F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 55.599253] audit: type=1400 audit(1719332750.721:346): avc: denied { watch } for pid=2831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7798 scontext=system_u:system_r:container_t:s0:c436,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 55.601701] audit: type=1300 audit(1719332750.721:346): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0005b0fc0 a2=fc6 a3=0 items=0 ppid=2665 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c436,c611 key=(null) [ 55.604968] audit: type=1327 audit(1719332750.721:346): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 56.373440] audit: type=1400 audit(1719332751.499:347): avc: denied { watch } for pid=2810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="overlay" ino=7804 scontext=system_u:system_r:container_t:s0:c167,c786 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.376129] audit: type=1400 audit(1719332751.500:348): avc: denied { watch } for pid=2810 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="overlay" ino=7800 scontext=system_u:system_r:container_t:s0:c167,c786 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.379304] audit: type=1300 audit(1719332751.500:348): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00783c120 a2=fc6 a3=0 items=0 ppid=2666 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c167,c786 key=(null) [ 56.382419] audit: type=1327 audit(1719332751.500:348): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31392E313733002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 59.994826] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 33 scanned by (udev-worker) (3004) [ 60.340488] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 33 scanned by (udev-worker) (3005) [ 60.996531] kauditd_printk_skb: 59 callbacks suppressed [ 60.996533] audit: type=1106 audit(1719332756.124:398): pid=2986 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 60.999498] audit: type=1104 audit(1719332756.124:399): pid=2986 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 62.958687] audit: type=1106 audit(1719332758.087:400): pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 62.961613] audit: type=1104 audit(1719332758.087:401): pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 62.987872] audit: type=1106 audit(1719332758.116:402): pid=2092 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 62.991992] audit: type=1104 audit(1719332758.117:403): pid=2092 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 62.994535] audit: type=1131 audit(1719332758.119:404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.19.173:22-139.178.89.65:43266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 73.388482] audit: type=1400 audit(1719332768.520:405): avc: denied { watch } for pid=2831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7798 scontext=system_u:system_r:container_t:s0:c436,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 73.391696] audit: type=1300 audit(1719332768.520:405): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ee7340 a2=fc6 a3=0 items=0 ppid=2665 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c436,c611 key=(null) [ 73.395703] audit: type=1327 audit(1719332768.520:405): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 73.399222] audit: type=1400 audit(1719332768.522:406): avc: denied { watch } for pid=2831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7798 scontext=system_u:system_r:container_t:s0:c436,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 73.401637] audit: type=1300 audit(1719332768.522:406): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010272c0 a2=fc6 a3=0 items=0 ppid=2665 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c436,c611 key=(null) [ 73.405429] audit: type=1327 audit(1719332768.522:406): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 73.408074] audit: type=1400 audit(1719332768.522:407): avc: denied { watch } for pid=2831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7798 scontext=system_u:system_r:container_t:s0:c436,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 73.410362] audit: type=1300 audit(1719332768.522:407): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001027300 a2=fc6 a3=0 items=0 ppid=2665 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c436,c611 key=(null) [ 73.413374] audit: type=1327 audit(1719332768.522:407): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 73.416073] audit: type=1400 audit(1719332768.522:408): avc: denied { watch } for pid=2831 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7798 scontext=system_u:system_r:container_t:s0:c436,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 79.391452] kauditd_printk_skb: 205 callbacks suppressed [ 79.391455] audit: type=1334 audit(1719332774.523:484): prog-id=120 op=LOAD [ 79.393320] audit: type=1334 audit(1719332774.525:485): prog-id=121 op=LOAD [ 79.394604] audit: type=1300 audit(1719332774.525:485): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000131988 a2=78 a3=0 items=0 ppid=3300 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.397456] audit: type=1327 audit(1719332774.525:485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462373263326230313563326264343936356532393433306633666463 [ 79.400692] audit: type=1334 audit(1719332774.526:486): prog-id=122 op=LOAD [ 79.401524] audit: type=1300 audit(1719332774.526:486): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000131720 a2=78 a3=0 items=0 ppid=3300 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.404808] audit: type=1327 audit(1719332774.526:486): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462373263326230313563326264343936356532393433306633666463 [ 79.408403] audit: type=1334 audit(1719332774.526:487): prog-id=122 op=UNLOAD [ 79.409543] audit: type=1334 audit(1719332774.526:488): prog-id=121 op=UNLOAD [ 79.415027] audit: type=1334 audit(1719332774.526:489): prog-id=123 op=LOAD [ 102.324027] kauditd_printk_skb: 2 callbacks suppressed [ 102.324029] audit: type=1334 audit(1719332797.459:490): prog-id=124 op=LOAD [ 102.326168] audit: type=1334 audit(1719332797.461:491): prog-id=125 op=LOAD [ 102.327025] audit: type=1300 audit(1719332797.461:491): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001ab988 a2=78 a3=0 items=0 ppid=3214 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.332370] audit: type=1327 audit(1719332797.461:491): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653133633234643365656336613831303433613631633364323636 [ 102.336393] audit: type=1334 audit(1719332797.461:492): prog-id=126 op=LOAD [ 102.338460] audit: type=1300 audit(1719332797.461:492): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001ab720 a2=78 a3=0 items=0 ppid=3214 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.346522] audit: type=1327 audit(1719332797.461:492): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439653133633234643365656336613831303433613631633364323636 [ 102.350187] audit: type=1334 audit(1719332797.461:493): prog-id=126 op=UNLOAD [ 102.351382] audit: type=1334 audit(1719332797.461:494): prog-id=125 op=UNLOAD [ 102.352651] audit: type=1334 audit(1719332797.461:495): prog-id=127 op=LOAD [ 107.813624] kauditd_printk_skb: 3330 callbacks suppressed [ 107.813627] audit: type=1106 audit(1719332802.950:2166): pid=3898 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.817029] audit: type=1104 audit(1719332802.951:2167): pid=3898 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.823085] audit: type=1131 audit(1719332802.954:2168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.19.173:22-139.178.89.65:33774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 108.891212] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_net: link becomes ready [ 108.892078] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_host: link becomes ready [ 109.770250] NET: Registered PF_ALG protocol family [ 109.777731] audit: type=1334 audit(1719332804.914:2169): prog-id=959 op=LOAD [ 109.778704] audit: type=1300 audit(1719332804.914:2169): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd6531ca70 a2=74 a3=7ffd6531ca70 items=0 ppid=3974 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.781827] audit: type=1327 audit(1719332804.914:2169): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 109.784368] audit: type=1334 audit(1719332804.914:2170): prog-id=959 op=UNLOAD [ 109.785743] audit: type=1334 audit(1719332804.914:2171): prog-id=960 op=LOAD [ 109.786706] audit: type=1300 audit(1719332804.914:2171): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd6531ca00 a2=80 a3=0 items=0 ppid=3974 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.789344] audit: type=1327 audit(1719332804.914:2171): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:26:45 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 110.878091] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:26:46 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 111.514112] eth0: renamed from tmpd3336 [ 111.518211] IPv6: ADDRCONF(NETDEV_CHANGE): lxca311a7b773b5: link