Jan 27 05:31:57.565076 kernel: Linux version 6.12.66-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 14.3.1_p20250801 p4) 14.3.1 20250801, GNU ld (Gentoo 2.45 p3) 2.45.0) #1 SMP PREEMPT_DYNAMIC Tue Jan 27 03:09:34 -00 2026 Jan 27 05:31:57.565128 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=gce verity.usrhash=94a0aed2c135ea3629cf7bc829842658bafc4ce682f9974c582239b9a4f2cb9e Jan 27 05:31:57.565153 kernel: BIOS-provided physical RAM map: Jan 27 05:31:57.565178 kernel: BIOS-e820: [mem 0x0000000000000000-0x0000000000000fff] reserved Jan 27 05:31:57.565191 kernel: BIOS-e820: [mem 0x0000000000001000-0x0000000000054fff] usable Jan 27 05:31:57.565203 kernel: BIOS-e820: [mem 0x0000000000055000-0x000000000005ffff] reserved Jan 27 05:31:57.565218 kernel: BIOS-e820: [mem 0x0000000000060000-0x0000000000097fff] usable Jan 27 05:31:57.565231 kernel: BIOS-e820: [mem 0x0000000000098000-0x000000000009ffff] reserved Jan 27 05:31:57.565245 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000bd2e4fff] usable Jan 27 05:31:57.565263 kernel: BIOS-e820: [mem 0x00000000bd2e5000-0x00000000bd2eefff] ACPI data Jan 27 05:31:57.565277 kernel: BIOS-e820: [mem 0x00000000bd2ef000-0x00000000bf8ecfff] usable Jan 27 05:31:57.565290 kernel: BIOS-e820: [mem 0x00000000bf8ed000-0x00000000bfb6cfff] reserved Jan 27 05:31:57.565304 kernel: BIOS-e820: [mem 0x00000000bfb6d000-0x00000000bfb7efff] ACPI data Jan 27 05:31:57.565319 kernel: BIOS-e820: [mem 0x00000000bfb7f000-0x00000000bfbfefff] ACPI NVS Jan 27 05:31:57.565340 kernel: BIOS-e820: [mem 0x00000000bfbff000-0x00000000bffdffff] usable Jan 27 05:31:57.565355 kernel: BIOS-e820: [mem 0x00000000bffe0000-0x00000000bfffffff] reserved Jan 27 05:31:57.565371 kernel: BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable Jan 27 05:31:57.565386 kernel: NX (Execute Disable) protection: active Jan 27 05:31:57.565401 kernel: APIC: Static calls initialized Jan 27 05:31:57.565417 kernel: efi: EFI v2.7 by EDK II Jan 27 05:31:57.565435 kernel: efi: TPMFinalLog=0xbfbf7000 ACPI=0xbfb7e000 ACPI 2.0=0xbfb7e014 SMBIOS=0xbf9ca000 MEMATTR=0xbd2ef018 RNG=0xbfb73018 TPMEventLog=0xbd2e5018 Jan 27 05:31:57.565450 kernel: random: crng init done Jan 27 05:31:57.565467 kernel: secureboot: Secure boot disabled Jan 27 05:31:57.565481 kernel: SMBIOS 2.4 present. Jan 27 05:31:57.565501 kernel: DMI: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Jan 27 05:31:57.565517 kernel: DMI: Memory slots populated: 1/1 Jan 27 05:31:57.565532 kernel: Hypervisor detected: KVM Jan 27 05:31:57.565547 kernel: last_pfn = 0xbffe0 max_arch_pfn = 0x400000000 Jan 27 05:31:57.565563 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jan 27 05:31:57.565579 kernel: kvm-clock: using sched offset of 12478522907 cycles Jan 27 05:31:57.565595 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jan 27 05:31:57.565612 kernel: tsc: Detected 2299.998 MHz processor Jan 27 05:31:57.565629 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jan 27 05:31:57.565652 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jan 27 05:31:57.565668 kernel: last_pfn = 0x220000 max_arch_pfn = 0x400000000 Jan 27 05:31:57.565685 kernel: MTRR map: 3 entries (2 fixed + 1 variable; max 18), built from 8 variable MTRRs Jan 27 05:31:57.565702 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jan 27 05:31:57.565718 kernel: last_pfn = 0xbffe0 max_arch_pfn = 0x400000000 Jan 27 05:31:57.565759 kernel: Using GB pages for direct mapping Jan 27 05:31:57.565776 kernel: ACPI: Early table checksum verification disabled Jan 27 05:31:57.565805 kernel: ACPI: RSDP 0x00000000BFB7E014 000024 (v02 Google) Jan 27 05:31:57.565824 kernel: ACPI: XSDT 0x00000000BFB7D0E8 00005C (v01 Google GOOGFACP 00000001 01000013) Jan 27 05:31:57.565842 kernel: ACPI: FACP 0x00000000BFB78000 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) Jan 27 05:31:57.565861 kernel: ACPI: DSDT 0x00000000BFB79000 001A64 (v01 Google GOOGDSDT 00000001 GOOG 00000001) Jan 27 05:31:57.565918 kernel: ACPI: FACS 0x00000000BFBF2000 000040 Jan 27 05:31:57.565943 kernel: ACPI: SSDT 0x00000000BFB7C000 000316 (v02 GOOGLE Tpm2Tabl 00001000 INTL 20250404) Jan 27 05:31:57.565959 kernel: ACPI: TPM2 0x00000000BFB7B000 000034 (v04 GOOGLE 00000001 GOOG 00000001) Jan 27 05:31:57.565976 kernel: ACPI: SRAT 0x00000000BFB77000 0000C8 (v03 Google GOOGSRAT 00000001 GOOG 00000001) Jan 27 05:31:57.565993 kernel: ACPI: APIC 0x00000000BFB76000 000076 (v05 Google GOOGAPIC 00000001 GOOG 00000001) Jan 27 05:31:57.566009 kernel: ACPI: SSDT 0x00000000BFB75000 000980 (v01 Google GOOGSSDT 00000001 GOOG 00000001) Jan 27 05:31:57.566027 kernel: ACPI: WAET 0x00000000BFB74000 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) Jan 27 05:31:57.566044 kernel: ACPI: Reserving FACP table memory at [mem 0xbfb78000-0xbfb780f3] Jan 27 05:31:57.566066 kernel: ACPI: Reserving DSDT table memory at [mem 0xbfb79000-0xbfb7aa63] Jan 27 05:31:57.566084 kernel: ACPI: Reserving FACS table memory at [mem 0xbfbf2000-0xbfbf203f] Jan 27 05:31:57.566100 kernel: ACPI: Reserving SSDT table memory at [mem 0xbfb7c000-0xbfb7c315] Jan 27 05:31:57.566118 kernel: ACPI: Reserving TPM2 table memory at [mem 0xbfb7b000-0xbfb7b033] Jan 27 05:31:57.566136 kernel: ACPI: Reserving SRAT table memory at [mem 0xbfb77000-0xbfb770c7] Jan 27 05:31:57.566154 kernel: ACPI: Reserving APIC table memory at [mem 0xbfb76000-0xbfb76075] Jan 27 05:31:57.566181 kernel: ACPI: Reserving SSDT table memory at [mem 0xbfb75000-0xbfb7597f] Jan 27 05:31:57.566203 kernel: ACPI: Reserving WAET table memory at [mem 0xbfb74000-0xbfb74027] Jan 27 05:31:57.566220 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jan 27 05:31:57.566238 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0xbfffffff] Jan 27 05:31:57.566256 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x21fffffff] Jan 27 05:31:57.566274 kernel: NUMA: Node 0 [mem 0x00001000-0x0009ffff] + [mem 0x00100000-0xbfffffff] -> [mem 0x00001000-0xbfffffff] Jan 27 05:31:57.566291 kernel: NUMA: Node 0 [mem 0x00001000-0xbfffffff] + [mem 0x100000000-0x21fffffff] -> [mem 0x00001000-0x21fffffff] Jan 27 05:31:57.566309 kernel: NODE_DATA(0) allocated [mem 0x21fff8dc0-0x21fffffff] Jan 27 05:31:57.566332 kernel: Zone ranges: Jan 27 05:31:57.566350 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jan 27 05:31:57.566368 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Jan 27 05:31:57.566387 kernel: Normal [mem 0x0000000100000000-0x000000021fffffff] Jan 27 05:31:57.566403 kernel: Device empty Jan 27 05:31:57.566420 kernel: Movable zone start for each node Jan 27 05:31:57.566437 kernel: Early memory node ranges Jan 27 05:31:57.566454 kernel: node 0: [mem 0x0000000000001000-0x0000000000054fff] Jan 27 05:31:57.566475 kernel: node 0: [mem 0x0000000000060000-0x0000000000097fff] Jan 27 05:31:57.566492 kernel: node 0: [mem 0x0000000000100000-0x00000000bd2e4fff] Jan 27 05:31:57.566509 kernel: node 0: [mem 0x00000000bd2ef000-0x00000000bf8ecfff] Jan 27 05:31:57.566526 kernel: node 0: [mem 0x00000000bfbff000-0x00000000bffdffff] Jan 27 05:31:57.566543 kernel: node 0: [mem 0x0000000100000000-0x000000021fffffff] Jan 27 05:31:57.566559 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] Jan 27 05:31:57.566578 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jan 27 05:31:57.566599 kernel: On node 0, zone DMA: 11 pages in unavailable ranges Jan 27 05:31:57.566618 kernel: On node 0, zone DMA: 104 pages in unavailable ranges Jan 27 05:31:57.566637 kernel: On node 0, zone DMA32: 10 pages in unavailable ranges Jan 27 05:31:57.566654 kernel: On node 0, zone DMA32: 786 pages in unavailable ranges Jan 27 05:31:57.566671 kernel: On node 0, zone Normal: 32 pages in unavailable ranges Jan 27 05:31:57.566690 kernel: ACPI: PM-Timer IO Port: 0xb008 Jan 27 05:31:57.566707 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jan 27 05:31:57.566854 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jan 27 05:31:57.566880 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jan 27 05:31:57.566912 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jan 27 05:31:57.566929 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jan 27 05:31:57.566945 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jan 27 05:31:57.566961 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jan 27 05:31:57.566976 kernel: CPU topo: Max. logical packages: 1 Jan 27 05:31:57.566992 kernel: CPU topo: Max. logical dies: 1 Jan 27 05:31:57.567017 kernel: CPU topo: Max. dies per package: 1 Jan 27 05:31:57.567032 kernel: CPU topo: Max. threads per core: 2 Jan 27 05:31:57.567044 kernel: CPU topo: Num. cores per package: 1 Jan 27 05:31:57.567055 kernel: CPU topo: Num. threads per package: 2 Jan 27 05:31:57.567066 kernel: CPU topo: Allowing 2 present CPUs plus 0 hotplug CPUs Jan 27 05:31:57.567076 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Jan 27 05:31:57.567087 kernel: Booting paravirtualized kernel on KVM Jan 27 05:31:57.567102 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jan 27 05:31:57.567113 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1 Jan 27 05:31:57.567126 kernel: percpu: Embedded 60 pages/cpu s207832 r8192 d29736 u1048576 Jan 27 05:31:57.567143 kernel: pcpu-alloc: s207832 r8192 d29736 u1048576 alloc=1*2097152 Jan 27 05:31:57.567167 kernel: pcpu-alloc: [0] 0 1 Jan 27 05:31:57.567185 kernel: kvm-guest: PV spinlocks enabled Jan 27 05:31:57.567204 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jan 27 05:31:57.567230 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=gce verity.usrhash=94a0aed2c135ea3629cf7bc829842658bafc4ce682f9974c582239b9a4f2cb9e Jan 27 05:31:57.567250 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Jan 27 05:31:57.567266 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jan 27 05:31:57.567284 kernel: Fallback order for Node 0: 0 Jan 27 05:31:57.567302 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1965136 Jan 27 05:31:57.567321 kernel: Policy zone: Normal Jan 27 05:31:57.567339 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jan 27 05:31:57.567355 kernel: software IO TLB: area num 2. Jan 27 05:31:57.567377 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jan 27 05:31:57.567392 kernel: Kernel/User page tables isolation: enabled Jan 27 05:31:57.567403 kernel: ftrace: allocating 40128 entries in 157 pages Jan 27 05:31:57.567415 kernel: ftrace: allocated 157 pages with 5 groups Jan 27 05:31:57.567427 kernel: Dynamic Preempt: voluntary Jan 27 05:31:57.567438 kernel: rcu: Preemptible hierarchical RCU implementation. Jan 27 05:31:57.567452 kernel: rcu: RCU event tracing is enabled. Jan 27 05:31:57.567464 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jan 27 05:31:57.567478 kernel: Trampoline variant of Tasks RCU enabled. Jan 27 05:31:57.567490 kernel: Rude variant of Tasks RCU enabled. Jan 27 05:31:57.567502 kernel: Tracing variant of Tasks RCU enabled. Jan 27 05:31:57.567513 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jan 27 05:31:57.567525 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jan 27 05:31:57.567540 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jan 27 05:31:57.567551 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jan 27 05:31:57.567563 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jan 27 05:31:57.567575 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Jan 27 05:31:57.567586 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention. Jan 27 05:31:57.567598 kernel: Console: colour dummy device 80x25 Jan 27 05:31:57.567609 kernel: printk: legacy console [ttyS0] enabled Jan 27 05:31:57.567623 kernel: ACPI: Core revision 20240827 Jan 27 05:31:57.567635 kernel: APIC: Switch to symmetric I/O mode setup Jan 27 05:31:57.567646 kernel: x2apic enabled Jan 27 05:31:57.567658 kernel: APIC: Switched APIC routing to: physical x2apic Jan 27 05:31:57.567669 kernel: ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 Jan 27 05:31:57.567681 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212733415c7, max_idle_ns: 440795236380 ns Jan 27 05:31:57.567693 kernel: Calibrating delay loop (skipped) preset value.. 4599.99 BogoMIPS (lpj=2299998) Jan 27 05:31:57.567707 kernel: Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 Jan 27 05:31:57.567719 kernel: Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 Jan 27 05:31:57.567730 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jan 27 05:31:57.567742 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall and VM exit Jan 27 05:31:57.567753 kernel: Spectre V2 : Mitigation: IBRS Jan 27 05:31:57.567765 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jan 27 05:31:57.567776 kernel: RETBleed: Mitigation: IBRS Jan 27 05:31:57.567791 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jan 27 05:31:57.567802 kernel: Spectre V2 : User space: Mitigation: STIBP via prctl Jan 27 05:31:57.567814 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl Jan 27 05:31:57.567830 kernel: MDS: Mitigation: Clear CPU buffers Jan 27 05:31:57.567848 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jan 27 05:31:57.567866 kernel: active return thunk: its_return_thunk Jan 27 05:31:57.567886 kernel: ITS: Mitigation: Aligned branch/return thunks Jan 27 05:31:57.567943 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jan 27 05:31:57.567964 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jan 27 05:31:57.567984 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jan 27 05:31:57.568003 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jan 27 05:31:57.568024 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jan 27 05:31:57.568044 kernel: Freeing SMP alternatives memory: 32K Jan 27 05:31:57.568064 kernel: pid_max: default: 32768 minimum: 301 Jan 27 05:31:57.568088 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima Jan 27 05:31:57.568108 kernel: landlock: Up and running. Jan 27 05:31:57.568127 kernel: SELinux: Initializing. Jan 27 05:31:57.568147 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Jan 27 05:31:57.568177 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Jan 27 05:31:57.568197 kernel: smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) Jan 27 05:31:57.568217 kernel: Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. Jan 27 05:31:57.568242 kernel: signal: max sigframe size: 1776 Jan 27 05:31:57.568261 kernel: rcu: Hierarchical SRCU implementation. Jan 27 05:31:57.568282 kernel: rcu: Max phase no-delay instances is 400. Jan 27 05:31:57.568302 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level Jan 27 05:31:57.568322 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jan 27 05:31:57.568342 kernel: smp: Bringing up secondary CPUs ... Jan 27 05:31:57.568362 kernel: smpboot: x86: Booting SMP configuration: Jan 27 05:31:57.568386 kernel: .... node #0, CPUs: #1 Jan 27 05:31:57.568406 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Jan 27 05:31:57.568427 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Jan 27 05:31:57.568447 kernel: smp: Brought up 1 node, 2 CPUs Jan 27 05:31:57.568467 kernel: smpboot: Total of 2 processors activated (9199.99 BogoMIPS) Jan 27 05:31:57.568487 kernel: Memory: 7580384K/7860544K available (14336K kernel code, 2445K rwdata, 31644K rodata, 15540K init, 2496K bss, 274328K reserved, 0K cma-reserved) Jan 27 05:31:57.568511 kernel: devtmpfs: initialized Jan 27 05:31:57.568531 kernel: x86/mm: Memory block size: 128MB Jan 27 05:31:57.568549 kernel: ACPI: PM: Registering ACPI