'unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 35.574386] audit: type=1131 audit(1768891853.080:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 35.577428] audit: type=1106 audit(1768891853.082:242): pid=2189 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 35.580652] audit: type=1104 audit(1768891853.082:243): pid=2189 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 35.646539] audit: type=1106 audit(1768891853.163:244): pid=2184 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 35.652706] audit: type=1104 audit(1768891853.163:245): pid=2184 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 35.657072] audit: type=1131 audit(1768891853.167:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.105:22-68.220.241.50:35462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.014253] Initializing XFRM netlink socket This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:50:57 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:50:57 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: [ 41.491648] kauditd_printk_skb: 132 callbacks suppressed [ 41.491652] audit: type=1130 audit(1768891859.009:297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.569522] audit: type=1131 audit(1768891859.087:298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 52.232894] audit: type=1130 audit(1768891869.751:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.353067] audit: type=1131 audit(1768891869.871:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 55.168278] audit: type=1131 audit(1768891872.686:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.181619] audit: type=1334 audit(1768891872.700:302): prog-id=66 op=UNLOAD [ 58.235120] audit: type=1130 audit(1768891875.752:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.239367] audit: type=1131 audit(1768891875.752:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.408446] zram_generator::config[2753]: No configuration found. [ 58.743385] audit: type=1334 audit(1768891876.261:305): prog-id=70 op=LOAD [ 58.746685] audit: type=1334 audit(1768891876.264:306): prog-id=62 op=UNLOAD [ 58.749764] audit: type=1334 audit(1768891876.265:307): prog-id=71 op=LOAD [ 58.751468] audit: type=1334 audit(1768891876.265:308): prog-id=59 op=UNLOAD [ 58.753112] audit: type=1334 audit(1768891876.267:309): prog-id=72 op=LOAD [ 58.754669] audit: type=1334 audit(1768891876.267:310): prog-id=73 op=LOAD [ 58.756162] audit: type=1334 audit(1768891876.267:311): prog-id=60 op=UNLOAD [ 58.757776] audit: type=1334 audit(1768891876.267:312): prog-id=61 op=UNLOAD [ 69.701406] zram_generator::config[3224]: No configuration found. [ 70.018678] kauditd_printk_skb: 203 callbacks suppressed [ 70.018681] audit: type=1131 audit(1768891887.537:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.025505] audit: type=1334 audit(1768891887.543:409): prog-id=120 op=LOAD [ 70.027523] audit: type=1334 audit(1768891887.543:410): prog-id=83 op=UNLOAD [ 70.028798] audit: type=1334 audit(1768891887.543:411): prog-id=121 op=LOAD [ 70.030147] audit: type=1334 audit(1768891887.543:412): prog-id=122 op=LOAD [ 70.031278] audit: type=1334 audit(1768891887.543:413): prog-id=84 op=UNLOAD [ 70.032390] audit: type=1334 audit(1768891887.543:414): prog-id=85 op=UNLOAD [ 70.033464] audit: type=1334 audit(1768891887.545:415): prog-id=123 op=LOAD [ 70.034524] audit: type=1334 audit(1768891887.545:416): prog-id=124 op=LOAD [ 70.036525] audit: type=1334 audit(1768891887.545:417): prog-id=74 op=UNLOAD [ 75.141101] kauditd_printk_skb: 37 callbacks suppressed [ 75.141105] audit: type=1106 audit(1768891892.659:455): pid=2228 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 75.146306] audit: type=1104 audit(1768891892.659:456): pid=2228 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 75.228990] audit: type=1106 audit(1768891892.747:457): pid=2223 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 75.235458] audit: type=1104 audit(1768891892.747:458): pid=2223 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 75.240326] audit: type=1131 audit(1768891892.748:459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.105:22-68.220.241.50:34062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 79.002403] audit: type=1334 audit(1768891896.520:460): prog-id=140 op=LOAD [ 79.007518] audit: type=1334 audit(1768891896.525:461): prog-id=141 op=LOAD [ 79.011133] audit: type=1300 audit(1768891896.525:461): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0238 a2=98 a3=0 items=0 ppid=3371 pid=3382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.017407] audit: type=1327 audit(1768891896.525:461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463383932336235336430393039396431373964393461336130376537 [ 79.023443] audit: type=1334 audit(1768891896.527:462): prog-id=141 op=UNLOAD [ 84.350924] kauditd_printk_skb: 76 callbacks suppressed [ 84.350929] audit: type=1325 audit(1768891901.869:489): table=mangle:54 family=2 entries=1 op=nft_register_chain pid=3567 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 84.360147] audit: type=1300 audit(1768891901.869:489): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff29872a30 a2=0 a3=7fff29872a1c items=0 ppid=3515 pid=3567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.366610] audit: type=1327 audit(1768891901.869:489): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 84.369721] audit: type=1325 audit(1768891901.870:490): table=mangle:55 