becomes ready [ 111.571234] eth0: renamed from tmpafd24 [ 111.577634] IPv6: ADDRCONF(NETDEV_CHANGE): lxc5f309d9d1e78: link becomes ready This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:26:47 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 112.841137] kauditd_printk_skb: 286 callbacks suppressed [ 112.841140] audit: type=1130 audit(1719332807.977:2280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.19.173:22-139.178.89.65:43392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 113.028929] audit: type=1101 audit(1719332808.165:2281): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.032259] audit: type=1103 audit(1719332808.165:2282): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.037875] audit: type=1006 audit(1719332808.165:2283): pid=4334 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 113.039444] audit: type=1300 audit(1719332808.165:2283): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb2287ea0 a2=3 a3=7f3c173fc480 items=0 ppid=1 pid=4334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.052721] audit: type=1327 audit(1719332808.165:2283): proctitle=737368643A20636F7265205B707269765D [ 113.080376] audit: type=1105 audit(1719332808.214:2284): pid=4334 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.084582] audit: type=1103 audit(1719332808.216:2285): pid=4336 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:26:48 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 113.575251] audit: type=1106 audit(1719332808.711:2286): pid=4334 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.587544] audit: type=1104 audit(1719332808.724:2287): pid=4334 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:26:49 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:26:50 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 117.963901] kauditd_printk_skb: 270 callbacks suppressed [ 117.963904] audit: type=1334 audit(1719332813.100:2392): prog-id=1056 op=LOAD [ 117.966419] audit: type=1334 audit(1719332813.103:2393): prog-id=1057 op=LOAD [ 117.967197] audit: type=1300 audit(1719332813.103:2393): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00018d988 a2=78 a3=0 items=0 ppid=4369 pid=4393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.970301] audit: type=1327 audit(1719332813.103:2393): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643234613665653330656431636436376565613234613765636662 [ 117.975562] audit: type=1334 audit(1719332813.103:2394): prog-id=1058 op=LOAD [ 117.978492] audit: type=1300 audit(1719332813.103:2394): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00018d720 a2=78 a3=0 items=0 ppid=4369 pid=4393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.982855] audit: type=1327 audit(1719332813.103:2394): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643234613665653330656431636436376565613234613765636662 [ 117.988422] audit: type=1334 audit(1719332813.103:2395): prog-id=1058 op=UNLOAD [ 117.989502] audit: type=1334 audit(1719332813.103:2396): prog-id=1057 op=UNLOAD [ 117.990594] audit: type=1334 audit(1719332813.103:2397): prog-id=1059 op=LOAD [ 124.203169] kauditd_printk_skb: 152 callbacks suppressed [ 124.203173] audit: type=1130 audit(1719332819.338:2462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.19.173:22-139.178.89.65:38042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 124.354275] audit: type=1101 audit(1719332819.491:2463): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.357015] audit: type=1103 audit(1719332819.491:2464): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.359577] audit: type=1006 audit(1719332819.491:2465): pid=4539 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 124.361067] audit: type=1300 audit(1719332819.491:2465): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd247dde0 a2=3 a3=7f12ab78a480 items=0 ppid=1 pid=4539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.364008] audit: type=1327 audit(1719332819.491:2465): proctitle=737368643A20636F7265205B707269765D [ 124.376657] audit: type=1105 audit(1719332819.513:2466): pid=4539 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.380292] audit: type=1103 audit(1719332819.513:2467): pid=4541 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.588118] audit: type=1106 audit(1719332819.724:2468): pid=4539 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.592667] audit: type=1104 audit(1719332819.725:2469): pid=4539 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.635449] kauditd_printk_skb: 1 callbacks suppressed [ 129.635452] audit: type=1130 audit(1719332824.772:2471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.19.173:22-139.178.89.65:38050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 129.822335] audit: type=1101 audit(1719332824.958:2472): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.829350] audit: type=1103 audit(1719332824.966:2473): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.837382] audit: type=1006 audit(1719332824.966:2474): pid=4552 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 129.839877] audit: type=1300 audit(1719332824.966:2474): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff124c0e10 a2=3 a3=7fefddf1f480 items=0 ppid=1 pid=4552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.846491] audit: type=1327 audit(1719332824.966:2474): proctitle=737368643A20636F7265205B707269765D [ 129.861117] audit: type=1105 audit(1719332824.997:2475): pid=4552 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.865900] audit: type=1103 audit(1719332825.002:2476): pid=4554 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.102597] audit: type=1106 audit(1719332825.239:2477): pid=4552 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.107354] audit: type=1104 audit(1719332825.239:2478): pid=4552 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.163978] kauditd_printk_skb: 35 callbacks suppressed [ 136.163981] audit: type=1130 audit(1719332831.300:2502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.19.173:22-139.178.89.65:40644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.328860] audit: type=1101 audit(1719332831.465:2503): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.332009] audit: type=1103 audit(1719332831.468:2504): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.334989] audit: type=1006 audit(1719332831.468:2505): pid=4588 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 136.336929] audit: type=1300 audit(1719332831.468:2505): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2e80f2e0 a2=3 a3=7fabb4a65480 items=0 ppid=1 pid=4588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.340022] audit: type=1327 audit(1719332831.468:2505): proctitle=737368643A20636F7265205B707269765D [ 136.356904] audit: type=1105 audit(1719332831.493:2506): pid=4588 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.360571] audit: type=1103 audit(1719332831.497:2507): pid=4590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.555879] audit: type=1106 audit(1719332831.692:2508): pid=4588 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.564557] audit: type=1104 audit(1719332831.692:2509): pid=4588 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.603859] kauditd_printk_skb: 1 callbacks suppressed [ 141.603862] audit: type=1130 audit(1719332836.740:2511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.19.173:22-139.178.89.65:39098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.802416] audit: type=1101 audit(1719332836.937:2512): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.805074] audit: type=1103 audit(1719332836.939:2513): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.808054] audit: type=1006 audit(1719332836.939:2514): pid=4603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 141.810124] audit: type=1300 audit(1719332836.939:2514): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1b0d3c10 a2=3 a3=7f0bc2a53480 items=0 ppid=1 pid=4603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.813719] audit: type=1327 audit(1719332836.939:2514): proctitle=737368643A20636F7265205B707269765D [ 141.826490] audit: type=1105 audit(1719332836.963:2515): pid=4603 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.832755] audit: type=1103 audit(1719332836.969:2516): pid=4605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.080256] audit: type=1106 audit(1719332837.216:2517): pid=4603 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.083416] audit: type=1104 audit(1719332837.217:2518): pid=4603 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.119995] kauditd_printk_skb: 1 callbacks suppressed [ 147.119998] audit: type=1130 audit(1719332842.257:2520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.19.173:22-139.178.89.65:39104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.284285] audit: type=1101 audit(1719332842.421:2521): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.287710] audit: type=1103 audit(1719332842.424:2522): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.290124] audit: type=1006 audit(1719332842.424:2523): pid=4615 