NVS region [mem 0xbfb7f000-0xbfbfefff] (524288 bytes) Jan 27 05:31:57.568567 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jan 27 05:31:57.581962 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jan 27 05:31:57.582005 kernel: pinctrl core: initialized pinctrl subsystem Jan 27 05:31:57.582026 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jan 27 05:31:57.582046 kernel: audit: initializing netlink subsys (disabled) Jan 27 05:31:57.582077 kernel: audit: type=2000 audit(1769491913.066:1): state=initialized audit_enabled=0 res=1 Jan 27 05:31:57.582098 kernel: thermal_sys: Registered thermal governor 'step_wise' Jan 27 05:31:57.582118 kernel: thermal_sys: Registered thermal governor 'user_space' Jan 27 05:31:57.582136 kernel: cpuidle: using governor menu Jan 27 05:31:57.582156 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jan 27 05:31:57.582175 kernel: dca service started, version 1.12.1 Jan 27 05:31:57.582195 kernel: PCI: Using configuration type 1 for base access Jan 27 05:31:57.582219 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jan 27 05:31:57.582239 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages Jan 27 05:31:57.582258 kernel: HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page Jan 27 05:31:57.582278 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages Jan 27 05:31:57.582298 kernel: HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page Jan 27 05:31:57.582318 kernel: ACPI: Added _OSI(Module Device) Jan 27 05:31:57.582338 kernel: ACPI: Added _OSI(Processor Device) Jan 27 05:31:57.582361 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jan 27 05:31:57.582381 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Jan 27 05:31:57.582400 kernel: ACPI: Interpreter enabled Jan 27 05:31:57.582419 kernel: ACPI: PM: (supports S0 S3 S5) Jan 27 05:31:57.582438 kernel: ACPI: Using IOAPIC for interrupt routing Jan 27 05:31:57.582457 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jan 27 05:31:57.582476 kernel: PCI: Ignoring E820 reservations for host bridge windows Jan 27 05:31:57.582500 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Jan 27 05:31:57.582519 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jan 27 05:31:57.582972 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Jan 27 05:31:57.583251 kernel: acpi PNP0A03:00: _OSC: not requesting OS control; OS requires [ExtendedConfig ASPM ClockPM MSI] Jan 27 05:31:57.583517 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended configuration space under this bridge Jan 27 05:31:57.583541 kernel: PCI host bridge to bus 0000:00 Jan 27 05:31:57.583808 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jan 27 05:31:57.585163 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jan 27 05:31:57.585431 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jan 27 05:31:57.585673 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfefff window] Jan 27 05:31:57.585958 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jan 27 05:31:57.586258 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint Jan 27 05:31:57.586547 kernel: pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint Jan 27 05:31:57.586825 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 conventional PCI endpoint Jan 27 05:31:57.589462 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Jan 27 05:31:57.589851 kernel: pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 conventional PCI endpoint Jan 27 05:31:57.591231 kernel: pci 0000:00:03.0: BAR 0 [io 0xc040-0xc07f] Jan 27 05:31:57.591507 kernel: pci 0000:00:03.0: BAR 1 [mem 0xc0001000-0xc000107f] Jan 27 05:31:57.591786 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint Jan 27 05:31:57.594130 kernel: pci 0000:00:04.0: BAR 0 [io 0xc000-0xc03f] Jan 27 05:31:57.594417 kernel: pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f] Jan 27 05:31:57.594698 kernel: pci 0000:00:05.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint Jan 27 05:31:57.595030 kernel: pci 0000:00:05.0: BAR 0 [io 0xc080-0xc09f] Jan 27 05:31:57.595304 kernel: pci 0000:00:05.0: BAR 1 [mem 0xc0002000-0xc000203f] Jan 27 05:31:57.595328 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jan 27 05:31:57.595349 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jan 27 05:31:57.595369 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jan 27 05:31:57.595389 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jan 27 05:31:57.595416 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Jan 27 05:31:57.595435 kernel: iommu: Default domain type: Translated Jan 27 05:31:57.595455 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jan 27 05:31:57.595474 kernel: efivars: Registered efivars operations Jan 27 05:31:57.595493 kernel: PCI: Using ACPI for IRQ routing Jan 27 05:31:57.595512 kernel: PCI: pci_cache_line_size set to 64 bytes Jan 27 05:31:57.595533 kernel: e820: reserve RAM buffer [mem 0x00055000-0x0005ffff] Jan 27 05:31:57.595552 kernel: e820: reserve RAM buffer [mem 0x00098000-0x0009ffff] Jan 27 05:31:57.595576 kernel: e820: reserve RAM buffer [mem 0xbd2e5000-0xbfffffff] Jan 27 05:31:57.595595 kernel: e820: reserve RAM buffer [mem 0xbf8ed000-0xbfffffff] Jan 27 05:31:57.595614 kernel: e820: reserve RAM buffer [mem 0xbffe0000-0xbfffffff] Jan 27 05:31:57.595633 kernel: vgaarb: loaded Jan 27 05:31:57.595652 kernel: clocksource: Switched to clocksource kvm-clock Jan 27 05:31:57.595672 kernel: VFS: Disk quotas dquot_6.6.0 Jan 27 05:31:57.595693 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jan 27 05:31:57.595717 kernel: pnp: PnP ACPI init Jan 27 05:31:57.595736 kernel: pnp: PnP ACPI: found 7 devices Jan 27 05:31:57.595756 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jan 27 05:31:57.595775 kernel: NET: Registered PF_INET protocol family Jan 27 05:31:57.595795 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jan 27 05:31:57.595820 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Jan 27 05:31:57.595840 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jan 27 05:31:57.595869 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Jan 27 05:31:57.597910 kernel: TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear) Jan 27 05:31:57.597941 kernel: TCP: Hash tables configured (established 65536 bind 65536) Jan 27 05:31:57.597962 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Jan 27 05:31:57.597982 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Jan 27 05:31:57.598003 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jan 27 05:31:57.598022 kernel: NET: Registered PF_XDP protocol family Jan 27 05:31:57.598317 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jan 27 05:31:57.598564 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jan 27 05:31:57.598803 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jan 27 05:31:57.599062 kernel: pci_bus 0000:00: resource 7 [mem 0xc0000000-0xfebfefff window] Jan 27 05:31:57.599335 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jan 27 05:31:57.599367 kernel: PCI: CLS 0 bytes, default 64 Jan 27 05:31:57.599388 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Jan 27 05:31:57.599408 kernel: software IO TLB: mapped [mem 0x00000000b7f7f000-0x00000000bbf7f000] (64MB) Jan 27 05:31:57.599428 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jan 27 05:31:57.599449 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212733415c7, max_idle_ns: 440795236380 ns Jan 27 05:31:57.599469 kernel: clocksource: Switched to clocksource tsc Jan 27 05:31:57.599488 kernel: Initialise system trusted keyrings Jan 27 05:31:57.599512 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Jan 27 05:31:57.599529 kernel: Key type asymmetric registered Jan 27 05:31:57.599545 kernel: Asymmetric key parser 'x509' registered Jan 27 05:31:57.599568 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) Jan 27 05:31:57.599583 kernel: io scheduler mq-deadline registered Jan 27 05:31:57.599599 kernel: io scheduler kyber registered Jan 27 05:31:57.599670 kernel: io scheduler bfq registered Jan 27 05:31:57.599698 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jan 27 05:31:57.599720 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Jan 27 05:31:57.600268 kernel: virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver Jan 27 05:31:57.600301 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Jan 27 05:31:57.600579 kernel: virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver Jan 27 05:31:57.600607 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Jan 27 05:31:57.600948 kernel: virtio-pci 0000:00:05.0: virtio_pci: leaving for legacy driver Jan 27 05:31:57.600989 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jan 27 05:31:57.601009 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jan 27 05:31:57.601029 kernel: 00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Jan 27 05:31:57.601049 kernel: 00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A Jan 27 05:31:57.601232 kernel: 00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A Jan 27 05:31:57.601724 kernel: tpm_tis MSFT0101:00: 2.0 TPM (device-id 0x9009, rev-id 0) Jan 27 05:31:57.601757 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jan 27 05:31:57.601789 kernel: i8042: Warning: Keylock active Jan 27 05:31:57.601809 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jan 27 05:31:57.601829 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jan 27 05:31:57.628763 kernel: rtc_cmos 00:00: RTC can wake from S4 Jan 27 05:31:57.629204 kernel: rtc_cmos 00:00: registered as rtc0 Jan 27 05:31:57.629466 kernel: rtc_cmos 00:00: setting system clock to 2026-01-27T05:31:55 UTC (1769491915) Jan 27 05:31:57.629733 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Jan 27 05:31:57.629757 kernel: intel_pstate: CPU model not supported Jan 27 05:31:57.629775 kernel: pstore: Using crash dump compression: deflate Jan 27 05:31:57.629794 kernel: pstore: Registered efi_pstore as persistent store backend Jan 27 05:31:57.629814 kernel: NET: Registered PF_INET6 protocol family Jan 27 05:31:57.629834 kernel: Segment Routing with IPv6 Jan 27 05:31:57.629854 kernel: In-situ OAM (IOAM) with IPv6 Jan 27 05:31:57.629880 kernel: NET: Registered PF_PACKET protocol family Jan 27 05:31:57.629958 kernel: Key type dns_resolver registered Jan 27 05:31:57.629987 kernel: IPI shorthand broadcast: enabled Jan 27 05:31:57.630008 kernel: sched_clock: Marking stable (2091069506, 219458759)->(2377076355, -66548090) Jan 27 05:31:57.630028 kernel: registered taskstats version 1 Jan 27 05:31:57.630049 kernel: Loading compiled-in X.509 certificates Jan 27 05:31:57.630069 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.66-flatcar: 9e3db75de0fafb28d6cceb2e9f9c71b82c500cb9' Jan 27 05:31:57.630093 kernel: Demotion targets for Node 0: null Jan 27 05:31:57.630114 kernel: Key type .fscrypt registered Jan 27 05:31:57.630134 kernel: Key type fscrypt-provisioning registered Jan 27 05:31:57.630153 kernel: ima: Allocated hash algorithm: sha1 Jan 27 05:31:57.630173 kernel: ima: Can not allocate sha384 (reason: -2) Jan 27 05:31:57.630194 kernel: ima: No architecture policies found Jan 27 05:31:57.630214 kernel: clk: Disabling unused clocks Jan 27 05:31:57.630237 kernel: Freeing unused kernel image (initmem) memory: 15540K Jan 27 05:31:57.630258 kernel: Write protecting the kernel read-only data: 47104k Jan 27 05:31:57.630278 kernel: Freeing unused kernel image (rodata/data gap) memory: 1124K Jan 27 05:31:57.630298 kernel: Run /init as init process Jan 27 05:31:57.630318 kernel: with arguments: Jan 27 05:31:57.630339 kernel: /init Jan 27 05:31:57.630359 kernel: with environment: Jan 27 05:31:57.630379 kernel: HOME=/ Jan 27 05:31:57.630403 kernel: TERM=linux Jan 27 05:31:57.630423 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jan 27 05:31:57.630443 kernel: SCSI subsystem initialized Jan 27 05:31:57.630742 kernel: virtio_scsi virtio0: 1/0/0 default/read/poll queues Jan 27 05:31:57.631071 kernel: scsi host0: Virtio SCSI HBA Jan 27 05:31:57.631105 kernel: blk-mq: reduced tag depth to 10240 Jan 27 05:31:57.631409 kernel: scsi 0:0:1:0: Direct-Access Google PersistentDisk 1 PQ: 0 ANSI: 6 Jan 27 05:31:57.631692 kernel: sd 0:0:1:0: [sda] 33554432 512-byte logical blocks: (17.2 GB/16.0 GiB) Jan 27 05:31:57.632016 kernel: sd 0:0:1:0: [sda] 4096-byte physical blocks Jan 27 05:31:57.632323 kernel: sd 0:0:1:0: [sda] Write Protect is off Jan 27 05:31:57.632635 kernel: sd 0:0:1:0: [sda] Mode Sense: 1f 00 00 08 Jan 27 05:31:57.632958 kernel: sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Jan 27 05:31:57.633027 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jan 27 05:31:57.633048 kernel: GPT:25804799 != 33554431 Jan 27 05:31:57.633078 kernel: GPT:Alternate GPT header not at the end of the disk. Jan 27 05:31:57.633100 kernel: GPT:25804799 != 33554431 Jan 27 05:31:57.633128 kernel: GPT: Use GNU Parted to correct GPT errors. Jan 27 05:31:57.633148 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jan 27 05:31:57.633479 kernel: sd 0:0:1:0: [sda] Attached SCSI disk Jan 27 05:31:57.633507 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jan 27 05:31:57.633529 kernel: device-mapper: uevent: version 1.0.3 Jan 27 05:31:57.633550 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev Jan 27 05:31:57.633572 kernel: device-mapper: verity: sha256 using shash "sha256-generic" Jan 27 05:31:57.633594 kernel: raid6: avx2x4 gen() 17392 MB/s Jan 27 05:31:57.633615 kernel: raid6: avx2x2 gen() 17821 MB/s Jan 27 05:31:57.633641 kernel: raid6: avx2x1 gen() 13820 MB/s Jan 27 05:31:57.633663 kernel: raid6: using algorithm avx2x2 gen() 17821 MB/s Jan 27 05:31:57.633684 kernel: raid6: .... xor() 18201 MB/s, rmw enabled Jan 27 05:31:57.633706 kernel: raid6: using avx2x2 recovery algorithm Jan 27 05:31:57.633728 kernel: xor: automatically using best checksumming function avx Jan 27 05:31:57.633759 kernel: Btrfs loaded, zoned=no, fsverity=no Jan 27 05:31:57.633780 kernel: BTRFS: device fsid 8e29e710-4356-4007-b707-6ae7cc95ead5 devid 1 transid 35 /dev/mapper/usr (254:0) scanned by mount (155) Jan 27 05:31:57.633806 kernel: BTRFS info (device dm-0): first mount of filesystem 8e29e710-4356-4007-b707-6ae7cc95ead5 Jan 27 05:31:57.633828 kernel: BTRFS info (device dm-0): using crc32c (crc32c-intel) checksum algorithm Jan 27 05:31:57.633851 kernel: BTRFS info (device dm-0): enabling ssd optimizations Jan 27 05:31:57.633872 kernel: BTRFS info (device dm-0): disabling log replay at mount time Jan 27 05:31:57.633911 kernel: BTRFS info (device dm-0): enabling free space tree Jan 27 05:31:57.633930 kernel: loop: module loaded Jan 27 05:31:57.633950 kernel: loop0: detected capacity change from 0 to 100552 Jan 27 05:31:57.633982 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jan 27 05:31:57.634005 systemd[1]: Successfully made /usr/ read-only. Jan 27 05:31:57.634031 systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) Jan 27 05:31:57.634054 systemd[1]: Detected virtualization google. Jan 27 05:31:57.634075 systemd[1]: Detected architecture x86-64. Jan 27 05:31:57.634096 systemd[1]: Running in initrd. Jan 27 05:31:57.634122 systemd[1]: No hostname configured, using default hostname. Jan 27 05:31:57.634146 systemd[1]: Hostname set to . Jan 27 05:31:57.634167 systemd[1]: Initializing machine ID from random generator. Jan 27 05:31:57.634189 systemd[1]: Queued start job for default target initrd.target. Jan 27 05:31:57.634211 