 14:38:58.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-147.75.49.59:22-43.224.48.86:44169 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:58.679511 kernel: audit: type=1130 audit(1707489538.585:337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-147.75.49.59:22-43.224.48.86:44169 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:38:59.673512 sshd[2303]: Invalid user mahesh from 43.224.48.86 port 44169 Feb 9 14:38:59.679623 sshd[2303]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:59.680567 sshd[2303]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:38:59.680654 sshd[2303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:38:59.681537 sshd[2303]: pam_faillock(sshd:auth): User unknown Feb 9 14:38:59.680000 audit[2303]: USER_AUTH pid=2303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mahesh" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:38:59.774679 kernel: audit: type=1100 audit(1707489539.680:338): pid=2303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mahesh" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:39:01.600501 sshd[2303]: Failed password for invalid user mahesh from 43.224.48.86 port 44169 ssh2 Feb 9 14:39:02.539725 sshd[2303]: Received disconnect from 43.224.48.86 port 44169:11: Bye Bye [preauth] Feb 9 14:39:02.539725 sshd[2303]: Disconnected from invalid user mahesh 43.224.48.86 port 44169 [preauth] Feb 9 14:39:02.542228 systemd[1]: sshd@62-147.75.49.59:22-43.224.48.86:44169.service: Deactivated successfully. Feb 9 14:39:02.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-147.75.49.59:22-43.224.48.86:44169 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:02.635656 kernel: audit: type=1131 audit(1707489542.541:339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-147.75.49.59:22-43.224.48.86:44169 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:21.531774 systemd[1]: Started sshd@63-147.75.49.59:22-43.134.180.37:49410.service. Feb 9 14:39:21.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-147.75.49.59:22-43.134.180.37:49410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:21.624529 kernel: audit: type=1130 audit(1707489561.530:340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-147.75.49.59:22-43.134.180.37:49410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:22.612527 sshd[2307]: Invalid user mengsj from 43.134.180.37 port 49410 Feb 9 14:39:22.618612 sshd[2307]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:22.619759 sshd[2307]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:39:22.619869 sshd[2307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:39:22.620982 sshd[2307]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:22.619000 audit[2307]: USER_AUTH pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mengsj" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:39:22.714678 kernel: audit: type=1100 audit(1707489562.619:341): pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mengsj" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:39:24.030209 sshd[2307]: Failed password for invalid user mengsj from 43.134.180.37 port 49410 ssh2 Feb 9 14:39:24.959647 sshd[2307]: Received disconnect from 43.134.180.37 port 49410:11: Bye Bye [preauth] Feb 9 14:39:24.959647 sshd[2307]: Disconnected from invalid user mengsj 43.134.180.37 port 49410 [preauth] Feb 9 14:39:24.962203 systemd[1]: sshd@63-147.75.49.59:22-43.134.180.37:49410.service: Deactivated successfully. Feb 9 14:39:24.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-147.75.49.59:22-43.134.180.37:49410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:25.055678 kernel: audit: type=1131 audit(1707489564.961:342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-147.75.49.59:22-43.134.180.37:49410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:33.225690 systemd[1]: Started sshd@64-147.75.49.59:22-43.156.11.162:48774.service. Feb 9 14:39:33.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-147.75.49.59:22-43.156.11.162:48774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:33.317674 kernel: audit: type=1130 audit(1707489573.224:343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-147.75.49.59:22-43.156.11.162:48774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:34.252949 sshd[2315]: Invalid user yangy from 43.156.11.162 port 48774 Feb 9 14:39:34.255214 sshd[2315]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:34.255457 sshd[2315]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:39:34.255478 sshd[2315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:39:34.255754 sshd[2315]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:34.254000 audit[2315]: USER_AUTH pid=2315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="yangy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:39:34.349684 kernel: audit: type=1100 audit(1707489574.254:344): pid=2315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="yangy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:39:35.980868 sshd[2315]: Failed password for invalid user yangy from 43.156.11.162 port 48774 ssh2 Feb 9 14:39:36.323936 sshd[2315]: Received disconnect from 43.156.11.162 port 48774:11: Bye Bye [preauth] Feb 9 14:39:36.323936 sshd[2315]: Disconnected from invalid user yangy 43.156.11.162 port 48774 [preauth] Feb 9 14:39:36.326354 systemd[1]: sshd@64-147.75.49.59:22-43.156.11.162:48774.service: Deactivated successfully. Feb 9 14:39:36.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-147.75.49.59:22-43.156.11.162:48774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:36.419684 kernel: audit: type=1131 audit(1707489576.325:345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-147.75.49.59:22-43.156.11.162:48774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:43.440303 systemd[1]: Started sshd@65-147.75.49.59:22-171.244.37.97:49408.service. Feb 9 14:39:43.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-147.75.49.59:22-171.244.37.97:49408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:43.532543 kernel: audit: type=1130 audit(1707489583.439:346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-147.75.49.59:22-171.244.37.97:49408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:45.035882 sshd[2321]: Invalid user heinricy from 171.244.37.97 port 49408 Feb 9 14:39:45.041884 sshd[2321]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:45.043038 sshd[2321]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:39:45.043125 sshd[2321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:39:45.044026 sshd[2321]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:45.043000 audit[2321]: USER_AUTH pid=2321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="heinricy" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:39:45.138526 kernel: audit: type=1100 audit(1707489585.043:347): pid=2321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="heinricy" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:39:46.277333 sshd[2321]: Failed password for invalid user heinricy from 171.244.37.97 port 49408 ssh2 Feb 9 14:39:46.999092 sshd[2321]: Received disconnect from 171.244.37.97 port 49408:11: Bye Bye [preauth] Feb 9 14:39:46.999092 sshd[2321]: Disconnected from invalid user heinricy 171.244.37.97 port 49408 [preauth] Feb 9 14:39:47.001657 systemd[1]: sshd@65-147.75.49.59:22-171.244.37.97:49408.service: Deactivated successfully. Feb 9 14:39:47.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-147.75.49.59:22-171.244.37.97:49408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:47.094512 kernel: audit: type=1131 audit(1707489587.001:348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-147.75.49.59:22-171.244.37.97:49408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:52.757153 systemd[1]: Started sshd@66-147.75.49.59:22-219.92.10.208:50200.service. Feb 9 14:39:52.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-147.75.49.59:22-219.92.10.208:50200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:52.850691 kernel: audit: type=1130 audit(1707489592.756:349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-147.75.49.59:22-219.92.10.208:50200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:53.937522 sshd[2325]: Invalid user earth from 219.92.10.208 port 50200 Feb 9 14:39:53.943612 sshd[2325]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:53.944581 sshd[2325]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:39:53.944669 sshd[2325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:39:53.945567 sshd[2325]: pam_faillock(sshd:auth): User unknown Feb 9 14:39:53.945000 audit[2325]: USER_AUTH pid=2325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="earth" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:39:54.038679 kernel: audit: type=1100 audit(1707489593.945:350): pid=2325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="earth" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:39:55.946752 sshd[2325]: Failed password for invalid user earth from 219.92.10.208 port 50200 ssh2 Feb 9 14:39:56.296777 sshd[2325]: Received disconnect from 219.92.10.208 port 50200:11: Bye Bye [preauth] Feb 9 14:39:56.296777 sshd[2325]: Disconnected from invalid user earth 219.92.10.208 port 50200 [preauth] Feb 9 14:39:56.299220 systemd[1]: sshd@66-147.75.49.59:22-219.92.10.208:50200.service: Deactivated successfully. Feb 9 14:39:56.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-147.75.49.59:22-219.92.10.208:50200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:39:56.392534 kernel: audit: type=1131 audit(1707489596.299:351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-147.75.49.59:22-219.92.10.208:50200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:02.153341 systemd[1]: Started sshd@67-147.75.49.59:22-43.224.48.86:53650.service. Feb 9 14:40:02.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-147.75.49.59:22-43.224.48.86:53650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:02.245469 kernel: audit: type=1130 audit(1707489602.152:352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-147.75.49.59:22-43.224.48.86:53650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:03.254039 sshd[2329]: Invalid user tabrizi from 43.224.48.86 port 53650 Feb 9 14:40:03.260268 sshd[2329]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:03.261278 sshd[2329]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:40:03.261366 sshd[2329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:40:03.262284 sshd[2329]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:03.262000 audit[2329]: USER_AUTH pid=2329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tabrizi" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:40:03.355555 kernel: audit: type=1100 audit(1707489603.262:353): pid=2329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tabrizi" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:40:04.967583 sshd[2329]: Failed password for invalid user tabrizi from 43.224.48.86 port 53650 ssh2 Feb 9 14:40:05.476127 sshd[2329]: Received disconnect from 43.224.48.86 port 53650:11: Bye Bye [preauth] Feb 9 14:40:05.476127 sshd[2329]: Disconnected from invalid user tabrizi 43.224.48.86 port 53650 [preauth] Feb 9 14:40:05.478679 systemd[1]: sshd@67-147.75.49.59:22-43.224.48.86:53650.service: Deactivated successfully. Feb 9 14:40:05.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-147.75.49.59:22-43.224.48.86:53650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:05.571676 kernel: audit: type=1131 audit(1707489605.478:354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-147.75.49.59:22-43.224.48.86:53650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:05.901398 systemd[1]: Started sshd@68-147.75.49.59:22-101.43.88.44:47154.service. Feb 9 14:40:05.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-147.75.49.59:22-101.43.88.44:47154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:05.993646 kernel: audit: type=1130 audit(1707489605.900:355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-147.75.49.59:22-101.43.88.44:47154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:06.811948 sshd[2333]: Invalid user angelica from 101.43.88.44 port 47154 Feb 9 14:40:06.818032 sshd[2333]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:06.819165 sshd[2333]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:40:06.819255 sshd[2333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:40:06.820162 sshd[2333]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:06.819000 audit[2333]: USER_AUTH pid=2333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="angelica" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:40:06.913599 kernel: audit: type=1100 audit(1707489606.819:356): pid=2333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="angelica" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:40:08.936935 sshd[2333]: Failed password for invalid user angelica from 101.43.88.44 port 47154 ssh2 Feb 9 14:40:09.762377 sshd[2333]: Received disconnect from 101.43.88.44 port 47154:11: Bye Bye [preauth] Feb 9 14:40:09.762377 sshd[2333]: Disconnected from invalid user angelica 101.43.88.44 port 47154 [preauth] Feb 9 14:40:09.765041 systemd[1]: sshd@68-147.75.49.59:22-101.43.88.44:47154.service: Deactivated successfully. Feb 9 14:40:09.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-147.75.49.59:22-101.43.88.44:47154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:09.858667 kernel: audit: type=1131 audit(1707489609.765:357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-147.75.49.59:22-101.43.88.44:47154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:31.298409 systemd[1]: Started sshd@69-147.75.49.59:22-141.98.11.11:46690.service. Feb 9 14:40:31.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-147.75.49.59:22-141.98.11.11:46690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:31.391540 kernel: audit: type=1130 audit(1707489631.298:358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-147.75.49.59:22-141.98.11.11:46690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:32.279159 sshd[2337]: Invalid user admin from 141.98.11.11 port 46690 Feb 9 14:40:32.502969 sshd[2337]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:32.503908 sshd[2337]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:40:32.503990 sshd[2337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.11.11 Feb 9 14:40:32.504984 sshd[2337]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:32.504000 audit[2337]: USER_AUTH pid=2337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=141.98.11.11 addr=141.98.11.11 terminal=ssh res=failed' Feb 9 14:40:32.597680 kernel: audit: type=1100 audit(1707489632.504:359): pid=2337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=141.98.11.11 addr=141.98.11.11 terminal=ssh res=failed' Feb 9 14:40:33.887880 systemd[1]: Started sshd@70-147.75.49.59:22-43.156.11.162:33264.service. Feb 9 14:40:33.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-147.75.49.59:22-43.156.11.162:33264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:33.980478 kernel: audit: type=1130 audit(1707489633.887:360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-147.75.49.59:22-43.156.11.162:33264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:34.190585 sshd[2337]: Failed password for invalid user admin from 141.98.11.11 port 46690 ssh2 Feb 9 14:40:34.945115 sshd[2340]: Invalid user syia from 43.156.11.162 port 33264 Feb 9 14:40:34.951169 sshd[2340]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:34.952148 sshd[2340]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:40:34.952235 sshd[2340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:40:34.953251 sshd[2340]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:34.952000 audit[2340]: USER_AUTH pid=2340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="syia" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:40:35.046683 kernel: audit: type=1100 audit(1707489634.952:361): pid=2340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="syia" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:40:35.867505 sshd[2337]: Connection closed by invalid user admin 141.98.11.11 port 46690 [preauth] Feb 9 14:40:35.869947 systemd[1]: sshd@69-147.75.49.59:22-141.98.11.11:46690.service: Deactivated successfully. Feb 9 14:40:35.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-147.75.49.59:22-141.98.11.11:46690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:35.962663 kernel: audit: type=1131 audit(1707489635.869:362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-147.75.49.59:22-141.98.11.11:46690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:36.582905 sshd[2340]: Failed password for invalid user syia from 43.156.11.162 port 33264 ssh2 Feb 9 14:40:36.865097 sshd[2340]: Received disconnect from 43.156.11.162 port 33264:11: Bye Bye [preauth] Feb 9 14:40:36.865097 sshd[2340]: Disconnected from invalid user syia 43.156.11.162 port 33264 [preauth] Feb 9 14:40:36.867687 systemd[1]: sshd@70-147.75.49.59:22-43.156.11.162:33264.service: Deactivated successfully. Feb 9 14:40:36.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-147.75.49.59:22-43.156.11.162:33264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:36.961679 kernel: audit: type=1131 audit(1707489636.867:363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-147.75.49.59:22-43.156.11.162:33264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:45.555488 systemd[1]: Started sshd@71-147.75.49.59:22-171.244.37.97:60668.service. Feb 9 14:40:45.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-147.75.49.59:22-171.244.37.97:60668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:45.647507 kernel: audit: type=1130 audit(1707489645.554:364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-147.75.49.59:22-171.244.37.97:60668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:46.981602 sshd[2345]: Invalid user sepehr from 171.244.37.97 port 60668 Feb 9 14:40:46.987771 sshd[2345]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:46.988895 sshd[2345]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:40:46.988984 sshd[2345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:40:46.989888 sshd[2345]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:46.988000 audit[2345]: USER_AUTH pid=2345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sepehr" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:40:47.083668 kernel: audit: type=1100 audit(1707489646.988:365): pid=2345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sepehr" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:40:48.599447 sshd[2345]: Failed password for invalid user sepehr from 171.244.37.97 port 60668 ssh2 Feb 9 14:40:49.182345 sshd[2345]: Received disconnect from 171.244.37.97 port 60668:11: Bye Bye [preauth] Feb 9 14:40:49.182345 sshd[2345]: Disconnected from invalid user sepehr 171.244.37.97 port 60668 [preauth] Feb 9 14:40:49.184908 systemd[1]: sshd@71-147.75.49.59:22-171.244.37.97:60668.service: Deactivated successfully. Feb 9 14:40:49.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-147.75.49.59:22-171.244.37.97:60668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:49.278545 kernel: audit: type=1131 audit(1707489649.184:366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-147.75.49.59:22-171.244.37.97:60668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:49.281571 systemd[1]: Started sshd@72-147.75.49.59:22-43.134.180.37:43526.service. Feb 9 14:40:49.