[ 35.167447] audit: type=1131 audit(1768351845.340:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.23.79:22-68.220.241.50:34308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.298593] Initializing XFRM netlink socket This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:50:50 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:50:50 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: [ 42.716593] kauditd_printk_skb: 132 callbacks suppressed [ 42.716598] audit: type=1130 audit(1768351852.898:306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.806605] audit: type=1131 audit(1768351852.988:307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 53.917231] audit: type=1130 audit(1768351864.099:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.218421] audit: type=1131 audit(1768351864.400:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 54.899485] audit: type=1131 audit(1768351865.081:310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.915696] audit: type=1334 audit(1768351865.098:311): prog-id=66 op=UNLOAD [ 57.378652] audit: type=1130 audit(1768351867.560:312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.384898] audit: type=1131 audit(1768351867.560:313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.553363] zram_generator::config[2831]: No configuration found. [ 57.911422] audit: type=1130 audit(1768351868.093:314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 57.916140] audit: type=1334 audit(1768351868.098:315): prog-id=70 op=LOAD [ 57.917401] audit: type=1334 audit(1768351868.098:316): prog-id=55 op=UNLOAD [ 57.918733] audit: type=1334 audit(1768351868.098:317): prog-id=71 op=LOAD [ 58.994093] kauditd_printk_skb: 37 callbacks suppressed [ 58.994096] audit: type=1130 audit(1768351869.176:355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.671922] audit: type=1325 audit(1768351869.854:356): table=mangle:42 family=2 entries=2 op=nft_register_chain pid=2908 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.674976] audit: type=1300 audit(1768351869.854:356): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd08a5cd50 a2=0 a3=0 items=0 ppid=2895 pid=2908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.680447] audit: type=1327 audit(1768351869.854:356): proctitle=69707461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 59.687534] audit: type=1325 audit(1768351869.869:357): table=filter:43 family=2 entries=1 op=nft_register_chain pid=2911 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.693702] audit: type=1300 audit(1768351869.869:357): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc44261090 a2=0 a3=0 items=0 ppid=2895 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.699397] audit: type=1327 audit(1768351869.869:357): proctitle=69707461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 59.702133] audit: type=1325 audit(1768351869.870:358): table=filter:44 family=2 entries=2 op=nft_register_chain pid=2913 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.706193] audit: type=1300 audit(1768351869.870:358): arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7fff298cec80 a2=0 a3=0 items=0 ppid=2895 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.712096] audit: type=1327 audit(1768351869.870:358): proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C [ 72.819557] zram_generator::config[3404]: No configuration found. [ 73.168998] kauditd_printk_skb: 159 callbacks suppressed [ 73.169003] audit: type=1131 audit(1768351883.351:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 73.178422] audit: type=1334 audit(1768351883.359:417): prog-id=120 op=LOAD [ 73.179995] audit: type=1334 audit(1768351883.359:418): prog-id=121 op=LOAD [ 73.181552] audit: type=1334 audit(1768351883.359:419): prog-id=73 op=UNLOAD [ 73.184949] audit: type=1334 audit(1768351883.359:420): prog-id=74 op=UNLOAD [ 73.187642] audit: type=1334 audit(1768351883.362:421): prog-id=122 op=LOAD [ 73.190044] audit: type=1334 audit(1768351883.362:422): prog-id=86 op=UNLOAD [ 73.191555] audit: type=1334 audit(1768351883.362:423): prog-id=123 op=LOAD [ 73.193108] audit: type=1334 audit(1768351883.362:424): prog-id=124 op=LOAD [ 73.194547] audit: type=1334 audit(1768351883.362:425): prog-id=87 op=UNLOAD [ 78.754195] kauditd_printk_skb: 37 callbacks suppressed [ 78.754199] audit: type=1106 audit(1768351888.936:463): pid=2315 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 78.759075] audit: type=1104 audit(1768351888.937:464): pid=2315 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 78.838385] audit: type=1106 audit(1768351889.020:465): pid=2310 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 78.844139] audit: type=1104 audit(1768351889.020:466): pid=2310 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 78.849194] audit: type=1131 audit(1768351889.027:467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.23.79:22-68.220.241.50:34314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 80.613062] audit: type=1334 audit(1768351890.795:468): prog-id=140 op=LOAD [ 80.616890] audit: type=1334 audit(1768351890.799:469): prog-id=141 op=LOAD [ 80.618437] audit: type=1300 audit(1768351890.799:469): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3558 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.624794] audit: type=1327 audit(1768351890.799:469): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239383330613636626464613534326665393636636630616562336366 [ 80.630256] audit: type=1334 audit(1768351890.799:470): prog-id=141 op=UNLOAD [ 86.447099] kauditd_printk_skb: 76 callbacks suppressed [ 86.447103] audit: type=1325 audit(1768351896.629:497): table=mangle:54 family=10 entries=1 op=nft_register_chain pid=3758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 86.453670] audit: type=1300 audit(1768351896.629:497): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd2b0a9a60 a2=0 a3=7ffd2b0a9a4c items=0 ppid=3701 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.463342] audit: type=1327 audit(1768351896.629:497): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 86.468310] audit: type=1325 audit(1768351896.631:498): table=mangle:55 family=2 entries=1 op=nft_register_chain pid=3757 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 86.472860] audit: type=1300 audit(1768351896.631:498): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2a23e770 a2=0 a3=7ffc2a23e75c items=0 ppid=3701 pid=3757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.479394] audit: type=1327 audit(1768351896.631:498): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 86.483387] audit: type=1325 audit(1768351896.638:499): table=nat:56 family=10 entries=1 op=nft_register_chain pid=3761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 86.486440] audit: type=1300 audit(1768351896.638:499): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcdb03b4b0 a2=0 a3=7ffcdb03b49c items=0 ppid=3701 pid=3761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.494174] audit: type=1327 audit(1768351896.638:499): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 86.497379] audit: type=1325 audit(1768351896.642:500): table=nat:57 family=2 entries=1 op=nft_register_chain pid=3759 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 91.582835] kauditd_printk_skb: 143 callbacks suppressed [ 91.582838] audit: type=1334 audit(1768351901.765:548): prog-id=158 op=LOAD [ 91.587470] audit: type=1334 audit(1768351901.767:549): prog-id=159 op=LOAD [ 91.588681] audit: type=1300 audit(1768351901.767:549): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3626 pid=3883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.594331] audit: type=1327 audit(1768351901.767:549): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131393133383737306331633065663563623966356365653164303834 [ 91.600661] audit: type=1334 audit(1768351901.767:550): prog-id=159 op=UNLOAD [ 91.601959] audit: type=1300 audit(1768351901.767:550): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3626 pid=3883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.606901] audit: type=1327 audit(1768351901.767:550): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131393133383737306331633065663563623966356365653164303834 [ 91.611984] audit: type=1334 audit(1768351901.768:551): prog-id=160 op=LOAD [ 91.613233] audit: type=1300 audit(1768351901.768:551): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=3626 pid=3883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.618240] audit: type=1327 audit(1768351901.768:551): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131393133383737306331633065663563623966356365653164303834 [ 99.109581] kauditd_printk_skb: 122 callbacks suppressed [ 99.109585] audit: type=1334 audit(1768351909.291:600): prog-id=186 op=LOAD [ 99.112308] audit: type=1300 audit(1768351909.291:600): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffce894710 a2=74 a3=7fffce894710 items=0 ppid=4068 pid=4192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.117831] audit: type=1327 audit(1768351909.291:600): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 99.117843] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.118709] audit: type=1334 audit(1768351909.291:601): prog-id=186 op=UNLOAD [ 99.119086] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 99.119461] audit: type=1300 audit(1768351909.291:601): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7fffce894710 a2=74 a3=7fffce894710 items=0 ppid=4068 pid=4192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.119844] audit: backlog limit exceeded [ 99.121305] audit: type=1327 audit(1768351909.291:601): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 99.121310] audit: type=1334 audit(1768351909.292:602): prog-id=187 op=LOAD This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:51:53 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:51:53 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:51:54 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:51:54 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:51:55 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:51:55 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: [ 107.729027] NET: Registered PF_ALG protocol family [ 107.734853] kauditd_printk_skb: 5660 callbacks suppressed [ 107.734856] audit: type=1334 audit(1768351917.917:2488): prog-id=1131 op=LOAD [ 107.737076] audit: type=1300 audit(1768351917.917:2488): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc34a642b0 a2=74 a3=7ffc34a642b0 items=0 ppid=4234 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.742217] audit: type=1327 audit(1768351917.917:2488): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 107.746476] audit: type=1334 audit(1768351917.917:2489): prog-id=1131 op=UNLOAD [ 107.748047] audit: type=1300 