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr. Jan 27 05:31:57.634233 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jan 27 05:31:57.634259 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jan 27 05:31:57.634284 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM... Jan 27 05:31:57.634303 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Jan 27 05:31:57.634326 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT... Jan 27 05:31:57.634349 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A... Jan 27 05:31:57.634376 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jan 27 05:31:57.634398 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Jan 27 05:31:57.634421 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System. Jan 27 05:31:57.634444 systemd[1]: Reached target paths.target - Path Units. Jan 27 05:31:57.634471 systemd[1]: Reached target slices.target - Slice Units. Jan 27 05:31:57.634497 systemd[1]: Reached target swap.target - Swaps. Jan 27 05:31:57.634520 systemd[1]: Reached target timers.target - Timer Units. Jan 27 05:31:57.634542 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket. Jan 27 05:31:57.634564 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket. Jan 27 05:31:57.634586 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Jan 27 05:31:57.634608 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). Jan 27 05:31:57.634631 systemd[1]: Listening on systemd-journald.socket - Journal Sockets. Jan 27 05:31:57.634657 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. Jan 27 05:31:57.634679 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Jan 27 05:31:57.634702 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Jan 27 05:31:57.634724 systemd[1]: Reached target sockets.target - Socket Units. Jan 27 05:31:57.634747 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments was skipped because no trigger condition checks were met. Jan 27 05:31:57.634769 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup... Jan 27 05:31:57.634796 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Jan 27 05:31:57.634818 systemd[1]: Finished network-cleanup.service - Network Cleanup. Jan 27 05:31:57.634841 systemd[1]: systemd-battery-check.service - Check battery level during early boot was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/class/power_supply). Jan 27 05:31:57.634868 systemd[1]: Starting systemd-fsck-usr.service... Jan 27 05:31:57.634902 systemd[1]: Starting systemd-journald.service - Journal Service... Jan 27 05:31:57.634921 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Jan 27 05:31:57.634946 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 27 05:31:57.634976 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup. Jan 27 05:31:57.635046 systemd-journald[293]: Collecting audit messages is enabled. Jan 27 05:31:57.635092 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Jan 27 05:31:57.635113 kernel: audit: type=1130 audit(1769491917.568:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.635135 systemd[1]: Finished systemd-fsck-usr.service. Jan 27 05:31:57.635156 kernel: audit: type=1130 audit(1769491917.598:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.635184 systemd-journald[293]: Journal started Jan 27 05:31:57.635225 systemd-journald[293]: Runtime Journal (/run/log/journal/327f177c060240e29732f846fa280bdd) is 8M, max 148.4M, 140.4M free. Jan 27 05:31:57.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.668937 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Jan 27 05:31:57.669026 kernel: audit: type=1130 audit(1769491917.627:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.694217 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jan 27 05:31:57.694362 systemd[1]: Started systemd-journald.service - Journal Service. Jan 27 05:31:57.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.727629 kernel: Bridge firewalling registered Jan 27 05:31:57.727738 kernel: audit: type=1130 audit(1769491917.699:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.729204 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Jan 27 05:31:57.731016 systemd-modules-load[295]: Inserted module 'br_netfilter' Jan 27 05:31:57.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.735920 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Jan 27 05:31:57.759101 kernel: audit: type=1130 audit(1769491917.734:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.739246 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Jan 27 05:31:57.790306 systemd-tmpfiles[305]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Jan 27 05:31:57.859253 kernel: audit: type=1130 audit(1769491917.824:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.790860 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Jan 27 05:31:57.899193 kernel: audit: type=1130 audit(1769491917.867:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.847764 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jan 27 05:31:57.941186 kernel: audit: type=1130 audit(1769491917.908:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.891757 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Jan 27 05:31:57.933531 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Jan 27 05:31:57.995227 kernel: audit: type=1130 audit(1769491917.951:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:57.958213 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters... Jan 27 05:31:58.004000 audit: BPF prog-id=6 op=LOAD Jan 27 05:31:58.007379 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Jan 27 05:31:58.036870 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Jan 27 05:31:58.085059 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jan 27 05:31:58.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.096721 systemd-resolved[316]: Positive Trust Anchors: Jan 27 05:31:58.097285 systemd-resolved[316]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jan 27 05:31:58.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.097298 systemd-resolved[316]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Jan 27 05:31:58.097374 systemd-resolved[316]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Jan 27 05:31:58.099496 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Jan 27 05:31:58.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.116031 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook... Jan 27 05:31:58.129166 systemd-resolved[316]: Defaulting to hostname 'linux'. Jan 27 05:31:58.249100 dracut-cmdline[331]: dracut-109 Jan 27 05:31:58.249100 dracut-cmdline[331]: Using kernel command line parameters: SYSTEMD_SULOGIN_FORCE=1 rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=gce verity.usrhash=94a0aed2c135ea3629cf7bc829842658bafc4ce682f9974c582239b9a4f2cb9e Jan 27 05:31:58.198430 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Jan 27 05:31:58.208592 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Jan 27 05:31:58.368933 kernel: Loading iSCSI transport class v2.0-870. Jan 27 05:31:58.398962 kernel: iscsi: registered transport (tcp) Jan 27 05:31:58.439925 kernel: iscsi: registered transport (qla4xxx) Jan 27 05:31:58.440060 kernel: QLogic iSCSI HBA Driver Jan 27 05:31:58.476960 systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... Jan 27 05:31:58.527515 systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line. Jan 27 05:31:58.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.530720 systemd[1]: Reached target network-pre.target - Preparation for Network. Jan 27 05:31:58.633067 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook. Jan 27 05:31:58.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.636297 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook... Jan 27 05:31:58.659719 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline... Jan 27 05:31:58.729791 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook. Jan 27 05:31:58.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.746000 audit: BPF prog-id=7 op=LOAD Jan 27 05:31:58.746000 audit: BPF prog-id=8 op=LOAD Jan 27 05:31:58.751249 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Jan 27 05:31:58.815275 systemd-udevd[576]: Using default interface naming scheme 'v257'. Jan 27 05:31:58.839238 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Jan 27 05:31:58.884448 kernel: kauditd_printk_skb: 9 callbacks suppressed Jan 27 05:31:58.884551 kernel: audit: type=1130 audit(1769491918.857:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.885245 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook... Jan 27 05:31:58.946212 kernel: audit: type=1130 audit(1769491918.906:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.946262 kernel: audit: type=1334 audit(1769491918.932:22): prog-id=9 op=LOAD Jan 27 05:31:58.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:58.932000 audit: BPF prog-id=9 op=LOAD Jan 27 05:31:58.897222 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Jan 27 05:31:58.937198 systemd[1]: Starting systemd-networkd.service - Network Configuration... Jan 27 05:31:58.968382 dracut-pre-trigger[659]: rd.md=0: removing MD RAID activation Jan 27 05:31:59.028614 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook. Jan 27 05:31:59.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.043179 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Jan 27 05:31:59.088179 kernel: audit: type=1130 audit(1769491919.037:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.069391 systemd-networkd[662]: lo: Link UP Jan 27 05:31:59.123164 kernel: audit: type=1130 audit(1769491919.095:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.069397 systemd-networkd[662]: lo: Gained carrier Jan 27 05:31:59.077447 systemd[1]: Started systemd-networkd.service - Network Configuration. Jan 27 05:31:59.097415 systemd[1]: Reached target network.target - Network. Jan 27 05:31:59.253605 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Jan 27 05:31:59.295853 kernel: audit: type=1130 audit(1769491919.262:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.269193 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook... Jan 27 05:31:59.501755 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - PersistentDisk EFI-SYSTEM. Jan 27 05:31:59.548858 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - PersistentDisk ROOT. Jan 27 05:31:59.582090 kernel: cryptd: max_cpu_qlen set to 1000 Jan 27 05:31:59.594949 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input2 Jan 27 05:31:59.660463 kernel: AES CTR mode by8 optimization enabled Jan 27 05:31:59.681958 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - PersistentDisk OEM. Jan 27 05:31:59.702603 systemd-networkd[662]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 27 05:31:59.702803 systemd-networkd[662]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jan 27 05:31:59.706393 systemd-networkd[662]: eth0: Link UP Jan 27 05:31:59.707517 systemd-networkd[662]: eth0: Gained carrier Jan 27 05:31:59.707539 systemd-networkd[662]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 27 05:31:59.720398 systemd-networkd[662]: eth0: Overlong DHCP hostname received, shortened from 'ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356.c.flatcar-212911.internal' to 'ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356' Jan 27 05:31:59.720430 systemd-networkd[662]: eth0: DHCPv4 address 10.128.0.99/32, gateway 10.128.0.1 acquired from 169.254.169.254 Jan 27 05:31:59.740190 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - PersistentDisk USR-A. Jan 27 05:31:59.865188 kernel: audit: type=1131 audit(1769491919.822:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:31:59.757697 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary... Jan 27 05:31:59.794394 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jan 27 05:31:59.794673 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jan 27 05:31:59.902627 disk-uuid[795]: Primary Header is updated. Jan 27 05:31:59.902627 disk-uuid[795]: Secondary Entries is updated. Jan 27 05:31:59.902627 disk-uuid[795]: Secondary Header is updated. Jan 27 05:31:59.824185 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup... Jan 27 05:31:59.859495 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 27 05:32:00.029271 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jan 27 05:32:00.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.071036 kernel: audit: type=1130 audit(1769491920.046:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.142144 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook. Jan 27 05:32:00.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.161358 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems. Jan 27 05:32:00.180980 kernel: audit: type=1130 audit(1769491920.158:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.201137 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Jan 27 05:32:00.201453 systemd[1]: Reached target remote-fs.target - Remote File Systems. Jan 27 05:32:00.237733 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook... Jan 27 05:32:00.283048 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook. Jan 27 05:32:00.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.321023 kernel: audit: type=1130 audit(1769491920.298:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.986482 disk-uuid[796]: Warning: The kernel is still using the old partition table. Jan 27 05:32:00.986482 disk-uuid[796]: The new table will be used at the next reboot or after you Jan 27 05:32:00.986482 disk-uuid[796]: run partprobe(8) or kpartx(8) Jan 27 05:32:00.986482 disk-uuid[796]: The operation has completed successfully. Jan 27 05:32:00.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:00.994693 systemd[1]: disk-uuid.service: Deactivated successfully. Jan 27 05:32:00.995138 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary. Jan 27 05:32:00.998625 systemd[1]: Starting ignition-setup.service - Ignition (setup)... Jan 27 05:32:01.087934 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 (8:6) scanned by mount (825) Jan 27 05:32:01.105702 kernel: BTRFS info (device sda6): first mount of filesystem 3d9bae75-48f1-4a66-8ef3-32c49c69a6d1 Jan 27 05:32:01.105911 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jan 27 05:32:01.124133 kernel: BTRFS info (device sda6): enabling ssd optimizations Jan 27 05:32:01.124237 kernel: BTRFS info (device sda6): turning on async discard Jan 27 05:32:01.124265 kernel: BTRFS info (device sda6): enabling free space tree Jan 27 05:32:01.147937 kernel: BTRFS info (device sda6): last unmount of filesystem 3d9bae75-48f1-4a66-8ef3-32c49c69a6d1 Jan 27 05:32:01.148857 systemd[1]: Finished ignition-setup.service - Ignition (setup). Jan 27 05:32:01.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:01.161013 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)... Jan 27 05:32:01.381202 systemd-networkd[662]: eth0: Gained IPv6LL Jan 27 05:32:01.427494 ignition[844]: Ignition 2.24.0 Jan 27 05:32:01.427516 ignition[844]: Stage: fetch-offline Jan 27 05:32:01.