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-147.75.49.59:22-43.134.180.37:43526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:49.372513 kernel: audit: type=1130 audit(1707489649.280:367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-147.75.49.59:22-43.134.180.37:43526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:50.393365 sshd[2349]: Invalid user leticia from 43.134.180.37 port 43526 Feb 9 14:40:50.399538 sshd[2349]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:50.400694 sshd[2349]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:40:50.400788 sshd[2349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:40:50.401765 sshd[2349]: pam_faillock(sshd:auth): User unknown Feb 9 14:40:50.400000 audit[2349]: USER_AUTH pid=2349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="leticia" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:40:50.494468 kernel: audit: type=1100 audit(1707489650.400:368): pid=2349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="leticia" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:40:52.227394 sshd[2349]: Failed password for invalid user leticia from 43.134.180.37 port 43526 ssh2 Feb 9 14:40:52.435826 sshd[2349]: Received disconnect from 43.134.180.37 port 43526:11: Bye Bye [preauth] Feb 9 14:40:52.435826 sshd[2349]: Disconnected from invalid user leticia 43.134.180.37 port 43526 [preauth] Feb 9 14:40:52.438453 systemd[1]: sshd@72-147.75.49.59:22-43.134.180.37:43526.service: Deactivated successfully. Feb 9 14:40:52.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-147.75.49.59:22-43.134.180.37:43526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:52.531528 kernel: audit: type=1131 audit(1707489652.437:369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-147.75.49.59:22-43.134.180.37:43526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:58.954580 systemd[1]: Started sshd@73-147.75.49.59:22-219.92.10.208:53184.service. Feb 9 14:40:58.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-147.75.49.59:22-219.92.10.208:53184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:40:59.047527 kernel: audit: type=1130 audit(1707489658.953:370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-147.75.49.59:22-219.92.10.208:53184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:00.134307 sshd[2353]: Invalid user cajariauto from 219.92.10.208 port 53184 Feb 9 14:41:00.140354 sshd[2353]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:00.141183 sshd[2353]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:41:00.141221 sshd[2353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:41:00.141409 sshd[2353]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:00.139000 audit[2353]: USER_AUTH pid=2353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="cajariauto" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:41:00.233676 kernel: audit: type=1100 audit(1707489660.139:371): pid=2353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="cajariauto" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:41:02.337845 sshd[2353]: Failed password for invalid user cajariauto from 219.92.10.208 port 53184 ssh2 Feb 9 14:41:04.450368 sshd[2353]: Received disconnect from 219.92.10.208 port 53184:11: Bye Bye [preauth] Feb 9 14:41:04.450368 sshd[2353]: Disconnected from invalid user cajariauto 219.92.10.208 port 53184 [preauth] Feb 9 14:41:04.452932 systemd[1]: sshd@73-147.75.49.59:22-219.92.10.208:53184.service: Deactivated successfully. Feb 9 14:41:04.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-147.75.49.59:22-219.92.10.208:53184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:04.546690 kernel: audit: type=1131 audit(1707489664.451:372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-147.75.49.59:22-219.92.10.208:53184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:13.222654 systemd[1]: Started sshd@74-147.75.49.59:22-43.224.48.86:34902.service. Feb 9 14:41:13.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-147.75.49.59:22-43.224.48.86:34902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:13.315680 kernel: audit: type=1130 audit(1707489673.221:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-147.75.49.59:22-43.224.48.86:34902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:14.317909 sshd[2357]: Invalid user jval from 43.224.48.86 port 34902 Feb 9 14:41:14.324007 sshd[2357]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:14.325085 sshd[2357]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:41:14.325173 sshd[2357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:41:14.326191 sshd[2357]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:14.324000 audit[2357]: USER_AUTH pid=2357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jval" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:41:14.418506 kernel: audit: type=1100 audit(1707489674.324:374): pid=2357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jval" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:41:16.446706 sshd[2357]: Failed password for invalid user jval from 43.224.48.86 port 34902 ssh2 Feb 9 14:41:18.024606 sshd[2357]: Received disconnect from 43.224.48.86 port 34902:11: Bye Bye [preauth] Feb 9 14:41:18.024606 sshd[2357]: Disconnected from invalid user jval 43.224.48.86 port 34902 [preauth] Feb 9 14:41:18.027421 systemd[1]: sshd@74-147.75.49.59:22-43.224.48.86:34902.service: Deactivated successfully. Feb 9 14:41:18.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-147.75.49.59:22-43.224.48.86:34902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:18.119468 kernel: audit: type=1131 audit(1707489678.026:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-147.75.49.59:22-43.224.48.86:34902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:24.668081 systemd[1]: Started sshd@75-147.75.49.59:22-177.148.230.13:41554.service. Feb 9 14:41:24.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-147.75.49.59:22-177.148.230.13:41554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:24.761686 kernel: audit: type=1130 audit(1707489684.666:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-147.75.49.59:22-177.148.230.13:41554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:25.707659 sshd[2362]: Invalid user alirezap from 177.148.230.13 port 41554 Feb 9 14:41:25.713854 sshd[2362]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:25.714932 sshd[2362]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:41:25.715021 sshd[2362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:41:25.715898 sshd[2362]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:25.714000 audit[2362]: USER_AUTH pid=2362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="alirezap" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:41:25.808678 kernel: audit: type=1100 audit(1707489685.714:377): pid=2362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="alirezap" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:41:27.680045 sshd[2362]: Failed password for invalid user alirezap from 177.148.230.13 port 41554 ssh2 Feb 9 14:41:27.876327 sshd[2362]: Received disconnect from 177.148.230.13 port 41554:11: Bye Bye [preauth] Feb 9 14:41:27.876327 sshd[2362]: Disconnected from invalid user alirezap 177.148.230.13 port 41554 [preauth] Feb 9 14:41:27.878829 systemd[1]: sshd@75-147.75.49.59:22-177.148.230.13:41554.service: Deactivated successfully. Feb 9 14:41:27.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-147.75.49.59:22-177.148.230.13:41554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:27.972679 kernel: audit: type=1131 audit(1707489687.877:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-147.75.49.59:22-177.148.230.13:41554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:30.745833 systemd[1]: Started sshd@76-147.75.49.59:22-101.43.88.44:37552.service. Feb 9 14:41:30.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-147.75.49.59:22-101.43.88.44:37552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:30.838488 kernel: audit: type=1130 audit(1707489690.744:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-147.75.49.59:22-101.43.88.44:37552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:31.504873 sshd[2366]: Invalid user cs2dm from 101.43.88.44 port 37552 Feb 9 14:41:31.510930 sshd[2366]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:31.511907 sshd[2366]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:41:31.511994 sshd[2366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:41:31.512883 sshd[2366]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:31.511000 audit[2366]: USER_AUTH pid=2366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="cs2dm" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:41:31.605679 kernel: audit: type=1100 audit(1707489691.511:380): pid=2366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="cs2dm" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:41:33.302926 sshd[2366]: Failed password for invalid user cs2dm from 101.43.88.44 port 37552 ssh2 Feb 9 14:41:33.318782 systemd[1]: Started sshd@77-147.75.49.59:22-43.156.11.162:39020.service. Feb 9 14:41:33.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-147.75.49.59:22-43.156.11.162:39020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:33.411488 kernel: audit: type=1130 audit(1707489693.317:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-147.75.49.59:22-43.156.11.162:39020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:33.785023 sshd[2366]: Received disconnect from 101.43.88.44 port 37552:11: Bye Bye [preauth] Feb 9 14:41:33.785023 sshd[2366]: Disconnected from invalid user cs2dm 101.43.88.44 port 37552 [preauth] Feb 9 14:41:33.785742 systemd[1]: sshd@76-147.75.49.59:22-101.43.88.44:37552.service: Deactivated successfully. Feb 9 14:41:33.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-147.75.49.59:22-101.43.88.44:37552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:33.878524 kernel: audit: type=1131 audit(1707489693.784:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-147.75.49.59:22-101.43.88.44:37552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:34.344951 sshd[2369]: Invalid user korando from 43.156.11.162 port 39020 Feb 9 14:41:34.350899 sshd[2369]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:34.351972 sshd[2369]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:41:34.352064 sshd[2369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:41:34.353036 sshd[2369]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:34.351000 audit[2369]: USER_AUTH pid=2369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="korando" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:41:34.446678 kernel: audit: type=1100 audit(1707489694.351:383): pid=2369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="korando" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:41:36.554671 sshd[2369]: Failed password for invalid user korando from 43.156.11.162 port 39020 ssh2 Feb 9 14:41:38.879659 sshd[2369]: Received disconnect from 43.156.11.162 port 39020:11: Bye Bye [preauth] Feb 9 14:41:38.879659 sshd[2369]: Disconnected from invalid user korando 43.156.11.162 port 39020 [preauth] Feb 9 14:41:38.882137 systemd[1]: sshd@77-147.75.49.59:22-43.156.11.162:39020.service: Deactivated successfully. Feb 9 14:41:38.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-147.75.49.59:22-43.156.11.162:39020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:38.975684 kernel: audit: type=1131 audit(1707489698.881:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-147.75.49.59:22-43.156.11.162:39020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:55.886473 systemd[1]: Started sshd@78-147.75.49.59:22-171.244.37.97:34592.service. Feb 9 14:41:55.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-147.75.49.59:22-171.244.37.97:34592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:55.979526 kernel: audit: type=1130 audit(1707489715.885:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-147.75.49.59:22-171.244.37.97:34592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:41:57.195780 sshd[2375]: Invalid user korando from 171.244.37.97 port 34592 Feb 9 14:41:57.202042 sshd[2375]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:57.203047 sshd[2375]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:41:57.203137 sshd[2375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:41:57.204146 sshd[2375]: pam_faillock(sshd:auth): User unknown Feb 9 14:41:57.202000 audit[2375]: USER_AUTH pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="korando" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:41:57.297686 kernel: audit: type=1100 audit(1707489717.202:386): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="korando" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:41:59.561657 sshd[2375]: Failed password for invalid user korando from 171.244.37.97 port 34592 ssh2 Feb 9 14:42:01.761187 sshd[2375]: Received disconnect from 171.244.37.97 port 34592:11: Bye Bye [preauth] Feb 9 14:42:01.761187 sshd[2375]: Disconnected from invalid user korando 171.244.37.97 port 34592 [preauth] Feb 9 14:42:01.763703 systemd[1]: sshd@78-147.75.49.59:22-171.244.37.97:34592.service: Deactivated successfully. Feb 9 14:42:01.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-147.75.49.59:22-171.244.37.97:34592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:01.857679 kernel: audit: type=1131 audit(1707489721.763:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-147.75.49.59:22-171.244.37.97:34592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:07.290387 systemd[1]: Started sshd@79-147.75.49.59:22-219.92.10.208:48940.service. Feb 9 14:42:07.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-147.75.49.59:22-219.92.10.208:48940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:07.383711 kernel: audit: type=1130 audit(1707489727.290:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-147.75.49.59:22-219.92.10.208:48940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:08.462193 sshd[2380]: Invalid user wei from 219.92.10.208 port 48940 Feb 9 14:42:08.468357 sshd[2380]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:08.469313 sshd[2380]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:42:08.469400 sshd[2380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:42:08.470412 sshd[2380]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:08.470000 audit[2380]: USER_AUTH pid=2380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wei" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:42:08.563594 kernel: audit: type=1100 audit(1707489728.470:389): pid=2380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wei" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:42:10.671763 sshd[2380]: Failed password for invalid user wei from 219.92.10.208 port 48940 ssh2 Feb 9 14:42:10.811394 systemd[1]: Started sshd@80-147.75.49.59:22-37.113.26.6:60882.service. Feb 9 14:42:10.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-147.75.49.59:22-37.113.26.6:60882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:10.903480 kernel: audit: type=1130 audit(1707489730.810:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-147.75.49.59:22-37.113.26.6:60882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:10.990645 sshd[2380]: Received disconnect from 219.92.10.208 port 48940:11: Bye Bye [preauth] Feb 9 14:42:10.990645 sshd[2380]: Disconnected from invalid user wei 219.92.10.208 port 48940 [preauth] Feb 9 14:42:10.991741 systemd[1]: sshd@79-147.75.49.59:22-219.92.10.208:48940.service: Deactivated successfully. Feb 9 14:42:10.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-147.75.49.59:22-219.92.10.208:48940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:11.085537 kernel: audit: type=1131 audit(1707489730.991:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-147.75.49.59:22-219.92.10.208:48940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:11.922327 sshd[2383]: Invalid user pk from 37.113.26.6 port 60882 Feb 9 14:42:11.928338 sshd[2383]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:11.929418 sshd[2383]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:42:11.929536 sshd[2383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:42:11.930581 sshd[2383]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:11.930000 audit[2383]: USER_AUTH pid=2383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="pk" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:42:12.022672 kernel: audit: type=1100 audit(1707489731.930:392): pid=2383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="pk" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:42:13.209194 sshd[2383]: Failed password for invalid user pk from 37.113.26.6 port 60882 ssh2 Feb 9 14:42:14.679532 sshd[2383]: Received disconnect from 37.113.26.6 port 60882:11: Bye Bye [preauth] Feb 9 14:42:14.679532 sshd[2383]: Disconnected from invalid user pk 37.113.26.6 port 60882 [preauth] Feb 9 14:42:14.682101 systemd[1]: sshd@80-147.75.49.59:22-37.113.26.6:60882.service: Deactivated successfully. Feb 9 14:42:14.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-147.75.49.59:22-37.113.26.6:60882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:14.775553 kernel: audit: type=1131 audit(1707489734.682:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-147.75.49.59:22-37.113.26.6:60882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:18.454632 systemd[1]: Started sshd@81-147.75.49.59:22-43.134.180.37:37644.service. Feb 9 14:42:18.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-147.75.49.59:22-43.134.180.37:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:18.547660 kernel: audit: type=1130 audit(1707489738.454:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-147.75.49.59:22-43.134.180.37:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:20.081385 sshd[2389]: Invalid user myu from 43.134.180.37 port 37644 Feb 9 14:42:20.087498 sshd[2389]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:20.088675 sshd[2389]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:42:20.088759 sshd[2389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:42:20.089725 sshd[2389]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:20.089000 audit[2389]: USER_AUTH pid=2389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="myu" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:42:20.183686 kernel: audit: type=1100 audit(1707489740.089:395): pid=2389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="myu" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:42:22.271512 sshd[2389]: Failed password for invalid user myu from 43.134.180.37 port 37644 ssh2 Feb 9 14:42:22.513076 sshd[2389]: Received disconnect from 43.134.180.37 port 37644:11: Bye Bye [preauth] Feb 9 14:42:22.513076 sshd[2389]: Disconnected from invalid user myu 43.134.180.37 port 37644 [preauth] Feb 9 14:42:22.515626 systemd[1]: sshd@81-147.75.49.59:22-43.134.180.37:37644.service: Deactivated successfully. Feb 9 14:42:22.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-147.75.49.59:22-43.134.180.37:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:22.608675 kernel: audit: type=1131 audit(1707489742.515:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-147.75.49.59:22-43.134.180.37:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:25.635193 systemd[1]: Started sshd@82-147.75.49.59:22-43.224.48.86:44387.service. Feb 9 14:42:25.