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 147.291468] audit: type=1300 audit(1719332842.424:2523): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd59673db0 a2=3 a3=7f89814f9480 items=0 ppid=1 pid=4615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.294458] audit: type=1327 audit(1719332842.424:2523): proctitle=737368643A20636F7265205B707269765D [ 147.314335] audit: type=1105 audit(1719332842.451:2524): pid=4615 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.317616] audit: type=1103 audit(1719332842.454:2525): pid=4617 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.596594] audit: type=1106 audit(1719332842.733:2526): pid=4615 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.599234] audit: type=1104 audit(1719332842.733:2527): pid=4615 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.639473] kauditd_printk_skb: 1 callbacks suppressed [ 152.639476] audit: type=1130 audit(1719332847.776:2529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.19.173:22-139.178.89.65:53042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.821074] audit: type=1101 audit(1719332847.958:2530): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.826548] audit: type=1103 audit(1719332847.963:2531): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.831880] audit: type=1006 audit(1719332847.963:2532): pid=4626 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 152.834446] audit: type=1300 audit(1719332847.963:2532): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd9800240 a2=3 a3=7f43c4cb5480 items=0 ppid=1 pid=4626 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.839524] audit: type=1327 audit(1719332847.963:2532): proctitle=737368643A20636F7265205B707269765D [ 152.857257] audit: type=1105 audit(1719332847.994:2533): pid=4626 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.862423] audit: type=1103 audit(1719332847.999:2534): pid=4628 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.137420] audit: type=1106 audit(1719332848.274:2535): pid=4626 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.143522] audit: type=1104 audit(1719332848.274:2536): pid=4626 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.184486] kauditd_printk_skb: 1 callbacks suppressed [ 158.184489] audit: type=1130 audit(1719332853.320:2538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.19.173:22-139.178.89.65:53058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.358116] audit: type=1101 audit(1719332853.495:2539): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.361652] audit: type=1103 audit(1719332853.495:2540): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.364684] audit: type=1006 audit(1719332853.495:2541): pid=4637 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 158.367459] audit: type=1300 audit(1719332853.495:2541): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9745f4a0 a2=3 a3=7ffbfcd49480 items=0 ppid=1 pid=4637 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.371681] audit: type=1327 audit(1719332853.495:2541): proctitle=737368643A20636F7265205B707269765D [ 158.386252] audit: type=1105 audit(1719332853.522:2542): pid=4637 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.389417] audit: type=1103 audit(1719332853.525:2543): pid=4639 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.610593] audit: type=1106 audit(1719332853.747:2544): pid=4637 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.613624] audit: type=1104 audit(1719332853.747:2545): pid=4637 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.265772] kauditd_printk_skb: 54 callbacks suppressed [ 163.265775] audit: type=1106 audit(1719332858.402:2584): pid=4689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.269933] audit: type=1104 audit(1719332858.402:2585): pid=4689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.273830] audit: type=1131 audit(1719332858.406:2586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.19.173:22-139.178.89.65:39786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.303010] audit: type=1130 audit(1719332863.438:2587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.19.173:22-139.178.89.65:39798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.461133] audit: type=1101 audit(1719332863.598:2588): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.467285] audit: type=1103 audit(1719332863.605:2589): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.470833] audit: type=1006 audit(1719332863.605:2590): pid=4703 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 168.472842] audit: type=1300 audit(1719332863.605:2590): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc4041ae0 a2=3 a3=7fde6170a480 items=0 ppid=1 pid=4703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.476703] audit: type=1327 audit(1719332863.605:2590): proctitle=737368643A20636F7265205B707269765D [ 168.496661] audit: type=1105 audit(1719332863.634:2591): pid=4703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.500964] audit: type=1103 audit(1719332863.638:2592): pid=4705 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.692525] audit: type=1106 audit(1719332863.830:2593): pid=4703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.696290] audit: type=1104 audit(1719332863.830:2594): pid=4703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.723257] kauditd_printk_skb: 1 callbacks suppressed [ 173.723259] audit: type=1130 audit(1719332868.861:2596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.19.173:22-139.178.89.65:39844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.878712] audit: type=1101 audit(1719332869.016:2597): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.881913] audit: type=1103 audit(1719332869.018:2598): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.884318] audit: type=1006 audit(1719332869.018:2599): pid=4715 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 173.886191] audit: type=1300 audit(1719332869.018:2599): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8ec7e5b0 a2=3 a3=7f706b9cf480 items=0 ppid=1 pid=4715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.888989] audit: type=1327 audit(1719332869.018:2599): proctitle=737368643A20636F7265205B707269765D [ 173.906284] audit: type=1105 audit(1719332869.044:2600): pid=4715 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.910526] audit: type=1103 audit(1719332869.048:2601): pid=4717 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.108260] audit: type=1106 audit(1719332869.246:2602): pid=4715 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.112377] audit: type=1104 audit(1719332869.246:2603): pid=4715 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.147296] kauditd_printk_skb: 31 callbacks suppressed [ 179.147298] audit: type=1130 audit(1719332874.284:2615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.19.173:22-139.178.89.65:39852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.313940] audit: type=1101 audit(1719332874.451:2616): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.317072] audit: type=1103 audit(1719332874.454:2617): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.320051] audit: type=1006 audit(1719332874.454:2618): pid=4730 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 179.323024] audit: type=1300 audit(1719332874.454:2618): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd56a4e880 a2=3 a3=7f4c294db480 items=0 ppid=1 pid=4730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.325832] audit: type=1327 audit(1719332874.454:2618): proctitle=737368643A20636F7265205B707269765D [ 179.341951] audit: type=1105 audit(1719332874.479:2619): pid=4730 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.346631] audit: type=1103 audit(1719332874.484:2620): pid=4732 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.562261] audit: type=1106 audit(1719332874.699:2621): pid=4730 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.565201] audit: type=1104 audit(1719332874.700:2622): pid=4730 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.607467] kauditd_printk_skb: 1 callbacks suppressed [ 184.607469] audit: type=1130 audit(1719332879.746:2624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.19.173:22-139.178.89.65:56472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.774485] audit: type=1101 audit(1719332879.913:2625): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.779905] audit: type=1103 audit(1719332879.917:2626): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.789070] audit: type=1006 audit(1719332879.917:2627): pid=4744 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 184.790643] audit: type=1300 audit(1719332879.917:2627): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff06fd93e0 a2=3 a3=7f1da420d480 items=0 ppid=1 pid=4744 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.793686] audit: type=1327 audit(1719332879.917:2627): proctitle=737368643A20636F7265205B707269765D [ 184.807901] audit: type=1105 audit(1719332879.946:2628): pid=4744 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.811953] audit: type=1103 audit(1719332879.949:2629): pid=4746 