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:01.430541 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline). Jan 27 05:32:01.428599 ignition[844]: no configs at "/usr/lib/ignition/base.d" Jan 27 05:32:01.445395 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)... Jan 27 05:32:01.428632 ignition[844]: no config dir at "/usr/lib/ignition/base.platform.d/gcp" Jan 27 05:32:01.428756 ignition[844]: parsed url from cmdline: "" Jan 27 05:32:01.428761 ignition[844]: no config URL provided Jan 27 05:32:01.428767 ignition[844]: reading system config file "/usr/lib/ignition/user.ign" Jan 27 05:32:01.428780 ignition[844]: no config at "/usr/lib/ignition/user.ign" Jan 27 05:32:01.428789 ignition[844]: failed to fetch config: resource requires networking Jan 27 05:32:01.515591 unknown[850]: fetched base config from "system" Jan 27 05:32:01.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:01.429062 ignition[844]: Ignition finished successfully Jan 27 05:32:01.515600 unknown[850]: fetched base config from "system" Jan 27 05:32:01.498841 ignition[850]: Ignition 2.24.0 Jan 27 05:32:01.515608 unknown[850]: fetched user config from "gcp" Jan 27 05:32:01.498983 ignition[850]: Stage: fetch Jan 27 05:32:01.519462 systemd[1]: Finished ignition-fetch.service - Ignition (fetch). Jan 27 05:32:01.499405 ignition[850]: no configs at "/usr/lib/ignition/base.d" Jan 27 05:32:01.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:01.536270 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)... Jan 27 05:32:01.499429 ignition[850]: no config dir at "/usr/lib/ignition/base.platform.d/gcp" Jan 27 05:32:01.583567 systemd[1]: Finished ignition-kargs.service - Ignition (kargs). Jan 27 05:32:01.499747 ignition[850]: parsed url from cmdline: "" Jan 27 05:32:01.598700 systemd[1]: Starting ignition-disks.service - Ignition (disks)... Jan 27 05:32:01.499755 ignition[850]: no config URL provided Jan 27 05:32:01.499772 ignition[850]: reading system config file "/usr/lib/ignition/user.ign" Jan 27 05:32:01.499788 ignition[850]: no config at "/usr/lib/ignition/user.ign" Jan 27 05:32:01.499847 ignition[850]: GET http://169.254.169.254/computeMetadata/v1/instance/attributes/user-data: attempt #1 Jan 27 05:32:01.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:01.666467 systemd[1]: Finished ignition-disks.service - Ignition (disks). Jan 27 05:32:01.504240 ignition[850]: GET result: OK Jan 27 05:32:01.671761 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device. Jan 27 05:32:01.504399 ignition[850]: parsing config with SHA512: 4c06f80adf9e55c5d3140f345bcc5f051e1494895dd1f301a849fedacbe28ae8e8f280a4fea9ddd7559c225cd40ab89d8ac7f16cbe498dbf4e809e7682d12f74 Jan 27 05:32:01.700236 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Jan 27 05:32:01.516392 ignition[850]: fetch: fetch complete Jan 27 05:32:01.723324 systemd[1]: Reached target local-fs.target - Local File Systems. Jan 27 05:32:01.516404 ignition[850]: fetch: fetch passed Jan 27 05:32:01.741299 systemd[1]: Reached target sysinit.target - System Initialization. Jan 27 05:32:01.516472 ignition[850]: Ignition finished successfully Jan 27 05:32:01.752364 systemd[1]: Reached target basic.target - Basic System. Jan 27 05:32:01.579874 ignition[856]: Ignition 2.24.0 Jan 27 05:32:01.769317 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT... Jan 27 05:32:01.579886 ignition[856]: Stage: kargs Jan 27 05:32:01.580163 ignition[856]: no configs at "/usr/lib/ignition/base.d" Jan 27 05:32:01.580176 ignition[856]: no config dir at "/usr/lib/ignition/base.platform.d/gcp" Jan 27 05:32:01.581378 ignition[856]: kargs: kargs passed Jan 27 05:32:01.581440 ignition[856]: Ignition finished successfully Jan 27 05:32:01.661968 ignition[862]: Ignition 2.24.0 Jan 27 05:32:01.661982 ignition[862]: Stage: disks Jan 27 05:32:01.662255 ignition[862]: no configs at "/usr/lib/ignition/base.d" Jan 27 05:32:01.662268 ignition[862]: no config dir at "/usr/lib/ignition/base.platform.d/gcp" Jan 27 05:32:01.663818 ignition[862]: disks: disks passed Jan 27 05:32:01.664135 ignition[862]: Ignition finished successfully Jan 27 05:32:01.857944 systemd-fsck[870]: ROOT: clean, 15/1631200 files, 112378/1617920 blocks Jan 27 05:32:01.907186 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT. Jan 27 05:32:01.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:01.908863 systemd[1]: Mounting sysroot.mount - /sysroot... Jan 27 05:32:02.158335 kernel: EXT4-fs (sda9): mounted filesystem a9099a9f-29a1-43d8-a05a-53a191872646 r/w with ordered data mode. Quota mode: none. Jan 27 05:32:02.159413 systemd[1]: Mounted sysroot.mount - /sysroot. Jan 27 05:32:02.168027 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System. Jan 27 05:32:02.178304 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Jan 27 05:32:02.209250 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr... Jan 27 05:32:02.229931 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 (8:6) scanned by mount (878) Jan 27 05:32:02.249804 kernel: BTRFS info (device sda6): first mount of filesystem 3d9bae75-48f1-4a66-8ef3-32c49c69a6d1 Jan 27 05:32:02.249952 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jan 27 05:32:02.253784 systemd[1]: flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent was skipped because no trigger condition checks were met. Jan 27 05:32:02.298139 kernel: BTRFS info (device sda6): enabling ssd optimizations Jan 27 05:32:02.298189 kernel: BTRFS info (device sda6): turning on async discard Jan 27 05:32:02.298216 kernel: BTRFS info (device sda6): enabling free space tree Jan 27 05:32:02.253873 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jan 27 05:32:02.253943 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup. Jan 27 05:32:02.287274 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Jan 27 05:32:02.306638 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr. Jan 27 05:32:02.335052 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup... Jan 27 05:32:02.706513 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup. Jan 27 05:32:02.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:02.708781 systemd[1]: Starting ignition-mount.service - Ignition (mount)... Jan 27 05:32:02.733996 systemd[1]: Starting sysroot-boot.service - /sysroot/boot... Jan 27 05:32:02.763951 kernel: BTRFS info (device sda6): last unmount of filesystem 3d9bae75-48f1-4a66-8ef3-32c49c69a6d1 Jan 27 05:32:02.767490 systemd[1]: sysroot-oem.mount: Deactivated successfully. Jan 27 05:32:02.812972 ignition[974]: INFO : Ignition 2.24.0 Jan 27 05:32:02.812972 ignition[974]: INFO : Stage: mount Jan 27 05:32:02.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:02.815647 systemd[1]: Finished sysroot-boot.service - /sysroot/boot. Jan 27 05:32:02.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:02.850254 ignition[974]: INFO : no configs at "/usr/lib/ignition/base.d" Jan 27 05:32:02.850254 ignition[974]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/gcp" Jan 27 05:32:02.850254 ignition[974]: INFO : mount: mount passed Jan 27 05:32:02.850254 ignition[974]: INFO : Ignition finished successfully Jan 27 05:32:02.828619 systemd[1]: Finished ignition-mount.service - Ignition (mount). Jan 27 05:32:02.845354 systemd[1]: Starting ignition-files.service - Ignition (files)... Jan 27 05:32:03.162025 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Jan 27 05:32:03.218942 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 (8:6) scanned by mount (986) Jan 27 05:32:03.236617 kernel: BTRFS info (device sda6): first mount of filesystem 3d9bae75-48f1-4a66-8ef3-32c49c69a6d1 Jan 27 05:32:03.236748 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jan 27 05:32:03.254448 kernel: BTRFS info (device sda6): enabling ssd optimizations Jan 27 05:32:03.254561 kernel: BTRFS info (device sda6): turning on async discard Jan 27 05:32:03.254588 kernel: BTRFS info (device sda6): enabling free space tree Jan 27 05:32:03.263163 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Jan 27 05:32:03.311055 ignition[1003]: INFO : Ignition 2.24.0 Jan 27 05:32:03.311055 ignition[1003]: INFO : Stage: files Jan 27 05:32:03.324112 ignition[1003]: INFO : no configs at "/usr/lib/ignition/base.d" Jan 27 05:32:03.324112 ignition[1003]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/gcp" Jan 27 05:32:03.324112 ignition[1003]: DEBUG : files: compiled without relabeling support, skipping Jan 27 05:32:03.324112 ignition[1003]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jan 27 05:32:03.324112 ignition[1003]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jan 27 05:32:03.379194 ignition[1003]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jan 27 05:32:03.379194 ignition[1003]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jan 27 05:32:03.379194 ignition[1003]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jan 27 05:32:03.379194 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jan 27 05:32:03.379194 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Jan 27 05:32:03.326017 unknown[1003]: wrote ssh authorized keys file for user: core Jan 27 05:32:03.491482 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jan 27 05:32:03.627304 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jan 27 05:32:03.644126 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Jan 27 05:32:04.097035 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jan 27 05:32:05.367882 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jan 27 05:32:05.367882 ignition[1003]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jan 27 05:32:05.430170 kernel: kauditd_printk_skb: 11 callbacks suppressed Jan 27 05:32:05.430231 kernel: audit: type=1130 audit(1769491925.384:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.430351 ignition[1003]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jan 27 05:32:05.430351 ignition[1003]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jan 27 05:32:05.430351 ignition[1003]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jan 27 05:32:05.430351 ignition[1003]: INFO : files: op(d): [started] setting preset to enabled for "prepare-helm.service" Jan 27 05:32:05.430351 ignition[1003]: INFO : files: op(d): [finished] setting preset to enabled for "prepare-helm.service" Jan 27 05:32:05.430351 ignition[1003]: INFO : files: createResultFile: createFiles: op(e): [started] writing file "/sysroot/etc/.ignition-result.json" Jan 27 05:32:05.430351 ignition[1003]: INFO : files: createResultFile: createFiles: op(e): [finished] writing file "/sysroot/etc/.ignition-result.json" Jan 27 05:32:05.430351 ignition[1003]: INFO : files: files passed Jan 27 05:32:05.430351 ignition[1003]: INFO : Ignition finished successfully Jan 27 05:32:05.641147 kernel: audit: type=1130 audit(1769491925.523:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.641210 kernel: audit: type=1131 audit(1769491925.523:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.641238 kernel: audit: type=1130 audit(1769491925.609:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.382609 systemd[1]: Finished ignition-files.service - Ignition (files). Jan 27 05:32:05.388309 systemd[1]: Starting ignition-quench.service - Ignition (record completion)... Jan 27 05:32:05.440860 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion... Jan 27 05:32:05.481546 systemd[1]: ignition-quench.service: Deactivated successfully. Jan 27 05:32:05.697239 initrd-setup-root-after-ignition[1033]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jan 27 05:32:05.697239 initrd-setup-root-after-ignition[1033]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory Jan 27 05:32:05.481704 systemd[1]: Finished ignition-quench.service - Ignition (record completion). Jan 27 05:32:05.734295 initrd-setup-root-after-ignition[1037]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jan 27 05:32:05.525635 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion. Jan 27 05:32:05.809207 kernel: audit: type=1130 audit(1769491925.756:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.809261 kernel: audit: type=1131 audit(1769491925.756:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.611653 systemd[1]: Reached target ignition-complete.target - Ignition Complete. Jan 27 05:32:05.651520 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root... Jan 27 05:32:05.738352 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jan 27 05:32:05.738521 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root. Jan 27 05:32:05.758619 systemd[1]: Reached target initrd-fs.target - Initrd File Systems. Jan 27 05:32:05.818332 systemd[1]: Reached target initrd.target - Initrd Default Target. Jan 27 05:32:05.836745 systemd[1]: dracut-mount.service - dracut mount hook was skipped because no trigger condition checks were met. Jan 27 05:32:05.838776 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook... Jan 27 05:32:05.940330 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Jan 27 05:32:05.982321 kernel: audit: type=1130 audit(1769491925.949:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:05.956249 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons... Jan 27 05:32:06.018873 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr. Jan 27 05:32:06.019726 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups. Jan 27 05:32:06.040299 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes. Jan 27 05:32:06.059597 systemd[1]: Stopped target timers.target - Timer Units. Jan 27 05:32:06.078435 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jan 27 05:32:06.123134 kernel: audit: type=1131 audit(1769491926.093:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.078627 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Jan 27 05:32:06.123608 systemd[1]: Stopped target initrd.target - Initrd Default Target. Jan 27 05:32:06.134714 systemd[1]: Stopped target basic.target - Basic System. Jan 27 05:32:06.150529 systemd[1]: Stopped target ignition-complete.target - Ignition Complete. Jan 27 05:32:06.183291 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup. Jan 27 05:32:06.202330 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device. Jan 27 05:32:06.202869 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System. Jan 27 05:32:06.237306 systemd[1]: Stopped target remote-fs.target - Remote File Systems. Jan 27 05:32:06.253361 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems. Jan 27 05:32:06.274340 systemd[1]: Stopped target sysinit.target - System Initialization. Jan 27 05:32:06.290299 systemd[1]: Stopped target local-fs.target - Local File Systems. Jan 27 05:32:06.306291 systemd[1]: Stopped target swap.target - Swaps. Jan 27 05:32:06.306672 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jan 27 05:32:06.306919 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook. Jan 27 05:32:06.365164 kernel: audit: type=1131 audit(1769491926.334:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.334000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.365470 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes. Jan 27 05:32:06.365919 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jan 27 05:32:06.383459 systemd[1]: clevis-luks-askpass.path: Deactivated successfully. Jan 27 05:32:06.383632 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jan 27 05:32:06.420288 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jan 27 05:32:06.469159 kernel: audit: type=1131 audit(1769491926.439:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.420473 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook. Jan 27 05:32:06.469581 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jan 27 05:32:06.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.469834 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion. Jan 27 05:32:06.