ata Agent (SSH Keys). [ OK ] Finished sshkeys.service. [ OK ] Started containerd.service…0m - containerd container runtime. [ OK ] Finished prepare-helm.service - Unpack helm to /opt/bin. [ OK ] Started kubelet.service[0…ubelet: The Kubernetes Node Agent. [ OK ] Finished sshd-keygen.service - Generate sshd host keys. Starting issuegen.service - Generate /run/issue... [ OK ] Finished issuegen.service - Generate /run/issue. Starting systemd-user-sess…vice - Permit User Sessions... [ OK ] Finished systemd-user-sess…ervice - Permit User Sessions. [ OK ] Started getty@tty1.service - Getty on tty1. [ OK ] Started serial-getty@ttyS0…rvice - Serial Getty on ttyS0. [ OK ] Reached target getty.target - Login Prompts. [ OK ] Reached target multi-user.target - Multi-User System. Starting systemd-update-ut… Record Runlevel Change in UTMP... [ OK ] Finished systemd-update-ut… - Record Runlevel Change in UTMP. 2024/07/02 07:04:30Z: Amazon SSM Agent v3.2.0.0 is running 2024/07/02 07:04:30Z: OsProductName: Flatcar Container Linux by Kinvolk 2024/07/02 07:04:30Z: OsVersion: 3815.2.5 This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:04:31 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: [ 22.804871] kauditd_printk_skb: 20 callbacks suppressed [ 22.804874] audit: type=1305 audit(1719903877.516:146): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 22.807873] audit: type=1300 audit(1719903877.516:146): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffc1a016d0 a2=420 a3=0 items=0 ppid=1 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 22.815286] audit: type=1327 audit(1719903877.516:146): proctitle=2F7362696E2F617564697463746C002D44 [ 22.817921] audit: type=1131 audit(1719903877.529:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.863538] audit: type=1130 audit(1719903877.574:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.866448] audit: type=1106 audit(1719903877.575:149): pid=2181 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 22.871273] audit: type=1104 audit(1719903877.575:150): pid=2181 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 22.894493] audit: type=1106 audit(1719903877.606:151): pid=2177 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 22.905155] audit: type=1104 audit(1719903877.606:152): pid=2177 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 22.911387] audit: type=1131 audit(1719903877.616:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.147:22-139.178.89.65:52292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 24.761133] Initializing XFRM netlink socket This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:04:40 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: [ 36.959747] kauditd_printk_skb: 88 callbacks suppressed [ 36.959751] audit: type=1130 audit(1719903891.668:192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 36.962206] audit: type=1131 audit(1719903891.668:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 37.361082] audit: type=1130 audit(1719903892.072:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 37.489513] audit: type=1131 audit(1719903892.201:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 43.338937] audit: type=1131 audit(1719903898.049:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.121743] audit: type=1130 audit(1719903898.833:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.124079] audit: type=1131 audit(1719903898.833:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.647456] audit: type=1130 audit(1719903899.354:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 44.947818] audit: type=1130 audit(1719903899.659:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.627741] audit: type=1325 audit(1719903900.339:201): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2703 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 45.631196] audit: type=1300 audit(1719903900.339:201): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd92e6e370 a2=0 a3=7f55f44a6e90 items=0 ppid=2693 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 45.635801] audit: type=1327 audit(1719903900.339:201): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 45.637905] audit: type=1325 audit(1719903900.339:202): table=filter:27 family=2 entries=1 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 45.640310] audit: type=1300 audit(1719903900.339:202): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0137dde0 a2=0 a3=7fd181aabe90 items=0 ppid=2693 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 54.635935] kauditd_printk_skb: 31 callbacks suppressed [ 54.635938] audit: type=1131 audit(1719903909.348:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.907901] audit: type=1130 audit(1719903909.619:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.417062] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (3114) [ 60.989743] audit: type=1106 audit(1719903915.701:215): pid=2214 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 60.991977] audit: type=1104 audit(1719903915.703:216): pid=2214 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 61.018804] audit: type=1106 audit(1719903915.730:217): pid=2210 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 61.022279] audit: type=1104 audit(1719903915.731:218): pid=2210 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 61.025386] audit: type=1131 audit(1719903915.733:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.147:22-139.178.89.65:52294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.691309] audit: type=1325 audit(1719903922.404:220): table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 67.692979] audit: type=1300 