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-147.75.49.59:22-43.224.48.86:44387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:25.728682 kernel: audit: type=1130 audit(1707489745.634:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-147.75.49.59:22-43.224.48.86:44387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:26.735830 sshd[2393]: Invalid user esasgar from 43.224.48.86 port 44387 Feb 9 14:42:26.741923 sshd[2393]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:26.742908 sshd[2393]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:42:26.742997 sshd[2393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:42:26.743858 sshd[2393]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:26.743000 audit[2393]: USER_AUTH pid=2393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="esasgar" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:42:26.837683 kernel: audit: type=1100 audit(1707489746.743:398): pid=2393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="esasgar" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:42:28.749902 sshd[2393]: Failed password for invalid user esasgar from 43.224.48.86 port 44387 ssh2 Feb 9 14:42:29.908334 sshd[2393]: Received disconnect from 43.224.48.86 port 44387:11: Bye Bye [preauth] Feb 9 14:42:29.908334 sshd[2393]: Disconnected from invalid user esasgar 43.224.48.86 port 44387 [preauth] Feb 9 14:42:29.910873 systemd[1]: sshd@82-147.75.49.59:22-43.224.48.86:44387.service: Deactivated successfully. Feb 9 14:42:29.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-147.75.49.59:22-43.224.48.86:44387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:30.004657 kernel: audit: type=1131 audit(1707489749.910:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-147.75.49.59:22-43.224.48.86:44387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:37.115811 systemd[1]: Started sshd@83-147.75.49.59:22-43.156.11.162:50624.service. Feb 9 14:42:37.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-147.75.49.59:22-43.156.11.162:50624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:37.208473 kernel: audit: type=1130 audit(1707489757.115:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-147.75.49.59:22-43.156.11.162:50624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:38.140821 sshd[2398]: Invalid user sarasevi from 43.156.11.162 port 50624 Feb 9 14:42:38.146851 sshd[2398]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:38.147833 sshd[2398]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:42:38.147919 sshd[2398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:42:38.148964 sshd[2398]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:38.148000 audit[2398]: USER_AUTH pid=2398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sarasevi" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:42:38.242683 kernel: audit: type=1100 audit(1707489758.148:401): pid=2398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sarasevi" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:42:40.470627 sshd[2398]: Failed password for invalid user sarasevi from 43.156.11.162 port 50624 ssh2 Feb 9 14:42:41.006877 sshd[2398]: Received disconnect from 43.156.11.162 port 50624:11: Bye Bye [preauth] Feb 9 14:42:41.006877 sshd[2398]: Disconnected from invalid user sarasevi 43.156.11.162 port 50624 [preauth] Feb 9 14:42:41.009389 systemd[1]: sshd@83-147.75.49.59:22-43.156.11.162:50624.service: Deactivated successfully. Feb 9 14:42:41.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-147.75.49.59:22-43.156.11.162:50624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:41.102521 kernel: audit: type=1131 audit(1707489761.009:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-147.75.49.59:22-43.156.11.162:50624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:55.815307 systemd[1]: Started sshd@84-147.75.49.59:22-101.43.88.44:56180.service. Feb 9 14:42:55.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-147.75.49.59:22-101.43.88.44:56180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:55.908691 kernel: audit: type=1130 audit(1707489775.814:403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-147.75.49.59:22-101.43.88.44:56180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:56.670866 sshd[2402]: Invalid user zat from 101.43.88.44 port 56180 Feb 9 14:42:56.676946 sshd[2402]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:56.678096 sshd[2402]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:42:56.678186 sshd[2402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:42:56.679187 sshd[2402]: pam_faillock(sshd:auth): User unknown Feb 9 14:42:56.678000 audit[2402]: USER_AUTH pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="zat" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:42:56.772686 kernel: audit: type=1100 audit(1707489776.678:404): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="zat" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:42:58.468844 sshd[2402]: Failed password for invalid user zat from 101.43.88.44 port 56180 ssh2 Feb 9 14:42:58.660907 sshd[2402]: Received disconnect from 101.43.88.44 port 56180:11: Bye Bye [preauth] Feb 9 14:42:58.660907 sshd[2402]: Disconnected from invalid user zat 101.43.88.44 port 56180 [preauth] Feb 9 14:42:58.663428 systemd[1]: sshd@84-147.75.49.59:22-101.43.88.44:56180.service: Deactivated successfully. Feb 9 14:42:58.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-147.75.49.59:22-101.43.88.44:56180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:42:58.756530 kernel: audit: type=1131 audit(1707489778.663:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-147.75.49.59:22-101.43.88.44:56180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:07.328205 systemd[1]: Started sshd@85-147.75.49.59:22-171.244.37.97:40034.service. Feb 9 14:43:07.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-147.75.49.59:22-171.244.37.97:40034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:07.421706 kernel: audit: type=1130 audit(1707489787.327:406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-147.75.49.59:22-171.244.37.97:40034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:08.730045 sshd[2407]: Invalid user sarasevi from 171.244.37.97 port 40034 Feb 9 14:43:08.736107 sshd[2407]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:08.737161 sshd[2407]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:43:08.737248 sshd[2407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:43:08.738126 sshd[2407]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:08.737000 audit[2407]: USER_AUTH pid=2407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sarasevi" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:43:08.831669 kernel: audit: type=1100 audit(1707489788.737:407): pid=2407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sarasevi" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:43:10.844259 sshd[2407]: Failed password for invalid user sarasevi from 171.244.37.97 port 40034 ssh2 Feb 9 14:43:11.658395 sshd[2407]: Received disconnect from 171.244.37.97 port 40034:11: Bye Bye [preauth] Feb 9 14:43:11.658395 sshd[2407]: Disconnected from invalid user sarasevi 171.244.37.97 port 40034 [preauth] Feb 9 14:43:11.660935 systemd[1]: sshd@85-147.75.49.59:22-171.244.37.97:40034.service: Deactivated successfully. Feb 9 14:43:11.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-147.75.49.59:22-171.244.37.97:40034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:11.754676 kernel: audit: type=1131 audit(1707489791.660:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-147.75.49.59:22-171.244.37.97:40034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:40.391750 systemd[1]: Started sshd@86-147.75.49.59:22-43.224.48.86:53872.service. Feb 9 14:43:40.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-147.75.49.59:22-43.224.48.86:53872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:40.485688 kernel: audit: type=1130 audit(1707489820.390:409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-147.75.49.59:22-43.224.48.86:53872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:41.529782 sshd[2413]: Invalid user shafane from 43.224.48.86 port 53872 Feb 9 14:43:41.535825 sshd[2413]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:41.536817 sshd[2413]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:43:41.536904 sshd[2413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:43:41.537795 sshd[2413]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:41.536000 audit[2413]: USER_AUTH pid=2413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shafane" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:43:41.631662 kernel: audit: type=1100 audit(1707489821.536:410): pid=2413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shafane" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:43:42.029722 systemd[1]: Started sshd@87-147.75.49.59:22-177.148.230.13:57180.service. Feb 9 14:43:42.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-147.75.49.59:22-177.148.230.13:57180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:42.123664 kernel: audit: type=1130 audit(1707489822.028:411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-147.75.49.59:22-177.148.230.13:57180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:42.853950 systemd[1]: Started sshd@88-147.75.49.59:22-43.156.11.162:39012.service. Feb 9 14:43:42.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-147.75.49.59:22-43.156.11.162:39012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:42.947666 kernel: audit: type=1130 audit(1707489822.852:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-147.75.49.59:22-43.156.11.162:39012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:43.059389 sshd[2416]: Invalid user jingqi from 177.148.230.13 port 57180 Feb 9 14:43:43.065513 sshd[2416]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:43.066507 sshd[2416]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:43:43.066598 sshd[2416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:43:43.067501 sshd[2416]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:43.066000 audit[2416]: USER_AUTH pid=2416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jingqi" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:43:43.166539 kernel: audit: type=1100 audit(1707489823.066:413): pid=2416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jingqi" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:43:43.508239 sshd[2413]: Failed password for invalid user shafane from 43.224.48.86 port 53872 ssh2 Feb 9 14:43:43.865667 sshd[2419]: Invalid user gameclass from 43.156.11.162 port 39012 Feb 9 14:43:43.871645 sshd[2419]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:43.872595 sshd[2419]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:43:43.872681 sshd[2419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:43:43.873576 sshd[2419]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:43.872000 audit[2419]: USER_AUTH pid=2419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="gameclass" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:43:43.971535 kernel: audit: type=1100 audit(1707489823.872:414): pid=2419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="gameclass" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:43:44.780303 sshd[2413]: Received disconnect from 43.224.48.86 port 53872:11: Bye Bye [preauth] Feb 9 14:43:44.780303 sshd[2413]: Disconnected from invalid user shafane 43.224.48.86 port 53872 [preauth] Feb 9 14:43:44.782875 systemd[1]: sshd@86-147.75.49.59:22-43.224.48.86:53872.service: Deactivated successfully. Feb 9 14:43:44.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-147.75.49.59:22-43.224.48.86:53872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:44.876497 kernel: audit: type=1131 audit(1707489824.781:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-147.75.49.59:22-43.224.48.86:53872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:44.977859 sshd[2416]: Failed password for invalid user jingqi from 177.148.230.13 port 57180 ssh2 Feb 9 14:43:45.783920 sshd[2419]: Failed password for invalid user gameclass from 43.156.11.162 port 39012 ssh2 Feb 9 14:43:46.511527 sshd[2416]: Received disconnect from 177.148.230.13 port 57180:11: Bye Bye [preauth] Feb 9 14:43:46.511527 sshd[2416]: Disconnected from invalid user jingqi 177.148.230.13 port 57180 [preauth] Feb 9 14:43:46.514018 systemd[1]: sshd@87-147.75.49.59:22-177.148.230.13:57180.service: Deactivated successfully. Feb 9 14:43:46.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-147.75.49.59:22-177.148.230.13:57180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:46.608546 kernel: audit: type=1131 audit(1707489826.513:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-147.75.49.59:22-177.148.230.13:57180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:47.889080 sshd[2419]: Received disconnect from 43.156.11.162 port 39012:11: Bye Bye [preauth] Feb 9 14:43:47.889080 sshd[2419]: Disconnected from invalid user gameclass 43.156.11.162 port 39012 [preauth] Feb 9 14:43:47.891576 systemd[1]: sshd@88-147.75.49.59:22-43.156.11.162:39012.service: Deactivated successfully. Feb 9 14:43:47.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-147.75.49.59:22-43.156.11.162:39012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:47.985683 kernel: audit: type=1131 audit(1707489827.890:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-147.75.49.59:22-43.156.11.162:39012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:49.250444 systemd[1]: Started sshd@89-147.75.49.59:22-43.134.180.37:60010.service. Feb 9 14:43:49.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-147.75.49.59:22-43.134.180.37:60010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:49.343665 kernel: audit: type=1130 audit(1707489829.249:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-147.75.49.59:22-43.134.180.37:60010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:50.325427 sshd[2426]: Invalid user lizubei from 43.134.180.37 port 60010 Feb 9 14:43:50.331337 sshd[2426]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:50.332281 sshd[2426]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:43:50.332369 sshd[2426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:43:50.333247 sshd[2426]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:50.331000 audit[2426]: USER_AUTH pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="lizubei" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:43:50.427665 kernel: audit: type=1100 audit(1707489830.331:419): pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="lizubei" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:43:51.555084 systemd[1]: Started sshd@90-147.75.49.59:22-219.92.10.208:47498.service. Feb 9 14:43:51.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-147.75.49.59:22-219.92.10.208:47498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:51.648684 kernel: audit: type=1130 audit(1707489831.553:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-147.75.49.59:22-219.92.10.208:47498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:52.203855 sshd[2426]: Failed password for invalid user lizubei from 43.134.180.37 port 60010 ssh2 Feb 9 14:43:52.734953 sshd[2429]: Invalid user gx from 219.92.10.208 port 47498 Feb 9 14:43:52.740965 sshd[2429]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:52.741904 sshd[2429]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:43:52.741993 sshd[2429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:43:52.742872 sshd[2429]: pam_faillock(sshd:auth): User unknown Feb 9 14:43:52.741000 audit[2429]: USER_AUTH pid=2429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="gx" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:43:52.836685 kernel: audit: type=1100 audit(1707489832.741:421): pid=2429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="gx" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:43:53.600935 sshd[2426]: Received disconnect from 43.134.180.37 port 60010:11: Bye Bye [preauth] Feb 9 14:43:53.600935 sshd[2426]: Disconnected from invalid user lizubei 43.134.180.37 port 60010 [preauth] Feb 9 14:43:53.603359 systemd[1]: sshd@89-147.75.49.59:22-43.134.180.37:60010.service: Deactivated successfully. Feb 9 14:43:53.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-147.75.49.59:22-43.134.180.37:60010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:53.696677 kernel: audit: type=1131 audit(1707489833.602:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-147.75.49.59:22-43.134.180.37:60010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:54.889310 sshd[2429]: Failed password for invalid user gx from 219.92.10.208 port 47498 ssh2 Feb 9 14:43:55.614816 sshd[2429]: Received disconnect from 219.92.10.208 port 47498:11: Bye Bye [preauth] Feb 9 14:43:55.614816 sshd[2429]: Disconnected from invalid user gx 219.92.10.208 port 47498 [preauth] Feb 9 14:43:55.617326 systemd[1]: sshd@90-147.75.49.59:22-219.92.10.208:47498.service: Deactivated successfully. Feb 9 14:43:55.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-147.75.49.59:22-219.92.10.208:47498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:43:55.710534 kernel: audit: type=1131 audit(1707489835.616:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-147.75.49.59:22-219.92.10.208:47498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:14.073029 systemd[1]: Started sshd@91-147.75.49.59:22-103.14.226.92:47928.service. Feb 9 14:44:14.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-147.75.49.59:22-103.14.226.92:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:14.073706 systemd[1]: Starting systemd-tmpfiles-clean.service... Feb 9 14:44:14.166523 kernel: audit: type=1130 audit(1707489854.071:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-147.75.49.59:22-103.14.226.92:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:14.170702 systemd-tmpfiles[2435]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 9 14:44:14.170909 systemd-tmpfiles[2435]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 9 14:44:14.171627 systemd-tmpfiles[2435]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 9 14:44:14.181606 systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully. Feb 9 14:44:14.181693 systemd[1]: Finished systemd-tmpfiles-clean.service. Feb 9 14:44:14.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:14.182515 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dclean.service.mount: Deactivated successfully. Feb 9 14:44:14.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:14.359333 kernel: audit: type=1130 audit(1707489854.180:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:14.359359 kernel: audit: type=1131 audit(1707489854.180:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:15.201203 sshd[2434]: Invalid user jotazua from 103.14.226.92 port 47928 Feb 9 14:44:15.207409 sshd[2434]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:15.208412 sshd[2434]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:44:15.208534 sshd[2434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.226.92 Feb 9 14:44:15.209509 sshd[2434]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:15.208000 audit[2434]: USER_AUTH pid=2434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jotazua" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:44:15.303685 kernel: audit: type=1100 audit(1707489855.208:427): pid=2434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jotazua" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:44:17.179834 sshd[2434]: Failed password for invalid user jotazua from 103.14.226.92 port 47928 ssh2 Feb 9 14:44:17.764106 sshd[2434]: Received disconnect from 103.14.226.92 port 47928:11: Bye Bye [preauth] Feb 9 14:44:17.764106 sshd[2434]: Disconnected from invalid user jotazua 103.14.226.92 port 47928 [preauth] Feb 9 14:44:17.766604 systemd[1]: sshd@91-147.75.49.59:22-103.14.226.92:47928.service: Deactivated successfully. Feb 9 14:44:17.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-147.75.49.59:22-103.14.226.92:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:17.859513 kernel: audit: type=1131 audit(1707489857.765:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-147.75.49.59:22-103.14.226.92:47928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:18.529742 systemd[1]: Started sshd@92-147.75.49.59:22-171.244.37.97:60982.service. Feb 9 14:44:18.