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.478632 systemd[1]: ignition-files.service: Deactivated successfully. Jan 27 05:32:06.478824 systemd[1]: Stopped ignition-files.service - Ignition (files). Jan 27 05:32:06.499012 systemd[1]: Stopping ignition-mount.service - Ignition (mount)... Jan 27 05:32:06.549860 ignition[1058]: INFO : Ignition 2.24.0 Jan 27 05:32:06.549860 ignition[1058]: INFO : Stage: umount Jan 27 05:32:06.549860 ignition[1058]: INFO : no configs at "/usr/lib/ignition/base.d" Jan 27 05:32:06.549860 ignition[1058]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/gcp" Jan 27 05:32:06.549860 ignition[1058]: INFO : umount: umount passed Jan 27 05:32:06.549860 ignition[1058]: INFO : Ignition finished successfully Jan 27 05:32:06.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.523640 systemd[1]: Stopping sysroot-boot.service - /sysroot/boot... Jan 27 05:32:06.549450 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. Jan 27 05:32:06.549746 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories. Jan 27 05:32:06.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.573452 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jan 27 05:32:06.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.573796 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices. Jan 27 05:32:06.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.588690 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jan 27 05:32:06.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.588924 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook. Jan 27 05:32:06.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.635002 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jan 27 05:32:06.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.636776 systemd[1]: ignition-mount.service: Deactivated successfully. Jan 27 05:32:06.637108 systemd[1]: Stopped ignition-mount.service - Ignition (mount). Jan 27 05:32:06.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.658207 systemd[1]: sysroot-boot.service: Deactivated successfully. Jan 27 05:32:06.658479 systemd[1]: Stopped sysroot-boot.service - /sysroot/boot. Jan 27 05:32:06.682125 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jan 27 05:32:06.682268 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons. Jan 27 05:32:06.699244 systemd[1]: ignition-disks.service: Deactivated successfully. Jan 27 05:32:06.699340 systemd[1]: Stopped ignition-disks.service - Ignition (disks). Jan 27 05:32:06.714403 systemd[1]: ignition-kargs.service: Deactivated successfully. Jan 27 05:32:06.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.714670 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs). Jan 27 05:32:06.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.732350 systemd[1]: ignition-fetch.service: Deactivated successfully. Jan 27 05:32:06.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.732471 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch). Jan 27 05:32:06.750367 systemd[1]: Stopped target network.target - Network. Jan 27 05:32:06.765178 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jan 27 05:32:06.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.765321 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline). Jan 27 05:32:07.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.014000 audit: BPF prog-id=9 op=UNLOAD Jan 27 05:32:07.014000 audit: BPF prog-id=6 op=UNLOAD Jan 27 05:32:06.784254 systemd[1]: Stopped target paths.target - Path Units. Jan 27 05:32:06.799196 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jan 27 05:32:06.803076 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jan 27 05:32:06.817117 systemd[1]: Stopped target slices.target - Slice Units. Jan 27 05:32:06.817299 systemd[1]: Stopped target sockets.target - Socket Units. Jan 27 05:32:06.841215 systemd[1]: iscsid.socket: Deactivated successfully. Jan 27 05:32:06.841307 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket. Jan 27 05:32:07.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.858236 systemd[1]: iscsiuio.socket: Deactivated successfully. Jan 27 05:32:07.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.858329 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket. Jan 27 05:32:07.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.877393 systemd[1]: systemd-journald-audit.socket: Deactivated successfully. Jan 27 05:32:07.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.877540 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket. Jan 27 05:32:06.894187 systemd[1]: ignition-setup.service: Deactivated successfully. Jan 27 05:32:06.894316 systemd[1]: Stopped ignition-setup.service - Ignition (setup). Jan 27 05:32:06.911410 systemd[1]: ignition-setup-pre.service: Deactivated successfully. Jan 27 05:32:06.911528 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup. Jan 27 05:32:07.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.928235 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jan 27 05:32:06.928355 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup. Jan 27 05:32:06.946429 systemd[1]: Stopping systemd-networkd.service - Network Configuration... Jan 27 05:32:07.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.963273 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution... Jan 27 05:32:06.963915 systemd[1]: systemd-networkd.service: Deactivated successfully. Jan 27 05:32:07.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:06.964074 systemd[1]: Stopped systemd-networkd.service - Network Configuration. Jan 27 05:32:06.998821 systemd[1]: systemd-resolved.service: Deactivated successfully. Jan 27 05:32:06.999081 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution. Jan 27 05:32:07.017059 systemd[1]: Stopped target network-pre.target - Preparation for Network. Jan 27 05:32:07.031299 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jan 27 05:32:07.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.031374 systemd[1]: Closed systemd-networkd.socket - Network Service Netlink Socket. Jan 27 05:32:07.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.058751 systemd[1]: Stopping network-cleanup.service - Network Cleanup... Jan 27 05:32:07.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.069345 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jan 27 05:32:07.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.069451 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Jan 27 05:32:07.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.108390 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jan 27 05:32:07.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.108495 systemd[1]: Stopped systemd-sysctl.service - Apply Kernel Variables. Jan 27 05:32:07.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:07.116513 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jan 27 05:32:07.116594 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules. Jan 27 05:32:07.141435 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files... Jan 27 05:32:07.161734 systemd[1]: systemd-udevd.service: Deactivated successfully. Jan 27 05:32:07.161922 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files. Jan 27 05:32:07.175487 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jan 27 05:32:07.175659 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket. Jan 27 05:32:07.199364 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jan 27 05:32:07.199431 systemd[1]: Closed systemd-udevd-kernel.socket - udev Kernel Socket. Jan 27 05:32:07.223316 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jan 27 05:32:07.608141 systemd-journald[293]: Received SIGTERM from PID 1 (systemd). Jan 27 05:32:07.223416 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook. Jan 27 05:32:07.250449 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jan 27 05:32:07.250692 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook. Jan 27 05:32:07.286127 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jan 27 05:32:07.286286 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Jan 27 05:32:07.314442 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database... Jan 27 05:32:07.347117 systemd[1]: systemd-network-generator.service: Deactivated successfully. Jan 27 05:32:07.347285 systemd[1]: Stopped systemd-network-generator.service - Generate network units from Kernel command line. Jan 27 05:32:07.366282 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jan 27 05:32:07.366388 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jan 27 05:32:07.385349 systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully. Jan 27 05:32:07.385474 systemd[1]: Stopped systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Jan 27 05:32:07.405296 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jan 27 05:32:07.405403 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes. Jan 27 05:32:07.425261 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jan 27 05:32:07.425376 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jan 27 05:32:07.446566 systemd[1]: network-cleanup.service: Deactivated successfully. Jan 27 05:32:07.446751 systemd[1]: Stopped network-cleanup.service - Network Cleanup. Jan 27 05:32:07.466756 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jan 27 05:32:07.466910 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database. Jan 27 05:32:07.485560 systemd[1]: Reached target initrd-switch-root.target - Switch Root. Jan 27 05:32:07.503553 systemd[1]: Starting initrd-switch-root.service - Switch Root... Jan 27 05:32:07.553219 systemd[1]: Switching root. Jan 27 05:32:07.826117 systemd-journald[293]: Journal stopped Jan 27 05:32:10.850219 kernel: SELinux: policy capability network_peer_controls=1 Jan 27 05:32:10.850296 kernel: SELinux: policy capability open_perms=1 Jan 27 05:32:10.850327 kernel: SELinux: policy capability extended_socket_class=1 Jan 27 05:32:10.850347 kernel: SELinux: policy capability always_check_network=0 Jan 27 05:32:10.850366 kernel: SELinux: policy capability cgroup_seclabel=1 Jan 27 05:32:10.850385 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jan 27 05:32:10.850406 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jan 27 05:32:10.850430 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jan 27 05:32:10.850450 kernel: SELinux: policy capability userspace_initial_context=0 Jan 27 05:32:10.850474 systemd[1]: Successfully loaded SELinux policy in 125.538ms. Jan 27 05:32:10.850498 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 9.737ms. Jan 27 05:32:10.850522 systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) Jan 27 05:32:10.850543 systemd[1]: Detected virtualization google. Jan 27 05:32:10.850570 systemd[1]: Detected architecture x86-64. Jan 27 05:32:10.850594 systemd[1]: Detected first boot. Jan 27 05:32:10.850616 systemd[1]: Initializing machine ID from random generator. Jan 27 05:32:10.850639 zram_generator::config[1100]: No configuration found. Jan 27 05:32:10.850666 kernel: Guest personality initialized and is inactive Jan 27 05:32:10.850687 kernel: VMCI host device registered (name=vmci, major=10, minor=258) Jan 27 05:32:10.850708 kernel: Initialized host personality Jan 27 05:32:10.850728 kernel: NET: Registered PF_VSOCK protocol family Jan 27 05:32:10.850750 systemd[1]: Populated /etc with preset unit settings. Jan 27 05:32:10.850862 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jan 27 05:32:10.855231 systemd[1]: Stopped initrd-switch-root.service - Switch Root. Jan 27 05:32:10.855294 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jan 27 05:32:10.855328 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. Jan 27 05:32:10.855358 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. Jan 27 05:32:10.855381 systemd[1]: Created slice system-getty.slice - Slice /system/getty. Jan 27 05:32:10.855405 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. Jan 27 05:32:10.855432 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. Jan 27 05:32:10.855456 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. Jan 27 05:32:10.855479 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. Jan 27 05:32:10.855502 systemd[1]: Created slice user.slice - User and Session Slice. Jan 27 05:32:10.855524 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jan 27 05:32:10.855549 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jan 27 05:32:10.855571 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. Jan 27 05:32:10.855598 systemd[1]: Set up automount boot.automount - Boot partition Automount Point. Jan 27 05:32:10.855621 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. Jan 27 05:32:10.855644 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Jan 27 05:32:10.855667 systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... Jan 27 05:32:10.855696 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jan 27 05:32:10.855720 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Jan 27 05:32:10.855747 systemd[1]: Stopped target initrd-switch-root.target - Switch Root. Jan 27 05:32:10.855771 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. Jan 27 05:32:10.855794 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. Jan 27 05:32:10.855817 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. Jan 27 05:32:10.855841 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Jan 27 05:32:10.855866 systemd[1]: Reached target remote-fs.target - Remote File Systems. Jan 27 05:32:10.856938 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. Jan 27 05:32:10.856990 systemd[1]: Reached target slices.target - Slice Units. Jan 27 05:32:10.857015 systemd[1]: Reached target swap.target - Swaps. Jan 27 05:32:10.857039 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. Jan 27 05:32:10.857063 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Jan 27 05:32:10.857086 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. Jan 27 05:32:10.857115 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Jan 27 05:32:10.857139 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. Jan 27 05:32:10.857173 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. Jan 27 05:32:10.857197 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. Jan 27 05:32:10.857221 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. Jan 27 05:32:10.857248 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Jan 27 05:32:10.857272 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Jan 27 05:32:10.857295 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. Jan 27 05:32:10.857319 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... Jan 27 05:32:10.857342 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... Jan 27 05:32:10.857367 systemd[1]: Mounting media.mount - External Media Directory... Jan 27 05:32:10.857391 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 27 05:32:10.857419 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... Jan 27 05:32:10.857442 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... Jan 27 05:32:10.857466 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... Jan 27 05:32:10.857491 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jan 27 05:32:10.857519 systemd[1]: Reached target machines.target - Containers. Jan 27 05:32:10.857542 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... Jan 27 05:32:10.857570 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. Jan 27 05:32:10.857595 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Jan 