audit(1719903922.404:220): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe63327d70 a2=0 a3=7ffe63327d5c items=0 ppid=3296 pid=3379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 67.697055] audit: type=1327 audit(1719903922.404:220): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 67.699090] audit: type=1325 audit(1719903922.404:221): table=nat:39 family=10 entries=1 op=nft_register_chain pid=3380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 67.701121] audit: type=1300 audit(1719903922.404:221): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff2be7900 a2=0 a3=7ffff2be78ec items=0 ppid=3296 pid=3380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 67.705124] audit: type=1327 audit(1719903922.404:221): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 67.707931] audit: type=1325 audit(1719903922.406:222): table=filter:40 family=10 entries=1 op=nft_register_chain pid=3381 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 67.709616] audit: type=1300 audit(1719903922.406:222): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc0dc7de70 a2=0 a3=7ffc0dc7de5c items=0 ppid=3296 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 67.714638] audit: type=1327 audit(1719903922.406:222): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 67.717747] audit: type=1325 audit(1719903922.406:223): table=mangle:41 family=2 entries=1 op=nft_register_chain pid=3382 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 73.009438] kauditd_printk_skb: 143 callbacks suppressed [ 73.009441] audit: type=1325 audit(1719903927.722:271): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 73.011567] audit: type=1300 audit(1719903927.722:271): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc3aec9bc0 a2=0 a3=7ffc3aec9bac items=0 ppid=3296 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.014164] audit: type=1327 audit(1719903927.722:271): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 73.016924] audit: type=1325 audit(1719903927.722:272): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 73.019547] audit: type=1300 audit(1719903927.722:272): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc3aec9bc0 a2=0 a3=0 items=0 ppid=3296 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.025084] audit: type=1327 audit(1719903927.722:272): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 73.030797] audit: type=1325 audit(1719903927.743:273): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3525 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 73.033358] audit: type=1300 audit(1719903927.743:273): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe88fe5a70 a2=0 a3=7ffe88fe5a5c items=0 ppid=3296 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.036093] audit: type=1327 audit(1719903927.743:273): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 73.037374] audit: type=1325 audit(1719903927.744:274): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3525 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.335508] kauditd_printk_skb: 8 callbacks suppressed [ 90.335511] audit: type=1325 audit(1719903945.048:277): table=filter:95 family=2 entries=15 op=nft_register_rule pid=4126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.338959] audit: type=1300 audit(1719903945.048:277): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffccb40c5c0 a2=0 a3=7ffccb40c5ac items=0 ppid=3296 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.343614] audit: type=1327 audit(1719903945.048:277): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 90.347658] audit: type=1325 audit(1719903945.060:278): table=nat:96 family=2 entries=19 op=nft_register_chain pid=4126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.349584] audit: type=1300 audit(1719903945.060:278): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffccb40c5c0 a2=0 a3=7ffccb40c5ac items=0 ppid=3296 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.352635] audit: type=1327 audit(1719903945.060:278): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 93.192910] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 93.193585] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 94.844461] audit: type=1400 audit(1719903949.557:279): avc: denied { write } for pid=4281 comm="tee" name="fd" dev="proc" ino=26196 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 94.847339] audit: type=1300 audit(1719903949.557:279): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe05855a14 a2=241 a3=1b6 items=1 ppid=4255 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.854756] audit: type=1307 audit(1719903949.557:279): cwd="/etc/service/enabled/allocate-tunnel-addrs/log" [ 94.858724] audit: type=1302 audit(1719903949.557:279): item=0 name="/dev/fd/63" inode=25474 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 96.122532] kauditd_printk_skb: 31 callbacks suppressed [ 96.122535] audit: type=1334 audit(1719903950.835:286): prog-id=10 op=LOAD [ 96.124588] audit: type=1300 audit(1719903950.835:286): arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc0ba6a3d0 a2=70 a3=7f9ab2890000 items=0 ppid=4247 pid=4409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.128484] audit: type=1327 audit(1719903950.835:286): proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 [ 96.135254] audit: type=1334 audit(1719903950.835:287): prog-id=10 op=UNLOAD [ 96.136409] audit: type=1334 audit(1719903950.835:288): prog-id=11 op=LOAD [ 96.137300] audit: type=1300 audit(1719903950.835:288): arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc0ba6a3d0 a2=70 a3=6f items=0 ppid=4247 pid=4409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.147451] audit: type=1327 