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-147.75.49.59:22-171.244.37.97:60982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:18.623681 kernel: audit: type=1130 audit(1707489858.528:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-147.75.49.59:22-171.244.37.97:60982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:19.368914 systemd[1]: Started sshd@93-147.75.49.59:22-101.43.88.44:46580.service. Feb 9 14:44:19.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-147.75.49.59:22-101.43.88.44:46580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:19.461542 kernel: audit: type=1130 audit(1707489859.367:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-147.75.49.59:22-101.43.88.44:46580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:20.163203 sshd[2441]: Invalid user syia from 171.244.37.97 port 60982 Feb 9 14:44:20.169310 sshd[2441]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:20.170277 sshd[2441]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:44:20.170367 sshd[2441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:44:20.171260 sshd[2441]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:20.170000 audit[2441]: USER_AUTH pid=2441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="syia" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:44:20.240076 sshd[2444]: Invalid user sonami from 101.43.88.44 port 46580 Feb 9 14:44:20.241253 sshd[2444]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:20.241468 sshd[2444]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:44:20.241510 sshd[2444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:44:20.241800 sshd[2444]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:20.240000 audit[2444]: USER_AUTH pid=2444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sonami" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:44:20.354982 kernel: audit: type=1100 audit(1707489860.170:431): pid=2441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="syia" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:44:20.355013 kernel: audit: type=1100 audit(1707489860.240:432): pid=2444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sonami" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:44:22.493304 sshd[2441]: Failed password for invalid user syia from 171.244.37.97 port 60982 ssh2 Feb 9 14:44:22.563869 sshd[2444]: Failed password for invalid user sonami from 101.43.88.44 port 46580 ssh2 Feb 9 14:44:23.829644 sshd[2441]: Received disconnect from 171.244.37.97 port 60982:11: Bye Bye [preauth] Feb 9 14:44:23.829644 sshd[2441]: Disconnected from invalid user syia 171.244.37.97 port 60982 [preauth] Feb 9 14:44:23.832094 systemd[1]: sshd@92-147.75.49.59:22-171.244.37.97:60982.service: Deactivated successfully. Feb 9 14:44:23.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-147.75.49.59:22-171.244.37.97:60982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:23.925526 kernel: audit: type=1131 audit(1707489863.831:433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-147.75.49.59:22-171.244.37.97:60982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:24.907560 sshd[2444]: Received disconnect from 101.43.88.44 port 46580:11: Bye Bye [preauth] Feb 9 14:44:24.907560 sshd[2444]: Disconnected from invalid user sonami 101.43.88.44 port 46580 [preauth] Feb 9 14:44:24.910118 systemd[1]: sshd@93-147.75.49.59:22-101.43.88.44:46580.service: Deactivated successfully. Feb 9 14:44:24.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-147.75.49.59:22-101.43.88.44:46580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:25.003666 kernel: audit: type=1131 audit(1707489864.909:434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-147.75.49.59:22-101.43.88.44:46580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:31.167675 systemd[1]: Started sshd@94-147.75.49.59:22-218.92.0.28:25418.service. Feb 9 14:44:31.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-147.75.49.59:22-218.92.0.28:25418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:31.260687 kernel: audit: type=1130 audit(1707489871.166:435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-147.75.49.59:22-218.92.0.28:25418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:31.323275 sshd[2449]: Unable to negotiate with 218.92.0.28 port 25418: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Feb 9 14:44:31.323852 systemd[1]: sshd@94-147.75.49.59:22-218.92.0.28:25418.service: Deactivated successfully. Feb 9 14:44:31.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-147.75.49.59:22-218.92.0.28:25418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:31.415657 kernel: audit: type=1131 audit(1707489871.322:436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-147.75.49.59:22-218.92.0.28:25418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:40.609737 systemd[1]: Started sshd@95-147.75.49.59:22-177.148.230.13:47926.service. Feb 9 14:44:40.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-147.75.49.59:22-177.148.230.13:47926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:40.702530 kernel: audit: type=1130 audit(1707489880.608:437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-147.75.49.59:22-177.148.230.13:47926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:41.674363 sshd[2453]: Invalid user jingqi from 177.148.230.13 port 47926 Feb 9 14:44:41.680402 sshd[2453]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:41.681407 sshd[2453]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:44:41.681516 sshd[2453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:44:41.683663 sshd[2453]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:41.682000 audit[2453]: USER_AUTH pid=2453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jingqi" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:44:41.777533 kernel: audit: type=1100 audit(1707489881.682:438): pid=2453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="jingqi" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:44:44.557262 sshd[2453]: Failed password for invalid user jingqi from 177.148.230.13 port 47926 ssh2 Feb 9 14:44:45.126117 sshd[2453]: Received disconnect from 177.148.230.13 port 47926:11: Bye Bye [preauth] Feb 9 14:44:45.126117 sshd[2453]: Disconnected from invalid user jingqi 177.148.230.13 port 47926 [preauth] Feb 9 14:44:45.128867 systemd[1]: sshd@95-147.75.49.59:22-177.148.230.13:47926.service: Deactivated successfully. Feb 9 14:44:45.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-147.75.49.59:22-177.148.230.13:47926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:45.222701 kernel: audit: type=1131 audit(1707489885.127:439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-147.75.49.59:22-177.148.230.13:47926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:48.484591 systemd[1]: Started sshd@96-147.75.49.59:22-43.156.11.162:51462.service. Feb 9 14:44:48.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-147.75.49.59:22-43.156.11.162:51462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:48.577468 kernel: audit: type=1130 audit(1707489888.483:440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-147.75.49.59:22-43.156.11.162:51462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:49.513012 sshd[2461]: Invalid user yuqing from 43.156.11.162 port 51462 Feb 9 14:44:49.519104 sshd[2461]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:49.520207 sshd[2461]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:44:49.520296 sshd[2461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:44:49.521274 sshd[2461]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:49.520000 audit[2461]: USER_AUTH pid=2461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="yuqing" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:44:49.613469 kernel: audit: type=1100 audit(1707489889.520:441): pid=2461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="yuqing" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:44:50.019953 systemd[1]: Started sshd@97-147.75.49.59:22-43.224.48.86:35124.service. Feb 9 14:44:50.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-147.75.49.59:22-43.224.48.86:35124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:50.111503 kernel: audit: type=1130 audit(1707489890.018:442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-147.75.49.59:22-43.224.48.86:35124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:51.113323 sshd[2464]: Invalid user Mate from 43.224.48.86 port 35124 Feb 9 14:44:51.119234 sshd[2464]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:51.120092 sshd[2464]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:44:51.120142 sshd[2464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:44:51.120324 sshd[2464]: pam_faillock(sshd:auth): User unknown Feb 9 14:44:51.118000 audit[2464]: USER_AUTH pid=2464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="Mate" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:44:51.213690 kernel: audit: type=1100 audit(1707489891.118:443): pid=2464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="Mate" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:44:51.492265 sshd[2461]: Failed password for invalid user yuqing from 43.156.11.162 port 51462 ssh2 Feb 9 14:44:52.591073 sshd[2461]: Received disconnect from 43.156.11.162 port 51462:11: Bye Bye [preauth] Feb 9 14:44:52.591073 sshd[2461]: Disconnected from invalid user yuqing 43.156.11.162 port 51462 [preauth] Feb 9 14:44:52.593559 systemd[1]: sshd@96-147.75.49.59:22-43.156.11.162:51462.service: Deactivated successfully. Feb 9 14:44:52.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-147.75.49.59:22-43.156.11.162:51462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:52.686681 kernel: audit: type=1131 audit(1707489892.592:444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-147.75.49.59:22-43.156.11.162:51462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:52.698743 sshd[2464]: Failed password for invalid user Mate from 43.224.48.86 port 35124 ssh2 Feb 9 14:44:52.896382 sshd[2464]: Received disconnect from 43.224.48.86 port 35124:11: Bye Bye [preauth] Feb 9 14:44:52.896382 sshd[2464]: Disconnected from invalid user Mate 43.224.48.86 port 35124 [preauth] Feb 9 14:44:52.898914 systemd[1]: sshd@97-147.75.49.59:22-43.224.48.86:35124.service: Deactivated successfully. Feb 9 14:44:52.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-147.75.49.59:22-43.224.48.86:35124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:44:52.991671 kernel: audit: type=1131 audit(1707489892.897:445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-147.75.49.59:22-43.224.48.86:35124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:03.423270 systemd[1]: Started sshd@98-147.75.49.59:22-219.92.10.208:45484.service. Feb 9 14:45:03.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-147.75.49.59:22-219.92.10.208:45484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:03.515686 kernel: audit: type=1130 audit(1707489903.421:446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-147.75.49.59:22-219.92.10.208:45484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:04.611037 sshd[2469]: Invalid user samaneh from 219.92.10.208 port 45484 Feb 9 14:45:04.617178 sshd[2469]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:04.618160 sshd[2469]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:45:04.618248 sshd[2469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:45:04.619161 sshd[2469]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:04.617000 audit[2469]: USER_AUTH pid=2469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="samaneh" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:45:04.711548 kernel: audit: type=1100 audit(1707489904.617:447): pid=2469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="samaneh" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:45:06.650092 sshd[2469]: Failed password for invalid user samaneh from 219.92.10.208 port 45484 ssh2 Feb 9 14:45:08.579263 sshd[2469]: Received disconnect from 219.92.10.208 port 45484:11: Bye Bye [preauth] Feb 9 14:45:08.579263 sshd[2469]: Disconnected from invalid user samaneh 219.92.10.208 port 45484 [preauth] Feb 9 14:45:08.581845 systemd[1]: sshd@98-147.75.49.59:22-219.92.10.208:45484.service: Deactivated successfully. Feb 9 14:45:08.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-147.75.49.59:22-219.92.10.208:45484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:08.674676 kernel: audit: type=1131 audit(1707489908.580:448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-147.75.49.59:22-219.92.10.208:45484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:19.394455 systemd[1]: Started sshd@99-147.75.49.59:22-43.134.180.37:54132.service. Feb 9 14:45:19.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-147.75.49.59:22-43.134.180.37:54132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:19.487569 kernel: audit: type=1130 audit(1707489919.393:449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-147.75.49.59:22-43.134.180.37:54132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:20.462730 sshd[2473]: Invalid user wangt from 43.134.180.37 port 54132 Feb 9 14:45:20.468868 sshd[2473]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:20.469889 sshd[2473]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:45:20.469957 sshd[2473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:45:20.470146 sshd[2473]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:20.468000 audit[2473]: USER_AUTH pid=2473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wangt" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:45:20.563669 kernel: audit: type=1100 audit(1707489920.468:450): pid=2473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wangt" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:45:22.029403 sshd[2473]: Failed password for invalid user wangt from 43.134.180.37 port 54132 ssh2 Feb 9 14:45:22.341432 sshd[2473]: Received disconnect from 43.134.180.37 port 54132:11: Bye Bye [preauth] Feb 9 14:45:22.341432 sshd[2473]: Disconnected from invalid user wangt 43.134.180.37 port 54132 [preauth] Feb 9 14:45:22.343894 systemd[1]: sshd@99-147.75.49.59:22-43.134.180.37:54132.service: Deactivated successfully. Feb 9 14:45:22.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-147.75.49.59:22-43.134.180.37:54132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:22.436469 kernel: audit: type=1131 audit(1707489922.343:451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-147.75.49.59:22-43.134.180.37:54132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:32.524567 systemd[1]: Started sshd@100-147.75.49.59:22-171.244.37.97:53308.service. Feb 9 14:45:32.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-147.75.49.59:22-171.244.37.97:53308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:32.617688 kernel: audit: type=1130 audit(1707489932.524:452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-147.75.49.59:22-171.244.37.97:53308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:33.800665 sshd[2477]: Invalid user latvi from 171.244.37.97 port 53308 Feb 9 14:45:33.806678 sshd[2477]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:33.807639 sshd[2477]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:45:33.807727 sshd[2477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:45:33.808710 sshd[2477]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:33.808000 audit[2477]: USER_AUTH pid=2477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="latvi" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:45:33.902566 kernel: audit: type=1100 audit(1707489933.808:453): pid=2477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="latvi" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:45:35.819708 sshd[2477]: Failed password for invalid user latvi from 171.244.37.97 port 53308 ssh2 Feb 9 14:45:36.605549 sshd[2477]: Received disconnect from 171.244.37.97 port 53308:11: Bye Bye [preauth] Feb 9 14:45:36.605549 sshd[2477]: Disconnected from invalid user latvi 171.244.37.97 port 53308 [preauth] Feb 9 14:45:36.608106 systemd[1]: sshd@100-147.75.49.59:22-171.244.37.97:53308.service: Deactivated successfully. Feb 9 14:45:36.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-147.75.49.59:22-171.244.37.97:53308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:36.701688 kernel: audit: type=1131 audit(1707489936.608:454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-147.75.49.59:22-171.244.37.97:53308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:40.323706 systemd[1]: Started sshd@101-147.75.49.59:22-101.43.88.44:36970.service. Feb 9 14:45:40.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-147.75.49.59:22-101.43.88.44:36970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:40.415680 kernel: audit: type=1130 audit(1707489940.323:455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-147.75.49.59:22-101.43.88.44:36970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:41.090815 sshd[2481]: Invalid user akash from 101.43.88.44 port 36970 Feb 9 14:45:41.096896 sshd[2481]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:41.097877 sshd[2481]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:45:41.097966 sshd[2481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:45:41.098905 sshd[2481]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:41.098000 audit[2481]: USER_AUTH pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="akash" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:45:41.192692 kernel: audit: type=1100 audit(1707489941.098:456): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="akash" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:45:43.541545 sshd[2481]: Failed password for invalid user akash from 101.43.88.44 port 36970 ssh2 Feb 9 14:45:44.697255 sshd[2481]: Received disconnect from 101.43.88.44 port 36970:11: Bye Bye [preauth] Feb 9 14:45:44.697255 sshd[2481]: Disconnected from invalid user akash 101.43.88.44 port 36970 [preauth] Feb 9 14:45:44.699772 systemd[1]: sshd@101-147.75.49.59:22-101.43.88.44:36970.service: Deactivated successfully. Feb 9 14:45:44.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-147.75.49.59:22-101.43.88.44:36970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:44.792679 kernel: audit: type=1131 audit(1707489944.699:457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-147.75.49.59:22-101.43.88.44:36970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:46.348729 systemd[1]: Started sshd@102-147.75.49.59:22-37.113.26.6:35186.service. Feb 9 14:45:46.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-147.75.49.59:22-37.113.26.6:35186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:46.441688 kernel: audit: type=1130 audit(1707489946.348:458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-147.75.49.59:22-37.113.26.6:35186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:47.414279 sshd[2485]: Invalid user wordrc from 37.113.26.6 port 35186 Feb 9 14:45:47.420313 sshd[2485]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:47.421272 sshd[2485]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:45:47.421362 sshd[2485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:45:47.422427 sshd[2485]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:47.422000 audit[2485]: USER_AUTH pid=2485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wordrc" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:45:47.515544 kernel: audit: type=1100 audit(1707489947.422:459): pid=2485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wordrc" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:45:49.689411 sshd[2485]: Failed password for invalid user wordrc from 37.113.26.6 port 35186 ssh2 Feb 9 14:45:49.942612 sshd[2485]: Received disconnect from 37.113.26.6 port 35186:11: Bye Bye [preauth] Feb 9 14:45:49.942612 sshd[2485]: Disconnected from invalid user wordrc 37.113.26.6 port 35186 [preauth] Feb 9 14:45:49.945022 systemd[1]: sshd@102-147.75.49.59:22-37.113.26.6:35186.service: Deactivated successfully. Feb 9 14:45:49.