27 05:32:10.857618 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Jan 27 05:32:10.857642 systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... Jan 27 05:32:10.857665 systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... Jan 27 05:32:10.857688 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... Jan 27 05:32:10.857712 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... Jan 27 05:32:10.857739 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... Jan 27 05:32:10.857763 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jan 27 05:32:10.857787 kernel: fuse: init (API version 7.41) Jan 27 05:32:10.857811 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jan 27 05:32:10.857834 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. Jan 27 05:32:10.857858 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jan 27 05:32:10.857886 kernel: kauditd_printk_skb: 52 callbacks suppressed Jan 27 05:32:10.858968 kernel: audit: type=1131 audit(1769491930.597:103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:10.858994 systemd[1]: Stopped systemd-fsck-usr.service. Jan 27 05:32:10.859020 kernel: audit: type=1131 audit(1769491930.645:104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:10.859044 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). Jan 27 05:32:10.859068 kernel: audit: type=1334 audit(1769491930.689:105): prog-id=14 op=UNLOAD Jan 27 05:32:10.859099 kernel: ACPI: bus type drm_connector registered Jan 27 05:32:10.859121 kernel: audit: type=1334 audit(1769491930.689:106): prog-id=13 op=UNLOAD Jan 27 05:32:10.859143 systemd[1]: Starting systemd-journald.service - Journal Service... Jan 27 05:32:10.859174 kernel: audit: type=1334 audit(1769491930.689:107): prog-id=15 op=LOAD Jan 27 05:32:10.859196 kernel: audit: type=1334 audit(1769491930.697:108): prog-id=16 op=LOAD Jan 27 05:32:10.859217 kernel: audit: type=1334 audit(1769491930.697:109): prog-id=17 op=LOAD Jan 27 05:32:10.859239 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Jan 27 05:32:10.859268 systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... Jan 27 05:32:10.859292 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... Jan 27 05:32:10.859380 systemd-journald[1189]: Collecting audit messages is enabled. Jan 27 05:32:10.859433 kernel: audit: type=1305 audit(1769491930.828:110): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jan 27 05:32:10.859457 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... Jan 27 05:32:10.859483 kernel: audit: type=1300 audit(1769491930.828:110): arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffcb443ea00 a2=4000 a3=0 items=0 ppid=1 pid=1189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:10.859507 systemd-journald[1189]: Journal started Jan 27 05:32:10.859551 systemd-journald[1189]: Runtime Journal (/run/log/journal/8c5ff513a09141f9a4c53001bf0fe0eb) is 8M, max 148.4M, 140.4M free. Jan 27 05:32:10.897950 kernel: audit: type=1327 audit(1769491930.828:110): proctitle="/usr/lib/systemd/systemd-journald" Jan 27 05:32:10.003000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 Jan 27 05:32:10.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:10.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:10.689000 audit: BPF prog-id=14 op=UNLOAD Jan 27 05:32:10.689000 audit: BPF prog-id=13 op=UNLOAD Jan 27 05:32:10.689000 audit: BPF prog-id=15 op=LOAD Jan 27 05:32:10.697000 audit: BPF prog-id=16 op=LOAD Jan 27 05:32:10.697000 audit: BPF prog-id=17 op=LOAD Jan 27 05:32:10.828000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jan 27 05:32:10.828000 audit[1189]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffcb443ea00 a2=4000 a3=0 items=0 ppid=1 pid=1189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:10.828000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jan 27 05:32:09.381521 systemd[1]: Queued start job for default target multi-user.target. Jan 27 05:32:09.407067 systemd[1]: Unnecessary job was removed for dev-sda6.device - /dev/sda6. Jan 27 05:32:09.407955 systemd[1]: systemd-journald.service: Deactivated successfully. Jan 27 05:32:10.910988 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Jan 27 05:32:10.943971 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 27 05:32:10.962942 systemd[1]: Started systemd-journald.service - Journal Service. Jan 27 05:32:10.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:10.977047 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. Jan 27 05:32:10.986417 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. Jan 27 05:32:10.997403 systemd[1]: Mounted media.mount - External Media Directory. Jan 27 05:32:11.006399 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. Jan 27 05:32:11.015390 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. Jan 27 05:32:11.026367 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. Jan 27 05:32:11.035718 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files. Jan 27 05:32:11.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.046729 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Jan 27 05:32:11.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.058810 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jan 27 05:32:11.059154 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Jan 27 05:32:11.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.070706 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jan 27 05:32:11.071063 systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. Jan 27 05:32:11.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.081599 systemd[1]: modprobe@drm.service: Deactivated successfully. Jan 27 05:32:11.081832 systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm. Jan 27 05:32:11.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.091847 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jan 27 05:32:11.092178 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. Jan 27 05:32:11.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.102646 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jan 27 05:32:11.103176 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. Jan 27 05:32:11.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.112652 systemd[1]: modprobe@loop.service: Deactivated successfully. Jan 27 05:32:11.112965 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. Jan 27 05:32:11.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.123144 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Jan 27 05:32:11.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.132762 systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line. Jan 27 05:32:11.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.144623 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. Jan 27 05:32:11.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.155940 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. Jan 27 05:32:11.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.167740 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Jan 27 05:32:11.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.191881 systemd[1]: Reached target network-pre.target - Preparation for Network. Jan 27 05:32:11.203507 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Jan 27 05:32:11.215778 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... Jan 27 05:32:11.237105 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... Jan 27 05:32:11.246150 systemd[1]: remount-root.service - Remount Root File System was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jan 27 05:32:11.246416 systemd[1]: Reached target local-fs.target - Local File Systems. Jan 27 05:32:11.257547 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. Jan 27 05:32:11.268390 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. Jan 27 05:32:11.268655 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. Jan 27 05:32:11.271447 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... Jan 27 05:32:11.292148 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage... Jan 27 05:32:11.302270 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jan 27 05:32:11.306627 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... Jan 27 05:32:11.316256 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. Jan 27 05:32:11.320569 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Jan 27 05:32:11.326313 systemd-journald[1189]: Time spent on flushing to /var/log/journal/8c5ff513a09141f9a4c53001bf0fe0eb is 105.012ms for 1105 entries. Jan 27 05:32:11.326313 systemd-journald[1189]: System Journal (/var/log/journal/8c5ff513a09141f9a4c53001bf0fe0eb) is 8M, max 588.1M, 580.1M free. Jan 27 05:32:11.460408 systemd-journald[1189]: Received client request to flush runtime journal. Jan 27 05:32:11.472292 kernel: loop1: detected capacity change from 0 to 55000 Jan 27 05:32:11.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.345829 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... Jan 27 05:32:11.362228 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Jan 27 05:32:11.376739 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. Jan 27 05:32:11.387603 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. Jan 27 05:32:11.397636 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. Jan 27 05:32:11.415603 systemd[1]: Reached target first-boot-complete.target - First Boot Complete. Jan 27 05:32:11.429988 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk... Jan 27 05:32:11.441906 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Jan 27 05:32:11.473186 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage. Jan 27 05:32:11.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.502920 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk. Jan 27 05:32:11.503550 systemd-tmpfiles[1225]: ACLs are not supported, ignoring. Jan 27 05:32:11.503580 systemd-tmpfiles[1225]: ACLs are not supported, ignoring. Jan 27 05:32:11.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.514616 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Jan 27 05:32:11.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.529462 systemd[1]: Starting systemd-sysusers.service - Create System Users... Jan 27 05:32:11.549951 kernel: loop2: detected capacity change from 0 to 224512 Jan 27 05:32:11.608036 systemd[1]: Finished systemd-sysusers.service - Create System Users. Jan 27 05:32:11.616104 kernel: loop3: detected capacity change from 0 to 50784 Jan 27 05:32:11.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.623000 audit: BPF prog-id=18 op=LOAD Jan 27 05:32:11.623000 audit: BPF prog-id=19 op=LOAD Jan 27 05:32:11.623000 audit: BPF prog-id=20 op=LOAD Jan 27 05:32:11.628295 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer... Jan 27 05:32:11.637000 audit: BPF prog-id=21 op=LOAD Jan 27 05:32:11.644354 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Jan 27 05:32:11.657165 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Jan 27 05:32:11.667000 audit: BPF prog-id=22 op=LOAD Jan 27 05:32:11.668000 audit: BPF prog-id=23 op=LOAD Jan 27 05:32:11.668000 audit: BPF prog-id=24 op=LOAD Jan 27 05:32:11.673298 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager... Jan 27 05:32:11.681000 audit: BPF prog-id=25 op=LOAD Jan 27 05:32:11.681000 audit: BPF prog-id=26 op=LOAD Jan 27 05:32:11.681000 audit: BPF prog-id=27 op=LOAD Jan 27 05:32:11.688340 systemd[1]: Starting systemd-userdbd.service - User Database Manager... Jan 27 05:32:11.717948 kernel: loop4: detected capacity change from 0 to 111560 Jan 27 05:32:11.759185 systemd-tmpfiles[1248]: ACLs are not supported, ignoring. Jan 27 05:32:11.759676 systemd-tmpfiles[1248]: ACLs are not supported, ignoring. Jan 27 05:32:11.781107 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jan 27 05:32:11.797937 kernel: loop5: detected capacity change from 0 to 55000 Jan 27 05:32:11.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.838030 systemd-nsresourced[1250]: Not setting up BPF subsystem, as functionality has been disabled at compile time. Jan 27 05:32:11.841452 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager. Jan 27 05:32:11.846010 kernel: loop6: detected capacity change from 0 to 224512 Jan 27 05:32:11.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.856117 systemd[1]: Started systemd-userdbd.service - User Database Manager. Jan 27 05:32:11.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:11.900406 kernel: loop7: detected capacity change from 0 to 50784 Jan 27 05:32:11.948527 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jan 27 05:32:11.961927 kernel: loop1: detected capacity change from 0 to 111560 Jan 27 05:32:12.001262 (sd-merge)[1255]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'kubernetes.raw', 'oem-gce.raw'. Jan 27 05:32:12.007677 (sd-merge)[1255]: Merged extensions into '/usr'. Jan 27 05:32:12.023342 systemd[1]: Reload requested from client PID 1224 ('systemd-sysext') (unit systemd-sysext.service)... Jan 27 05:32:12.023375 systemd[1]: Reloading... Jan 27 05:32:12.162955 systemd-oomd[1246]: No swap; memory pressure usage will be degraded Jan 27 05:32:12.216609 systemd-resolved[1247]: Positive Trust Anchors: Jan 27 05:32:12.218378 systemd-resolved[1247]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jan 27 05:32:12.218494 systemd-resolved[1247]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Jan 27 05:32:12.218583 systemd-resolved[1247]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Jan 27 05:32:12.241097 systemd-resolved[1247]: Defaulting to hostname 'linux'. Jan 27 05:32:12.261952 zram_generator::config[1299]: No configuration found. Jan 27 05:32:12.690329 systemd[1]: Reloading finished in 665 ms. Jan 27 05:32:12.723277 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. Jan 27 05:32:12.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:12.734535 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Jan 27 05:32:12.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:12.745715 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database. Jan 27 05:32:12.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:12.757417 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/. Jan 27 05:32:12.