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.032425] audit: type=1106 audit(1719332880.171:2630): pid=4744 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.035672] audit: type=1104 audit(1719332880.174:2631): pid=4744 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.072157] kauditd_printk_skb: 1 callbacks suppressed [ 190.072160] audit: type=1130 audit(1719332885.211:2633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.19.173:22-139.178.89.65:56488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.237086] audit: type=1101 audit(1719332885.376:2634): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.244404] audit: type=1103 audit(1719332885.379:2635): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.247647] audit: type=1006 audit(1719332885.379:2636): pid=4756 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 190.249815] audit: type=1300 audit(1719332885.379:2636): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda1a213a0 a2=3 a3=7f5c75ff8480 items=0 ppid=1 pid=4756 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.256079] audit: type=1327 audit(1719332885.379:2636): proctitle=737368643A20636F7265205B707269765D [ 190.300013] audit: type=1105 audit(1719332885.439:2637): pid=4756 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.304235] audit: type=1103 audit(1719332885.439:2638): pid=4759 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.501793] audit: type=1106 audit(1719332885.640:2639): pid=4756 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.506136] audit: type=1104 audit(1719332885.640:2640): pid=4756 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:28:08 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 195.801647] kauditd_printk_skb: 41 callbacks suppressed [ 195.801651] audit: type=1106 audit(1719332890.937:2670): pid=4936 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.814754] audit: type=1104 audit(1719332890.937:2671): pid=4936 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.822900] audit: type=1131 audit(1719332890.949:2672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.19.173:22-139.178.89.65:51062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.847269] audit: type=1130 audit(1719332890.985:2673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.19.173:22-139.178.89.65:51070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.037859] audit: type=1101 audit(1719332891.176:2674): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.041789] audit: type=1103 audit(1719332891.176:2675): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.045015] audit: type=1006 audit(1719332891.176:2676): pid=4946 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 [ 196.046752] audit: type=1300 audit(1719332891.176:2676): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe05e86b50 a2=3 a3=7f017b998480 items=0 ppid=1 pid=4946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.050818] audit: type=1327 audit(1719332891.176:2676): proctitle=737368643A20636F7265205B707269765D [ 196.064214] audit: type=1105 audit(1719332891.202:2677): pid=4946 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.995033] kauditd_printk_skb: 90 callbacks suppressed [ 200.995036] audit: type=1334 audit(1719332896.134:2730): prog-id=1114 op=LOAD [ 200.996756] audit: type=1300 audit(1719332896.134:2730): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1edb3a40 a2=74 a3=7fff1edb3a40 items=0 ppid=5272 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.001546] audit: type=1327 audit(1719332896.134:2730): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 201.002777] audit: type=1334 audit(1719332896.134:2731): prog-id=1114 op=UNLOAD [ 201.003994] audit: type=1334 audit(1719332896.135:2732): prog-id=1115 op=LOAD [ 201.005347] audit: type=1300 audit(1719332896.135:2732): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1edb2ac0 a2=90 a3=2 items=0 ppid=5272 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.008454] audit: type=1327 audit(1719332896.135:2732): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 201.010078] audit: type=1334 audit(1719332896.135:2733): prog-id=1115 op=UNLOAD [ 201.011108] audit: type=1334 audit(1719332896.135:2734): prog-id=1116 op=LOAD [ 201.012606] audit: type=1300 audit(1719332896.135:2734): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1edb2ac0 a2=90 a3=2 items=0 ppid=5272 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.551871] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni)) [ 205.117472] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 207.369200] kauditd_printk_skb: 3682 callbacks suppressed [ 207.369203] audit: type=1334 audit(1719332902.509:4516): prog-id=1944 op=LOAD [ 207.372297] audit: type=1300 audit(1719332902.509:4516): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcb6f08bb0 a2=74 a3=7ffcb6f08bb0 items=0 ppid=5272 pid=5849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 207.377567] audit: type=1327 audit(1719332902.509:4516): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313733325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 207.384100] audit: type=1334 audit(1719332902.522:4517): prog-id=1944 op=UNLOAD [ 207.387164] audit: type=1334 audit(1719332902.522:4518): prog-id=1945 op=LOAD [ 207.388328] audit: type=1300 audit(1719332902.522:4518): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcb6f08b40 a2=80 a3=0 items=0 ppid=5272 pid=5849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 207.394550] audit: type=1327 audit(1719332902.522:4518): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313733325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 207.404973] audit: type=1334 audit(1719332902.522:4519): prog-id=1945 op=UNLOAD [ 207.405892] audit: type=1334 audit(1719332902.523:4520): prog-id=1946 op=LOAD [ 207.406688] audit: type=1300 audit(1719332902.523:4520): arch=c000003e syscall=321 success=yes exit=38 a0=5 a1=7ffcb6f088b0 a2=80 a3=0 items=0 ppid=5272 pid=5849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:28:23 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 213.024803] kauditd_printk_skb: 486 callbacks suppressed [ 213.024806] audit: type=1106 audit(1719332908.164:4710): pid=4957 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.564557] audit: type=1104 audit(1719332831.692:2509): pid=4588 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.603859] kauditd_printk_skb: 1 callbacks suppressed [ 141.603862] audit: type=1130 audit(1719332836.740:2511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.19.173:22-139.178.89.65:39098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.802416] audit: type=1101 audit(1719332836.937:2512): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.805074] audit: type=1103 audit(1719332836.939:2513): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.808054] audit: type=1006 audit(1719332836.939:2514): pid=4603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 141.810124] audit: type=1300 audit(1719332836.939:2514): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1b0d3c10 a2=3 a3=7f0bc2a53480 items=0 ppid=1 pid=4603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.813719] audit: type=1327 audit(1719332836.939:2514): proctitle=737368643A20636F7265205B707269765D [ 141.826490] audit: type=1105 audit(1719332836.963:2515): pid=4603 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.832755] audit: type=1103 audit(1719332836.969:2516): pid=4605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.080256] audit: type=1106 audit(1719332837.216:2517): pid=4603 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.083416] audit: type=1104 audit(1719332837.217:2518): pid=4603 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.119995] kauditd_printk_skb: 1 callbacks suppressed [ 147.119998] audit: type=1130 audit(1719332842.257:2520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.19.173:22-139.178.89.65:39104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.284285] audit: type=1101 audit(1719332842.421:2521): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.287710] audit: type=1103 audit(1719332842.424:2522): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.290124] audit: type=1006 audit(1719332842.424:2523): pid=4615 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 147.291468] audit: type=1300 audit(1719332842.424:2523): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd59673db0 a2=3 a3=7f89814f9480 items=0 ppid=1 pid=4615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.294458] audit: type=1327 audit(1719332842.424:2523): proctitle=737368643A20636F7265205B707269765D [ 147.314335] audit: type=1105 audit(1719332842.451:2524): pid=4615 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.317616] audit: type=1103 audit(1719332842.454:2525): pid=4617 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.596594] audit: type=1106 audit(1719332842.733:2526): pid=4615 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.599234] audit: type=1104 audit(1719332842.733:2527): pid=4615 