audit(1768351917.917:2489): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc34a642b0 a2=74 a3=7ffc34a642b0 items=0 ppid=4234 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.753701] audit: type=1327 audit(1768351917.917:2489): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 107.759128] audit: type=1334 audit(1768351917.917:2490): prog-id=1132 op=LOAD [ 107.765301] audit: type=1300 audit(1768351917.917:2490): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc34a64240 a2=80 a3=0 items=0 ppid=4234 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.771348] audit: type=1327 audit(1768351917.917:2490): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 107.776463] audit: type=1334 audit(1768351917.917:2491): prog-id=1132 op=UNLOAD [ 109.342961] eth0: renamed from tmp32c64 [ 109.351229] eth0: renamed from tmp82ae6 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:52:01 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:52:01 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:52:02 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:52:02 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: [ 113.800721] kauditd_printk_skb: 323 callbacks suppressed [ 113.800725] audit: type=1334 audit(1768351923.982:2599): prog-id=1169 op=LOAD [ 113.804215] audit: type=1334 audit(1768351923.984:2600): prog-id=1170 op=LOAD [ 113.805975] audit: type=1300 audit(1768351923.984:2600): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcded199b0 a2=74 a3=7ffcded199b0 items=0 ppid=4068 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.811736] audit: type=1327 audit(1768351923.984:2600): proctitle=74630066696C746572007265706C61636500646576006C786333613563376436386563333600696E6772657373007072696F00310068616E646C65003100627066006461006F626A003232345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 113.816035] audit: type=1334 audit(1768351923.984:2601): prog-id=1170 op=UNLOAD [ 113.817320] audit: type=1300 audit(1768351923.984:2601): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffcded199b0 a2=74 a3=7ffcded199b0 items=0 ppid=4068 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.822451] audit: type=1327 audit(1768351923.984:2601): proctitle=74630066696C746572007265706C61636500646576006C786333613563376436386563333600696E6772657373007072696F00310068616E646C65003100627066006461006F626A003232345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 113.826692] audit: type=1334 audit(1768351923.984:2602): prog-id=1171 op=LOAD [ 113.827912] audit: type=1300 audit(1768351923.984:2602): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcded19940 a2=80 a3=0 items=0 ppid=4068 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.833599] audit: type=1327 audit(1768351923.984:2602): proctitle=74630066696C746572007265706C61636500646576006C786333613563376436386563333600696E6772657373007072696F00310068616E646C65003100627066006461006F626A003232345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 126.131013] kauditd_printk_skb: 468 callbacks suppressed [ 126.131017] audit: type=1325 audit(1768351936.313:2761): table=filter:157 family=2 entries=11 op=nft_register_rule pid=4771 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.135007] audit: type=1300 audit(1768351936.313:2761): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffde0f752d0 a2=0 a3=7ffde0f752bc items=0 ppid=3701 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.141781] audit: type=1327 audit(1768351936.313:2761): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 126.145079] audit: type=1325 audit(1768351936.327:2762): table=nat:158 family=2 entries=33 op=nft_register_chain pid=4771 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.148410] audit: type=1300 audit(1768351936.327:2762): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffde0f752d0 a2=0 a3=7ffde0f752bc items=0 ppid=3701 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.157468] audit: type=1327 audit(1768351936.327:2762): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 127.163715] audit: type=1325 audit(1768351937.345:2763): table=filter:159 family=2 entries=8 op=nft_register_rule pid=4773 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 127.166679] audit: type=1300 audit(1768351937.345:2763): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff859ba3b0 a2=0 a3=7fff859ba39c items=0 ppid=3701 pid=4773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.173526] audit: type=1327 audit(1768351937.345:2763): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 127.237710] audit: type=1325 audit(1768351937.419:2764): table=nat:160 family=2 entries=54 op=nft_register_chain pid=4773 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.401430] kauditd_printk_skb: 10 callbacks suppressed [ 131.401434] audit: type=1106 audit(1768351941.583:2771): pid=4777 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.409528] audit: type=1104 audit(1768351941.583:2772): pid=4777 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.413863] audit: type=1131 audit(1768351941.586:2773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.23.79:22-68.220.241.50:56910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.483118] audit: type=1130 audit(1768351946.665:2774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.23.79:22-68.220.241.50:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.913046] audit: type=1101 audit(1768351947.095:2775): pid=4797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 