family=10 entries=1 op=nft_register_chain pid=3568 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 84.372883] audit: type=1300 audit(1768891901.870:490): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcbfbfe1c0 a2=0 a3=7ffcbfbfe1ac items=0 ppid=3515 pid=3568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.379581] audit: type=1327 audit(1768891901.870:490): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 84.382881] audit: type=1325 audit(1768891901.877:491): table=nat:56 family=10 entries=1 op=nft_register_chain pid=3570 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 84.386067] audit: type=1300 audit(1768891901.877:491): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffba0358d0 a2=0 a3=7fffba0358bc items=0 ppid=3515 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.393956] audit: type=1327 audit(1768891901.877:491): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 84.397480] audit: type=1325 audit(1768891901.878:492): table=filter:57 family=10 entries=1 op=nft_register_chain pid=3572 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 89.855282] kauditd_printk_skb: 191 callbacks suppressed [ 89.855285] audit: type=1334 audit(1768891907.373:560): prog-id=168 op=LOAD [ 89.858871] audit: type=1300 audit(1768891907.373:560): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3396 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.864635] audit: type=1327 audit(1768891907.373:560): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163386637613839306533303866333130653733393166616630663166 [ 89.870754] audit: type=1334 audit(1768891907.376:561): prog-id=169 op=LOAD [ 89.875557] audit: type=1300 audit(1768891907.376:561): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c000130218 a2=98 a3=0 items=0 ppid=3396 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.881939] audit: type=1327 audit(1768891907.376:561): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163386637613839306533303866333130653733393166616630663166 [ 89.892967] audit: type=1334 audit(1768891907.376:562): prog-id=169 op=UNLOAD [ 89.895507] audit: type=1300 audit(1768891907.376:562): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3396 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.904512] audit: type=1327 audit(1768891907.376:562): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163386637613839306533303866333130653733393166616630663166 [ 89.912522] audit: type=1334 audit(1768891907.376:563): prog-id=168 op=UNLOAD This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:54 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:54 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: [ 96.654076] NET: Registered PF_ALG protocol family [ 96.660906] kauditd_printk_skb: 5744 callbacks suppressed [ 96.660909] audit: type=1334 audit(1768891914.179:2482): prog-id=1131 op=LOAD [ 96.663989] audit: type=1300 audit(1768891914.179:2482): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffe4dc2900 a2=74 a3=7fffe4dc2900 items=0 ppid=4040 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 96.669832] audit: type=1327 audit(1768891914.179:2482): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 96.674081] audit: type=1334 audit(1768891914.179:2483): prog-id=1131 op=UNLOAD [ 96.675809] audit: type=1300 audit(1768891914.179:2483): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fffe4dc2900 a2=74 a3=7fffe4dc2900 items=0 ppid=4040 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 96.681775] audit: type=1327 audit(1768891914.179:2483): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 96.687491] audit: type=1334 audit(1768891914.179:2484): prog-id=1132 op=LOAD [ 96.696552] audit: type=1300 audit(1768891914.179:2484): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffe4dc2890 a2=80 a3=0 items=0 ppid=4040 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 96.704169] audit: type=1327 audit(1768891914.179:2484): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 96.714511] audit: type=1334 audit(1768891914.179:2485): prog-id=1132 op=UNLOAD This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:55 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:55 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: [ 98.438317] eth0: renamed from tmpad46c [ 98.526441] eth0: renamed from tmp0b804 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:56 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:56 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:57 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:57 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:58 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:58 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:59 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:51:59 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: [ 103.431662] kauditd_printk_skb: 323 callbacks suppressed [ 103.431666] audit: type=1334 audit(1768891920.950:2593): prog-id=1169 op=LOAD [ 103.435267] audit: type=1300 audit(1768891920.950:2593): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffab2f64d0 a2=74 a3=7fffab2f64d0 items=0 ppid=3915 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.443400] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.443526] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.443777] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 103.444073] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 