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-147.75.49.59:22-37.113.26.6:35186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:50.038619 kernel: audit: type=1131 audit(1707489949.945:460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-147.75.49.59:22-37.113.26.6:35186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:52.334469 systemd[1]: Started sshd@103-147.75.49.59:22-43.156.11.162:39852.service. Feb 9 14:45:52.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-147.75.49.59:22-43.156.11.162:39852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:52.427685 kernel: audit: type=1130 audit(1707489952.334:461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-147.75.49.59:22-43.156.11.162:39852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:53.361178 sshd[2489]: Invalid user msnasiry from 43.156.11.162 port 39852 Feb 9 14:45:53.367243 sshd[2489]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:53.368235 sshd[2489]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:45:53.368325 sshd[2489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:45:53.369356 sshd[2489]: pam_faillock(sshd:auth): User unknown Feb 9 14:45:53.369000 audit[2489]: USER_AUTH pid=2489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msnasiry" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:45:53.463684 kernel: audit: type=1100 audit(1707489953.369:462): pid=2489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msnasiry" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:45:55.791765 sshd[2489]: Failed password for invalid user msnasiry from 43.156.11.162 port 39852 ssh2 Feb 9 14:45:56.373796 sshd[2489]: Received disconnect from 43.156.11.162 port 39852:11: Bye Bye [preauth] Feb 9 14:45:56.373796 sshd[2489]: Disconnected from invalid user msnasiry 43.156.11.162 port 39852 [preauth] Feb 9 14:45:56.376310 systemd[1]: sshd@103-147.75.49.59:22-43.156.11.162:39852.service: Deactivated successfully. Feb 9 14:45:56.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-147.75.49.59:22-43.156.11.162:39852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:45:56.469519 kernel: audit: type=1131 audit(1707489956.376:463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-147.75.49.59:22-43.156.11.162:39852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:00.215335 systemd[1]: Started sshd@104-147.75.49.59:22-43.224.48.86:44609.service. Feb 9 14:46:00.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-147.75.49.59:22-43.224.48.86:44609 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:00.308686 kernel: audit: type=1130 audit(1707489960.214:464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-147.75.49.59:22-43.224.48.86:44609 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:01.312943 sshd[2495]: Invalid user liuqch from 43.224.48.86 port 44609 Feb 9 14:46:01.319019 sshd[2495]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:01.319977 sshd[2495]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:46:01.320064 sshd[2495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.224.48.86 Feb 9 14:46:01.321058 sshd[2495]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:01.320000 audit[2495]: USER_AUTH pid=2495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="liuqch" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:46:01.414707 kernel: audit: type=1100 audit(1707489961.320:465): pid=2495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="liuqch" exe="/usr/sbin/sshd" hostname=43.224.48.86 addr=43.224.48.86 terminal=ssh res=failed' Feb 9 14:46:03.176252 sshd[2495]: Failed password for invalid user liuqch from 43.224.48.86 port 44609 ssh2 Feb 9 14:46:05.043121 sshd[2495]: Received disconnect from 43.224.48.86 port 44609:11: Bye Bye [preauth] Feb 9 14:46:05.043121 sshd[2495]: Disconnected from invalid user liuqch 43.224.48.86 port 44609 [preauth] Feb 9 14:46:05.045642 systemd[1]: sshd@104-147.75.49.59:22-43.224.48.86:44609.service: Deactivated successfully. Feb 9 14:46:05.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-147.75.49.59:22-43.224.48.86:44609 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:05.139686 kernel: audit: type=1131 audit(1707489965.045:466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-147.75.49.59:22-43.224.48.86:44609 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:10.741478 systemd[1]: Started sshd@105-147.75.49.59:22-219.92.10.208:45086.service. Feb 9 14:46:10.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-147.75.49.59:22-219.92.10.208:45086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:10.835683 kernel: audit: type=1130 audit(1707489970.741:467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-147.75.49.59:22-219.92.10.208:45086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:11.913398 sshd[2500]: Invalid user nad from 219.92.10.208 port 45086 Feb 9 14:46:11.919514 sshd[2500]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:11.920499 sshd[2500]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:46:11.920590 sshd[2500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:46:11.921458 sshd[2500]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:11.921000 audit[2500]: USER_AUTH pid=2500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nad" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:46:12.014555 kernel: audit: type=1100 audit(1707489971.921:468): pid=2500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nad" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:46:14.148440 sshd[2500]: Failed password for invalid user nad from 219.92.10.208 port 45086 ssh2 Feb 9 14:46:15.178309 sshd[2500]: Received disconnect from 219.92.10.208 port 45086:11: Bye Bye [preauth] Feb 9 14:46:15.178309 sshd[2500]: Disconnected from invalid user nad 219.92.10.208 port 45086 [preauth] Feb 9 14:46:15.180802 systemd[1]: sshd@105-147.75.49.59:22-219.92.10.208:45086.service: Deactivated successfully. Feb 9 14:46:15.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-147.75.49.59:22-219.92.10.208:45086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:15.274664 kernel: audit: type=1131 audit(1707489975.180:469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-147.75.49.59:22-219.92.10.208:45086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:17.058926 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:46:17.058Z","caller":"mvcc/index.go:214","msg":"compact tree index","revision":1102} Feb 9 14:46:17.077834 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:46:17.077Z","caller":"mvcc/kvstore_compaction.go:57","msg":"finished scheduled compaction","compact-revision":1102,"took":"18.737396ms"} Feb 9 14:46:37.113266 systemd[1]: Started sshd@106-147.75.49.59:22-37.113.26.6:40572.service. Feb 9 14:46:37.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-147.75.49.59:22-37.113.26.6:40572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:37.206684 kernel: audit: type=1130 audit(1707489997.112:470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-147.75.49.59:22-37.113.26.6:40572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:38.184971 sshd[2505]: Invalid user ghassem from 37.113.26.6 port 40572 Feb 9 14:46:38.190995 sshd[2505]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:38.191969 sshd[2505]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:46:38.192056 sshd[2505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:46:38.192944 sshd[2505]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:38.192000 audit[2505]: USER_AUTH pid=2505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ghassem" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:46:38.286688 kernel: audit: type=1100 audit(1707489998.192:471): pid=2505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ghassem" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:46:40.128379 sshd[2505]: Failed password for invalid user ghassem from 37.113.26.6 port 40572 ssh2 Feb 9 14:46:40.745315 sshd[2505]: Received disconnect from 37.113.26.6 port 40572:11: Bye Bye [preauth] Feb 9 14:46:40.745315 sshd[2505]: Disconnected from invalid user ghassem 37.113.26.6 port 40572 [preauth] Feb 9 14:46:40.747904 systemd[1]: sshd@106-147.75.49.59:22-37.113.26.6:40572.service: Deactivated successfully. Feb 9 14:46:40.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-147.75.49.59:22-37.113.26.6:40572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:40.841540 kernel: audit: type=1131 audit(1707490000.747:472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-147.75.49.59:22-37.113.26.6:40572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:42.082990 systemd[1]: Started sshd@107-147.75.49.59:22-171.244.37.97:38260.service. Feb 9 14:46:42.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-147.75.49.59:22-171.244.37.97:38260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:42.175660 kernel: audit: type=1130 audit(1707490002.082:473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-147.75.49.59:22-171.244.37.97:38260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:43.525138 sshd[2510]: Invalid user sjjawon from 171.244.37.97 port 38260 Feb 9 14:46:43.531362 sshd[2510]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:43.532502 sshd[2510]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:46:43.532596 sshd[2510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:46:43.533451 sshd[2510]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:43.533000 audit[2510]: USER_AUTH pid=2510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sjjawon" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:46:43.627683 kernel: audit: type=1100 audit(1707490003.533:474): pid=2510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sjjawon" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:46:45.153013 sshd[2510]: Failed password for invalid user sjjawon from 171.244.37.97 port 38260 ssh2 Feb 9 14:46:45.675626 sshd[2510]: Received disconnect from 171.244.37.97 port 38260:11: Bye Bye [preauth] Feb 9 14:46:45.675626 sshd[2510]: Disconnected from invalid user sjjawon 171.244.37.97 port 38260 [preauth] Feb 9 14:46:45.678181 systemd[1]: sshd@107-147.75.49.59:22-171.244.37.97:38260.service: Deactivated successfully. Feb 9 14:46:45.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-147.75.49.59:22-171.244.37.97:38260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:45.772547 kernel: audit: type=1131 audit(1707490005.678:475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-147.75.49.59:22-171.244.37.97:38260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:50.815067 systemd[1]: Started sshd@108-147.75.49.59:22-43.134.180.37:48254.service. Feb 9 14:46:50.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-147.75.49.59:22-43.134.180.37:48254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:50.907469 kernel: audit: type=1130 audit(1707490010.814:476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-147.75.49.59:22-43.134.180.37:48254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:51.848769 sshd[2515]: Invalid user mahesh from 43.134.180.37 port 48254 Feb 9 14:46:51.854976 sshd[2515]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:51.855926 sshd[2515]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:46:51.856016 sshd[2515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:46:51.856941 sshd[2515]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:51.856000 audit[2515]: USER_AUTH pid=2515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mahesh" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:46:51.950544 kernel: audit: type=1100 audit(1707490011.856:477): pid=2515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mahesh" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:46:53.576758 sshd[2515]: Failed password for invalid user mahesh from 43.134.180.37 port 48254 ssh2 Feb 9 14:46:54.701336 sshd[2515]: Received disconnect from 43.134.180.37 port 48254:11: Bye Bye [preauth] Feb 9 14:46:54.701336 sshd[2515]: Disconnected from invalid user mahesh 43.134.180.37 port 48254 [preauth] Feb 9 14:46:54.704048 systemd[1]: sshd@108-147.75.49.59:22-43.134.180.37:48254.service: Deactivated successfully. Feb 9 14:46:54.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-147.75.49.59:22-43.134.180.37:48254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:54.796674 kernel: audit: type=1131 audit(1707490014.703:478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-147.75.49.59:22-43.134.180.37:48254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:54.988872 systemd[1]: Started sshd@109-147.75.49.59:22-43.156.11.162:53114.service. Feb 9 14:46:54.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-147.75.49.59:22-43.156.11.162:53114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:55.081490 kernel: audit: type=1130 audit(1707490014.987:479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-147.75.49.59:22-43.156.11.162:53114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:46:56.023426 sshd[2520]: Invalid user sepehr from 43.156.11.162 port 53114 Feb 9 14:46:56.029399 sshd[2520]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:56.030370 sshd[2520]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:46:56.030457 sshd[2520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:46:56.031389 sshd[2520]: pam_faillock(sshd:auth): User unknown Feb 9 14:46:56.030000 audit[2520]: USER_AUTH pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sepehr" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:46:56.124689 kernel: audit: type=1100 audit(1707490016.030:480): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sepehr" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:46:58.101659 sshd[2520]: Failed password for invalid user sepehr from 43.156.11.162 port 53114 ssh2 Feb 9 14:46:59.998300 systemd[1]: Started sshd@110-147.75.49.59:22-101.43.88.44:55592.service. Feb 9 14:46:59.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-147.75.49.59:22-101.43.88.44:55592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:00.090470 kernel: audit: type=1130 audit(1707490019.996:481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-147.75.49.59:22-101.43.88.44:55592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:00.167624 sshd[2520]: Received disconnect from 43.156.11.162 port 53114:11: Bye Bye [preauth] Feb 9 14:47:00.167624 sshd[2520]: Disconnected from invalid user sepehr 43.156.11.162 port 53114 [preauth] Feb 9 14:47:00.168438 systemd[1]: sshd@109-147.75.49.59:22-43.156.11.162:53114.service: Deactivated successfully. Feb 9 14:47:00.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-147.75.49.59:22-43.156.11.162:53114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:00.260680 kernel: audit: type=1131 audit(1707490020.167:482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-147.75.49.59:22-43.156.11.162:53114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:00.393080 systemd[1]: Started sshd@111-147.75.49.59:22-186.7.75.15:40143.service. Feb 9 14:47:00.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-147.75.49.59:22-186.7.75.15:40143 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:00.486681 kernel: audit: type=1130 audit(1707490020.391:483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-147.75.49.59:22-186.7.75.15:40143 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:00.927784 sshd[2523]: Invalid user shaneli from 101.43.88.44 port 55592 Feb 9 14:47:00.933905 sshd[2523]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:00.934881 sshd[2523]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:47:00.934969 sshd[2523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:47:00.936031 sshd[2523]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:00.934000 audit[2523]: USER_AUTH pid=2523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shaneli" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:47:01.029678 kernel: audit: type=1100 audit(1707490020.934:484): pid=2523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="shaneli" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:47:02.891774 sshd[2523]: Failed password for invalid user shaneli from 101.43.88.44 port 55592 ssh2 Feb 9 14:47:04.884809 sshd[2523]: Received disconnect from 101.43.88.44 port 55592:11: Bye Bye [preauth] Feb 9 14:47:04.884809 sshd[2523]: Disconnected from invalid user shaneli 101.43.88.44 port 55592 [preauth] Feb 9 14:47:04.887289 systemd[1]: sshd@110-147.75.49.59:22-101.43.88.44:55592.service: Deactivated successfully. Feb 9 14:47:04.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-147.75.49.59:22-101.43.88.44:55592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:04.980667 kernel: audit: type=1131 audit(1707490024.886:485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-147.75.49.59:22-101.43.88.44:55592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:05.761765 sshd[2527]: Connection reset by 186.7.75.15 port 40143 [preauth] Feb 9 14:47:05.763692 systemd[1]: sshd@111-147.75.49.59:22-186.7.75.15:40143.service: Deactivated successfully. Feb 9 14:47:05.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-147.75.49.59:22-186.7.75.15:40143 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:05.857712 kernel: audit: type=1131 audit(1707490025.762:486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-147.75.49.59:22-186.7.75.15:40143 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:24.047692 systemd[1]: Started sshd@112-147.75.49.59:22-219.92.10.208:53798.service. Feb 9 14:47:24.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-147.75.49.59:22-219.92.10.208:53798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:24.140671 kernel: audit: type=1130 audit(1707490044.046:487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-147.75.49.59:22-219.92.10.208:53798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:25.219219 sshd[2532]: Invalid user chaitanya from 219.92.10.208 port 53798 Feb 9 14:47:25.225196 sshd[2532]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:25.226171 sshd[2532]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:47:25.226260 sshd[2532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:47:25.227175 sshd[2532]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:25.225000 audit[2532]: USER_AUTH pid=2532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="chaitanya" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:47:25.321691 kernel: audit: type=1100 audit(1707490045.225:488): pid=2532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="chaitanya" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:47:26.945864 sshd[2532]: Failed password for invalid user chaitanya from 219.92.10.208 port 53798 ssh2 Feb 9 14:47:27.455115 sshd[2532]: Received disconnect from 219.92.10.208 port 53798:11: Bye Bye [preauth] Feb 9 14:47:27.455115 sshd[2532]: Disconnected from invalid user chaitanya 219.92.10.208 port 53798 [preauth] Feb 9 14:47:27.457662 systemd[1]: sshd@112-147.75.49.59:22-219.92.10.208:53798.service: Deactivated successfully. Feb 9 14:47:27.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-147.75.49.59:22-219.92.10.208:53798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:27.551668 kernel: audit: type=1131 audit(1707490047.456:489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-147.75.49.59:22-219.92.10.208:53798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:30.690030 systemd[1]: Started sshd@113-147.75.49.59:22-37.113.26.6:50136.service. Feb 9 14:47:30.