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.639473] kauditd_printk_skb: 1 callbacks suppressed [ 152.639476] audit: type=1130 audit(1719332847.776:2529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.19.173:22-139.178.89.65:53042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.821074] audit: type=1101 audit(1719332847.958:2530): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.826548] audit: type=1103 audit(1719332847.963:2531): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.831880] audit: type=1006 audit(1719332847.963:2532): pid=4626 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 152.834446] audit: type=1300 audit(1719332847.963:2532): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd9800240 a2=3 a3=7f43c4cb5480 items=0 ppid=1 pid=4626 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.839524] audit: type=1327 audit(1719332847.963:2532): proctitle=737368643A20636F7265205B707269765D [ 152.857257] audit: type=1105 audit(1719332847.994:2533): pid=4626 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.862423] audit: type=1103 audit(1719332847.999:2534): pid=4628 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.137420] audit: type=1106 audit(1719332848.274:2535): pid=4626 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.143522] audit: type=1104 audit(1719332848.274:2536): pid=4626 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.184486] kauditd_printk_skb: 1 callbacks suppressed [ 158.184489] audit: type=1130 audit(1719332853.320:2538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.19.173:22-139.178.89.65:53058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.358116] audit: type=1101 audit(1719332853.495:2539): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.361652] audit: type=1103 audit(1719332853.495:2540): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.364684] audit: type=1006 audit(1719332853.495:2541): pid=4637 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 158.367459] audit: type=1300 audit(1719332853.495:2541): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9745f4a0 a2=3 a3=7ffbfcd49480 items=0 ppid=1 pid=4637 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.371681] audit: type=1327 audit(1719332853.495:2541): proctitle=737368643A20636F7265205B707269765D [ 158.386252] audit: type=1105 audit(1719332853.522:2542): pid=4637 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.389417] audit: type=1103 audit(1719332853.525:2543): pid=4639 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.610593] audit: type=1106 audit(1719332853.747:2544): pid=4637 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.613624] audit: type=1104 audit(1719332853.747:2545): pid=4637 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.265772] kauditd_printk_skb: 54 callbacks suppressed [ 163.265775] audit: type=1106 audit(1719332858.402:2584): pid=4689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.269933] audit: type=1104 audit(1719332858.402:2585): pid=4689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.273830] audit: type=1131 audit(1719332858.406:2586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.19.173:22-139.178.89.65:39786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.303010] audit: type=1130 audit(1719332863.438:2587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.19.173:22-139.178.89.65:39798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.461133] audit: type=1101 audit(1719332863.598:2588): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.467285] audit: type=1103 audit(1719332863.605:2589): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.470833] audit: type=1006 audit(1719332863.605:2590): pid=4703 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 168.472842] audit: type=1300 audit(1719332863.605:2590): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc4041ae0 a2=3 a3=7fde6170a480 items=0 ppid=1 pid=4703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.476703] audit: type=1327 audit(1719332863.605:2590): proctitle=737368643A20636F7265205B707269765D [ 168.496661] audit: type=1105 audit(1719332863.634:2591): pid=4703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.500964] audit: type=1103 audit(1719332863.638:2592): pid=4705 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.692525] audit: type=1106 audit(1719332863.830:2593): pid=4703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.696290] audit: type=1104 audit(1719332863.830:2594): pid=4703 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.723257] kauditd_printk_skb: 1 callbacks suppressed [ 173.723259] audit: type=1130 audit(1719332868.861:2596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.19.173:22-139.178.89.65:39844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.878712] audit: type=1101 audit(1719332869.016:2597): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.881913] audit: type=1103 audit(1719332869.018:2598): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.884318] audit: type=1006 audit(1719332869.018:2599): pid=4715 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 173.886191] audit: type=1300 audit(1719332869.018:2599): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8ec7e5b0 a2=3 a3=7f706b9cf480 items=0 ppid=1 pid=4715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.888989] audit: type=1327 audit(1719332869.018:2599): proctitle=737368643A20636F7265205B707269765D [ 173.906284] audit: type=1105 audit(1719332869.044:2600): pid=4715 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.910526] audit: type=1103 audit(1719332869.048:2601): pid=4717 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.108260] audit: type=1106 audit(1719332869.246:2602): pid=4715 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.112377] audit: type=1104 audit(1719332869.246:2603): pid=4715 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.147296] kauditd_printk_skb: 31 callbacks suppressed [ 179.147298] audit: type=1130 audit(1719332874.284:2615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.19.173:22-139.178.89.65:39852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.313940] audit: type=1101 audit(1719332874.451:2616): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.317072] audit: type=1103 audit(1719332874.454:2617): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.320051] audit: type=1006 audit(1719332874.454:2618): pid=4730 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 179.323024] audit: type=1300 audit(1719332874.454:2618): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd56a4e880 a2=3 a3=7f4c294db480 items=0 ppid=1 pid=4730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.325832] audit: type=1327 audit(1719332874.454:2618): proctitle=737368643A20636F7265205B707269765D [ 179.341951] audit: type=1105 audit(1719332874.479:2619): pid=4730 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.346631] audit: type=1103 audit(1719332874.484:2620): pid=4732 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.562261] audit: type=1106 audit(1719332874.699:2621): pid=4730 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.565201] audit: type=1104 audit(1719332874.700:2622): pid=4730 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.607467] kauditd_printk_skb: 1 callbacks suppressed [ 184.607469] audit: type=1130 audit(1719332879.746:2624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.19.173:22-139.178.89.65:56472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.774485] audit: type=1101 audit(1719332879.913:2625): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.779905] audit: type=1103 audit(1719332879.917:2626): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.789070] audit: type=1006 audit(1719332879.917:2627): pid=4744 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 184.790643] audit: type=1300 audit(1719332879.917:2627): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff06fd93e0 a2=3 a3=7f1da420d480 items=0 ppid=1 pid=4744 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.793686] audit: type=1327 audit(1719332879.917:2627): proctitle=737368643A20636F7265205B707269765D [ 184.807901] audit: type=1105 audit(1719332879.946:2628): pid=4744 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.811953] audit: type=1103 audit(1719332879.949:2629): pid=4746 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.032425] audit: type=1106 audit(1719332880.171:2630): pid=4744 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.035672] audit: type=1104 audit(1719332880.174:2631): pid=4744 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.072157] kauditd_printk_skb: 1 callbacks suppressed [ 190.072160] audit: type=1130 audit(1719332885.211:2633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.19.173:22-139.178.89.65:56488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.237086] audit: type=1101 audit(1719332885.376:2634): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.244404] audit: type=1103 audit(1719332885.379:2635): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.247647] audit: type=1006 