103.444380] audit: backlog limit exceeded [ 103.444692] audit: backlog limit exceeded [ 103.445742] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.450697] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 109.093696] kauditd_printk_skb: 474 callbacks suppressed [ 109.093700] audit: type=1325 audit(1768891926.612:2754): table=filter:159 family=2 entries=8 op=nft_register_rule pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.097434] audit: type=1300 audit(1768891926.612:2754): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd50573240 a2=0 a3=7ffd5057322c items=0 ppid=3515 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.104049] audit: type=1327 audit(1768891926.612:2754): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 109.212252] audit: type=1325 audit(1768891926.730:2755): table=nat:160 family=2 entries=54 op=nft_register_chain pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.215407] audit: type=1300 audit(1768891926.730:2755): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffd50573240 a2=0 a3=7ffd5057322c items=0 ppid=3515 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.224565] audit: type=1327 audit(1768891926.730:2755): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 124.579914] audit: type=1130 audit(1768891942.098:2756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.105:22-68.220.241.50:48074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 125.064302] audit: type=1101 audit(1768891942.582:2757): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 125.071766] audit: type=1103 audit(1768891942.582:2758): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 125.077441] audit: type=1006 audit(1768891942.585:2759): pid=4588 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 125.080787] audit: type=1300 audit(1768891942.585:2759): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd6b524c60 a2=3 a3=0 items=0 ppid=1 pid=4588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.087086] audit: type=1327 audit(1768891942.585:2759): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 125.096611] audit: type=1105 audit(1768891942.615:2760): pid=4588 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 125.103518] audit: type=1103 audit(1768891942.617:2761): pid=4593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 126.110575] audit: type=1106 audit(1768891943.629:2762): pid=4588 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 126.118780] audit: type=1104 audit(1768891943.629:2763): pid=4588 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.199501] kauditd_printk_skb: 1 callbacks suppressed [ 131.199505] audit: type=1130 audit(1768891948.717:2765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.105:22-68.220.241.50:54284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.644407] audit: type=1101 audit(1768891949.162:2766): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.650638] audit: type=1103 audit(1768891949.165:2767): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.656527] audit: type=1006 audit(1768891949.165:2768): pid=4607 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 131.659773] audit: type=1300 audit(1768891949.165:2768): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff6fcb6360 a2=3 a3=0 items=0 ppid=1 pid=4607 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.665723] audit: type=1327 audit(1768891949.165:2768): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 131.672819] audit: type=1105 audit(1768891949.191:2769): pid=4607 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.679695] audit: type=1103 audit(1768891949.193:2770): pid=4611 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.977956] audit: type=1106 audit(1768891949.496:2771): pid=4607 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 131.984864] audit: type=1104 audit(1768891949.496:2772): pid=4607 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.067918] kauditd_printk_skb: 1 callbacks suppressed [ 137.067922] audit: type=1130 audit(1768891954.586:2774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.105:22-68.220.241.50:33390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 137.517821] audit: type=1101 audit(1768891955.036:2775): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.524761] audit: type=1103 audit(1768891955.036:2776): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.531018] audit: type=1006 audit(1768891955.036:2777): pid=4623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 137.534275] audit: type=1300 audit(1768891955.036:2777): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1c86fef0 a2=3 a3=0 items=0 ppid=1 pid=4623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.540418] audit: type=1327 audit(1768891955.036:2777): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 137.549508] audit: type=1105 audit(1768891955.067:2778): pid=4623 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.558050] audit: type=1103 audit(1768891955.076:2779): pid=4627 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.826968] audit: type=1106 audit(1768891955.345:2780): pid=4623 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 137.833989] audit: type=1104 audit(1768891955.345:2781): pid=4623 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 142.914634] kauditd_printk_skb: 1 callbacks suppressed [ 142.914637] audit: type=1130 