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-147.75.49.59:22-37.113.26.6:50136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:30.782681 kernel: audit: type=1130 audit(1707490050.688:490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-147.75.49.59:22-37.113.26.6:50136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:31.857510 sshd[2537]: Invalid user mhbi from 37.113.26.6 port 50136 Feb 9 14:47:31.863609 sshd[2537]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:31.864585 sshd[2537]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:47:31.864669 sshd[2537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:47:31.865524 sshd[2537]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:31.864000 audit[2537]: USER_AUTH pid=2537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mhbi" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:47:31.958687 kernel: audit: type=1100 audit(1707490051.864:491): pid=2537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mhbi" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:47:33.741394 sshd[2537]: Failed password for invalid user mhbi from 37.113.26.6 port 50136 ssh2 Feb 9 14:47:35.163533 sshd[2537]: Received disconnect from 37.113.26.6 port 50136:11: Bye Bye [preauth] Feb 9 14:47:35.163533 sshd[2537]: Disconnected from invalid user mhbi 37.113.26.6 port 50136 [preauth] Feb 9 14:47:35.166058 systemd[1]: sshd@113-147.75.49.59:22-37.113.26.6:50136.service: Deactivated successfully. Feb 9 14:47:35.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-147.75.49.59:22-37.113.26.6:50136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:35.259676 kernel: audit: type=1131 audit(1707490055.165:492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-147.75.49.59:22-37.113.26.6:50136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:49.197614 systemd[1]: Started sshd@114-147.75.49.59:22-103.14.226.92:48114.service. Feb 9 14:47:49.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-147.75.49.59:22-103.14.226.92:48114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:49.290682 kernel: audit: type=1130 audit(1707490069.197:493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-147.75.49.59:22-103.14.226.92:48114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:50.302987 sshd[2541]: Invalid user dgjawon from 103.14.226.92 port 48114 Feb 9 14:47:50.309228 sshd[2541]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:50.310336 sshd[2541]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:47:50.310423 sshd[2541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.226.92 Feb 9 14:47:50.311486 sshd[2541]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:50.311000 audit[2541]: USER_AUTH pid=2541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="dgjawon" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:47:50.404680 kernel: audit: type=1100 audit(1707490070.311:494): pid=2541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="dgjawon" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:47:52.463197 sshd[2541]: Failed password for invalid user dgjawon from 103.14.226.92 port 48114 ssh2 Feb 9 14:47:52.764341 systemd[1]: Started sshd@115-147.75.49.59:22-171.244.37.97:43822.service. Feb 9 14:47:52.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-147.75.49.59:22-171.244.37.97:43822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:52.857687 kernel: audit: type=1130 audit(1707490072.763:495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-147.75.49.59:22-171.244.37.97:43822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:53.898871 sshd[2544]: Invalid user msnasiry from 171.244.37.97 port 43822 Feb 9 14:47:53.904993 sshd[2544]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:53.905969 sshd[2544]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:47:53.906058 sshd[2544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:47:53.906926 sshd[2544]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:53.906000 audit[2544]: USER_AUTH pid=2544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msnasiry" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:47:54.000549 kernel: audit: type=1100 audit(1707490073.906:496): pid=2544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msnasiry" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:47:54.076135 sshd[2541]: Received disconnect from 103.14.226.92 port 48114:11: Bye Bye [preauth] Feb 9 14:47:54.076135 sshd[2541]: Disconnected from invalid user dgjawon 103.14.226.92 port 48114 [preauth] Feb 9 14:47:54.077001 systemd[1]: sshd@114-147.75.49.59:22-103.14.226.92:48114.service: Deactivated successfully. Feb 9 14:47:54.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-147.75.49.59:22-103.14.226.92:48114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:54.170683 kernel: audit: type=1131 audit(1707490074.076:497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-147.75.49.59:22-103.14.226.92:48114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:55.802495 sshd[2544]: Failed password for invalid user msnasiry from 171.244.37.97 port 43822 ssh2 Feb 9 14:47:56.930591 sshd[2544]: Received disconnect from 171.244.37.97 port 43822:11: Bye Bye [preauth] Feb 9 14:47:56.930591 sshd[2544]: Disconnected from invalid user msnasiry 171.244.37.97 port 43822 [preauth] Feb 9 14:47:56.933238 systemd[1]: sshd@115-147.75.49.59:22-171.244.37.97:43822.service: Deactivated successfully. Feb 9 14:47:56.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-147.75.49.59:22-171.244.37.97:43822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:57.026682 kernel: audit: type=1131 audit(1707490076.933:498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-147.75.49.59:22-171.244.37.97:43822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:57.063278 systemd[1]: Started sshd@116-147.75.49.59:22-43.156.11.162:34448.service. Feb 9 14:47:57.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-147.75.49.59:22-43.156.11.162:34448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:57.156606 kernel: audit: type=1130 audit(1707490077.062:499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-147.75.49.59:22-43.156.11.162:34448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:47:58.088709 sshd[2550]: Invalid user huhaihong from 43.156.11.162 port 34448 Feb 9 14:47:58.094630 sshd[2550]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:58.095609 sshd[2550]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:47:58.095697 sshd[2550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:47:58.096588 sshd[2550]: pam_faillock(sshd:auth): User unknown Feb 9 14:47:58.096000 audit[2550]: USER_AUTH pid=2550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="huhaihong" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:47:58.190683 kernel: audit: type=1100 audit(1707490078.096:500): pid=2550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="huhaihong" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:48:00.348273 sshd[2550]: Failed password for invalid user huhaihong from 43.156.11.162 port 34448 ssh2 Feb 9 14:48:02.758876 sshd[2550]: Received disconnect from 43.156.11.162 port 34448:11: Bye Bye [preauth] Feb 9 14:48:02.758876 sshd[2550]: Disconnected from invalid user huhaihong 43.156.11.162 port 34448 [preauth] Feb 9 14:48:02.761404 systemd[1]: sshd@116-147.75.49.59:22-43.156.11.162:34448.service: Deactivated successfully. Feb 9 14:48:02.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-147.75.49.59:22-43.156.11.162:34448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:02.855688 kernel: audit: type=1131 audit(1707490082.761:501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-147.75.49.59:22-43.156.11.162:34448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:08.724611 systemd[1]: Started sshd@117-147.75.49.59:22-177.148.230.13:34178.service. Feb 9 14:48:08.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-147.75.49.59:22-177.148.230.13:34178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:08.817469 kernel: audit: type=1130 audit(1707490088.724:502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-147.75.49.59:22-177.148.230.13:34178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:09.745009 sshd[2554]: Invalid user msoft from 177.148.230.13 port 34178 Feb 9 14:48:09.750999 sshd[2554]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:09.751935 sshd[2554]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:48:09.752024 sshd[2554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:48:09.752905 sshd[2554]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:09.752000 audit[2554]: USER_AUTH pid=2554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msoft" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:48:09.847582 kernel: audit: type=1100 audit(1707490089.752:503): pid=2554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msoft" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:48:12.180380 sshd[2554]: Failed password for invalid user msoft from 177.148.230.13 port 34178 ssh2 Feb 9 14:48:14.388394 sshd[2554]: Received disconnect from 177.148.230.13 port 34178:11: Bye Bye [preauth] Feb 9 14:48:14.388394 sshd[2554]: Disconnected from invalid user msoft 177.148.230.13 port 34178 [preauth] Feb 9 14:48:14.390884 systemd[1]: sshd@117-147.75.49.59:22-177.148.230.13:34178.service: Deactivated successfully. Feb 9 14:48:14.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-147.75.49.59:22-177.148.230.13:34178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:14.484668 kernel: audit: type=1131 audit(1707490094.390:504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-147.75.49.59:22-177.148.230.13:34178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:15.331379 systemd[1]: Started sshd@118-147.75.49.59:22-177.148.230.13:41822.service. Feb 9 14:48:15.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-147.75.49.59:22-177.148.230.13:41822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:15.424690 kernel: audit: type=1130 audit(1707490095.330:505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-147.75.49.59:22-177.148.230.13:41822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:16.350570 sshd[2558]: Invalid user msoft from 177.148.230.13 port 41822 Feb 9 14:48:16.356539 sshd[2558]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:16.357461 sshd[2558]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:48:16.357578 sshd[2558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:48:16.358458 sshd[2558]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:16.358000 audit[2558]: USER_AUTH pid=2558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msoft" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:48:16.452685 kernel: audit: type=1100 audit(1707490096.358:506): pid=2558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="msoft" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:48:18.078607 sshd[2558]: Failed password for invalid user msoft from 177.148.230.13 port 41822 ssh2 Feb 9 14:48:18.758561 sshd[2558]: Received disconnect from 177.148.230.13 port 41822:11: Bye Bye [preauth] Feb 9 14:48:18.758561 sshd[2558]: Disconnected from invalid user msoft 177.148.230.13 port 41822 [preauth] Feb 9 14:48:18.761048 systemd[1]: sshd@118-147.75.49.59:22-177.148.230.13:41822.service: Deactivated successfully. Feb 9 14:48:18.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-147.75.49.59:22-177.148.230.13:41822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:18.854527 kernel: audit: type=1131 audit(1707490098.761:507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-147.75.49.59:22-177.148.230.13:41822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:19.333982 systemd[1]: Started sshd@119-147.75.49.59:22-43.134.180.37:42380.service. Feb 9 14:48:19.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-147.75.49.59:22-43.134.180.37:42380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:19.427525 kernel: audit: type=1130 audit(1707490099.333:508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-147.75.49.59:22-43.134.180.37:42380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:20.279091 systemd[1]: Started sshd@120-147.75.49.59:22-101.43.88.44:45986.service. Feb 9 14:48:20.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-147.75.49.59:22-101.43.88.44:45986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:20.298372 systemd[1]: Started sshd@121-147.75.49.59:22-37.113.26.6:40170.service. Feb 9 14:48:20.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-147.75.49.59:22-37.113.26.6:40170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:20.372653 kernel: audit: type=1130 audit(1707490100.278:509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-147.75.49.59:22-101.43.88.44:45986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:20.372699 kernel: audit: type=1130 audit(1707490100.297:510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-147.75.49.59:22-37.113.26.6:40170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:20.396947 sshd[2562]: Invalid user majlesi from 43.134.180.37 port 42380 Feb 9 14:48:20.398138 sshd[2562]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:20.398337 sshd[2562]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:48:20.398354 sshd[2562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:48:20.398523 sshd[2562]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:20.398000 audit[2562]: USER_AUTH pid=2562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="majlesi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:48:20.553574 kernel: audit: type=1100 audit(1707490100.398:511): pid=2562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="majlesi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:48:21.116513 sshd[2565]: Invalid user f-tomizawa from 101.43.88.44 port 45986 Feb 9 14:48:21.122540 sshd[2565]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:21.123496 sshd[2565]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:48:21.123580 sshd[2565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:48:21.124450 sshd[2565]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:21.124000 audit[2565]: USER_AUTH pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="f-tomizawa" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:48:21.218560 kernel: audit: type=1100 audit(1707490101.124:512): pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="f-tomizawa" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:48:21.394002 sshd[2568]: Invalid user nilufarlotus from 37.113.26.6 port 40170 Feb 9 14:48:21.400056 sshd[2568]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:21.401208 sshd[2568]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:48:21.401295 sshd[2568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:48:21.402189 sshd[2568]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:21.401000 audit[2568]: USER_AUTH pid=2568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nilufarlotus" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:48:21.500525 kernel: audit: type=1100 audit(1707490101.401:513): pid=2568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="nilufarlotus" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:48:22.670005 sshd[2562]: Failed password for invalid user majlesi from 43.134.180.37 port 42380 ssh2 Feb 9 14:48:23.531750 sshd[2565]: Failed password for invalid user f-tomizawa from 101.43.88.44 port 45986 ssh2 Feb 9 14:48:23.643878 sshd[2562]: Received disconnect from 43.134.180.37 port 42380:11: Bye Bye [preauth] Feb 9 14:48:23.643878 sshd[2562]: Disconnected from invalid user majlesi 43.134.180.37 port 42380 [preauth] Feb 9 14:48:23.646335 systemd[1]: sshd@119-147.75.49.59:22-43.134.180.37:42380.service: Deactivated successfully. Feb 9 14:48:23.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-147.75.49.59:22-43.134.180.37:42380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:23.739681 kernel: audit: type=1131 audit(1707490103.646:514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-147.75.49.59:22-43.134.180.37:42380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:23.809747 sshd[2568]: Failed password for invalid user nilufarlotus from 37.113.26.6 port 40170 ssh2 Feb 9 14:48:24.205262 sshd[2565]: Received disconnect from 101.43.88.44 port 45986:11: Bye Bye [preauth] Feb 9 14:48:24.205262 sshd[2565]: Disconnected from invalid user f-tomizawa 101.43.88.44 port 45986 [preauth] Feb 9 14:48:24.207727 systemd[1]: sshd@120-147.75.49.59:22-101.43.88.44:45986.service: Deactivated successfully. Feb 9 14:48:24.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-147.75.49.59:22-101.43.88.44:45986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:24.301577 kernel: audit: type=1131 audit(1707490104.207:515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-147.75.49.59:22-101.43.88.44:45986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:24.941701 sshd[2568]: Received disconnect from 37.113.26.6 port 40170:11: Bye Bye [preauth] Feb 9 14:48:24.941701 sshd[2568]: Disconnected from invalid user nilufarlotus 37.113.26.6 port 40170 [preauth] Feb 9 14:48:24.944237 systemd[1]: sshd@121-147.75.49.59:22-37.113.26.6:40170.service: Deactivated successfully. Feb 9 14:48:24.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-147.75.49.59:22-37.113.26.6:40170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:25.038675 kernel: audit: type=1131 audit(1707490104.944:516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-147.75.49.59:22-37.113.26.6:40170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:32.159299 systemd[1]: Started sshd@122-147.75.49.59:22-219.92.10.208:59402.service. Feb 9 14:48:32.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-147.75.49.59:22-219.92.10.208:59402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:32.252544 kernel: audit: type=1130 audit(1707490112.158:517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-147.75.49.59:22-219.92.10.208:59402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:33.343089 sshd[2574]: Invalid user rabani from 219.92.10.208 port 59402 Feb 9 14:48:33.349051 sshd[2574]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:33.350013 sshd[2574]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:48:33.350101 sshd[2574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:48:33.350986 sshd[2574]: pam_faillock(sshd:auth): User unknown Feb 9 14:48:33.350000 audit[2574]: USER_AUTH pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rabani" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:48:33.445688 kernel: audit: type=1100 audit(1707490113.350:518): pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rabani" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:48:35.406764 sshd[2574]: Failed password for invalid user rabani from 219.92.10.208 port 59402 ssh2 Feb 9 14:48:36.503047 sshd[2574]: Received disconnect from 219.92.10.208 port 59402:11: Bye Bye [preauth] Feb 9 14:48:36.503047 sshd[2574]: Disconnected from invalid user rabani 219.92.10.208 port 59402 [preauth] Feb 9 14:48:36.505553 systemd[1]: sshd@122-147.75.49.59:22-219.92.10.208:59402.service: Deactivated successfully. Feb 9 14:48:36.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-147.75.49.59:22-219.92.10.208:59402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:36.598683 kernel: audit: type=1131 audit(1707490116.504:519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-147.75.49.59:22-219.92.10.208:59402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:48:59.984277 systemd[1]: Started sshd@123-147.75.49.59:22-43.156.11.162:44130.service. Feb 9 14:48:59.