136.920644] audit: type=1103 audit(1768351947.097:2776): pid=4797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 136.927033] audit: type=1006 audit(1768351947.097:2777): pid=4797 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 136.930095] audit: type=1300 audit(1768351947.097:2777): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd512da2c0 a2=3 a3=0 items=0 ppid=1 pid=4797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.935841] audit: type=1327 audit(1768351947.097:2777): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 136.940812] audit: type=1105 audit(1768351947.123:2778): pid=4797 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 136.949538] audit: type=1103 audit(1768351947.131:2779): pid=4801 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.244500] audit: type=1106 audit(1768351947.426:2780): pid=4797 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.252272] audit: type=1104 audit(1768351947.426:2781): pid=4797 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 142.338621] kauditd_printk_skb: 1 callbacks suppressed [ 142.339788] audit: type=1130 audit(1768351952.520:2783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.23.79:22-68.220.241.50:42730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 142.772784] audit: type=1101 audit(1768351952.955:2784): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 142.778371] audit: type=1103 audit(1768351952.956:2785): pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 142.783200] audit: type=1006 audit(1768351952.957:2786): pid=4814 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 142.786002] audit: type=1300 audit(1768351952.957:2786): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd00ce66f0 a2=3 a3=0 items=0 ppid=1 pid=4814 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.791156] audit: type=1327 audit(1768351952.957:2786): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 142.798380] audit: type=1105 audit(1768351952.980:2787): pid=4814 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 142.804255] audit: type=1103 audit(1768351952.985:2788): pid=4818 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.074832] audit: type=1106 audit(1768351953.257:2789): pid=4814 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.080950] audit: type=1104 audit(1768351953.258:2790): pid=4814 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 148.161645] kauditd_printk_skb: 1 callbacks suppressed [ 148.161648] audit: type=1130 audit(1768351958.343:2792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.23.79:22-68.220.241.50:42740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.585725] audit: type=1101 audit(1768351958.768:2793): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 148.591559] audit: type=1103 audit(1768351958.769:2794): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 148.597372] audit: type=1006 audit(1768351958.769:2795): pid=4835 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 148.600584] audit: type=1300 audit(1768351958.769:2795): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffec8406ac0 a2=3 a3=0 items=0 ppid=1 pid=4835 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.606688] audit: type=1327 audit(1768351958.769:2795): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 148.614087] audit: type=1105 audit(1768351958.796:2796): pid=4835 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 148.620062] audit: type=1103 audit(1768351958.798:2797): pid=4840 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 148.896680] audit: type=1106 audit(1768351959.078:2798): pid=4835 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 148.902895] audit: type=1104 audit(1768351959.078:2799): pid=4835 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 155.822648] kauditd_printk_skb: 23 callbacks suppressed [ 155.822652] audit: type=1130 audit(1768351966.004:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.23.79:22-68.220.241.50:50278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.253905] audit: type=1101 audit(1768351966.436:2820): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.259168] audit: type=1103 audit(1768351966.437:2821): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.264094] audit: type=1006 audit(1768351966.437:2822): pid=4886 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 156.267013] audit: type=1300 audit(1768351966.437:2822): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff3faf61a0 a2=3 a3=0 items=0 ppid=1 pid=4886 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.272213] audit: type=1327 audit(1768351966.437:2822): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 156.277702] audit: type=1105 audit(1768351966.460:2823): pid=4886 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.283712] audit: type=1103 audit(1768351966.462:2824): pid=4890 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.561949] audit: type=1106 audit(1768351966.744:2825): pid=4886 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.568174] audit: type=1104 audit(1768351966.746:2826): pid=4886 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.649922] kauditd_printk_skb: 1 callbacks suppressed [ 161.649925] audit: type=1130 audit(1768351971.831:2828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.23.79:22-68.220.241.50:50284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.110227] audit: type=1101 audit(1768351972.292:2829): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 162.118417] audit: type=1103 audit(1768351972.300:2830): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 162.123430] audit: type=1006 audit(1768351972.300:2831): pid=4902 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 162.126832] audit: type=1300 audit(1768351972.300:2831): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc9072c7c0 a2=3 a3=0 items=0 ppid=1 pid=4902 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.132097] audit: type=1327 audit(1768351972.300:2831): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 162.139394] audit: type=1105 audit(1768351972.321:2832): pid=4902 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 162.145377] audit: type=1103 audit(1768351972.323:2833): pid=4906 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 162.436370] audit: type=1106 audit(1768351972.618:2834): pid=4902 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 162.443145] audit: type=1104 audit(1768351972.619:2835): pid=4902 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 166.675040] kauditd_printk_skb: 9 callbacks suppressed [ 166.675044] audit: type=1106 audit(1768351976.857:2843): pid=4918 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 166.682766] audit: type=1104 audit(1768351976.857:2844): pid=4918 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 166.687101] audit: type=1131 audit(1768351976.861:2845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.23.79:22-68.220.241.50:34820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.735065] audit: type=1130 audit(1768351976.917:2846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.23.79:22-68.220.241.50:34822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.182995] audit: type=1101 audit(1768351977.365:2847): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 167.189065] audit: type=1103 audit(1768351977.366:2848): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 167.194144] audit: type=1006 audit(1768351977.367:2849): pid=4944 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 167.197039] audit: type=1300 audit(1768351977.367:2849): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1fa48fb0 a2=3 a3=0 items=0 ppid=1 pid=4944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.202249] audit: type=1327 audit(1768351977.367:2849): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.209254] audit: type=1105 audit(1768351977.391:2850): pid=4944 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.490974] kauditd_printk_skb: 38 callbacks suppressed [ 175.490977] audit: type=1130 audit(1768351985.672:2877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.23.79:22-68.220.241.50:32904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.919694] audit: type=1101 audit(1768351986.102:2878): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.926333] audit: type=1103 audit(1768351986.103:2879): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.931942] audit: type=1006 audit(1768351986.103:2880): pid=4996 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 175.934745] audit: type=1300 audit(1768351986.103:2880): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc0f1418b0 a2=3 a3=0 items=0 ppid=1 pid=4996 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.939970] audit: type=1327 audit(1768351986.103:2880): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.945782] audit: type=1105 audit(1768351986.128:2881): pid=4996 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.951747] audit: type=1103 audit(1768351986.132:2882): pid=5000 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.989884] audit: type=1325 audit(1768351986.172:2883): table=filter:165 family=2 entries=20 op=nft_register_rule pid=5002 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 175.992950] audit: type=1300 audit(1768351986.172:2883): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcc5522490 a2=0 a3=7ffcc552247c items=0 ppid=3701 pid=5002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.307992] kauditd_printk_skb: 7 callbacks suppressed [ 181.307994] audit: type=1130 audit(1768351991.490:2888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.23.79:22-68.220.241.50:32906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.744119] audit: type=1101 audit(1768351991.926:2889): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.749801] audit: type=1103 audit(1768351991.928:2890): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.754807] audit: type=1006 audit(1768351991.928:2891): pid=5016 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 181.757755] audit: type=1300 audit(1768351991.928:2891): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd95cad360 a2=3 a3=0 items=0 ppid=1 pid=5016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.763992] audit: type=1327 audit(1768351991.928:2891): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 181.774559] audit: type=1105 audit(1768351991.956:2892): pid=5016 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.781399] audit: type=1103 audit(1768351991.959:2893): pid=5020 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 182.048760] audit: type=1106 audit(1768351992.230:2894): pid=5016 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 182.055142] audit: type=1104 audit(1768351992.230:2895): pid=5016 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 