audit(1768891960.431:2783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.105:22-68.220.241.50:33394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 143.352782] audit: type=1101 audit(1768891960.871:2784): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.362452] audit: type=1103 audit(1768891960.872:2785): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.368443] audit: type=1006 audit(1768891960.872:2786): pid=4639 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 143.371873] audit: type=1300 audit(1768891960.872:2786): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd63fbf090 a2=3 a3=0 items=0 ppid=1 pid=4639 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.377530] audit: type=1327 audit(1768891960.872:2786): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 143.385435] audit: type=1105 audit(1768891960.903:2787): pid=4639 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.392879] audit: type=1103 audit(1768891960.911:2788): pid=4643 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.671600] audit: type=1106 audit(1768891961.190:2789): pid=4639 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.678904] audit: type=1104 audit(1768891961.190:2790): pid=4639 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 150.541939] kauditd_printk_skb: 23 callbacks suppressed [ 150.541943] audit: type=1130 audit(1768891968.059:2810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.105:22-68.220.241.50:44538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.980058] audit: type=1101 audit(1768891968.498:2811): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 150.986380] audit: type=1103 audit(1768891968.498:2812): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 150.992078] audit: type=1006 audit(1768891968.498:2813): pid=4691 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 150.995424] audit: type=1300 audit(1768891968.498:2813): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd073732a0 a2=3 a3=0 items=0 ppid=1 pid=4691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.002386] audit: type=1327 audit(1768891968.498:2813): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 151.010635] audit: type=1105 audit(1768891968.529:2814): pid=4691 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.018429] audit: type=1103 audit(1768891968.531:2815): pid=4695 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.289887] audit: type=1106 audit(1768891968.808:2816): pid=4691 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.299601] audit: type=1104 audit(1768891968.808:2817): pid=4691 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.376250] kauditd_printk_skb: 1 callbacks suppressed [ 156.376253] audit: type=1130 audit(1768891973.894:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.105:22-68.220.241.50:52460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.804101] audit: type=1101 audit(1768891974.322:2820): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.810439] audit: type=1103 audit(1768891974.322:2821): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.816016] audit: type=1006 audit(1768891974.322:2822): pid=4707 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 156.819626] audit: type=1300 audit(1768891974.322:2822): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff2e587f80 a2=3 a3=0 items=0 ppid=1 pid=4707 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.825924] audit: type=1327 audit(1768891974.322:2822): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 156.833876] audit: type=1105 audit(1768891974.352:2823): pid=4707 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 156.841040] audit: type=1103 audit(1768891974.359:2824): pid=4711 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 157.114512] audit: type=1106 audit(1768891974.632:2825): pid=4707 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 157.122136] audit: type=1104 audit(1768891974.632:2826): pid=4707 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.807915] kauditd_printk_skb: 13 callbacks suppressed [ 161.807919] audit: type=1101 audit(1768891979.326:2838): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.815605] audit: type=1103 audit(1768891979.327:2839): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.821334] audit: type=1006 audit(1768891979.327:2840): pid=4737 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 161.825164] audit: type=1300 audit(1768891979.327:2840): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdaa914120 a2=3 a3=0 items=0 ppid=1 pid=4737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.831823] audit: type=1327 audit(1768891979.327:2840): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.838431] audit: type=1105 audit(1768891979.356:2841): pid=4737 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.845149] audit: type=1103 audit(1768891979.360:2842): pid=4741 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 164.299947] audit: type=1325 audit(1768891981.814:2843): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 164.323526] audit: type=1300 audit(1768891981.814:2843): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc0ac604c0 a2=0 a3=7ffc0ac604ac items=0 ppid=3515 pid=4751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.344982] audit: type=1327 audit(1768891981.814:2843): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 166.825713] kauditd_printk_skb: 23 callbacks suppressed [ 166.825718] audit: type=1130 audit(1768891984.344:2859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.105:22-68.220.241.50:40268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.386776] audit: type=1101 audit(1768891984.905:2860): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 167.398907] audit: type=1103 audit(1768891984.905:2861): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 167.407304] audit: type=1006 audit(1768891984.913:2862): pid=4772 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 167.411262] audit: type=1300 audit(1768891984.913:2862): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff02a1f5c0 a2=3 a3=0 items=0 ppid=1 pid=4772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.421289] audit: type=1327 audit(1768891984.913:2862): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.434578] audit: type=1105 audit(1768891984.953:2863): pid=4772 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 167.442972] audit: type=1103 audit(1768891984.959:2864): pid=4776 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 167.866531] audit: type=1106 audit(1768891985.385:2865): pid=4772 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 167.876751] audit: type=1104 audit(1768891985.385:2866): pid=4772 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 172.935840] kauditd_printk_skb: 7 callbacks suppressed [ 172.935844] audit: type=1130 audit(1768891990.454:2870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.105:22-68.220.241.50:40272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.372883] audit: type=1101 audit(1768891990.890:2871): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.379227] audit: type=1103 audit(1768891990.891:2872): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.385307] audit: type=1006 audit(1768891990.891:2873): pid=4790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 173.388766] audit: type=1300 audit(1768891990.891:2873): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf97dcff0 a2=3 a3=0 items=0 ppid=1 pid=4790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.395606] audit: type=1327 audit(1768891990.891:2873): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 173.411932] audit: type=1105 audit(1768891990.930:2874): pid=4790 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.418821] audit: type=1103 audit(1768891990.932:2875): pid=4794 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.704510] audit: type=1106 audit(1768891991.221:2876): pid=4790 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.714349] audit: type=1104 audit(1768891991.222:2877): pid=4790 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 178.801902] kauditd_printk_skb: 1 callbacks suppressed [ 178.801906] audit: type=1130 audit(1768891996.320:2879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.105:22-68.220.241.50:33568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.294529] audit: type=1101 audit(1768891996.813:2880): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 179.300425] audit: type=1103 audit(1768891996.817:2881): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 179.305927] audit: type=1006 audit(1768891996.817:2882): pid=4808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 179.309642] audit: type=1300 audit(1768891996.817:2882): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffce202a500 a2=3 a3=0 items=0 ppid=1 pid=4808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.315298] audit: type=1327 audit(1768891996.817:2882): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 179.332742] audit: type=1105 audit(1768891996.851:2883): pid=4808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 179.339485] audit: type=1103 audit(1768891996.854:2884): pid=4812 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 179.645105] audit: type=1106 audit(1768891997.163:2885): pid=4808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 179.654518] audit: type=1104 audit(1768891997.163:2886): pid=4808 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 184.723813] kauditd_printk_skb: 1 callbacks suppressed [ 184.723817] audit: type=1130 audit(1768892002.242:2888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.105:22-68.220.241.50:33582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.160552] audit: type=1101 audit(1768892002.679:2889): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 185.167908] audit: type=1103 audit(1768892002.686:2890): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 185.174792] audit: type=1006 audit(1768892002.686:2891): pid=4825 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 185.178169] audit: type=1300 audit(1768892002.686:2891): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffda1215690 a2=3 a3=0 items=0 ppid=1 pid=4825 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.184697] audit: type=1327 audit(1768892002.686:2891): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.191849] audit: type=1105 audit(1768892002.710:2892): pid=4825 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 185.198006] audit: type=1103 audit(1768892002.713:2893): pid=4829 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 185.470687] audit: type=1106 audit(1768892002.989:2894): pid=4825 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 185.477356] audit: type=1104 audit(1768892002.989:2895): pid=4825 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:53:26 