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:12.774298 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Jan 27 05:32:12.798244 systemd[1]: Starting ensure-sysext.service... Jan 27 05:32:12.814651 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Jan 27 05:32:12.823000 audit: BPF prog-id=8 op=UNLOAD Jan 27 05:32:12.823000 audit: BPF prog-id=7 op=UNLOAD Jan 27 05:32:12.824000 audit: BPF prog-id=28 op=LOAD Jan 27 05:32:12.824000 audit: BPF prog-id=29 op=LOAD Jan 27 05:32:12.834666 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Jan 27 05:32:12.844000 audit: BPF prog-id=30 op=LOAD Jan 27 05:32:12.844000 audit: BPF prog-id=21 op=UNLOAD Jan 27 05:32:12.847000 audit: BPF prog-id=31 op=LOAD Jan 27 05:32:12.847000 audit: BPF prog-id=15 op=UNLOAD Jan 27 05:32:12.847000 audit: BPF prog-id=32 op=LOAD Jan 27 05:32:12.847000 audit: BPF prog-id=33 op=LOAD Jan 27 05:32:12.847000 audit: BPF prog-id=16 op=UNLOAD Jan 27 05:32:12.848000 audit: BPF prog-id=17 op=UNLOAD Jan 27 05:32:12.851000 audit: BPF prog-id=34 op=LOAD Jan 27 05:32:12.851000 audit: BPF prog-id=18 op=UNLOAD Jan 27 05:32:12.851000 audit: BPF prog-id=35 op=LOAD Jan 27 05:32:12.852000 audit: BPF prog-id=36 op=LOAD Jan 27 05:32:12.852000 audit: BPF prog-id=19 op=UNLOAD Jan 27 05:32:12.852000 audit: BPF prog-id=20 op=UNLOAD Jan 27 05:32:12.855000 audit: BPF prog-id=37 op=LOAD Jan 27 05:32:12.855000 audit: BPF prog-id=25 op=UNLOAD Jan 27 05:32:12.855000 audit: BPF prog-id=38 op=LOAD Jan 27 05:32:12.855000 audit: BPF prog-id=39 op=LOAD Jan 27 05:32:12.855000 audit: BPF prog-id=26 op=UNLOAD Jan 27 05:32:12.855000 audit: BPF prog-id=27 op=UNLOAD Jan 27 05:32:12.861376 systemd-tmpfiles[1340]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring. Jan 27 05:32:12.862501 systemd-tmpfiles[1340]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring. Jan 27 05:32:12.862000 audit: BPF prog-id=40 op=LOAD Jan 27 05:32:12.862000 audit: BPF prog-id=22 op=UNLOAD Jan 27 05:32:12.863000 audit: BPF prog-id=41 op=LOAD Jan 27 05:32:12.864000 audit: BPF prog-id=42 op=LOAD Jan 27 05:32:12.864000 audit: BPF prog-id=23 op=UNLOAD Jan 27 05:32:12.864000 audit: BPF prog-id=24 op=UNLOAD Jan 27 05:32:12.866336 systemd-tmpfiles[1340]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jan 27 05:32:12.869552 systemd-tmpfiles[1340]: ACLs are not supported, ignoring. Jan 27 05:32:12.869833 systemd-tmpfiles[1340]: ACLs are not supported, ignoring. Jan 27 05:32:12.883135 systemd[1]: Reload requested from client PID 1339 ('systemctl') (unit ensure-sysext.service)... Jan 27 05:32:12.883162 systemd[1]: Reloading... Jan 27 05:32:12.891264 systemd-tmpfiles[1340]: Detected autofs mount point /boot during canonicalization of boot. Jan 27 05:32:12.893994 systemd-tmpfiles[1340]: Skipping /boot Jan 27 05:32:12.913784 systemd-udevd[1341]: Using default interface naming scheme 'v257'. Jan 27 05:32:12.939096 systemd-tmpfiles[1340]: Detected autofs mount point /boot during canonicalization of boot. Jan 27 05:32:12.939124 systemd-tmpfiles[1340]: Skipping /boot Jan 27 05:32:13.078950 zram_generator::config[1384]: No configuration found. Jan 27 05:32:13.429934 kernel: piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr Jan 27 05:32:13.441979 kernel: mousedev: PS/2 mouse device common for all mice Jan 27 05:32:13.480921 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Jan 27 05:32:13.499006 kernel: ACPI: button: Power Button [PWRF] Jan 27 05:32:13.520986 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 Jan 27 05:32:13.538936 kernel: EDAC MC: Ver: 3.0.0 Jan 27 05:32:13.553927 kernel: ACPI: button: Sleep Button [SLPF] Jan 27 05:32:13.901356 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - PersistentDisk OEM. Jan 27 05:32:13.912580 systemd[1]: Condition check resulted in dev-ttyS0.device - /dev/ttyS0 being skipped. Jan 27 05:32:13.913278 systemd[1]: Reloading finished in 1029 ms. Jan 27 05:32:13.926731 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Jan 27 05:32:13.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:13.937000 audit: BPF prog-id=43 op=LOAD Jan 27 05:32:13.937000 audit: BPF prog-id=37 op=UNLOAD Jan 27 05:32:13.937000 audit: BPF prog-id=44 op=LOAD Jan 27 05:32:13.938000 audit: BPF prog-id=45 op=LOAD Jan 27 05:32:13.938000 audit: BPF prog-id=38 op=UNLOAD Jan 27 05:32:13.938000 audit: BPF prog-id=39 op=UNLOAD Jan 27 05:32:13.941000 audit: BPF prog-id=46 op=LOAD Jan 27 05:32:13.941000 audit: BPF prog-id=34 op=UNLOAD Jan 27 05:32:13.941000 audit: BPF prog-id=47 op=LOAD Jan 27 05:32:13.941000 audit: BPF prog-id=48 op=LOAD Jan 27 05:32:13.941000 audit: BPF prog-id=35 op=UNLOAD Jan 27 05:32:13.941000 audit: BPF prog-id=36 op=UNLOAD Jan 27 05:32:13.943000 audit: BPF prog-id=49 op=LOAD Jan 27 05:32:13.943000 audit: BPF prog-id=30 op=UNLOAD Jan 27 05:32:13.944000 audit: BPF prog-id=50 op=LOAD Jan 27 05:32:13.944000 audit: BPF prog-id=31 op=UNLOAD Jan 27 05:32:13.945000 audit: BPF prog-id=51 op=LOAD Jan 27 05:32:13.954000 audit: BPF prog-id=52 op=LOAD Jan 27 05:32:13.954000 audit: BPF prog-id=32 op=UNLOAD Jan 27 05:32:13.954000 audit: BPF prog-id=33 op=UNLOAD Jan 27 05:32:13.956000 audit: BPF prog-id=53 op=LOAD Jan 27 05:32:13.956000 audit: BPF prog-id=54 op=LOAD Jan 27 05:32:13.956000 audit: BPF prog-id=28 op=UNLOAD Jan 27 05:32:13.956000 audit: BPF prog-id=29 op=UNLOAD Jan 27 05:32:13.958000 audit: BPF prog-id=55 op=LOAD Jan 27 05:32:13.959000 audit: BPF prog-id=40 op=UNLOAD Jan 27 05:32:13.959000 audit: BPF prog-id=56 op=LOAD Jan 27 05:32:13.959000 audit: BPF prog-id=57 op=LOAD Jan 27 05:32:13.959000 audit: BPF prog-id=41 op=UNLOAD Jan 27 05:32:13.959000 audit: BPF prog-id=42 op=UNLOAD Jan 27 05:32:13.966396 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Jan 27 05:32:13.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:14.013112 systemd[1]: Finished ensure-sysext.service. Jan 27 05:32:14.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:14.053319 systemd[1]: Reached target tpm2.target - Trusted Platform Module. Jan 27 05:32:14.062447 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 27 05:32:14.064630 systemd[1]: Starting audit-rules.service - Load Audit Rules... Jan 27 05:32:14.080158 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs... Jan 27 05:32:14.091375 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. Jan 27 05:32:14.101214 systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... Jan 27 05:32:14.113451 systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... Jan 27 05:32:14.125168 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... Jan 27 05:32:14.129259 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... Jan 27 05:32:14.152182 systemd[1]: Starting setup-oem.service - Setup OEM... Jan 27 05:32:14.160311 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. Jan 27 05:32:14.160805 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. Jan 27 05:32:14.165334 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache... Jan 27 05:32:14.177738 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM... Jan 27 05:32:14.189131 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). Jan 27 05:32:14.195196 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog... Jan 27 05:32:14.207000 audit: BPF prog-id=58 op=LOAD Jan 27 05:32:14.214822 systemd[1]: Starting systemd-networkd.service - Network Configuration... Jan 27 05:32:14.213000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jan 27 05:32:14.213000 audit[1489]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdbfc576a0 a2=420 a3=0 items=0 ppid=1460 pid=1489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:14.213000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jan 27 05:32:14.216269 augenrules[1489]: No rules Jan 27 05:32:14.224262 systemd[1]: Reached target time-set.target - System Time Set. Jan 27 05:32:14.237113 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP... Jan 27 05:32:14.240445 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 27 05:32:14.241115 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 27 05:32:14.245444 systemd[1]: audit-rules.service: Deactivated successfully. Jan 27 05:32:14.247018 systemd[1]: Finished audit-rules.service - Load Audit Rules. Jan 27 05:32:14.247663 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jan 27 05:32:14.248518 systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. Jan 27 05:32:14.249399 systemd[1]: modprobe@drm.service: Deactivated successfully. Jan 27 05:32:14.250749 systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm. Jan 27 05:32:14.251480 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jan 27 05:32:14.252007 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. Jan 27 05:32:14.252526 systemd[1]: modprobe@loop.service: Deactivated successfully. Jan 27 05:32:14.252827 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. Jan 27 05:32:14.288750 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jan 27 05:32:14.292324 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. Jan 27 05:32:14.302217 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM. Jan 27 05:32:14.338070 systemd[1]: Finished setup-oem.service - Setup OEM. Jan 27 05:32:14.358841 systemd[1]: Starting oem-gce-enable-oslogin.service - Enable GCE OS Login... Jan 27 05:32:14.382654 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP. Jan 27 05:32:14.406671 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs. Jan 27 05:32:14.407240 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jan 27 05:32:14.423704 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog. Jan 27 05:32:14.504401 systemd-networkd[1490]: lo: Link UP Jan 27 05:32:14.504419 systemd-networkd[1490]: lo: Gained carrier Jan 27 05:32:14.509761 systemd[1]: Started systemd-networkd.service - Network Configuration. Jan 27 05:32:14.511080 systemd-networkd[1490]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 27 05:32:14.511100 systemd-networkd[1490]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jan 27 05:32:14.511874 systemd[1]: Reached target network.target - Network. Jan 27 05:32:14.517299 systemd-networkd[1490]: eth0: Link UP Jan 27 05:32:14.517816 systemd-networkd[1490]: eth0: Gained carrier Jan 27 05:32:14.517861 systemd-networkd[1490]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 27 05:32:14.520946 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd... Jan 27 05:32:14.529794 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Configured... Jan 27 05:32:14.530622 systemd[1]: Finished oem-gce-enable-oslogin.service - Enable GCE OS Login. Jan 27 05:32:14.535156 systemd-networkd[1490]: eth0: Overlong DHCP hostname received, shortened from 'ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356.c.flatcar-212911.internal' to 'ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356' Jan 27 05:32:14.535190 systemd-networkd[1490]: eth0: DHCPv4 address 10.128.0.99/32, gateway 10.128.0.1 acquired from 169.254.169.254 Jan 27 05:32:14.557501 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jan 27 05:32:14.668180 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd. Jan 27 05:32:15.219571 ldconfig[1483]: /sbin/ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jan 27 05:32:15.226721 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache. Jan 27 05:32:15.238712 systemd[1]: Starting systemd-update-done.service - Update is Completed... Jan 27 05:32:15.270701 systemd[1]: Finished systemd-update-done.service - Update is Completed. Jan 27 05:32:15.280535 systemd[1]: Reached target sysinit.target - System Initialization. Jan 27 05:32:15.290405 systemd[1]: Started motdgen.path - Watch for update engine configuration changes. Jan 27 05:32:15.301231 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data. Jan 27 05:32:15.312251 systemd[1]: Started google-oslogin-cache.timer - NSS cache refresh timer. Jan 27 05:32:15.323962 systemd[1]: Started logrotate.timer - Daily rotation of log files. Jan 27 05:32:15.333493 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information.. Jan 27 05:32:15.344373 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update. Jan 27 05:32:15.355574 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update. Jan 27 05:32:15.365222 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories. Jan 27 05:32:15.376169 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jan 27 05:32:15.376250 systemd[1]: Reached target paths.target - Path Units. Jan 27 05:32:15.384157 systemd[1]: Reached target timers.target - Timer Units. Jan 27 05:32:15.393828 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket. Jan 27 05:32:15.405736 systemd[1]: Starting docker.socket - Docker Socket for the API... Jan 27 05:32:15.416613 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local). Jan 27 05:32:15.427431 systemd[1]: Listening on sshd-vsock.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_VSOCK). Jan 27 05:32:15.438172 systemd[1]: Reached target ssh-access.target - SSH Access Available. Jan 27 05:32:15.459492 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket. Jan 27 05:32:15.469974 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. Jan 27 05:32:15.481181 systemd[1]: Listening on docker.socket - Docker Socket for the API. Jan 27 05:32:15.491318 systemd[1]: Reached target sockets.target - Socket Units. Jan 27 05:32:15.501197 systemd[1]: Reached target basic.target - Basic System. Jan 27 05:32:15.509212 systemd[1]: addon-config@oem.service - Configure Addon /oem was skipped because no trigger condition checks were met. Jan 27 05:32:15.509268 systemd[1]: addon-run@oem.service - Run Addon /oem was skipped because no trigger condition checks were met. Jan 27 05:32:15.511092 systemd[1]: Starting containerd.service - containerd container runtime... Jan 27 05:32:15.534723 systemd[1]: Starting coreos-metadata.service - Flatcar Metadata Agent... Jan 27 05:32:15.555160 systemd[1]: Starting dbus.service - D-Bus System Message Bus... Jan 27 05:32:15.568246 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown... Jan 27 05:32:15.580521 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit... Jan 27 05:32:15.607585 systemd[1]: Starting extend-filesystems.service - Extend Filesystems... Jan 27 05:32:15.616187 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS was skipped because of an unmet condition check (ConditionPathExists=/oem/bin/flatcar-setup-environment). Jan 27 05:32:15.619859 systemd[1]: Starting google-oslogin-cache.service - NSS cache refresh... Jan 27 05:32:15.625277 jq[1541]: false Jan 27 05:32:15.634183 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd... Jan 27 05:32:15.649240 systemd[1]: Started ntpd.service - Network Time Service. Jan 27 05:32:15.663338 systemd[1]: Starting prepare-helm.service - Unpack helm to /opt/bin... Jan 27 05:32:15.681469 coreos-metadata[1538]: Jan 27 05:32:15.681 INFO Fetching http://169.254.169.254/computeMetadata/v1/instance/hostname: Attempt #1 Jan 27 05:32:15.682498 coreos-metadata[1538]: Jan 27 05:32:15.681 INFO Fetch successful Jan 27 05:32:15.682498 coreos-metadata[1538]: Jan 27 05:32:15.681 INFO Fetching http://169.254.169.254/computeMetadata/v1/instance/network-interfaces/0/access-configs/0/external-ip: Attempt #1 Jan 27 05:32:15.683563 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline... Jan 27 05:32:15.685132 coreos-metadata[1538]: Jan 27 05:32:15.685 INFO Fetch successful Jan 27 05:32:15.685372 coreos-metadata[1538]: Jan 27 05:32:15.685 INFO Fetching http://169.254.169.254/computeMetadata/v1/instance/network-interfaces/0/ip: Attempt #1 Jan 27 05:32:15.687346 coreos-metadata[1538]: Jan 27 05:32:15.687 INFO Fetch successful Jan 27 05:32:15.687346 coreos-metadata[1538]: Jan 27 05:32:15.687 INFO Fetching http://169.254.169.254/computeMetadata/v1/instance/machine-type: Attempt #1 Jan 27 05:32:15.690921 coreos-metadata[1538]: Jan 27 05:32:15.688 INFO Fetch successful Jan 27 05:32:15.697439 google_oslogin_nss_cache[1544]: oslogin_cache_refresh[1544]: Refreshing passwd entry cache Jan 27 05:32:15.697457 oslogin_cache_refresh[1544]: Refreshing passwd entry cache Jan 27 05:32:15.699247 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys... Jan 27 05:32:15.719928 google_oslogin_nss_cache[1544]: oslogin_cache_refresh[1544]: Failure getting users, quitting Jan 27 05:32:15.719928 google_oslogin_nss_cache[1544]: oslogin_cache_refresh[1544]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Jan 27 05:32:15.719928 google_oslogin_nss_cache[1544]: oslogin_cache_refresh[1544]: Refreshing group entry cache Jan 27 05:32:15.718483 systemd[1]: Starting systemd-logind.service - User Login Management... Jan 27 05:32:15.718372 oslogin_cache_refresh[1544]: Failure getting users, quitting