:258): prog-id=48 op=LOAD [ 55.130024] audit: type=1334 audit(1719880060.765:259): prog-id=49 op=LOAD [ 55.131257] audit: type=1334 audit(1719880060.765:260): prog-id=31 op=UNLOAD [ 55.132471] audit: type=1334 audit(1719880060.766:261): prog-id=32 op=UNLOAD [ 55.133736] audit: type=1334 audit(1719880060.768:262): prog-id=50 op=LOAD [ 59.062952] kauditd_printk_skb: 23 callbacks suppressed [ 59.062957] audit: type=1325 audit(1719880064.699:286): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2608 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.066762] audit: type=1300 audit(1719880064.699:286): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff894f0c0 a2=0 a3=1 items=0 ppid=2597 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.072577] audit: type=1327 audit(1719880064.699:286): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 59.078498] audit: type=1325 audit(1719880064.714:287): table=filter:27 family=2 entries=1 op=nft_register_chain pid=2609 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.082850] audit: type=1300 audit(1719880064.714:287): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdebc57f0 a2=0 a3=1 items=0 ppid=2597 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.092067] audit: type=1327 audit(1719880064.714:287): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 59.097578] audit: type=1325 audit(1719880064.733:288): table=filter:28 family=2 entries=2 op=nft_register_chain pid=2611 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.100590] audit: type=1300 audit(1719880064.733:288): arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe02d6530 a2=0 a3=1 items=0 ppid=2597 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.107731] audit: type=1327 audit(1719880064.733:288): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C [ 59.125457] audit: type=1325 audit(1719880064.761:289): table=filter:29 family=2 entries=2 op=nft_register_chain pid=2613 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.055939] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2797) [ 64.913211] kauditd_printk_skb: 98 callbacks suppressed [ 64.913216] audit: type=1400 audit(1719880070.550:334): avc: denied { watch } for pid=2876 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="overlay" ino=7800 scontext=system_u:system_r:container_t:s0:c594,c1007 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 64.919394] audit: type=1300 audit(1719880070.550:334): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400424a3c0 a2=fc6 a3=0 items=0 ppid=2659 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c594,c1007 key=(null) [ 64.937347] audit: type=1327 audit(1719880070.550:334): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 64.942516] audit: type=1400 audit(1719880070.550:335): avc: denied { watch } for pid=2876 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c594,c1007 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 64.954669] audit: type=1300 audit(1719880070.550:335): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4005faaaa0 a2=fc6 a3=0 items=0 ppid=2659 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c594,c1007 key=(null) [ 64.961353] audit: type=1327 audit(1719880070.550:335): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 64.966416] audit: type=1400 audit(1719880070.551:336): avc: denied { watch } for pid=2876 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="overlay" ino=7796 scontext=system_u:system_r:container_t:s0:c594,c1007 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 64.971230] audit: type=1300 audit(1719880070.551:336): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40044a6390 a2=fc6 a3=0 items=0 ppid=2659 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c594,c1007 key=(null) [ 64.976818] audit: type=1327 audit(1719880070.551:336): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 64.981942] audit: type=1400 audit(1719880070.556:337): avc: denied { watch } for pid=2876 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="overlay" ino=7802 scontext=system_u:system_r:container_t:s0:c594,c1007 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 72.832359] kauditd_printk_skb: 61 callbacks suppressed [ 72.832365] audit: type=1106 audit(1719880078.469:389): pid=2103 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 72.837723] audit: type=1104 audit(1719880078.469:390): pid=2103 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 72.863286] audit: type=1106 audit(1719880078.499:391): pid=2100 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 72.869788] audit: type=1104 audit(1719880078.499:392): pid=2100 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 72.876125] audit: type=1131 