audit(1719903950.835:288): proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 [ 96.150450] audit: type=1334 audit(1719903950.835:289): prog-id=11 op=UNLOAD [ 96.151291] audit: type=1334 audit(1719903950.835:290): prog-id=12 op=LOAD [ 96.152118] audit: type=1300 audit(1719903950.835:290): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc0ba6a360 a2=70 a3=7ffc0ba6a3d0 items=0 ppid=4247 pid=4409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:05:51 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:05:52 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: [ 99.830158] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 99.830909] IPv6: ADDRCONF(NETDEV_CHANGE): cali67af87431b3: link becomes ready [ 100.393374] IPv6: ADDRCONF(NETDEV_CHANGE): cali56cee1158e7: link becomes ready [ 101.454233] kauditd_printk_skb: 30 callbacks suppressed [ 101.454236] audit: type=1130 audit(1719903956.167:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.147:22-139.178.89.65:48894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 101.712367] audit: type=1325 audit(1719903956.425:303): table=filter:105 family=2 entries=11 op=nft_register_rule pid=4776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 101.714156] audit: type=1300 audit(1719903956.425:303): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffdd0e73800 a2=0 a3=7ffdd0e737ec items=0 ppid=3296 pid=4776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.718361] audit: type=1327 audit(1719903956.425:303): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 101.721247] audit: type=1325 audit(1719903956.427:304): table=nat:106 family=2 entries=35 op=nft_register_chain pid=4776 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 101.723499] audit: type=1300 audit(1719903956.427:304): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffdd0e73800 a2=0 a3=7ffdd0e737ec items=0 ppid=3296 pid=4776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.727597] audit: type=1327 audit(1719903956.427:304): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 101.886861] audit: type=1101 audit(1719903956.600:305): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 101.914052] audit: type=1103 audit(1719903956.627:306): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 101.918616] audit: type=1006 audit(1719903956.631:307): pid=4768 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 102.089189] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 102.089933] IPv6: ADDRCONF(NETDEV_CHANGE): cali2e8e2bbf300: link becomes ready [ 102.226403] IPv6: ADDRCONF(NETDEV_CHANGE): calibf5211c82fe: link becomes ready This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:05:57 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:05:58 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:05:59 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:06:00 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: [ 107.683859] kauditd_printk_skb: 25 callbacks suppressed [ 107.683862] audit: type=1130 audit(1719903962.397:319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.147:22-139.178.89.65:35650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 108.206649] audit: type=1101 audit(1719903962.919:320): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 108.211812] audit: type=1103 audit(1719903962.925:321): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 108.216608] audit: type=1006 audit(1719903962.929:322): pid=5090 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 108.218428] audit: type=1300 audit(1719903962.929:322): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5000c230 a2=3 a3=7f21d5838480 items=0 ppid=1 pid=5090 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.222715] audit: type=1327 audit(1719903962.929:322): proctitle=737368643A20636F7265205B707269765D [ 108.310861] audit: type=1105 audit(1719903963.023:323): pid=5090 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 108.314870] audit: type=1103 audit(1719903963.027:324): pid=5093 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 109.168025] audit: type=1106 audit(1719903963.881:325): pid=5090 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 109.173396] audit: type=1104 audit(1719903963.884:326): pid=5090 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.188711] kauditd_printk_skb: 1 callbacks suppressed [ 114.188714] audit: type=1130 audit(1719903968.901:328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.147:22-139.178.89.65:48394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 114.362141] audit: type=1101 audit(1719903969.073:329): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.365086] audit: type=1103 audit(1719903969.075:330): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.367811] audit: type=1006 audit(1719903969.075:331): pid=5172 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 114.369704] audit: type=1300 audit(1719903969.075:331): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea2dcda20 a2=3 a3=7fdb0734a480 items=0 ppid=1 pid=5172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.372481] audit: type=1327 audit(1719903969.075:331): proctitle=737368643A20636F7265205B707269765D [ 114.385889] audit: type=1105 audit(1719903969.099:332): pid=5172 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.391282] audit: type=1103 audit(1719903969.103:333): pid=5175 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.608155] audit: type=1106 audit(1719903969.321:334): pid=5172 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.611838] audit: type=1104 audit(1719903969.321:335): pid=5172 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.636233] kauditd_printk_skb: 