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-147.75.49.59:22-43.156.11.162:44130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:00.076469 kernel: audit: type=1130 audit(1707490139.982:520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-147.75.49.59:22-43.156.11.162:44130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:01.011621 sshd[2578]: Invalid user sjjawon from 43.156.11.162 port 44130 Feb 9 14:49:01.017558 sshd[2578]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:01.018527 sshd[2578]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:49:01.018614 sshd[2578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:49:01.019504 sshd[2578]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:01.018000 audit[2578]: USER_AUTH pid=2578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sjjawon" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:49:01.047342 systemd[1]: Started sshd@124-147.75.49.59:22-171.244.37.97:40236.service. Feb 9 14:49:01.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-147.75.49.59:22-171.244.37.97:40236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:01.204336 kernel: audit: type=1100 audit(1707490141.018:521): pid=2578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sjjawon" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:49:01.204360 kernel: audit: type=1130 audit(1707490141.045:522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-147.75.49.59:22-171.244.37.97:40236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:02.284154 sshd[2581]: Invalid user yuqing from 171.244.37.97 port 40236 Feb 9 14:49:02.290305 sshd[2581]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:02.291333 sshd[2581]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:49:02.291419 sshd[2581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:49:02.292311 sshd[2581]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:02.291000 audit[2581]: USER_AUTH pid=2581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="yuqing" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:49:02.385527 kernel: audit: type=1100 audit(1707490142.291:523): pid=2581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="yuqing" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:49:02.918846 sshd[2578]: Failed password for invalid user sjjawon from 43.156.11.162 port 44130 ssh2 Feb 9 14:49:04.328331 sshd[2581]: Failed password for invalid user yuqing from 171.244.37.97 port 40236 ssh2 Feb 9 14:49:04.901651 sshd[2578]: Received disconnect from 43.156.11.162 port 44130:11: Bye Bye [preauth] Feb 9 14:49:04.901651 sshd[2578]: Disconnected from invalid user sjjawon 43.156.11.162 port 44130 [preauth] Feb 9 14:49:04.904168 systemd[1]: sshd@123-147.75.49.59:22-43.156.11.162:44130.service: Deactivated successfully. Feb 9 14:49:04.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-147.75.49.59:22-43.156.11.162:44130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:04.997675 kernel: audit: type=1131 audit(1707490144.903:524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-147.75.49.59:22-43.156.11.162:44130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:05.392164 sshd[2581]: Received disconnect from 171.244.37.97 port 40236:11: Bye Bye [preauth] Feb 9 14:49:05.392164 sshd[2581]: Disconnected from invalid user yuqing 171.244.37.97 port 40236 [preauth] Feb 9 14:49:05.394696 systemd[1]: sshd@124-147.75.49.59:22-171.244.37.97:40236.service: Deactivated successfully. Feb 9 14:49:05.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-147.75.49.59:22-171.244.37.97:40236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:05.487468 kernel: audit: type=1131 audit(1707490145.393:525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-147.75.49.59:22-171.244.37.97:40236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:10.998737 systemd[1]: Started sshd@125-147.75.49.59:22-37.113.26.6:39278.service. Feb 9 14:49:10.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-147.75.49.59:22-37.113.26.6:39278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:11.090482 kernel: audit: type=1130 audit(1707490150.997:526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-147.75.49.59:22-37.113.26.6:39278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:11.303966 systemd[1]: Started sshd@126-147.75.49.59:22-186.7.75.15:36409.service. Feb 9 14:49:11.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-147.75.49.59:22-186.7.75.15:36409 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:11.396670 kernel: audit: type=1130 audit(1707490151.302:527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-147.75.49.59:22-186.7.75.15:36409 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:12.053098 sshd[2588]: Invalid user hanii from 37.113.26.6 port 39278 Feb 9 14:49:12.059090 sshd[2588]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:12.060230 sshd[2588]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:49:12.060316 sshd[2588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:49:12.061232 sshd[2588]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:12.059000 audit[2588]: USER_AUTH pid=2588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="hanii" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:49:12.154684 kernel: audit: type=1100 audit(1707490152.059:528): pid=2588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="hanii" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:49:14.137510 sshd[2588]: Failed password for invalid user hanii from 37.113.26.6 port 39278 ssh2 Feb 9 14:49:14.438796 sshd[2588]: Received disconnect from 37.113.26.6 port 39278:11: Bye Bye [preauth] Feb 9 14:49:14.438796 sshd[2588]: Disconnected from invalid user hanii 37.113.26.6 port 39278 [preauth] Feb 9 14:49:14.441139 systemd[1]: sshd@125-147.75.49.59:22-37.113.26.6:39278.service: Deactivated successfully. Feb 9 14:49:14.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-147.75.49.59:22-37.113.26.6:39278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:14.533677 kernel: audit: type=1131 audit(1707490154.440:529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-147.75.49.59:22-37.113.26.6:39278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:21.331132 sshd[2591]: Connection reset by 186.7.75.15 port 36409 [preauth] Feb 9 14:49:21.333024 systemd[1]: sshd@126-147.75.49.59:22-186.7.75.15:36409.service: Deactivated successfully. Feb 9 14:49:21.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-147.75.49.59:22-186.7.75.15:36409 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:21.425468 kernel: audit: type=1131 audit(1707490161.332:530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-147.75.49.59:22-186.7.75.15:36409 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:36.480695 systemd[1]: Started sshd@127-147.75.49.59:22-103.14.226.92:48196.service. Feb 9 14:49:36.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-147.75.49.59:22-103.14.226.92:48196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:36.573469 kernel: audit: type=1130 audit(1707490176.480:531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-147.75.49.59:22-103.14.226.92:48196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:37.575926 sshd[2596]: Invalid user tangxiaobin from 103.14.226.92 port 48196 Feb 9 14:49:37.581922 sshd[2596]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:37.582905 sshd[2596]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:49:37.582992 sshd[2596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.226.92 Feb 9 14:49:37.583871 sshd[2596]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:37.583000 audit[2596]: USER_AUTH pid=2596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tangxiaobin" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:49:37.677685 kernel: audit: type=1100 audit(1707490177.583:532): pid=2596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tangxiaobin" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:49:39.424347 sshd[2596]: Failed password for invalid user tangxiaobin from 103.14.226.92 port 48196 ssh2 Feb 9 14:49:41.289122 sshd[2596]: Received disconnect from 103.14.226.92 port 48196:11: Bye Bye [preauth] Feb 9 14:49:41.289122 sshd[2596]: Disconnected from invalid user tangxiaobin 103.14.226.92 port 48196 [preauth] Feb 9 14:49:41.291752 systemd[1]: sshd@127-147.75.49.59:22-103.14.226.92:48196.service: Deactivated successfully. Feb 9 14:49:41.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-147.75.49.59:22-103.14.226.92:48196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:41.385559 kernel: audit: type=1131 audit(1707490181.291:533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-147.75.49.59:22-103.14.226.92:48196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:41.693863 systemd[1]: Started sshd@128-147.75.49.59:22-219.92.10.208:32888.service. Feb 9 14:49:41.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-147.75.49.59:22-219.92.10.208:32888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:41.786523 kernel: audit: type=1130 audit(1707490181.693:534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-147.75.49.59:22-219.92.10.208:32888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:42.809878 systemd[1]: Started sshd@129-147.75.49.59:22-101.43.88.44:36384.service. Feb 9 14:49:42.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-147.75.49.59:22-101.43.88.44:36384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:42.853793 sshd[2600]: Invalid user abrar from 219.92.10.208 port 32888 Feb 9 14:49:42.855027 sshd[2600]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:42.855279 sshd[2600]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:49:42.855295 sshd[2600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:49:42.856972 sshd[2600]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:42.856000 audit[2600]: USER_AUTH pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="abrar" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:49:42.994431 kernel: audit: type=1130 audit(1707490182.809:535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-147.75.49.59:22-101.43.88.44:36384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:42.994467 kernel: audit: type=1100 audit(1707490182.856:536): pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="abrar" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:49:43.600429 sshd[2603]: Invalid user art from 101.43.88.44 port 36384 Feb 9 14:49:43.606539 sshd[2603]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:43.607587 sshd[2603]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:49:43.607678 sshd[2603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:49:43.608551 sshd[2603]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:43.608000 audit[2603]: USER_AUTH pid=2603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="art" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:49:43.701548 kernel: audit: type=1100 audit(1707490183.608:537): pid=2603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="art" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:49:44.717329 sshd[2600]: Failed password for invalid user abrar from 219.92.10.208 port 32888 ssh2 Feb 9 14:49:45.273374 sshd[2603]: Failed password for invalid user art from 101.43.88.44 port 36384 ssh2 Feb 9 14:49:45.325382 sshd[2600]: Received disconnect from 219.92.10.208 port 32888:11: Bye Bye [preauth] Feb 9 14:49:45.325382 sshd[2600]: Disconnected from invalid user abrar 219.92.10.208 port 32888 [preauth] Feb 9 14:49:45.328013 systemd[1]: sshd@128-147.75.49.59:22-219.92.10.208:32888.service: Deactivated successfully. Feb 9 14:49:45.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-147.75.49.59:22-219.92.10.208:32888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:45.420677 kernel: audit: type=1131 audit(1707490185.328:538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-147.75.49.59:22-219.92.10.208:32888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:45.638994 sshd[2603]: Received disconnect from 101.43.88.44 port 36384:11: Bye Bye [preauth] Feb 9 14:49:45.638994 sshd[2603]: Disconnected from invalid user art 101.43.88.44 port 36384 [preauth] Feb 9 14:49:45.641521 systemd[1]: sshd@129-147.75.49.59:22-101.43.88.44:36384.service: Deactivated successfully. Feb 9 14:49:45.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-147.75.49.59:22-101.43.88.44:36384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:45.739674 kernel: audit: type=1131 audit(1707490185.641:539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-147.75.49.59:22-101.43.88.44:36384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:52.349476 systemd[1]: Started sshd@130-147.75.49.59:22-43.134.180.37:36510.service. Feb 9 14:49:52.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-147.75.49.59:22-43.134.180.37:36510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:52.442469 kernel: audit: type=1130 audit(1707490192.349:540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-147.75.49.59:22-43.134.180.37:36510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:53.416895 sshd[2612]: Invalid user rabbitmq from 43.134.180.37 port 36510 Feb 9 14:49:53.422848 sshd[2612]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:53.423785 sshd[2612]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:49:53.423874 sshd[2612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:49:53.424875 sshd[2612]: pam_faillock(sshd:auth): User unknown Feb 9 14:49:53.424000 audit[2612]: USER_AUTH pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rabbitmq" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:49:53.518610 kernel: audit: type=1100 audit(1707490193.424:541): pid=2612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="rabbitmq" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:49:56.128599 sshd[2612]: Failed password for invalid user rabbitmq from 43.134.180.37 port 36510 ssh2 Feb 9 14:49:58.972635 sshd[2612]: Received disconnect from 43.134.180.37 port 36510:11: Bye Bye [preauth] Feb 9 14:49:58.972635 sshd[2612]: Disconnected from invalid user rabbitmq 43.134.180.37 port 36510 [preauth] Feb 9 14:49:58.975147 systemd[1]: sshd@130-147.75.49.59:22-43.134.180.37:36510.service: Deactivated successfully. Feb 9 14:49:58.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-147.75.49.59:22-43.134.180.37:36510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:49:59.068677 kernel: audit: type=1131 audit(1707490198.975:542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-147.75.49.59:22-43.134.180.37:36510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:02.553026 systemd[1]: Started sshd@131-147.75.49.59:22-37.113.26.6:49930.service. Feb 9 14:50:02.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-147.75.49.59:22-37.113.26.6:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:02.645680 kernel: audit: type=1130 audit(1707490202.552:543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-147.75.49.59:22-37.113.26.6:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:03.639222 sshd[2616]: Invalid user vank from 37.113.26.6 port 49930 Feb 9 14:50:03.645239 sshd[2616]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:03.646199 sshd[2616]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:50:03.646288 sshd[2616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:50:03.647168 sshd[2616]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:03.646000 audit[2616]: USER_AUTH pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="vank" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:50:03.740687 kernel: audit: type=1100 audit(1707490203.646:544): pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="vank" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:50:05.351069 systemd[1]: Started sshd@132-147.75.49.59:22-43.156.11.162:58664.service. Feb 9 14:50:05.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-147.75.49.59:22-43.156.11.162:58664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:05.443480 kernel: audit: type=1130 audit(1707490205.350:545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-147.75.49.59:22-43.156.11.162:58664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:05.723607 sshd[2616]: Failed password for invalid user vank from 37.113.26.6 port 49930 ssh2 Feb 9 14:50:06.464978 sshd[2619]: Invalid user heinricy from 43.156.11.162 port 58664 Feb 9 14:50:06.471176 sshd[2619]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:06.472160 sshd[2619]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:50:06.472249 sshd[2619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.11.162 Feb 9 14:50:06.473157 sshd[2619]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:06.472000 audit[2619]: USER_AUTH pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="heinricy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:50:06.567680 kernel: audit: type=1100 audit(1707490206.472:546): pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="heinricy" exe="/usr/sbin/sshd" hostname=43.156.11.162 addr=43.156.11.162 terminal=ssh res=failed' Feb 9 14:50:06.742058 sshd[2616]: Received disconnect from 37.113.26.6 port 49930:11: Bye Bye [preauth] Feb 9 14:50:06.742058 sshd[2616]: Disconnected from invalid user vank 37.113.26.6 port 49930 [preauth] Feb 9 14:50:06.744407 systemd[1]: sshd@131-147.75.49.59:22-37.113.26.6:49930.service: Deactivated successfully. Feb 9 14:50:06.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-147.75.49.59:22-37.113.26.6:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:06.837664 kernel: audit: type=1131 audit(1707490206.744:547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-147.75.49.59:22-37.113.26.6:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:08.293814 sshd[2619]: Failed password for invalid user heinricy from 43.156.11.162 port 58664 ssh2 Feb 9 14:50:10.138761 sshd[2619]: Received disconnect from 43.156.11.162 port 58664:11: Bye Bye [preauth] Feb 9 14:50:10.138761 sshd[2619]: Disconnected from invalid user heinricy 43.156.11.162 port 58664 [preauth] Feb 9 14:50:10.141249 systemd[1]: sshd@132-147.75.49.59:22-43.156.11.162:58664.service: Deactivated successfully. Feb 9 14:50:10.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-147.75.49.59:22-43.156.11.162:58664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:10.233682 kernel: audit: type=1131 audit(1707490210.141:548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-147.75.49.59:22-43.156.11.162:58664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:11.991915 systemd[1]: Started sshd@133-147.75.49.59:22-171.244.37.97:41442.service. Feb 9 14:50:11.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-147.75.49.59:22-171.244.37.97:41442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:12.084677 kernel: audit: type=1130 audit(1707490211.991:549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-147.75.49.59:22-171.244.37.97:41442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:13.322201 sshd[2625]: Invalid user tehchunaik from 171.244.37.97 port 41442 Feb 9 14:50:13.328356 sshd[2625]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:13.329354 sshd[2625]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:50:13.329444 sshd[2625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:50:13.330361 sshd[2625]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:13.330000 audit[2625]: USER_AUTH pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tehchunaik" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:50:13.424695 kernel: audit: type=1100 audit(1707490213.330:550): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tehchunaik" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:50:15.446878 sshd[2625]: Failed password for invalid user tehchunaik from 171.244.37.97 port 41442 ssh2 Feb 9 14:50:17.734353 sshd[2625]: Received disconnect from 171.244.37.97 port 41442:11: Bye Bye [preauth] Feb 9 14:50:17.734353 sshd[2625]: Disconnected from invalid user tehchunaik 171.244.37.97 port 41442 [preauth] Feb 9 14:50:17.736971 systemd[1]: sshd@133-147.75.49.59:22-171.244.37.97:41442.service: Deactivated successfully. Feb 9 14:50:17.