audit(1719880078.510:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.46:22-139.178.89.65:42156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 79.012047] audit: type=1400 audit(1719880084.649:394): avc: denied { watch } for pid=2848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c101,c355 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 79.017528] audit: type=1300 audit(1719880084.649:394): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bb2b40 a2=fc6 a3=0 items=0 ppid=2663 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c101,c355 key=(null) [ 79.023889] audit: type=1327 audit(1719880084.649:394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 79.029296] audit: type=1400 audit(1719880084.649:395): avc: denied { watch } for pid=2848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c101,c355 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 79.034115] audit: type=1300 audit(1719880084.649:395): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bb2e20 a2=fc6 a3=0 items=0 ppid=2663 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c101,c355 key=(null) [ 79.040212] audit: type=1327 audit(1719880084.649:395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 79.045367] audit: type=1400 audit(1719880084.654:396): avc: denied { watch } for pid=2848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c101,c355 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 79.049923] audit: type=1300 audit(1719880084.654:396): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bb2fe0 a2=fc6 a3=0 items=0 ppid=2663 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c101,c355 key=(null) [ 79.056386] audit: type=1327 audit(1719880084.654:396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 79.061528] audit: type=1400 audit(1719880084.655:397): avc: denied { watch } for pid=2848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c101,c355 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 84.631237] kauditd_printk_skb: 5 callbacks suppressed [ 84.631242] audit: type=1334 audit(1719880090.268:399): prog-id=105 op=LOAD [ 84.635281] audit: type=1334 audit(1719880090.271:400): prog-id=106 op=LOAD [ 84.636552] audit: type=1300 audit(1719880090.271:400): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001b18b0 a2=78 a3=0 items=0 ppid=3155 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.642164] audit: type=1327 audit(1719880090.271:400): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362393966643235326237646136336431376432633834663832616664 [ 84.650100] audit: type=1334 audit(1719880090.271:401): prog-id=107 op=LOAD [ 84.651707] audit: type=1300 audit(1719880090.271:401): arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001b1640 a2=78 a3=0 items=0 ppid=3155 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.658312] audit: type=1327 audit(1719880090.271:401): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362393966643235326237646136336431376432633834663832616664 [ 84.664244] audit: type=1334 audit(1719880090.271:402): prog-id=107 op=UNLOAD [ 84.665942] audit: type=1334 audit(1719880090.271:403): prog-id=106 op=UNLOAD [ 84.667488] audit: type=1334 audit(1719880090.271:404): prog-id=108 op=LOAD [ 94.589585] kauditd_printk_skb: 190 callbacks suppressed [ 94.589591] audit: type=1334 audit(1719880100.228:473): prog-id=120 op=LOAD [ 94.593120] audit: type=1334 audit(1719880100.231:474): prog-id=121 op=LOAD [ 94.594477] audit: type=1300 audit(1719880100.231:474): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001398b0 a2=78 a3=0 items=0 ppid=3155 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.600175] audit: type=1327 audit(1719880100.231:474): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465656437646662356139393334626237323239386534623434666233 [ 94.605564] audit: type=1334 audit(1719880100.238:475): prog-id=122 op=LOAD [ 94.606958] audit: type=1300 audit(1719880100.238:475): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000139640 a2=78 a3=0 items=0 ppid=3155 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.612062] audit: type=1327 audit(1719880100.238:475): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465656437646662356139393334626237323239386534623434666233 [ 94.617045] audit: type=1334 audit(1719880100.238:476): prog-id=122 op=UNLOAD [ 94.619273] audit: type=1334 audit(1719880100.238:477): prog-id=121 op=UNLOAD [ 94.620665] audit: type=1334 audit(1719880100.238:478): prog-id=123 op=LOAD [ 99.656933] kauditd_printk_skb: 70 callbacks suppressed [ 99.656938] audit: type=1334 audit(1719880105.295:517): prog-id=143 op=LOAD [ 99.659138] audit: type=1300 audit(1719880105.295:517): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdb502dd8 a2=74 a3=0 items=0 ppid=3754 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.665103] audit: type=1327 