1 callbacks suppressed [ 119.636236] audit: type=1130 audit(1719903974.349:337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.147:22-139.178.89.65:48406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 119.835922] audit: type=1101 audit(1719903974.549:338): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.838738] audit: type=1103 audit(1719903974.549:339): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.841068] audit: type=1006 audit(1719903974.549:340): pid=5419 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 119.842711] audit: type=1300 audit(1719903974.549:340): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8d542b60 a2=3 a3=7fa183a0e480 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.846038] audit: type=1327 audit(1719903974.549:340): proctitle=737368643A20636F7265205B707269765D [ 119.864621] audit: type=1105 audit(1719903974.578:341): pid=5419 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.868689] audit: type=1103 audit(1719903974.582:342): pid=5422 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.184760] audit: type=1106 audit(1719903974.898:343): pid=5419 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.193581] audit: type=1104 audit(1719903974.898:344): pid=5419 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.421137] kauditd_printk_skb: 23 callbacks suppressed [ 126.421140] audit: type=1130 audit(1719903981.134:364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.147:22-139.178.89.65:54150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 126.585337] audit: type=1101 audit(1719903981.298:365): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.588041] audit: type=1103 audit(1719903981.300:366): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.590636] audit: type=1006 audit(1719903981.300:367): pid=5463 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 126.592706] audit: type=1300 audit(1719903981.300:367): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc23a78610 a2=3 a3=7f481bb69480 items=0 ppid=1 pid=5463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.604174] audit: type=1327 audit(1719903981.300:367): proctitle=737368643A20636F7265205B707269765D [ 126.615491] audit: type=1105 audit(1719903981.329:368): pid=5463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.619127] audit: type=1103 audit(1719903981.331:369): pid=5466 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.810072] audit: type=1106 audit(1719903981.523:370): pid=5463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.813050] audit: type=1104 audit(1719903981.524:371): pid=5463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.837761] kauditd_printk_skb: 1 callbacks suppressed [ 131.837764] audit: type=1130 audit(1719903986.551:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.147:22-139.178.89.65:54166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.998274] audit: type=1101 audit(1719903986.711:374): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 132.001020] audit: type=1103 audit(1719903986.712:375): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 132.003577] audit: type=1006 audit(1719903986.712:376): pid=5501 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 132.005138] audit: type=1300 audit(1719903986.712:376): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc39b0d9c0 a2=3 a3=7f95c60c9480 items=0 ppid=1 pid=5501 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 132.008839] audit: type=1327 audit(1719903986.712:376): proctitle=737368643A20636F7265205B707269765D [ 132.039638] audit: type=1105 audit(1719903986.752:377): pid=5501 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 132.043630] audit: type=1103 audit(1719903986.757:378): pid=5504 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 132.269086] audit: type=1106 audit(1719903986.982:379): pid=5501 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 132.272344] audit: type=1104 audit(1719903986.984:380): pid=5501 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.317800] kauditd_printk_skb: 1 callbacks suppressed [ 137.317804] audit: type=1130 audit(1719903992.028:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.147:22-139.178.89.65:54198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 137.497692] audit: type=1101 audit(1719903992.207:383): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.501053] audit: type=1103 audit(1719903992.208:384): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.508474] audit: type=1006 audit(1719903992.210:385): pid=5521 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 137.511465] audit: type=1300 audit(1719903992.210:385): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc5c21060 a2=3 a3=7fea866dc480 items=0 ppid=1 pid=5521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.514052] audit: type=1327 audit(1719903992.210:385): proctitle=737368643A20636F7265205B707269765D [ 137.539124] audit: type=1105 audit(1719903992.251:386): pid=5521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.543351] audit: type=1103 audit(1719903992.256:387): pid=5529 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.828339] audit: type=1106 audit(1719903992.541:388): pid=5521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.832421] audit: type=1104 audit(1719903992.545:389): pid=5521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.579660] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 139.580315] IPv6: ADDRCONF(NETDEV_CHANGE): calicc5788b6cc0: link becomes ready This is ip-172-31-25-147 (Linux x86_64 6.1.96-flatcar) 07:06:36 SSH host key: SHA256:FSOD5pvfRhfIz8v3hfoSaxu2b6XDT8j7VRRdce2QfqA (ED25519) SSH host key: SHA256:e5Hahvofe9suCo6hgGF9eEfkLEWiJvEb1jUh9TrliuQ (RSA) SSH host key: SHA256:uGCdf3Xf6ZbESmJ7IQYffG/A7aInNCgmTZBZmRlkomY (ECDSA) eth0: 172.31.25.147 fe80::4ca:ff:fe42:eb9 ip-172-31-25-147 login: [ 142.857173] kauditd_printk_skb: 16 callbacks suppressed [ 142.857177] audit: type=1130 audit(1719903997.569:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.147:22-139.178.89.65:54214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 143.023453] audit: type=1325 audit(1719903997.735:397): table=filter:118 family=2 entries=10 op=nft_register_rule pid=5669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.025085] audit: type=1300 audit(1719903997.735:397): arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffe037c28d0 a2=0 a3=7ffe037c28bc items=0 ppid=3296 pid=5669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.028877] audit: type=1327 audit(1719903997.735:397): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 143.034193] audit: type=1325 audit(1719903997.740:398): table=nat:119 family=2 entries=20 op=nft_register_rule pid=5669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.035960] audit: type=1300 audit(1719903997.740:398): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe037c28d0 a2=0 a3=7ffe037c28bc items=0 ppid=3296 pid=5669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.046154] audit: type=1327 audit(1719903997.740:398): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 143.105150] audit: type=1101 audit(1719903997.816:399): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 143.109963] audit: type=1103 audit(1719903997.822:400): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 143.112848] audit: type=1006 audit(1719903997.822:401): pid=5666 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 148.144937] kauditd_printk_skb: 61 callbacks suppressed [ 148.144940] audit: type=1106 audit(1719904002.857:439): pid=5754 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 148.149947] audit: type=1104 audit(1719904002.857:440): pid=5754 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 148.152950] audit: type=1131 audit(1719904002.866:441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.147:22-139.178.89.65:53474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.173436] audit: type=1130 audit(1719904002.885:442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.147:22-139.178.89.65:53490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.331441] audit: type=1101 audit(1719904003.044:443): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 148.336039] audit: type=1103 audit(1719904003.048:444): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 148.339683] audit: type=1006 audit(1719904003.050:445): pid=5770 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 148.341127] audit: type=1300 audit(1719904003.050:445): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbc0514f0 a2=3 a3=7f0d41290480 items=0 ppid=1 pid=5770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.345077] audit: type=1327 audit(1719904003.050:445): proctitle=737368643A20636F7265205B707269765D [ 148.366561] audit: type=1105 audit(1719904003.078:446): pid=5770 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.663668] kauditd_printk_skb: 4 callbacks suppressed [ 153.663671] audit: type=1130 audit(1719904008.376:451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.147:22-139.178.89.65:47522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.820196] audit: type=1101 audit(1719904008.533:452): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.826051] audit: type=1103 audit(1719904008.533:453): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.832109] audit: type=1006 audit(1719904008.533:454): pid=5785 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 153.835525] audit: type=1300 audit(1719904008.533:454): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe36ecbcf0 a2=3 a3=7fdf58e6b480 items=0 ppid=1 pid=5785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.843646] audit: type=1327 audit(1719904008.533:454): proctitle=737368643A20636F7265205B707269765D [ 153.874746] audit: type=1105 audit(1719904008.587:455): pid=5785 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.878006] audit: type=1103 audit(1719904008.587:456): pid=5788 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.112421] audit: type=1106 audit(1719904008.825:457): pid=5785 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.118690] audit: type=1104 audit(1719904008.825:458): pid=5785 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.147609] kauditd_printk_skb: 7 callbacks suppressed [ 159.147612] audit: type=1130 audit(1719904013.860:462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.147:22-139.178.89.65:47528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.318569] audit: type=1101 audit(1719904014.031:463): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.325133] audit: type=1103 audit(1719904014.034:464): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.333357] audit: type=1006 audit(1719904014.036:465): pid=5808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 159.338036] audit: type=1300 audit(1719904014.036:465): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb2588270 a2=3 a3=7fbd186a6480 items=0 ppid=1 pid=5808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.348752] audit: type=1327 audit(1719904014.036:465): proctitle=737368643A20636F7265205B707269765D [ 159.372403] audit: type=1105 audit(1719904014.084:466): pid=5808 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.377767] audit: type=1103 audit(1719904014.090:467): pid=5811 