audit(1719332885.379:2636): pid=4756 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 190.249815] audit: type=1300 audit(1719332885.379:2636): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda1a213a0 a2=3 a3=7f5c75ff8480 items=0 ppid=1 pid=4756 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.256079] audit: type=1327 audit(1719332885.379:2636): proctitle=737368643A20636F7265205B707269765D [ 190.300013] audit: type=1105 audit(1719332885.439:2637): pid=4756 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.304235] audit: type=1103 audit(1719332885.439:2638): pid=4759 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.501793] audit: type=1106 audit(1719332885.640:2639): pid=4756 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.506136] audit: type=1104 audit(1719332885.640:2640): pid=4756 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:28:08 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 195.801647] kauditd_printk_skb: 41 callbacks suppressed [ 195.801651] audit: type=1106 audit(1719332890.937:2670): pid=4936 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.814754] audit: type=1104 audit(1719332890.937:2671): pid=4936 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.822900] audit: type=1131 audit(1719332890.949:2672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.19.173:22-139.178.89.65:51062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.847269] audit: type=1130 audit(1719332890.985:2673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.19.173:22-139.178.89.65:51070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.037859] audit: type=1101 audit(1719332891.176:2674): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.041789] audit: type=1103 audit(1719332891.176:2675): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.045015] audit: type=1006 audit(1719332891.176:2676): pid=4946 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 [ 196.046752] audit: type=1300 audit(1719332891.176:2676): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe05e86b50 a2=3 a3=7f017b998480 items=0 ppid=1 pid=4946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.050818] audit: type=1327 audit(1719332891.176:2676): proctitle=737368643A20636F7265205B707269765D [ 196.064214] audit: type=1105 audit(1719332891.202:2677): pid=4946 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.995033] kauditd_printk_skb: 90 callbacks suppressed [ 200.995036] audit: type=1334 audit(1719332896.134:2730): prog-id=1114 op=LOAD [ 200.996756] audit: type=1300 audit(1719332896.134:2730): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1edb3a40 a2=74 a3=7fff1edb3a40 items=0 ppid=5272 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.001546] audit: type=1327 audit(1719332896.134:2730): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 201.002777] audit: type=1334 audit(1719332896.134:2731): prog-id=1114 op=UNLOAD [ 201.003994] audit: type=1334 audit(1719332896.135:2732): prog-id=1115 op=LOAD [ 201.005347] audit: type=1300 audit(1719332896.135:2732): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1edb2ac0 a2=90 a3=2 items=0 ppid=5272 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.008454] audit: type=1327 audit(1719332896.135:2732): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 201.010078] audit: type=1334 audit(1719332896.135:2733): prog-id=1115 op=UNLOAD [ 201.011108] audit: type=1334 audit(1719332896.135:2734): prog-id=1116 op=LOAD [ 201.012606] audit: type=1300 audit(1719332896.135:2734): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1edb2ac0 a2=90 a3=2 items=0 ppid=5272 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.551871] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni)) [ 205.117472] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 207.369200] kauditd_printk_skb: 3682 callbacks suppressed [ 207.369203] audit: type=1334 audit(1719332902.509:4516): prog-id=1944 op=LOAD [ 207.372297] audit: type=1300 audit(1719332902.509:4516): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcb6f08bb0 a2=74 a3=7ffcb6f08bb0 items=0 ppid=5272 pid=5849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 207.377567] audit: type=1327 audit(1719332902.509:4516): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313733325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 207.384100] audit: type=1334 audit(1719332902.522:4517): prog-id=1944 op=UNLOAD [ 207.387164] audit: type=1334 audit(1719332902.522:4518): prog-id=1945 op=LOAD [ 207.388328] audit: type=1300 audit(1719332902.522:4518): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcb6f08b40 a2=80 a3=0 items=0 ppid=5272 pid=5849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 207.394550] audit: type=1327 audit(1719332902.522:4518): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313733325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 207.404973] audit: type=1334 audit(1719332902.522:4519): prog-id=1945 op=UNLOAD [ 207.405892] audit: type=1334 audit(1719332902.523:4520): prog-id=1946 op=LOAD [ 207.406688] audit: type=1300 audit(1719332902.523:4520): arch=c000003e syscall=321 success=yes exit=38 a0=5 a1=7ffcb6f088b0 a2=80 a3=0 items=0 ppid=5272 pid=5849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-19-173 (Linux x86_64 6.1.95-flatcar) 16:28:23 SSH host key: SHA256:Uqx7HHDR686XM3pt/ktjrMhmJVJY83QyA0rh3X/mEoc (ED25519) SSH host key: SHA256:q0AJawi1DW3VLK88nK5/wNeBqE0p9UTno3GmAuxaAx4 (RSA) SSH host key: SHA256:Qhk2YX+zK7wv7AuP2ZZzBZ4lQt0Y/880r2Sug9yXf+U (ECDSA) eth0: 172.31.19.173 fe80::4c3:d6ff:fedd:86ef ip-172-31-19-173 login: [ 213.024803] kauditd_printk_skb: 486 callbacks suppressed [ 213.024806] audit: type=1106 audit(1719332908.164:4710): pid=4957 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.038094] audit: type=1104 audit(1719332908.175:4711): pid=4957 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 213.045287] audit: type=1131 audit(1719332908.184:4712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-172.31.19.173:22-139.178.89.65:51086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 226.425531] audit: type=1334 audit(1719332921.566:4713): prog-id=80 op=UNLOAD [ 226.426551] audit: type=1334 audit(1719332921.566:4714): prog-id=103 op=UNLOAD [ 227.429587] audit: type=1334 audit(1719332922.569:4715): prog-id=2046 op=LOAD [ 227.430292] audit: type=1334 audit(1719332922.570:4716): prog-id=2047 op=LOAD [ 227.431117] audit: type=1300 audit(1719332922.570:4716): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000133988 a2=78 a3=0 items=0 ppid=2665 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 227.433930] audit: type=1327 audit(1719332922.570:4716): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732623862353765636161313139326236346536333031336365366235 [ 227.436737] audit: type=1334 audit(1719332922.570:4717): prog-id=2048 op=LOAD [ 227.437420] audit: type=1300 audit(1719332922.570:4717): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000133720 a2=78 a3=0 items=0 ppid=2665 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 227.446403] audit: type=1327 audit(1719332922.570:4717): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732623862353765636161313139326236346536333031336365366235 [ 227.449425] audit: type=1334 audit(1719332922.570:4718): prog-id=2048 op=UNLOAD [ 232.394312] kauditd_printk_skb: 10 callbacks suppressed [ 232.394315] audit: type=1334 audit(1719332927.536:4723): prog-id=84 op=UNLOAD [ 232.396006] audit: type=1334 audit(1719332927.536:4724): prog-id=100 op=UNLOAD [ 233.435573] audit: type=1334 audit(1719332928.577:4725): prog-id=2050 op=LOAD [ 233.436439] audit: type=1334 audit(1719332928.577:4726): prog-id=2051 op=LOAD [ 233.437394] audit: type=1300 audit(1719332928.577:4726): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000131988 a2=78 a3=0 items=0 ppid=2667 pid=6020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.440271] audit: type=1327 audit(1719332928.577:4726): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964623866663033616430353534313235663530303239636533613938 [ 233.445328] audit: type=1334 audit(1719332928.578:4727): prog-id=2052 op=LOAD [ 233.446138] audit: type=1300 audit(1719332928.578:4727): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000131720 a2=78 a3=0 items=0 ppid=2667 pid=6020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.450080] audit: type=1327 audit(1719332928.578:4727): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964623866663033616430353534313235663530303239636533613938 [ 233.454307] audit: type=1334 audit(1719332928.578:4728): prog-id=2052 op=UNLOAD [ 237.634556] kauditd_printk_skb: 22 callbacks suppressed [ 237.634560] audit: type=1106 audit(1719332932.775:4737): pid=2025 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 237.646860] audit: type=1104 audit(1719332932.775:4738): pid=2025 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 237.649797] audit: type=1131 audit(1719332932.778:4739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.19.173:22-139.178.89.65:43220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping cri-containerd-08…72dc1817e708a4caa7bae40216abaa9... Stopping cri-containerd-d4…5e89423dfb6f8e4a6aba08c4b66606b... Stopping cri-containerd-1f…f898c334fdea67376a92995e6a3c3a6... Stopping cri-containerd-2d…9e402f4063c0cd7b204c68f0d8b412d... [ 239.380210] audit: type=1334 audit(1719332934.521:4740): prog-id=2045 op=UNLOAD [ 239.380214] audit: type=1334 audit(1719332934.521:4741): prog-id=2029 op=UNLOAD Stopping cri-containerd-97…94150ca710707d77a82eed8a1722e69... Stopping cri-containerd-af…ca1471fdd3cd4702e60593226bebd29... Stopping cri-containerd-d3…625dee93d6b0b81a5d4f335593c1052... Stopping cri-containerd-ea…36e8c5d804deb6995669c419b0cc831... [ OK ] Removed slice system-addon… - Slice /system/addon-config. [ OK ] Removed slice system-addon…ice - Slice /system/addon-run. [ OK ] Removed slice system-modpr…lice - Slice /system/modprobe. [ OK ] Removed slice system-sshd.slice - Slice /system/sshd. [ OK ] Removed slice system-syste… - Slice /system/system-cloudinit. [ OK ] Stopped target multi-user.target - Multi-User System. [ OK ] Stopped target getty.target - Login Prompts. [ OK ] Stopped target machines.target - Containers. [ OK ] Stopped target nss-lookup.