audit(1719880105.295:517): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 99.667408] audit: type=1334 audit(1719880105.296:518): prog-id=143 op=UNLOAD [ 99.668853] audit: type=1334 audit(1719880105.296:519): prog-id=144 op=LOAD [ 99.670546] audit: type=1300 audit(1719880105.296:519): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdb501e18 a2=90 a3=2 items=0 ppid=3754 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.676385] audit: type=1327 audit(1719880105.296:519): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 99.678411] audit: type=1334 audit(1719880105.297:520): prog-id=144 op=UNLOAD [ 99.679969] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.681044] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 102.890634] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_net: link becomes ready [ 102.891963] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_host: link becomes ready [ 103.709441] NET: Registered PF_ALG protocol family This is ip-172-31-28-46 (Linux aarch64 6.1.96-flatcar) 00:28:29 SSH host key: SHA256:xFr3bvavfAuJzDl8xfiMm6h5iqxMCUxzKzJGgtJz5xk (ECDSA) SSH host key: SHA256:Yt2E6QVvISPiRw6cp8yqAaqU/E7ud5GfnIdTefLn/YY (RSA) SSH host key: SHA256:ryp/eT49d9jt4Lt9JJ1PlJKl/9G6dOGWqlfbK4tTxbY (ED25519) eth0: 172.31.28.46 fe80::4f5:77ff:fe1b:b039 ip-172-31-28-46 login: [ 104.764544] kauditd_printk_skb: 3312 callbacks suppressed [ 104.764549] audit: type=1325 audit(1719880110.403:2171): table=nat:89 family=2 entries=1 op=nft_register_chain pid=4078 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 104.768331] audit: type=1300 audit(1719880110.403:2171): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=ffffd978b8b0 a2=0 a3=ffff8886d5c0 items=0 ppid=3754 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.773904] audit: type=1327 audit(1719880110.403:2171): proctitle=69707461626C6573002D770035002D74006E6174002D53 [ 104.777431] audit: type=1325 audit(1719880110.416:2172): table=nat:90 family=10 entries=1 op=nft_register_chain pid=4079 subj=system_u:system_r:spc_t:s0 comm="ip6tables" [ 104.780262] audit: type=1300 audit(1719880110.416:2172): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=ffffdea73160 a2=0 a3=ffff9ac2f5c0 items=0 ppid=3754 pid=4079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.786079] audit: type=1327 audit(1719880110.416:2172): proctitle=6970367461626C6573002D770035002D74006E6174002D53 [ 104.788077] audit: type=1325 audit(1719880110.420:2173): table=mangle:91 family=2 entries=5 op=nft_register_chain pid=4080 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 104.790879] audit: type=1300 audit(1719880110.420:2173): arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd6f648e0 a2=0 a3=ffff9e51b5c0 items=0 ppid=3754 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.796648] audit: type=1327 audit(1719880110.420:2173): proctitle=69707461626C6573002D770035002D74006D616E676C65002D53 [ 104.798566] audit: type=1325 audit(1719880110.424:2174): table=mangle:92 family=10 entries=5 op=nft_register_chain pid=4081 subj=system_u:system_r:spc_t:s0 comm="ip6tables" This is ip-172-31-28-46 (Linux aarch64 6.1.96-flatcar) 00:28:30 SSH host key: SHA256:xFr3bvavfAuJzDl8xfiMm6h5iqxMCUxzKzJGgtJz5xk (ECDSA) SSH host key: SHA256:Yt2E6QVvISPiRw6cp8yqAaqU/E7ud5GfnIdTefLn/YY (RSA) SSH host key: SHA256:ryp/eT49d9jt4Lt9JJ1PlJKl/9G6dOGWqlfbK4tTxbY (ED25519) eth0: 172.31.28.46 fe80::4f5:77ff:fe1b:b039 ip-172-31-28-46 login: [ 105.346539] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 105.780155] eth0: renamed from tmp2cd84 [ 105.796133] IPv6: ADDRCONF(NETDEV_CHANGE): lxc2d39396eede2: link becomes ready [ 105.845000] eth0: renamed from tmp36e64 [ 105.853365] IPv6: ADDRCONF(NETDEV_CHANGE): lxceb7ae1173b95: link becomes ready This is ip-172-31-28-46 (Linux aarch64 6.1.96-flatcar) 00:28:31 SSH host key: SHA256:xFr3bvavfAuJzDl8xfiMm6h5iqxMCUxzKzJGgtJz5xk (ECDSA) SSH host key: SHA256:Yt2E6QVvISPiRw6cp8yqAaqU/E7ud5GfnIdTefLn/YY (RSA) SSH host key: SHA256:ryp/eT49d9jt4Lt9JJ1PlJKl/9G6dOGWqlfbK4tTxbY (ED25519) eth0: 172.31.28.46 fe80::4f5:77ff:fe1b:b039 ip-172-31-28-46 login: This is ip-172-31-28-46 (Linux aarch64 6.1.96-flatcar) 00:28:33 SSH host key: SHA256:xFr3bvavfAuJzDl8xfiMm6h5iqxMCUxzKzJGgtJz5xk (ECDSA) SSH host key: SHA256:Yt2E6QVvISPiRw6cp8yqAaqU/E7ud5GfnIdTefLn/YY (RSA) SSH host key: SHA256:ryp/eT49d9jt4Lt9JJ1PlJKl/9G6dOGWqlfbK4tTxbY (ED25519) eth0: 172.31.28.46 fe80::4f5:77ff:fe1b:b039 ip-172-31-28-46 login: This is ip-172-31-28-46 (Linux aarch64 6.1.96-flatcar) 00:28:34 SSH host key: SHA256:xFr3bvavfAuJzDl8xfiMm6h5iqxMCUxzKzJGgtJz5xk (ECDSA) SSH host key: SHA256:Yt2E6QVvISPiRw6cp8yqAaqU/E7ud5GfnIdTefLn/YY (RSA) SSH host key: SHA256:ryp/eT49d9jt4Lt9JJ1PlJKl/9G6dOGWqlfbK4tTxbY (ED25519) eth0: 172.31.28.46 fe80::4f5:77ff:fe1b:b039 ip-172-31-28-46 