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.584990] audit: type=1106 audit(1719904014.297:468): pid=5808 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.589236] audit: type=1104 audit(1719904014.298:469): pid=5808 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.618992] kauditd_printk_skb: 1 callbacks suppressed [ 164.618995] audit: type=1130 audit(1719904019.331:471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.147:22-139.178.89.65:52414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.787281] audit: type=1101 audit(1719904019.500:472): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.791182] audit: type=1103 audit(1719904019.504:473): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.793912] audit: type=1006 audit(1719904019.504:474): pid=5822 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 164.795541] audit: type=1300 audit(1719904019.504:474): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff6436360 a2=3 a3=7f44304c5480 items=0 ppid=1 pid=5822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.798203] audit: type=1327 audit(1719904019.504:474): proctitle=737368643A20636F7265205B707269765D [ 164.815418] audit: type=1105 audit(1719904019.527:475): pid=5822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.818828] audit: type=1103 audit(1719904019.532:476): pid=5825 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.011845] audit: type=1106 audit(1719904019.724:477): pid=5822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.015494] audit: type=1104 audit(1719904019.726:478): pid=5822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.043749] kauditd_printk_skb: 1 callbacks suppressed [ 170.043752] audit: type=1130 audit(1719904024.756:480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.147:22-139.178.89.65:52420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.240028] audit: type=1101 audit(1719904024.953:481): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.244778] audit: type=1103 audit(1719904024.953:482): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.247922] audit: type=1006 audit(1719904024.953:483): pid=5840 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 170.250209] audit: type=1300 audit(1719904024.953:483): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdef0103f0 a2=3 a3=7f21c4a16480 items=0 ppid=1 pid=5840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.258078] audit: type=1327 audit(1719904024.953:483): proctitle=737368643A20636F7265205B707269765D [ 170.307932] audit: type=1105 audit(1719904025.021:484): pid=5840 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.314914] audit: type=1103 audit(1719904025.021:485): pid=5843 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.572862] audit: type=1106 audit(1719904025.285:486): pid=5840 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.575886] audit: type=1104 audit(1719904025.287:487): pid=5840 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.603753] kauditd_printk_skb: 1 callbacks suppressed [ 175.603756] audit: type=1130 audit(1719904030.316:489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.147:22-139.178.89.65:52478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.793982] audit: type=1101 audit(1719904030.507:490): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.798042] audit: type=1103 audit(1719904030.507:491): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.801217] audit: type=1006 audit(1719904030.507:492): pid=5878 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 175.802973] audit: type=1300 audit(1719904030.507:492): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5b288a70 a2=3 a3=7f505c210480 items=0 ppid=1 pid=5878 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.806758] audit: type=1327 audit(1719904030.507:492): proctitle=737368643A20636F7265205B707269765D [ 175.870518] audit: type=1105 audit(1719904030.583:493): pid=5878 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.874576] audit: type=1103 audit(1719904030.587:494): pid=5882 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.135834] audit: type=1106 audit(1719904030.848:495): pid=5878 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.138988] audit: type=1104 audit(1719904030.848:496): pid=5878 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.168222] kauditd_printk_skb: 1 callbacks suppressed [ 181.168225] audit: type=1130 audit(1719904035.881:498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.147:22-139.178.89.65:52494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.334444] audit: type=1101 audit(1719904036.047:499): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.338725] audit: type=1103 audit(1719904036.051:500): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.342256] audit: type=1006 audit(1719904036.051:501): pid=5922 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 181.343883] audit: type=1300 audit(1719904036.051:501): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea6b76c90 a2=3 a3=7efc0ac45480 items=0 ppid=1 pid=5922 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.347452] audit: type=1327 audit(1719904036.051:501): proctitle=737368643A20636F7265205B707269765D [ 181.373958] audit: type=1105 audit(1719904036.086:502): pid=5922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.378237] audit: type=1103 audit(1719904036.087:503): pid=5926 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.607752] audit: type=1106 audit(1719904036.320:504): pid=5922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.611727] audit: type=1104 audit(1719904036.320:505): pid=5922 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success'