…m - Host and Network Name Lookups. [ OK ] Stopped target remote-cryp…et - Remote Encrypted Volumes. [ OK ] Stopped target timers.target - Timer Units. [ OK ] Stopped logrotate.timer - Daily rotation of log files. [ OK ] Stopped mdadm.timer - …D array's redundancy information.. [ OK ] Stopped systemd-tmpfiles-c… Cleanup of Temporary Directories. [ OK ] Stopped target time-set.target - System Time Set. [ OK ] Stopped target user-config… Load user-provided cloud configs. [ OK ] Stopped target system-conf…oad system-provided cloud configs. Unmounting boot.mount - Boot partition... Stopping amazon-ssm-agent.service - amazon-ssm-agent... [ OK ] Stopped coreos-metadata-ss…Flatcar Metadata Agent (SSH Keys). [ 239.439022] audit: type=1131 audit(1719332934.580:4742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-coreo…e /system/coreos-metadata-sshkeys. [ OK ] Stopped coreos-metadata.service - Flatcar Metadata Agent. [ 239.444392] audit: type=1131 audit(1719332934.585:4743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping docker.service[0…er Application Container Engine... [ OK ] Stopped ensure-sysext.service. [ 239.448804] audit: type=1131 audit(1719332934.590:4744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping getty@tty1.service - Getty on tty1... Stopping kubelet.service[…elet: The Kubernetes Node Agent... [ OK ] Stopped nvidia.service - NVIDIA Configure Service. [ 239.455140] audit: type=1131 audit(1719332934.596:4745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=nvidia comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping polkit.service - Authorization Manager... [ OK ] Stopped prepare-helm.service - Unpack helm to /opt/bin. [ 239.459811] audit: type=1131 audit(1719332934.601:4746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping serial-getty@ttyS…ice - Serial Getty on ttyS0... [ OK ] Stopped sshd-keygen.service - Generate sshd host keys. [ OK ] Stopped sshkeys.service. Stopping systemd-logind.se…ice - User Login Management... [ OK ] Stopped systemd-machine-id…it a transient machine-id on disk. [ OK ] Stopped target first-boot-….target - First Boot Complete. Stopping systemd-random-se…ice - Load/Save Random Seed... [ OK ] Stopped update-ssh-keys-af…date-ssh-keys once after Ignition. Stopping user@500.service - User Manager for UID 500... Stopping locksmithd.service - Cluster reboot manager... [ OK ] Stopped polkit.service - Authorization Manager. [ OK ] Stopped getty@tty1.service - Getty on tty1. [ OK ] Stopped locksmithd.service - Cluster reboot manager. [ OK ] Stopped serial-getty@ttyS0…rvice - Serial Getty on ttyS0. [ OK ] Stopped user@500.service - User Manager for UID 500. [ OK ] Stopped systemd-logind.service - User Login Management. [ OK ] Stopped kubelet.service[0…ubelet: The Kubernetes Node Agent. [ OK ] Unmounted boot.mount - Boot partition. [ OK ] Stopped cri-containerd-1fb…79f898c334fdea67376a92995e6a3c3a6. [ OK ] Stopped systemd-random-see…rvice - Load/Save Random Seed. [ OK ] Stopped cri-containerd-ea3…a936e8c5d804deb6995669c419b0cc831. [ OK ] Stopped cri-containerd-d33…56625dee93d6b0b81a5d4f335593c1052. [ OK ] Stopped cri-containerd-97c…c494150ca710707d77a82eed8a1722e69. [ OK ] Stopped cri-containerd-afd…4aca1471fdd3cd4702e60593226bebd29. [ OK ] Stopped cri-containerd-2dc…9a9e402f4063c0cd7b204c68f0d8b412d. [ OK ] Removed slice system-getty.slice - Slice /system/getty. [ OK ] Removed slice system-seria… - Slice /system/serial-getty. [ OK ] Removed slice kubepods-bur…9b5f_4471_9684_895eaf5e25f5.slice. [ OK ] Removed slice kubepods-bes…f632_4fd5_875d_f21d2801423d.slice. [ OK ] Stopped systemd-fsck@dev-d… on /dev/disk/by-label/EFI-SYSTEM. Stopping systemd-user-sess…vice - Permit User Sessions... Stopping update-engine.service - Update Engine... Stopping user-runtime-dir@…Runtime Directory /run/user/500... [ OK ] Unmounted run-user-500.mount - /run/user/500. [ OK ] Stopped user-runtime-dir@5…r Runtime Directory /run/user/500. [ OK ] Removed slice user-500.slice - User Slice of UID 500. Stopping dbus.service - D-Bus System Message Bus... [ OK ] Stopped systemd-user-sessi…ervice - Permit User Sessions. [ OK ] Stopped target remote-fs.target - Remote File Systems. [ OK ] Stopped dbus.service - D-Bus System Message Bus. [ OK ] Unmounted run-containerd-i…f4063c0cd7b204c68f0d8b412d/rootfs. [ OK ] Stopped update-engine.service - Update Engine. [ OK ] Unmounted run-containerd-i…1fdd3cd4702e60593226bebd29/rootfs. [ OK ] Unmounted run-containerd-i…5d804deb6995669c419b0cc831/rootfs. [ OK ] Stopped docker.service…cker Application Container Engine. Stopping containerd.servic… - containerd container runtime... [ OK ] Stopped containerd.service…0m - containerd container runtime. [ OK ] Unmounted run-containerd-i…334fdea67376a92995e6a3c3a6/rootfs. [ OK ] Unmounted run-containerd-i…e93d6b0b81a5d4f335593c1052/rootfs. [ OK ] Unmounted run-containerd-i…ca710707d77a82eed8a1722e69/rootfs. [* ] (1 of 3) Job cri-containerd-d4f7bdd…scope/stop running (3s / 1min 30s) M [** ] (1 of 3) Job cri-containerd-d4f7bdd…scope/stop running (4s / 1min 30s) M [*** ] (1 of 3) Job cri-containerd-d4f7bdd…scope/stop running (4s / 1min 30s) M [ *** ] (2 of 3) Job cri-containerd-08f618e…scope/stop running (5s / 1min 30s) M [ OK ] Stopped cri-containerd-08f…ae72dc1817e708a4caa7bae40216abaa9. [ 244.263841] kauditd_printk_skb: 30 callbacks suppressed [ 244.263844] audit: type=1334 audit(1719332939.404:4777): prog-id=1087 op=UNLOAD [ OK ] Removed slice kubepods-bur…2349_430c_b3d1_6840c348dd21.slice. [ 244.269056] audit: type=1334 audit(1719332939.411:4778): prog-id=1090 op=UNLOAD [ 244.275281] audit: type=1334 audit(1719332939.417:4779): prog-id=1083 op=UNLOAD [ OK ] Stopped cri-containerd-d4f…315e89423dfb6f8e4a6aba08c4b66606b. [ OK ] Removed slice kubepods-bur…a07e_4343_8cf0_c8230adbb0ac.slice. [ 244.281245] audit: type=1334 audit(1719332939.423:4780): prog-id=1086 op=UNLOAD [ *** ] Job amazon-ssm-agent.service/stop running (7s / 1min 30s) M [ ***] Job amazon-ssm-agent.service/stop running (7s / 1min 30s) M [ OK ] Stopped amazon-ssm-agent.service - amazon-ssm-agent. [ 247.137223] audit: type=1131 audit(1719332942.278:4781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=amazon-ssm-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped target network-online.target - Network is Online. [ OK ] Stopped target network.target - Network. [ OK ] Stopped setup-oem.service - Setup OEM. [ 247.161769] audit: type=1131 audit(1719332942.304:4782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=setup-oem comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped target basic.target - Basic System. [ OK ] Stopped target paths.target - Path Units. [ OK ] Stopped motdgen.path -…date engine configuration changes. [ OK ] Stopped user-cloudinit@var…var/lib/flatcar-install/user_data. [ OK ] Stopped target slices.target - Slice Units. [ OK ] Removed slice user.slice - User and Session Slice. [ OK ] Stopped target sockets.target - Socket Units. [ OK ] Closed dbus.socket - D-Bus System Message Bus Socket. [ OK ] Closed docker.socket - Docker Socket for the API. [ OK ] Closed sshd.socket - OpenSSH Server Socket. [ OK ] Stopped target sysinit.target - System Initialization. [ OK ] Unset automount proc-sys-f…rmats File System Automount Point. [ OK ] Stopped target integrityse…Local Integrity Protected Volumes. [ OK ] Stopped target veritysetup… - Local Verity Protected Volumes. Stopping audit-rules.servi… - Load Security Auditing Rules... [ OK ] Stopped systemd-networkd-w…Wait for Network to be Configured. [ 247.272534] audit: type=1131 audit(1719332942.414:4783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping systemd-networkd.…ice - Network Configuration... Stopping systemd-resolved.