login: [ 111.711951] kauditd_printk_skb: 238 callbacks suppressed [ 111.711955] audit: type=1130 audit(1719880117.350:2267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.46:22-139.178.89.65:55622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 111.884063] audit: type=1101 audit(1719880117.522:2268): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 111.891586] audit: type=1103 audit(1719880117.530:2269): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 111.897446] audit: type=1006 audit(1719880117.535:2270): pid=4248 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 111.902917] audit: type=1300 audit(1719880117.535:2270): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd58410b0 a2=3 a3=1 items=0 ppid=1 pid=4248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.908058] audit: type=1327 audit(1719880117.535:2270): proctitle=737368643A20636F7265205B707269765D [ 111.940874] audit: type=1105 audit(1719880117.579:2271): pid=4248 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 111.947874] audit: type=1103 audit(1719880117.586:2272): pid=4250 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 112.291753] audit: type=1106 audit(1719880117.930:2273): pid=4248 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 112.301402] audit: type=1104 audit(1719880117.936:2274): pid=4248 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 116.712061] kauditd_printk_skb: 310 callbacks suppressed [ 116.712065] audit: type=1334 audit(1719880122.345:2399): prog-id=1076 op=LOAD [ 116.714367] audit: type=1300 audit(1719880122.345:2399): arch=c00000b7 syscall=280 success=yes exit=41 a0=5 a1=ffffc5857008 a2=80 a3=aaaafc382cbf items=0 ppid=3754 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.721075] audit: type=1327 audit(1719880122.345:2399): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800656772657373007072696F00310068616E646C65003100627066006461006F626A003131345F6E6578742F6270665F6C78632E6F0073656300746F2D636F6E7461696E6572 [ 116.770701] audit: type=1334 audit(1719880122.409:2400): prog-id=1077 op=LOAD [ 116.773656] audit: type=1334 audit(1719880122.412:2401): prog-id=1078 op=LOAD [ 116.774940] audit: type=1300 audit(1719880122.412:2401): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400018d8b0 a2=78 a3=0 items=0 ppid=4280 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.780850] audit: type=1327 audit(1719880122.412:2401): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363613031353639313062656336633062323038326638333666343861 [ 116.786881] audit: type=1334 audit(1719880122.412:2402): prog-id=1079 op=LOAD [ 116.788729] audit: type=1300 audit(1719880122.412:2402): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400018d640 a2=78 a3=0 items=0 ppid=4280 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.798401] audit: type=1327 audit(1719880122.412:2402): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363613031353639313062656336633062323038326638333666343861 [ 122.851911] kauditd_printk_skb: 82 callbacks suppressed [ 122.851916] audit: type=1130 audit(1719880128.490:2439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.46:22-139.178.89.65:46354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 123.019233] audit: type=1101 audit(1719880128.658:2440): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.027311] audit: type=1103 audit(1719880128.666:2441): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.033312] audit: type=1006 audit(1719880128.667:2442): pid=4456 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 123.036474] audit: type=1300 audit(1719880128.667:2442): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa256050 a2=3 a3=1 items=0 ppid=1 pid=4456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.042021] audit: type=1327 audit(1719880128.667:2442): proctitle=737368643A20636F7265205B707269765D [ 123.069216] audit: type=1105 audit(1719880128.707:2443): pid=4456 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.075723] audit: type=1103 audit(1719880128.714:2444): pid=4458 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.313106] audit: type=1106 audit(1719880128.950:2445): pid=4456 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.319833] audit: type=1104 audit(1719880128.950:2446): pid=4456 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.348643] kauditd_printk_skb: 25 callbacks suppressed [ 128.348647] audit: type=1130 audit(1719880133.987:2456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.46:22-139.178.89.65:46362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 128.520227] audit: type=1101 audit(1719880134.159:2457): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.527133] audit: type=1103 audit(1719880134.166:2458): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.531851] audit: type=1006 audit(1719880134.166:2459): pid=4468 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 128.535177] audit: type=1300 audit(1719880134.166:2459): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2a38bb0 a2=3 a3=1 items=0 ppid=1 pid=4468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.540655] audit: type=1327 audit(1719880134.166:2459): proctitle=737368643A20636F7265205B707269765D [ 128.562829] audit: type=1105 audit(1719880134.201:2460): pid=4468 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.569543] audit: type=1103 audit(1719880134.208:2461): pid=4470 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.822538] audit: type=1106 audit(1719880134.461:2462): pid=4468 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.828796] audit: type=1104 audit(1719880134.461:2463): pid=4468 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.954895] kauditd_printk_skb: 23 callbacks suppressed [ 134.954900] audit: type=1130 audit(1719880140.593:2483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.46:22-139.178.89.65:35920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 135.126781] audit: type=1101 audit(1719880140.765:2484): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.132429] audit: type=1103 audit(1719880140.770:2485): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.137178] audit: type=1006 audit(1719880140.770:2486): pid=4506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 135.140150] audit: type=1300 audit(1719880140.770:2486): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee825df0 a2=3 a3=1 items=0 ppid=1 pid=4506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.145016] audit: type=1327 audit(1719880140.770:2486): proctitle=737368643A20636F7265205B707269765D [ 135.170175] audit: type=1105 audit(1719880140.809:2487): pid=4506 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.176189] audit: type=1103 audit(1719880140.809:2488): pid=4508 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.417247] audit: type=1106 audit(1719880141.056:2489): pid=4506 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.426025] audit: type=1104 audit(1719880141.056:2490): pid=4506 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.463360] kauditd_printk_skb: 13 callbacks suppressed [ 140.463365] audit: type=1130 audit(1719880146.102:2496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.46:22-139.178.89.65:35922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 140.633723] audit: type=1101 audit(1719880146.272:2497): pid=4518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.640641] audit: type=1103 audit(1719880146.279:2498): pid=4518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.645025] audit: type=1006 audit(1719880146.279:2499): pid=4518 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 140.647835] audit: type=1300 audit(1719880146.279:2499): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe92c6d70 a2=3 a3=1 items=0 ppid=1 pid=4518 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.652610] audit: type=1327 audit(1719880146.279:2499): proctitle=737368643A20636F7265205B707269765D [ 140.674806] audit: type=1105 audit(1719880146.313:2500): pid=4518 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.679979] audit: type=1103 audit(1719880146.317:2501): pid=4520 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.919080] audit: type=1106 audit(1719880146.558:2502): pid=4518 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.926430] audit: type=1104 audit(1719880146.558:2503): pid=4518 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.967141] kauditd_printk_skb: 1 callbacks suppressed [ 145.967146] audit: type=1130 audit(1719880151.606:2505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.46:22-139.178.89.65:33042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 146.138473] audit: type=1101 audit(1719880151.777:2506): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.145634] audit: type=1103 audit(1719880151.784:2507): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.150043] audit: type=1006 audit(1719880151.785:2508): pid=4533 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 146.153157] audit: type=1300 audit(1719880151.785:2508): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8a55610 a2=3 a3=1 items=0 ppid=1 pid=4533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.158218] audit: type=1327 audit(1719880151.785:2508): proctitle=737368643A20636F7265205B707269765D [ 146.183020] audit: type=1105 audit(1719880151.822:2509): pid=4533 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.188540] audit: type=1103 audit(1719880151.825:2510): pid=4535 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.447149] audit: type=1106 audit(1719880152.086:2511): pid=4533 