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:53:26 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: [ 190.057604] kauditd_printk_skb: 21 callbacks suppressed [ 190.057607] audit: type=1101 audit(1768892007.576:2915): pid=4986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 190.065097] audit: type=1103 audit(1768892007.577:2916): pid=4986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 190.070549] audit: type=1006 audit(1768892007.577:2917): pid=4986 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 190.073843] audit: type=1300 audit(1768892007.577:2917): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff60b72f50 a2=3 a3=0 items=0 ppid=1 pid=4986 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.080199] audit: type=1327 audit(1768892007.577:2917): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 190.088261] audit: type=1105 audit(1768892007.606:2918): pid=4986 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 190.094783] audit: type=1103 audit(1768892007.613:2919): pid=4990 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 191.054498] audit: type=1106 audit(1768892008.572:2920): pid=4986 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 191.066161] audit: type=1104 audit(1768892008.573:2921): pid=4986 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 191.076564] audit: type=1131 audit(1768892008.580:2922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.105:22-68.220.241.50:43436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.425093] kauditd_printk_skb: 129 callbacks suppressed [ 195.425096] audit: type=1334 audit(1768892012.943:2982): prog-id=1290 op=LOAD [ 195.427493] audit: type=1334 audit(1768892012.943:2983): prog-id=1291 op=LOAD [ 195.428780] audit: type=1300 audit(1768892012.943:2983): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=5019 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.434336] audit: type=1327 audit(1768892012.943:2983): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333734633831336434336131613531613863333565663234393464 [ 195.439388] audit: type=1334 audit(1768892012.943:2984): prog-id=1291 op=UNLOAD [ 195.440784] audit: type=1300 audit(1768892012.943:2984): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5019 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.446047] audit: type=1327 audit(1768892012.943:2984): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333734633831336434336131613531613863333565663234393464 [ 195.451781] audit: type=1334 audit(1768892012.943:2985): prog-id=1292 op=LOAD [ 195.453187] audit: type=1300 audit(1768892012.943:2985): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=5019 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.459117] audit: type=1327 audit(1768892012.943:2985): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333734633831336434336131613531613863333565663234393464 [ 196.221451] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 201.489772] kauditd_printk_skb: 6126 callbacks suppressed [ 201.489775] audit: type=1334 audit(1768892019.008:5034): prog-id=2254 op=LOAD [ 201.492279] audit: type=1300 audit(1768892019.008:5034): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe968ab690 a2=74 a3=7ffe968ab690 items=0 ppid=5254 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.499468] audit: type=1327 audit(1768892019.008:5034): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003433395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 201.507526] audit: type=1334 audit(1768892019.008:5035): prog-id=2254 op=UNLOAD [ 201.509568] audit: type=1300 audit(1768892019.008:5035): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe968ab690 a2=74 a3=7ffe968ab690 items=0 ppid=5254 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.515859] audit: type=1327 audit(1768892019.008:5035): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003433395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 201.520970] audit: type=1334 audit(1768892019.008:5036): prog-id=2255 op=LOAD [ 201.522641] audit: type=1300 audit(1768892019.008:5036): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe968ab620 a2=80 a3=0 items=0 ppid=5254 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 201.528829] audit: type=1327 audit(1768892019.008:5036): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003433395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 201.533628] audit: type=1334 audit(1768892019.008:5037): prog-id=2255 op=UNLOAD This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:53:39 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 This is ip-172-31-27-105 (Linux x86_64 6.12.66-flatcar) 06:53:39 SSH host key: SHA256:AmQZjAw9NDv0+4zYxMWsLoLAcvBulBQTHSqUiPwbQOw (ED25519) SSH host key: SHA256:Lp71ap8Q19OmMmq3MHcJFbOwZb0zgln/05VZKD1BgHw (ECDSA) SSH host key: SHA256:3uAKa+uLV0lPnbzinEP7B2ewtQ1BAPsbAzkFjXSHN9s (RSA) eth0: 172.31.27.105 fe80::4d7:a9ff:fea7:6231 ip-172-31-27-105 login: [ 208.649206] kauditd_printk_skb: 558 callbacks suppressed [ 208.649210] audit: type=1106 audit(1768892026.167:5228): pid=5110 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 208.658309] audit: type=1104 audit(1768892026.167:5229): pid=5110 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 208.663746] audit: type=1131 audit(1768892026.171:5230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.105:22-68.220.241.50:43454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'