187.132527] kauditd_printk_skb: 1 callbacks suppressed [ 187.132530] audit: type=1130 audit(1768351997.314:2897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.23.79:22-68.220.241.50:53644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.562105] audit: type=1101 audit(1768351997.744:2898): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 187.568177] audit: type=1103 audit(1768351997.745:2899): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 187.574468] audit: type=1006 audit(1768351997.745:2900): pid=5031 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 187.578197] audit: type=1300 audit(1768351997.745:2900): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcdc2542d0 a2=3 a3=0 items=0 ppid=1 pid=5031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.583717] audit: type=1327 audit(1768351997.745:2900): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.590916] audit: type=1105 audit(1768351997.773:2901): pid=5031 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 187.598156] audit: type=1103 audit(1768351997.780:2902): pid=5035 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 187.863056] audit: type=1106 audit(1768351998.044:2903): pid=5031 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 187.872090] audit: type=1104 audit(1768351998.044:2904): pid=5031 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:53:21 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:53:21 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: [ 192.550741] kauditd_printk_skb: 17 callbacks suppressed [ 192.550745] audit: type=1106 audit(1768352002.733:2920): pid=5048 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.558757] audit: type=1104 audit(1768352002.733:2921): pid=5048 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.570048] audit: type=1131 audit(1768352002.752:2922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.23.79:22-68.220.241.50:53652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.640515] audit: type=1130 audit(1768352002.822:2923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.23.79:22-68.220.241.50:33424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.107515] audit: type=1101 audit(1768352003.289:2924): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 193.112905] audit: type=1103 audit(1768352003.291:2925): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 193.117737] audit: type=1006 audit(1768352003.291:2926): pid=5196 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 193.120661] audit: type=1300 audit(1768352003.291:2926): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb55eba30 a2=3 a3=0 items=0 ppid=1 pid=5196 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 193.125983] audit: type=1327 audit(1768352003.291:2926): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 193.141507] audit: type=1105 audit(1768352003.323:2927): pid=5196 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.369608] kauditd_printk_skb: 133 callbacks suppressed [ 198.369612] audit: type=1334 audit(1768352008.551:2991): prog-id=1290 op=LOAD [ 198.372907] audit: type=1334 audit(1768352008.554:2992): prog-id=1291 op=LOAD [ 198.374163] audit: type=1300 audit(1768352008.554:2992): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=5229 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.379258] audit: type=1327 audit(1768352008.554:2992): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366338353032316164323736303666613433663736633535313435 [ 198.384492] audit: type=1334 audit(1768352008.554:2993): prog-id=1291 op=UNLOAD [ 198.385884] audit: type=1300 audit(1768352008.554:2993): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5229 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.391454] audit: type=1327 audit(1768352008.554:2993): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366338353032316164323736303666613433663736633535313435 [ 198.397433] audit: type=1334 audit(1768352008.554:2994): prog-id=1292 op=LOAD [ 198.398913] audit: type=1300 audit(1768352008.554:2994): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=5229 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.404525] audit: type=1327 audit(1768352008.554:2994): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366338353032316164323736303666613433663736633535313435 [ 200.897351] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 203.456502] kauditd_printk_skb: 5768 callbacks suppressed [ 203.456506] audit: type=1415 audit(1768352013.638:4919): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 src=192.168.0.63 dst=192.168.1.60 spi=3(0x3) res=1 [ 203.461577] audit: type=1300 audit(1768352013.638:4919): arch=c000003e syscall=44 success=yes exit=364 a0=19 a1=c000945200 a2=16c a3=0 items=0 ppid=5229 pid=5462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 203.468312] audit: type=1327 audit(1768352013.638:4919): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 203.471820] audit: type=1415 audit(1768352013.638:4920): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 res=1 src=192.168.0.0 src_prefixlen=24 dst=192.168.1.0 dst_prefixlen=24 [ 203.476268] audit: type=1300 audit(1768352013.638:4920): arch=c000003e syscall=44 success=yes exit=264 a0=19 a1=c0003eb320 a2=108 a3=0 items=0 ppid=5229 pid=5462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 203.489551] audit: type=1327 audit(1768352013.638:4920): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 