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.455516] audit: type=1104 audit(1719880152.087:2512): pid=4533 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.981347] kauditd_printk_skb: 47 callbacks suppressed [ 150.981352] audit: type=1101 audit(1719880156.620:2546): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.987435] audit: type=1103 audit(1719880156.624:2547): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.992325] audit: type=1006 audit(1719880156.624:2548): pid=4582 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 150.995583] audit: type=1300 audit(1719880156.624:2548): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9aa4040 a2=3 a3=1 items=0 ppid=1 pid=4582 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.001405] audit: type=1327 audit(1719880156.624:2548): proctitle=737368643A20636F7265205B707269765D [ 151.037899] audit: type=1105 audit(1719880156.676:2549): pid=4582 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.047000] audit: type=1103 audit(1719880156.685:2550): pid=4584 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.294713] audit: type=1106 audit(1719880156.933:2551): pid=4582 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.301128] audit: type=1104 audit(1719880156.933:2552): pid=4582 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.306795] audit: type=1131 audit(1719880156.940:2553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.46:22-139.178.89.65:33084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.334580] audit: type=1130 audit(1719880161.973:2554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.46:22-139.178.89.65:38754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.498912] audit: type=1101 audit(1719880162.138:2555): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.505755] audit: type=1103 audit(1719880162.144:2556): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.510204] audit: type=1006 audit(1719880162.145:2557): pid=4594 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 156.513864] audit: type=1300 audit(1719880162.145:2557): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbdf59e0 a2=3 a3=1 items=0 ppid=1 pid=4594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.518876] audit: type=1327 audit(1719880162.145:2557): proctitle=737368643A20636F7265205B707269765D [ 156.544123] audit: type=1105 audit(1719880162.183:2558): pid=4594 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.549324] audit: type=1103 audit(1719880162.186:2559): pid=4596 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.793068] audit: type=1106 audit(1719880162.432:2560): pid=4594 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.799168] audit: type=1104 audit(1719880162.432:2561): pid=4594 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.832870] kauditd_printk_skb: 10 callbacks suppressed [ 161.832875] audit: type=1130 audit(1719880167.472:2568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.46:22-139.178.89.65:38758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.998537] audit: type=1101 audit(1719880167.637:2569): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.003153] audit: type=1103 audit(1719880167.640:2570): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.007958] audit: type=1006 audit(1719880167.640:2571): pid=4613 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 162.010856] audit: type=1300 audit(1719880167.640:2571): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb0ae270 a2=3 a3=1 items=0 ppid=1 pid=4613 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.016409] audit: type=1327 audit(1719880167.640:2571): proctitle=737368643A20636F7265205B707269765D [ 162.039111] audit: type=1105 audit(1719880167.677:2572): pid=4613 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.045614] audit: type=1103 audit(1719880167.684:2573): pid=4615 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.291644] audit: type=1106 audit(1719880167.930:2574): pid=4613 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.298327] audit: type=1104 audit(1719880167.932:2575): pid=4613 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.339727] kauditd_printk_skb: 1 callbacks suppressed [ 167.339745] audit: type=1130 audit(1719880172.978:2577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.46:22-139.178.89.65:38896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.515829] audit: type=1101 audit(1719880173.154:2578): pid=4625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.520560] audit: type=1103 audit(1719880173.157:2579): pid=4625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.525440] audit: type=1006 audit(1719880173.157:2580): pid=4625 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 167.528561] audit: type=1300 audit(1719880173.157:2580): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1236a80 a2=3 a3=1 items=0 ppid=1 pid=4625 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.533730] audit: type=1327 audit(1719880173.157:2580): proctitle=737368643A20636F7265205B707269765D [ 167.557333] audit: type=1105 audit(1719880173.195:2581): pid=4625 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.563391] audit: type=1103 audit(1719880173.201:2582): pid=4627 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.811904] audit: type=1106 audit(1719880173.450:2583): pid=4625 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.817871] audit: type=1104 audit(1719880173.450:2584): pid=4625 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.851008] kauditd_printk_skb: 1 callbacks suppressed [ 172.851013] audit: type=1130 audit(1719880178.489:2586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.46:22-139.178.89.65:40342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.020855] audit: type=1101 audit(1719880178.659:2587): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.026438] audit: type=1103 audit(1719880178.662:2588): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.031843] audit: type=1006 audit(1719880178.662:2589): pid=4638 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 173.035028] audit: type=1300 audit(1719880178.662:2589): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4dcc4f0 a2=3 a3=1 items=0 ppid=1 pid=4638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.040248] audit: type=1327 audit(1719880178.662:2589): proctitle=737368643A20636F7265205B707269765D [ 173.067794] audit: type=1105 audit(1719880178.705:2590): pid=4638 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.073985] audit: type=1103 audit(1719880178.712:2591): pid=4640 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.306730] audit: type=1106 audit(1719880178.945:2592): pid=4638 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.312272] audit: type=1104 audit(1719880178.945:2593): pid=4638 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-28-46 (Linux aarch64 6.1.96-flatcar) 00:29:42 SSH host key: SHA256:xFr3bvavfAuJzDl8xfiMm6h5iqxMCUxzKzJGgtJz5xk (ECDSA) SSH host key: SHA256:Yt2E6QVvISPiRw6cp8yqAaqU/E7ud5GfnIdTefLn/YY (RSA) SSH host key: SHA256:ryp/eT49d9jt4Lt9JJ1PlJKl/9G6dOGWqlfbK4tTxbY (ED25519) eth0: 172.31.28.46 fe80::4f5:77ff:fe1b:b039 ip-172-31-28-46 login: [ 178.091519] kauditd_printk_skb: 18 callbacks suppressed [ 178.091524] audit: type=1106 audit(1719880183.730:2610): pid=4650 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.098495] audit: type=1104 audit(1719880183.730:2611): pid=4650 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.104194] audit: type=1131 audit(1719880183.736:2612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.46:22-139.178.89.65:40350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.127198] audit: type=1130 audit(1719880183.765:2613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.28.46:22-139.178.89.65:40360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.293465] audit: type=1101 audit(1719880183.931:2614): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.300639] audit: type=1103 audit(1719880183.939:2615): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.305633] audit: type=1006 audit(1719880183.939:2616): pid=4822 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 178.309024] audit: type=1300 audit(1719880183.939:2616): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb1eccf0 a2=3 a3=1 items=0 ppid=1 pid=4822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.314115] audit: type=1327 audit(1719880183.939:2616): proctitle=737368643A20636F7265205B707269765D [ 178.335437] audit: type=1105 audit(1719880183.973:2617): pid=4822 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.771783] kauditd_printk_skb: 89 callbacks suppressed [ 183.771788] audit: type=1334 audit(1719880189.410:2673): prog-id=1110 op=LOAD [ 183.775549] audit: type=1334 audit(1719880189.414:2674): prog-id=1111 op=LOAD [ 183.777265] audit: type=1300 audit(1719880189.414:2674): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001a98b0 a2=78 a3=0 items=0 ppid=4849 pid=5149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.782510] audit: type=1327 audit(1719880189.414:2674): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434336262366462336266353232323462366462333161353933616237 [ 183.788585] audit: type=1334 audit(1719880189.418:2675): prog-id=1112 op=LOAD [ 183.790694] audit: type=1300 audit(1719880189.418:2675): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001a9640 a2=78 a3=0 items=0 ppid=4849 pid=5149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.798051] audit: type=1327 