…e - Network Name Resolution... Stopping systemd-timesyncd… - Network Time Synchronization... [ OK ] Stopped systemd-update-don…service - Update is Completed. [ 247.300408] audit: type=1131 audit(1719332942.442:4784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped ldconfig.service - Rebuild Dynamic Linker Cache. [ OK ] Stopped systemd-boot-updat…0m - Automatic Boot Loader Update. [ OK ] Stopped systemd-hwdb-updat…e - Rebuild Hardware Database. [ 247.311541] audit: type=1131 audit(1719332942.450:4785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK [[ 247.314551] audit: type=1131 audit(1719332942.452:4786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' 0m] Stopped systemd-journal-ca…ice - Rebuild Journal Catalog. Stopping systemd-update-ut…rd System Boot/Shutdown in UTMP... [ OK ] Stopped systemd-networkd.service - Network Configuration. [ OK ] Stopped systemd-resolved.s…ice - Network Name Resolution. [ OK ] Stopped systemd-timesyncd.…0m - Network Time Synchronization. [ OK ] Stopped audit-rules.servic…0m - Load Security Auditing Rules. [ OK ] Stopped target network-pre…get - Preparation for Network. [ OK ] Closed systemd-networkd.so… - Network Service Netlink Socket. [ OK ] Stopped systemd-network-ge…rk units from Kernel command line. [ OK ] Stopped systemd-sysctl.service - Apply Kernel Variables. [ OK ] Closed systemd-coredump.so…et - Process Core Dump Socket. [ OK ] Stopped systemd-modules-lo…service - Load Kernel Modules. [ OK ] Unmounted run-credentials-…redentials/systemd-sysctl.service. [ OK ] Stopped systemd-update-utm…cord System Boot/Shutdown in UTMP. [ OK ] Stopped systemd-tmpfiles-s…te Volatile Files and Directories. Stopping systemd-sysext.se…ion Images into /usr/ and /opt/... [ OK ] Unmounted run-credentials-…ls/systemd-tmpfiles-setup.service. [ OK ] Stopped systemd-sysext.ser…nsion Images into /usr/ and /opt/. [ OK ] Stopped target local-fs.target - Local File Systems. Unmounting media.mount - External Media Directory... Unmounting oem.mount - /oem... Unmounting run-cilium-cgro…ount - /run/cilium/cgroupv2... Unmounting run-containerd-…2f4063c0cd7b204c68f0d8b412d/shm... Unmounting run-containerd-…e7106cb0bae62e107f9336d3c91/shm... Unmounting run-containerd-…71fdd3cd4702e60593226bebd29/shm... Unmounting run-containerd-…a3be4a862eeb0494b0fc0cda4f8/shm... Unmounting run-containerd-…ee93d6b0b81a5d4f335593c1052/shm... Unmounting run-containerd-…c5d804deb6995669c419b0cc831/shm... Unmounting run-containerd-…894dbbf8dd817c5cb2f3fa44e3c/shm... Unmounting run-containerd-…7e708a4caa7bae40216abaa9/rootfs... Unmounting run-containerd-…0d79d3901741acb14760df8a/rootfs... Unmounting run-containerd-…06cb0bae62e107f9336d3c91/rootfs... Unmounting run-containerd-…654a1582933ac73dde92c187/rootfs... Unmounting run-containerd-…e4a862eeb0494b0fc0cda4f8/rootfs... Unmounting run-containerd-…ba8982cc422bda015e433ca7/rootfs... Unmounting run-containerd-…dfb6f8e4a6aba08c4b66606b/rootfs... Unmounting run-containerd-…dbbf8dd817c5cb2f3fa44e3c/rootfs... Unmounting run-credentials…ntials/systemd-sysusers.service... Unmounting run-credentials…temd-tmpfiles-setup-dev.service... Unmounting run-netns-cni\x…485-a71d-ceee-60e6-77bbdc5e3f70... Unmounting run-netns-cni\x…bda-ae82-f82a-a305-e2c3da6f1a56... Unmounting tmp.mount - Temporary Directory /tmp... Unmounting var-lib-kubelet…projected/kube-api-access-7r7c9... Unmounting var-lib-kubelet…projected/kube-api-access-mk2bk... Unmounting var-lib-kubelet…ernetes.io~projected/hubble-tls... Unmounting var-lib-kubelet…projected/kube-api-access-knfr4... Unmounting var-lib-kubelet….io~secret/cilium-ipsec-secrets... Unmounting var-lib-kubelet…s.io~secret/clustermesh-secrets... Unmounting var-lib-kubelet…projected/kube-api-access-rnxgk... [ OK ] Unmounted media.mount - External Media Directory. [ OK ] Unmounted oem.mount - /oem. [ OK ] Unmounted run-cilium-cgrou….mount - /run/cilium/cgroupv2. [ OK ] Unmounted run-containerd-i…402f4063c0cd7b204c68f0d8b412d/shm. [ OK ] Unmounted run-containerd-i…67e7106cb0bae62e107f9336d3c91/shm. [ OK ] Unmounted run-containerd-i…1471fdd3cd4702e60593226bebd29/shm. [ OK ] Unmounted run-containerd-i…7aa3be4a862eeb0494b0fc0cda4f8/shm. [ OK ] Unmounted run-containerd-i…5dee93d6b0b81a5d4f335593c1052/shm. [ OK ] Unmounted run-containerd-i…e8c5d804deb6995669c419b0cc831/shm. [ OK ] Unmounted run-containerd-i…5f894dbbf8dd817c5cb2f3fa44e3c/shm. [ OK ] Unmounted run-containerd-i…817e708a4caa7bae40216abaa9/rootfs. [ OK ] Unmounted run-containerd-i…a50d79d3901741acb14760df8a/rootfs. [ OK ] Unmounted run-containerd-i…7106cb0bae62e107f9336d3c91/rootfs. [ OK ] Unmounted run-containerd-i…d3654a1582933ac73dde92c187/rootfs. [ OK ] Unmounted run-containerd-i…3be4a862eeb0494b0fc0cda4f8/rootfs. [ OK ] Unmounted run-containerd-i…b4ba8982cc422bda015e433ca7/rootfs. [ OK ] Unmounted run-containerd-i…23dfb6f8e4a6aba08c4b66606b/rootfs. [ OK ] Unmounted run-containerd-i…94dbbf8dd817c5cb2f3fa44e3c/rootfs. [ OK ] Unmounted run-credentials-…dentials/systemd-sysusers.service. [ OK ] Unmounted run-credentials-…ystemd-tmpfiles-setup-dev.service. [ OK ] Unmounted run-netns-cni\x2…57485-a71d-ceee-60e6-77bbdc5e3f70. [ OK ] Unmounted run-netns-cni\x2…efbda-ae82-f82a-a305-e2c3da6f1a56. [ OK ] Unmounted tmp.mount - Temporary Directory /tmp. [ OK ] Unmounted var-lib-kubelet-…o~projected/kube-api-access-7r7c9. [ OK ] Unmounted var-lib-kubelet-…o~projected/kube-api-access-mk2bk. [ OK ] Unmounted var-lib-kubelet-…ubernetes.io~projected/hubble-tls. [ OK ] Unmounted var-lib-kubelet-…o~projected/kube-api-access-knfr4. [ OK ] Unmounted var-lib-kubelet-…es.io~secret/cilium-ipsec-secrets. [ OK ] Unmounted var-lib-kubelet-…tes.io~secret/clustermesh-secrets. [ OK ] Unmounted var-lib-kubelet-…o~projected/kube-api-access-rnxgk. [ OK ] Stopped target swap.target - Swaps. [ OK ] Reached target umount.target - Unmount All Filesystems. [ OK ] Stopped systemd-fsck@dev-d…m Check on /dev/disk/by-label/OEM. [ OK ] Removed slice system-syste… - Slice /system/systemd-fsck. [ OK ] Stopped target local-fs-pr…reparation for Local File Systems. [ OK ] Stopped lvm2-activation.se…ctivation of LVM2 logical volumes. [ OK ] Stopped target cryptsetup.…get - Local Encrypted Volumes. [ OK ] Stopped systemd-ask-passwo…quests to Console Directory Watch. [ OK ] Stopped systemd-ask-passwo… Requests to Wall Directory Watch. [ OK ] Stopped lvm2-activation-ea…ctivation of LVM2 logical volumes. [ OK ] Stopped systemd-tmpfiles-s…reate Static Device Nodes in /dev. [ OK ] Stopped systemd-sysusers.service - Create System Users. [ OK ] Stopped systemd-remount-fs…ount Root and Kernel File Systems. [ OK ] Reached target shutdown.target - System Shutdown. [ OK ] Reached target final.target - Late Shutdown Services. [ OK ] Finished systemd-poweroff.service - System Power Off. [ OK ] Reached target poweroff.target - System Power Off. [ 247.867946] systemd-shutdown[1]: Syncing filesystems and block devices. [ 247.902496] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 247.911315] systemd-journald[1487]: Received SIGTERM from PID 1 (systemd-shutdow). [ 248.229750] BTRFS info (device nvme0n1p6): last unmount of filesystem 86bb1873-22f4-4b9b-84d4-c8e8b30f7c8f [ 249.197147] systemd-shutdown[1]: Sending SIGKILL to remaining processes... [ 249.202409] systemd-shutdown[1]: Unmounting file systems. [ 249.203784] (sd-remount)[6269]: Remounting '/etc' read-only with options 'seclabel,lowerdir=/sysroot/usr/share/flatcar/etc,upperdir=/sysroot/etc,workdir=/sysroot/.etc-work,metacopy=off'. [ 249.215752] (sd-umount)[6270]: Unmounting '/etc'. [ 249.220069] (sd-remount)[6271]: Remounting '/' read-only with options 'seclabel'. [ 249.256095] EXT4-fs (nvme0n1p9): re-mounted. Quota mode: none. [ 249.274753] systemd-shutdown[1]: All filesystems unmounted. [ 249.275339] systemd-shutdown[1]: Deactivating swaps. [ 249.278529] systemd-shutdown[1]: All swaps deactivated. [ 249.279153] systemd-shutdown[1]: Detaching loop devices. [ 249.280716] systemd-shutdown[1]: All loop devices detached. [ 249.284315] systemd-shutdown[1]: Stopping MD devices. [ 249.290717] systemd-shutdown[1]: All MD devices stopped. [ 249.292810] systemd-shutdown[1]: Detaching DM devices. [ 249.297865] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 249.300017] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 249.301533] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 249.303012] systemd-shutdown[1]: Detaching DM devices. [ 249.305120] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 249.311025] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 249.311874] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 249.312859] systemd-shutdown[1]: Detaching DM devices. [ 249.318128] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 249.321199] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 249.321924] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 249.324276] systemd-shutdown[1]: Cannot finalize remaining DM devices, continuing. [ 249.362159] systemd-shutdown[1]: Failed to finalize DM devices, ignoring. [ 249.363075] systemd-shutdown[1]: Syncing filesystems and block devices. [ 249.364125] systemd-shutdown[1]: Powering off. [ 249.500275] ACPI: PM: Preparing to enter system sleep state S5 [ 249.500854] reboot: Power down