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-147.75.49.59:22-171.244.37.97:41442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:17.830472 kernel: audit: type=1131 audit(1707490217.736:551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-147.75.49.59:22-171.244.37.97:41442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:29.636855 systemd[1]: Started sshd@134-147.75.49.59:22-177.148.230.13:49240.service. Feb 9 14:50:29.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-147.75.49.59:22-177.148.230.13:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:29.730561 kernel: audit: type=1130 audit(1707490229.636:552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-147.75.49.59:22-177.148.230.13:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:30.666340 sshd[2629]: Invalid user aircon from 177.148.230.13 port 49240 Feb 9 14:50:30.672404 sshd[2629]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:30.673366 sshd[2629]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:50:30.673456 sshd[2629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.148.230.13 Feb 9 14:50:30.674506 sshd[2629]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:30.674000 audit[2629]: USER_AUTH pid=2629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="aircon" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:50:30.768683 kernel: audit: type=1100 audit(1707490230.674:553): pid=2629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="aircon" exe="/usr/sbin/sshd" hostname=177.148.230.13 addr=177.148.230.13 terminal=ssh res=failed' Feb 9 14:50:31.791861 sshd[2629]: Failed password for invalid user aircon from 177.148.230.13 port 49240 ssh2 Feb 9 14:50:32.365891 sshd[2629]: Received disconnect from 177.148.230.13 port 49240:11: Bye Bye [preauth] Feb 9 14:50:32.365891 sshd[2629]: Disconnected from invalid user aircon 177.148.230.13 port 49240 [preauth] Feb 9 14:50:32.368383 systemd[1]: sshd@134-147.75.49.59:22-177.148.230.13:49240.service: Deactivated successfully. Feb 9 14:50:32.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-147.75.49.59:22-177.148.230.13:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:32.462687 kernel: audit: type=1131 audit(1707490232.368:554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-147.75.49.59:22-177.148.230.13:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:53.184702 systemd[1]: Started sshd@135-147.75.49.59:22-37.113.26.6:33606.service. Feb 9 14:50:53.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-147.75.49.59:22-37.113.26.6:33606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:53.278551 kernel: audit: type=1130 audit(1707490253.183:555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-147.75.49.59:22-37.113.26.6:33606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:53.832183 systemd[1]: Started sshd@136-147.75.49.59:22-219.92.10.208:59546.service. Feb 9 14:50:53.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-147.75.49.59:22-219.92.10.208:59546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:53.925694 kernel: audit: type=1130 audit(1707490253.830:556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-147.75.49.59:22-219.92.10.208:59546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:54.260573 sshd[2633]: Invalid user myalivpn from 37.113.26.6 port 33606 Feb 9 14:50:54.266551 sshd[2633]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:54.267684 sshd[2633]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:50:54.267774 sshd[2633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:50:54.268726 sshd[2633]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:54.267000 audit[2633]: USER_AUTH pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="myalivpn" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:50:54.366469 kernel: audit: type=1100 audit(1707490254.267:557): pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="myalivpn" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:50:55.011074 sshd[2636]: Invalid user zara from 219.92.10.208 port 59546 Feb 9 14:50:55.017289 sshd[2636]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:55.018274 sshd[2636]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:50:55.018364 sshd[2636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.10.208 Feb 9 14:50:55.019275 sshd[2636]: pam_faillock(sshd:auth): User unknown Feb 9 14:50:55.018000 audit[2636]: USER_AUTH pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="zara" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:50:55.112468 kernel: audit: type=1100 audit(1707490255.018:558): pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="zara" exe="/usr/sbin/sshd" hostname=219.92.10.208 addr=219.92.10.208 terminal=ssh res=failed' Feb 9 14:50:56.013828 sshd[2633]: Failed password for invalid user myalivpn from 37.113.26.6 port 33606 ssh2 Feb 9 14:50:56.568662 sshd[2636]: Failed password for invalid user zara from 219.92.10.208 port 59546 ssh2 Feb 9 14:50:56.638682 sshd[2633]: Received disconnect from 37.113.26.6 port 33606:11: Bye Bye [preauth] Feb 9 14:50:56.638682 sshd[2633]: Disconnected from invalid user myalivpn 37.113.26.6 port 33606 [preauth] Feb 9 14:50:56.641191 systemd[1]: sshd@135-147.75.49.59:22-37.113.26.6:33606.service: Deactivated successfully. Feb 9 14:50:56.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-147.75.49.59:22-37.113.26.6:33606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:56.734675 kernel: audit: type=1131 audit(1707490256.640:559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-147.75.49.59:22-37.113.26.6:33606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:57.323081 sshd[2636]: Received disconnect from 219.92.10.208 port 59546:11: Bye Bye [preauth] Feb 9 14:50:57.323081 sshd[2636]: Disconnected from invalid user zara 219.92.10.208 port 59546 [preauth] Feb 9 14:50:57.325648 systemd[1]: sshd@136-147.75.49.59:22-219.92.10.208:59546.service: Deactivated successfully. Feb 9 14:50:57.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-147.75.49.59:22-219.92.10.208:59546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:50:57.419680 kernel: audit: type=1131 audit(1707490257.324:560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-147.75.49.59:22-219.92.10.208:59546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:03.922223 systemd[1]: Started sshd@137-147.75.49.59:22-101.43.88.44:55042.service. Feb 9 14:51:03.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-147.75.49.59:22-101.43.88.44:55042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:04.015685 kernel: audit: type=1130 audit(1707490263.920:561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-147.75.49.59:22-101.43.88.44:55042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:04.692507 sshd[2643]: Invalid user bangl from 101.43.88.44 port 55042 Feb 9 14:51:04.698618 sshd[2643]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:04.699609 sshd[2643]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:51:04.699698 sshd[2643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.43.88.44 Feb 9 14:51:04.700592 sshd[2643]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:04.699000 audit[2643]: USER_AUTH pid=2643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="bangl" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:51:04.793470 kernel: audit: type=1100 audit(1707490264.699:562): pid=2643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="bangl" exe="/usr/sbin/sshd" hostname=101.43.88.44 addr=101.43.88.44 terminal=ssh res=failed' Feb 9 14:51:06.485799 sshd[2643]: Failed password for invalid user bangl from 101.43.88.44 port 55042 ssh2 Feb 9 14:51:06.896192 sshd[2643]: Received disconnect from 101.43.88.44 port 55042:11: Bye Bye [preauth] Feb 9 14:51:06.896192 sshd[2643]: Disconnected from invalid user bangl 101.43.88.44 port 55042 [preauth] Feb 9 14:51:06.898722 systemd[1]: sshd@137-147.75.49.59:22-101.43.88.44:55042.service: Deactivated successfully. Feb 9 14:51:06.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-147.75.49.59:22-101.43.88.44:55042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:06.992663 kernel: audit: type=1131 audit(1707490266.897:563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-147.75.49.59:22-101.43.88.44:55042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:10.710245 systemd[1]: Started sshd@138-147.75.49.59:22-103.14.226.92:48280.service. Feb 9 14:51:10.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-147.75.49.59:22-103.14.226.92:48280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:10.803689 kernel: audit: type=1130 audit(1707490270.708:564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-147.75.49.59:22-103.14.226.92:48280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:11.804705 sshd[2647]: Invalid user fo_user from 103.14.226.92 port 48280 Feb 9 14:51:11.810744 sshd[2647]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:11.811836 sshd[2647]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:51:11.811924 sshd[2647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.226.92 Feb 9 14:51:11.812852 sshd[2647]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:11.811000 audit[2647]: USER_AUTH pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="fo_user" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:51:11.906695 kernel: audit: type=1100 audit(1707490271.811:565): pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="fo_user" exe="/usr/sbin/sshd" hostname=103.14.226.92 addr=103.14.226.92 terminal=ssh res=failed' Feb 9 14:51:14.223195 sshd[2647]: Failed password for invalid user fo_user from 103.14.226.92 port 48280 ssh2 Feb 9 14:51:15.278522 sshd[2647]: Received disconnect from 103.14.226.92 port 48280:11: Bye Bye [preauth] Feb 9 14:51:15.278522 sshd[2647]: Disconnected from invalid user fo_user 103.14.226.92 port 48280 [preauth] Feb 9 14:51:15.281000 systemd[1]: sshd@138-147.75.49.59:22-103.14.226.92:48280.service: Deactivated successfully. Feb 9 14:51:15.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-147.75.49.59:22-103.14.226.92:48280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:15.374469 kernel: audit: type=1131 audit(1707490275.279:566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-147.75.49.59:22-103.14.226.92:48280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:17.062269 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:51:17.061Z","caller":"mvcc/index.go:214","msg":"compact tree index","revision":1761} Feb 9 14:51:17.078691 etcd-wrapper[1710]: {"level":"info","ts":"2024-02-09T14:51:17.078Z","caller":"mvcc/kvstore_compaction.go:57","msg":"finished scheduled compaction","compact-revision":1761,"took":"15.708898ms"} Feb 9 14:51:20.899830 systemd[1]: Started sshd@139-147.75.49.59:22-171.244.37.97:41088.service. Feb 9 14:51:20.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-147.75.49.59:22-171.244.37.97:41088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:20.993680 kernel: audit: type=1130 audit(1707490280.898:567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-147.75.49.59:22-171.244.37.97:41088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:21.244805 systemd[1]: Started sshd@140-147.75.49.59:22-186.7.75.15:60590.service. Feb 9 14:51:21.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-147.75.49.59:22-186.7.75.15:60590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:21.342682 kernel: audit: type=1130 audit(1707490281.243:568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-147.75.49.59:22-186.7.75.15:60590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:22.655824 systemd[1]: Started sshd@141-147.75.49.59:22-43.134.180.37:58860.service. Feb 9 14:51:22.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-147.75.49.59:22-43.134.180.37:58860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:22.749677 kernel: audit: type=1130 audit(1707490282.654:569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-147.75.49.59:22-43.134.180.37:58860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:22.814798 sshd[2652]: Invalid user ly from 171.244.37.97 port 41088 Feb 9 14:51:22.820768 sshd[2652]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:22.821833 sshd[2652]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:51:22.821922 sshd[2652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.37.97 Feb 9 14:51:22.822825 sshd[2652]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:22.821000 audit[2652]: USER_AUTH pid=2652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ly" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:51:22.921688 kernel: audit: type=1100 audit(1707490282.821:570): pid=2652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ly" exe="/usr/sbin/sshd" hostname=171.244.37.97 addr=171.244.37.97 terminal=ssh res=failed' Feb 9 14:51:23.742564 sshd[2661]: Invalid user tarkhabi from 43.134.180.37 port 58860 Feb 9 14:51:23.748580 sshd[2661]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:23.749532 sshd[2661]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:51:23.749618 sshd[2661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.134.180.37 Feb 9 14:51:23.750573 sshd[2661]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:23.749000 audit[2661]: USER_AUTH pid=2661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tarkhabi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:51:23.844703 kernel: audit: type=1100 audit(1707490283.749:571): pid=2661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="tarkhabi" exe="/usr/sbin/sshd" hostname=43.134.180.37 addr=43.134.180.37 terminal=ssh res=failed' Feb 9 14:51:24.796695 systemd[1]: Started sshd@142-147.75.49.59:22-190.107.30.118:44076.service. Feb 9 14:51:24.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-147.75.49.59:22-190.107.30.118:44076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:24.889537 kernel: audit: type=1130 audit(1707490284.795:572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-147.75.49.59:22-190.107.30.118:44076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:25.411074 sshd[2652]: Failed password for invalid user ly from 171.244.37.97 port 41088 ssh2 Feb 9 14:51:26.143107 sshd[2661]: Failed password for invalid user tarkhabi from 43.134.180.37 port 58860 ssh2 Feb 9 14:51:26.463396 sshd[2664]: Invalid user test from 190.107.30.118 port 44076 Feb 9 14:51:26.469381 sshd[2664]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:26.470419 sshd[2664]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:51:26.470540 sshd[2664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.107.30.118 Feb 9 14:51:26.471412 sshd[2664]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:26.470000 audit[2664]: USER_AUTH pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=190.107.30.118 addr=190.107.30.118 terminal=ssh res=failed' Feb 9 14:51:26.520060 sshd[2661]: Received disconnect from 43.134.180.37 port 58860:11: Bye Bye [preauth] Feb 9 14:51:26.520060 sshd[2661]: Disconnected from invalid user tarkhabi 43.134.180.37 port 58860 [preauth] Feb 9 14:51:26.520688 systemd[1]: sshd@141-147.75.49.59:22-43.134.180.37:58860.service: Deactivated successfully. Feb 9 14:51:26.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-147.75.49.59:22-43.134.180.37:58860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:26.655551 kernel: audit: type=1100 audit(1707490286.470:573): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=190.107.30.118 addr=190.107.30.118 terminal=ssh res=failed' Feb 9 14:51:26.655576 kernel: audit: type=1131 audit(1707490286.519:574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-147.75.49.59:22-43.134.180.37:58860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:26.764441 sshd[2652]: Received disconnect from 171.244.37.97 port 41088:11: Bye Bye [preauth] Feb 9 14:51:26.764441 sshd[2652]: Disconnected from invalid user ly 171.244.37.97 port 41088 [preauth] Feb 9 14:51:26.766853 systemd[1]: sshd@139-147.75.49.59:22-171.244.37.97:41088.service: Deactivated successfully. Feb 9 14:51:26.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-147.75.49.59:22-171.244.37.97:41088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:26.860679 kernel: audit: type=1131 audit(1707490286.765:575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-147.75.49.59:22-171.244.37.97:41088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:28.276683 sshd[2664]: Failed password for invalid user test from 190.107.30.118 port 44076 ssh2 Feb 9 14:51:28.965849 sshd[2669]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:28.971753 sshd[2664]: Postponed keyboard-interactive for invalid user test from 190.107.30.118 port 44076 ssh2 [preauth] Feb 9 14:51:29.385487 sshd[2669]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:51:29.386520 sshd[2669]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:29.385000 audit[2669]: USER_AUTH pid=2669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=190.107.30.118 addr=190.107.30.118 terminal=ssh res=failed' Feb 9 14:51:29.479486 kernel: audit: type=1100 audit(1707490289.385:576): pid=2669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=190.107.30.118 addr=190.107.30.118 terminal=ssh res=failed' Feb 9 14:51:30.592474 sshd[2655]: Connection closed by 186.7.75.15 port 60590 [preauth] Feb 9 14:51:30.592943 systemd[1]: sshd@140-147.75.49.59:22-186.7.75.15:60590.service: Deactivated successfully. Feb 9 14:51:30.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-147.75.49.59:22-186.7.75.15:60590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:30.686676 kernel: audit: type=1131 audit(1707490290.591:577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-147.75.49.59:22-186.7.75.15:60590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:31.131916 sshd[2664]: PAM: Permission denied for illegal user test from 190.107.30.118 Feb 9 14:51:31.132724 sshd[2664]: Failed keyboard-interactive/pam for invalid user test from 190.107.30.118 port 44076 ssh2 Feb 9 14:51:31.467625 sshd[2664]: Connection closed by invalid user test 190.107.30.118 port 44076 [preauth] Feb 9 14:51:31.470187 systemd[1]: sshd@142-147.75.49.59:22-190.107.30.118:44076.service: Deactivated successfully. Feb 9 14:51:31.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-147.75.49.59:22-190.107.30.118:44076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:31.563523 kernel: audit: type=1131 audit(1707490291.469:578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-147.75.49.59:22-190.107.30.118:44076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:44.408452 systemd[1]: Started sshd@143-147.75.49.59:22-37.113.26.6:32846.service. Feb 9 14:51:44.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-147.75.49.59:22-37.113.26.6:32846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:44.501526 kernel: audit: type=1130 audit(1707490304.407:579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-147.75.49.59:22-37.113.26.6:32846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 14:51:45.481260 sshd[2673]: Invalid user benyamin from 37.113.26.6 port 32846 Feb 9 14:51:45.487283 sshd[2673]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:45.488248 sshd[2673]: pam_unix(sshd:auth): check pass; user unknown Feb 9 14:51:45.488337 sshd[2673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.113.26.6 Feb 9 14:51:45.489229 sshd[2673]: pam_faillock(sshd:auth): User unknown Feb 9 14:51:45.487000 audit[2673]: USER_AUTH pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="benyamin" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed' Feb 9 14:51:45.582647 kernel: audit: type=1100 audit(1707490305.487:580): pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="benyamin" exe="/usr/sbin/sshd" hostname=37.113.26.6 addr=37.113.26.6 terminal=ssh res=failed'