audit(1719880189.418:2675): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434336262366462336266353232323462366462333161353933616237 [ 183.806805] audit: type=1334 audit(1719880189.421:2676): prog-id=1112 op=UNLOAD [ 183.808794] audit: type=1334 audit(1719880189.421:2677): prog-id=1111 op=UNLOAD [ 183.810450] audit: type=1334 audit(1719880189.421:2678): prog-id=1113 op=LOAD [ 184.844997] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106(gcm-aes-ce))) [ 188.785698] kauditd_printk_skb: 3597 callbacks suppressed [ 188.785703] audit: type=1325 audit(1719880194.425:4428): table=mangle:220 family=2 entries=1 op=nft_unregister_rule pid=5585 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 188.789807] audit: type=1300 audit(1719880194.425:4428): arch=c00000b7 syscall=211 success=yes exit=544 a0=3 a1=ffffd4584240 a2=0 a3=ffffab5e05c0 items=0 ppid=5159 pid=5585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 188.805355] audit: type=1327 audit(1719880194.425:4428): proctitle=69707461626C6573002D770035002D74006D616E676C65002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F6D616E676C65002D6A004F4C445F43494C49554D5F5052455F6D616E676C65 [ 188.815672] audit: type=1325 audit(1719880194.435:4429): table=mangle:221 family=2 entries=1 op=nft_unregister_rule pid=5586 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 188.824534] audit: type=1300 audit(1719880194.435:4429): arch=c00000b7 syscall=211 success=yes exit=544 a0=3 a1=fffff9122b70 a2=0 a3=ffffa15c55c0 items=0 ppid=5159 pid=5586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 188.833477] audit: type=1327 audit(1719880194.435:4429): proctitle=69707461626C6573002D770035002D74006D616E676C65002D4400504F5354524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F504F53545F6D616E676C65002D6A004F4C445F43494C49554D5F504F53545F6D616E676C65 [ 188.844554] audit: type=1325 audit(1719880194.459:4430): table=mangle:222 family=2 entries=1 op=nft_unregister_rule pid=5587 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 188.850728] audit: type=1300 audit(1719880194.459:4430): arch=c00000b7 syscall=211 success=yes exit=572 a0=3 a1=ffffcd0be680 a2=0 a3=ffff981925c0 items=0 ppid=5159 pid=5587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 188.864211] audit: type=1327 audit(1719880194.459:4430): proctitle=69707461626C6573002D770035002D74006D616E676C65002D44004F4C445F43494C49554D5F5052455F6D616E676C65002D6D00736F636B6574002D2D7472616E73706172656E74002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E706F642072656469726563742070726F7869656420 [ 188.873678] audit: type=1325 audit(1719880194.473:4431): table=mangle:223 family=2 entries=1 op=nft_unregister_rule pid=5588 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 189.460286] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-28-46 (Linux aarch64 6.1.96-flatcar) 00:29:58 SSH host key: SHA256:xFr3bvavfAuJzDl8xfiMm6h5iqxMCUxzKzJGgtJz5xk (ECDSA) SSH host key: SHA256:Yt2E6QVvISPiRw6cp8yqAaqU/E7ud5GfnIdTefLn/YY (RSA) SSH host key: SHA256:ryp/eT49d9jt4Lt9JJ1PlJKl/9G6dOGWqlfbK4tTxbY (ED25519) eth0: 172.31.28.46 fe80::4f5:77ff:fe1b:b039 ip-172-31-28-46 login: [ 195.957895] kauditd_printk_skb: 219 callbacks suppressed [ 195.957901] audit: type=1106 audit(1719880201.597:4519): pid=4889 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.964182] audit: type=1104 audit(1719880201.597:4520): pid=4889 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.970210] audit: type=1131 audit(1719880201.599:4521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.46:22-139.178.89.65:40374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.465613] audit: type=1334 audit(1719880204.105:4522): prog-id=1968 op=LOAD [ 198.466888] audit: type=1300 audit(1719880204.105:4522): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd630f248 a2=74 a3=11 items=0 ppid=5159 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 198.473271] audit: type=1327 audit(1719880204.105:4522): proctitle=74630066696C746572007265706C61636500646576006C786332643339333936656564653200696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313230325F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 198.478447] audit: type=1334 audit(1719880204.105:4523): prog-id=1968 op=UNLOAD [ 198.480855] audit: type=1334 audit(1719880204.105:4524): prog-id=1969 op=LOAD [ 198.482676] audit: type=1300 audit(1719880204.105:4524): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd630f228 a2=80 a3=0 items=0 ppid=5159 pid=5787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 198.489344] audit: type=1327 audit(1719880204.105:4524): proctitle=74630066696C746572007265706C61636500646576006C786332643339333936656564653200696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313230325F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572