203.493162] audit: type=1415 audit(1768352013.639:4921): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 src=0.0.0.0 dst=192.168.0.63 spi=3(0x3) res=1 [ 203.497891] audit: type=1300 audit(1768352013.639:4921): arch=c000003e syscall=44 success=yes exit=364 a0=19 a1=c000945380 a2=16c a3=0 items=0 ppid=5229 pid=5462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:spc_t:s0 key=(null) [ 203.504627] audit: type=1327 audit(1768352013.639:4921): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 203.507959] audit: type=1415 audit(1768352013.639:4922): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.0.0 dst_prefixlen=24 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:53:36 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 This is ip-172-31-23-79 (Linux x86_64 6.12.65-flatcar) 00:53:36 SSH host key: SHA256:xNqkglyGCvFF6Jmyx3VkB6hfsISZLQRKoYChW1Ehyz4 (RSA) SSH host key: SHA256:IXScAnJ1shKP0nY0X1bp4+NuqWELB+wNRSltTWPK+6U (ED25519) SSH host key: SHA256:5lMQQ56IB3hD4KcEroRqQvZgZfXLmA349Tm8wMIwK6M (ECDSA) eth0: 172.31.23.79 fe80::494:12ff:feca:b011 ip-172-31-23-79 login: [ 209.265864] kauditd_printk_skb: 480 callbacks suppressed [ 209.265868] audit: type=1334 audit(1768352019.448:5089): prog-id=2278 op=LOAD [ 209.269365] audit: type=1334 audit(1768352019.448:5090): prog-id=2279 op=LOAD [ 209.270855] audit: type=1300 audit(1768352019.448:5090): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffffcd620a0 a2=74 a3=7ffffcd620a0 items=0 ppid=5462 pid=6121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 209.277039] audit: type=1327 audit(1768352019.448:5090): proctitle=74630066696C746572007265706C61636500646576006C786333613563376436386563333600696E6772657373007072696F00310068616E646C65003100627066006461006F626A003232345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 209.281332] audit: type=1334 audit(1768352019.448:5091): prog-id=2279 op=UNLOAD [ 209.282572] audit: type=1300 audit(1768352019.448:5091): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffffcd620a0 a2=74 a3=7ffffcd620a0 items=0 ppid=5462 pid=6121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 209.287637] audit: type=1327 audit(1768352019.448:5091): proctitle=74630066696C746572007265706C61636500646576006C786333613563376436386563333600696E6772657373007072696F00310068616E646C65003100627066006461006F626A003232345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 209.291833] audit: type=1334 audit(1768352019.448:5092): prog-id=2280 op=LOAD [ 209.292986] audit: type=1300 audit(1768352019.448:5092): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffffcd62030 a2=80 a3=0 items=0 ppid=5462 pid=6121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 209.297980] audit: type=1327 audit(1768352019.448:5092): proctitle=74630066696C746572007265706C61636500646576006C786333613563376436386563333600696E6772657373007072696F00310068616E646C65003100627066006461006F626A003232345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 226.088675] kauditd_printk_skb: 423 callbacks suppressed [ 226.088677] audit: type=1334 audit(1768352036.271:5238): prog-id=2356 op=LOAD [ 226.091233] audit: type=1334 audit(1768352036.273:5239): prog-id=95 op=UNLOAD [ 226.094851] audit: type=1334 audit(1768352036.277:5240): prog-id=105 op=UNLOAD [ 226.096275] audit: type=1334 audit(1768352036.277:5241): prog-id=109 op=UNLOAD [ 226.454696] audit: type=1334 audit(1768352036.637:5242): prog-id=2357 op=LOAD [ 226.456422] audit: type=1334 audit(1768352036.638:5243): prog-id=2358 op=LOAD [ 226.458119] audit: type=1300 audit(1768352036.638:5243): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b0238 a2=98 a3=0 items=0 ppid=2961 pid=6167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.463808] audit: type=1327 audit(1768352036.638:5243): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766666238303032663961616233353864393230376534613731626330 [ 226.469860] audit: type=1334 audit(1768352036.638:5244): prog-id=2358 op=UNLOAD [ 226.471375] audit: type=1300 audit(1768352036.638:5244): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2961 pid=6167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 248.252657] kauditd_printk_skb: 42 callbacks suppressed [ 248.252661] audit: type=1106 audit(1768352058.432:5262): pid=2195 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 248.261141] audit: type=1104 audit(1768352058.432:5263): pid=2195 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 248.298986] audit: type=1334 audit(1768352058.481:5264): prog-id=2297 op=UNLOAD [ 248.300974] audit: type=1334 audit(1768352058.481:5265): prog-id=2329 op=UNLOAD [ 248.351469] audit: type=1131 audit(1768352058.533:5266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 248.359483] audit: type=1131 audit(1768352058.541:5267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 248.374149] audit: type=1131 audit(1768352058.556:5268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 248.387981] audit: type=1131 audit(1768352058.569:5269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=nvidia comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 248.398677] audit: type=1131 audit(1768352058.578:5270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 248.417193] audit: type=1131 audit(1768352058.598:5271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshkeys comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'