Jan 27 05:32:15.718425 oslogin_cache_refresh[1544]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Jan 27 05:32:15.718498 oslogin_cache_refresh[1544]: Refreshing group entry cache Jan 27 05:32:15.728190 google_oslogin_nss_cache[1544]: oslogin_cache_refresh[1544]: Failure getting groups, quitting Jan 27 05:32:15.728190 google_oslogin_nss_cache[1544]: oslogin_cache_refresh[1544]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Jan 27 05:32:15.727081 systemd[1]: tcsd.service - TCG Core Services Daemon was skipped because of an unmet condition check (ConditionSecurity=!tpm2). Jan 27 05:32:15.725781 oslogin_cache_refresh[1544]: Failure getting groups, quitting Jan 27 05:32:15.728136 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jan 27 05:32:15.725806 oslogin_cache_refresh[1544]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Jan 27 05:32:15.734505 systemd[1]: Starting update-engine.service - Update Engine... Jan 27 05:32:15.745009 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition... Jan 27 05:32:15.747801 extend-filesystems[1542]: Found /dev/sda6 Jan 27 05:32:15.765580 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. Jan 27 05:32:15.766206 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jan 27 05:32:15.767173 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped. Jan 27 05:32:15.768438 systemd[1]: google-oslogin-cache.service: Deactivated successfully. Jan 27 05:32:15.768839 systemd[1]: Finished google-oslogin-cache.service - NSS cache refresh. Jan 27 05:32:15.770497 systemd[1]: motdgen.service: Deactivated successfully. Jan 27 05:32:15.770877 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd. Jan 27 05:32:15.773372 ntpd[1547]: ntpd 4.2.8p18@1.4062-o Tue Jan 27 02:40:04 UTC 2026 (1): Starting Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: ntpd 4.2.8p18@1.4062-o Tue Jan 27 02:40:04 UTC 2026 (1): Starting Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Command line: /usr/sbin/ntpd -g -n -u ntp:ntp Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: ---------------------------------------------------- Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: ntp-4 is maintained by Network Time Foundation, Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Inc. (NTF), a non-profit 501(c)(3) public-benefit Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: corporation. Support and training for ntp-4 are Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: available at https://www.nwtime.org/support Jan 27 05:32:15.778265 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: ---------------------------------------------------- Jan 27 05:32:15.774463 ntpd[1547]: Command line: /usr/sbin/ntpd -g -n -u ntp:ntp Jan 27 05:32:15.774490 ntpd[1547]: ---------------------------------------------------- Jan 27 05:32:15.774505 ntpd[1547]: ntp-4 is maintained by Network Time Foundation, Jan 27 05:32:15.774520 ntpd[1547]: Inc. (NTF), a non-profit 501(c)(3) public-benefit Jan 27 05:32:15.774535 ntpd[1547]: corporation. Support and training for ntp-4 are Jan 27 05:32:15.774549 ntpd[1547]: available at https://www.nwtime.org/support Jan 27 05:32:15.785123 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: proto: precision = 0.100 usec (-23) Jan 27 05:32:15.784186 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jan 27 05:32:15.774563 ntpd[1547]: ---------------------------------------------------- Jan 27 05:32:15.785073 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline. Jan 27 05:32:15.784723 ntpd[1547]: proto: precision = 0.100 usec (-23) Jan 27 05:32:15.788997 ntpd[1547]: basedate set to 2026-01-15 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: basedate set to 2026-01-15 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: gps base set to 2026-01-18 (week 2402) Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Listen and drop on 0 v6wildcard [::]:123 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Listen and drop on 1 v4wildcard 0.0.0.0:123 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Listen normally on 2 lo 127.0.0.1:123 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Listen normally on 3 eth0 10.128.0.99:123 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Listen normally on 4 lo [::1]:123 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: bind(21) AF_INET6 [fe80::4001:aff:fe80:63%2]:123 flags 0x811 failed: Cannot assign requested address Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: unable to create socket on eth0 (5) for [fe80::4001:aff:fe80:63%2]:123 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: cannot bind address fe80::4001:aff:fe80:63%2 Jan 27 05:32:15.790194 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: Listening on routing socket on fd #21 for interface updates Jan 27 05:32:15.789032 ntpd[1547]: gps base set to 2026-01-18 (week 2402) Jan 27 05:32:15.789219 ntpd[1547]: Listen and drop on 0 v6wildcard [::]:123 Jan 27 05:32:15.789272 ntpd[1547]: Listen and drop on 1 v4wildcard 0.0.0.0:123 Jan 27 05:32:15.790806 extend-filesystems[1542]: Found /dev/sda9 Jan 27 05:32:15.789536 ntpd[1547]: Listen normally on 2 lo 127.0.0.1:123 Jan 27 05:32:15.816029 extend-filesystems[1542]: Checking size of /dev/sda9 Jan 27 05:32:15.824327 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized Jan 27 05:32:15.824327 ntpd[1547]: 27 Jan 05:32:15 ntpd[1547]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized Jan 27 05:32:15.789586 ntpd[1547]: Listen normally on 3 eth0 10.128.0.99:123 Jan 27 05:32:15.789631 ntpd[1547]: Listen normally on 4 lo [::1]:123 Jan 27 05:32:15.789708 ntpd[1547]: bind(21) AF_INET6 [fe80::4001:aff:fe80:63%2]:123 flags 0x811 failed: Cannot assign requested address Jan 27 05:32:15.789739 ntpd[1547]: unable to create socket on eth0 (5) for [fe80::4001:aff:fe80:63%2]:123 Jan 27 05:32:15.789762 ntpd[1547]: cannot bind address fe80::4001:aff:fe80:63%2 Jan 27 05:32:15.789802 ntpd[1547]: Listening on routing socket on fd #21 for interface updates Jan 27 05:32:15.798759 ntpd[1547]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized Jan 27 05:32:15.798823 ntpd[1547]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized Jan 27 05:32:15.853561 update_engine[1561]: I20260127 05:32:15.852959 1561 main.cc:92] Flatcar Update Engine starting Jan 27 05:32:15.855847 jq[1563]: true Jan 27 05:32:15.900303 extend-filesystems[1542]: Resized partition /dev/sda9 Jan 27 05:32:15.910641 extend-filesystems[1599]: resize2fs 1.47.3 (8-Jul-2025) Jan 27 05:32:15.940159 kernel: EXT4-fs (sda9): resizing filesystem from 1617920 to 2604027 blocks Jan 27 05:32:15.910847 systemd[1]: Finished coreos-metadata.service - Flatcar Metadata Agent. Jan 27 05:32:15.911612 systemd[1]: packet-phone-home.service - Report Success to Packet was skipped because no trigger condition checks were met. Jan 27 05:32:15.955930 kernel: EXT4-fs (sda9): resized filesystem to 2604027 Jan 27 05:32:16.021115 jq[1591]: true Jan 27 05:32:16.025302 extend-filesystems[1599]: Filesystem at /dev/sda9 is mounted on /; on-line resizing required Jan 27 05:32:16.025302 extend-filesystems[1599]: old_desc_blocks = 1, new_desc_blocks = 2 Jan 27 05:32:16.025302 extend-filesystems[1599]: The filesystem on /dev/sda9 is now 2604027 (4k) blocks long. Jan 27 05:32:16.080138 extend-filesystems[1542]: Resized filesystem in /dev/sda9 Jan 27 05:32:16.026458 systemd[1]: extend-filesystems.service: Deactivated successfully. Jan 27 05:32:16.088311 tar[1569]: linux-amd64/LICENSE Jan 27 05:32:16.088311 tar[1569]: linux-amd64/helm Jan 27 05:32:16.036163 systemd[1]: Finished extend-filesystems.service - Extend Filesystems. Jan 27 05:32:16.280001 bash[1621]: Updated "/home/core/.ssh/authorized_keys" Jan 27 05:32:16.278998 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition. Jan 27 05:32:16.291580 dbus-daemon[1539]: [system] SELinux support is enabled Jan 27 05:32:16.310718 systemd[1]: Started dbus.service - D-Bus System Message Bus. Jan 27 05:32:16.326687 dbus-daemon[1539]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1490 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Jan 27 05:32:16.332577 systemd[1]: Starting sshkeys.service... Jan 27 05:32:16.339007 update_engine[1561]: I20260127 05:32:16.338577 1561 update_check_scheduler.cc:74] Next update check in 2m59s Jan 27 05:32:16.339243 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/oem/cloud-config.yml was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jan 27 05:32:16.339301 systemd[1]: Reached target system-config.target - Load system-provided cloud configs. Jan 27 05:32:16.340237 systemd-logind[1557]: Watching system buttons on /dev/input/event2 (Power Button) Jan 27 05:32:16.342017 systemd-logind[1557]: Watching system buttons on /dev/input/event3 (Sleep Button) Jan 27 05:32:16.344141 systemd-logind[1557]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jan 27 05:32:16.345652 systemd-logind[1557]: New seat seat0. Jan 27 05:32:16.350371 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jan 27 05:32:16.350416 systemd[1]: Reached target user-config.target - Load user-provided cloud configs. Jan 27 05:32:16.356117 systemd-networkd[1490]: eth0: Gained IPv6LL Jan 27 05:32:16.361340 systemd[1]: Started systemd-logind.service - User Login Management. Jan 27 05:32:16.375846 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Configured. Jan 27 05:32:16.385723 dbus-daemon[1539]: [system] Successfully activated service 'org.freedesktop.systemd1' Jan 27 05:32:16.386496 systemd[1]: Started update-engine.service - Update Engine. Jan 27 05:32:16.399354 systemd[1]: Reached target network-online.target - Network is Online. Jan 27 05:32:16.414237 systemd[1]: Starting kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:32:16.438458 systemd[1]: Starting nvidia.service - NVIDIA Configure Service... Jan 27 05:32:16.456735 systemd[1]: Starting oem-gce.service - GCE Linux Agent... Jan 27 05:32:16.474092 systemd[1]: Starting systemd-hostnamed.service - Hostname Service... Jan 27 05:32:16.496571 init.sh[1632]: + '[' -e /etc/default/instance_configs.cfg.template ']' Jan 27 05:32:16.502411 init.sh[1632]: + echo -e '[InstanceSetup]\nset_host_keys = false' Jan 27 05:32:16.512081 init.sh[1632]: + /usr/bin/google_instance_setup Jan 27 05:32:16.558094 systemd[1]: Started locksmithd.service - Cluster reboot manager. Jan 27 05:32:16.617248 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice - Slice /system/coreos-metadata-sshkeys. Jan 27 05:32:16.631259 systemd[1]: Starting coreos-metadata-sshkeys@core.service - Flatcar Metadata Agent (SSH Keys)... Jan 27 05:32:16.720738 systemd[1]: Finished nvidia.service - NVIDIA Configure Service. Jan 27 05:32:16.851605 coreos-metadata[1641]: Jan 27 05:32:16.848 INFO Fetching http://169.254.169.254/computeMetadata/v1/instance/attributes/sshKeys: Attempt #1 Jan 27 05:32:16.851605 coreos-metadata[1641]: Jan 27 05:32:16.851 INFO Fetch failed with 404: resource not found Jan 27 05:32:16.851605 coreos-metadata[1641]: Jan 27 05:32:16.851 INFO Fetching http://169.254.169.254/computeMetadata/v1/instance/attributes/ssh-keys: Attempt #1 Jan 27 05:32:16.852576 coreos-metadata[1641]: Jan 27 05:32:16.852 INFO Fetch successful Jan 27 05:32:16.852576 coreos-metadata[1641]: Jan 27 05:32:16.852 INFO Fetching http://169.254.169.254/computeMetadata/v1/instance/attributes/block-project-ssh-keys: Attempt #1 Jan 27 05:32:16.855119 coreos-metadata[1641]: Jan 27 05:32:16.853 INFO Fetch failed with 404: resource not found Jan 27 05:32:16.855119 coreos-metadata[1641]: Jan 27 05:32:16.853 INFO Fetching http://169.254.169.254/computeMetadata/v1/project/attributes/sshKeys: Attempt #1 Jan 27 05:32:16.855119 coreos-metadata[1641]: Jan 27 05:32:16.854 INFO Fetch failed with 404: resource not found Jan 27 05:32:16.855119 coreos-metadata[1641]: Jan 27 05:32:16.854 INFO Fetching http://169.254.169.254/computeMetadata/v1/project/attributes/ssh-keys: Attempt #1 Jan 27 05:32:16.855119 coreos-metadata[1641]: Jan 27 05:32:16.854 INFO Fetch successful Jan 27 05:32:16.868151 unknown[1641]: wrote ssh authorized keys file for user: core Jan 27 05:32:16.997928 update-ssh-keys[1649]: Updated "/home/core/.ssh/authorized_keys" Jan 27 05:32:16.995794 systemd[1]: Finished coreos-metadata-sshkeys@core.service - Flatcar Metadata Agent (SSH Keys). Jan 27 05:32:17.009280 systemd[1]: Finished sshkeys.service. Jan 27 05:32:17.090258 sshd_keygen[1583]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jan 27 05:32:17.107475 containerd[1595]: time="2026-01-27T05:32:17Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8 Jan 27 05:32:17.113826 containerd[1595]: time="2026-01-27T05:32:17.112564359Z" level=info msg="starting containerd" revision=fcd43222d6b07379a4be9786bda52438f0dd16a1 version=v2.1.5 Jan 27 05:32:17.175098 systemd[1]: Started systemd-hostnamed.service - Hostname Service. Jan 27 05:32:17.179997 dbus-daemon[1539]: [system] Successfully activated service 'org.freedesktop.hostname1' Jan 27 05:32:17.187687 dbus-daemon[1539]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1633 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Jan 27 05:32:17.200607 systemd[1]: Starting polkit.service - Authorization Manager... Jan 27 05:32:17.209524 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys. Jan 27 05:32:17.224092 containerd[1595]: time="2026-01-27T05:32:17.222145385Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="17.74µs" Jan 27 05:32:17.224092 containerd[1595]: time="2026-01-27T05:32:17.222207762Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 Jan 27 05:32:17.224092 containerd[1595]: time="2026-01-27T05:32:17.222275042Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 Jan 27 05:32:17.224092 containerd[1595]: time="2026-01-27T05:32:17.222297027Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 Jan 27 05:32:17.224092 containerd[1595]: time="2026-01-27T05:32:17.222566854Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 Jan 27 05:32:17.228053 systemd[1]: Starting issuegen.service - Generate /run/issue... Jan 27 05:32:17.229819 containerd[1595]: time="2026-01-27T05:32:17.228843502Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Jan 27 05:32:17.229819 containerd[1595]: time="2026-01-27T05:32:17.229095293Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Jan 27 05:32:17.229819 containerd[1595]: time="2026-01-27T05:32:17.229127195Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Jan 27 05:32:17.229819 containerd[1595]: time="2026-01-27T05:32:17.229645863Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Jan 27 05:32:17.230252 containerd[1595]: time="2026-01-27T05:32:17.229836742Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Jan 27 05:32:17.230252 containerd[1595]: time="2026-01-27T05:32:17.229870064Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Jan 27 05:32:17.234558 containerd[1595]: time="2026-01-27T05:32:17.229886736Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Jan 27 05:32:17.236198 containerd[1595]: time="2026-01-27T05:32:17.235310719Z" level=info msg="skip loading plugin" error="EROFS unsupported, please `modprobe erofs`: skip plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Jan 27 05:32:17.236198 containerd[1595]: time="2026-01-27T05:32:17.235355174Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 Jan 27 05:32:17.236198 containerd[1595]: time="2026-01-27T05:32:17.235522632Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 Jan 27 05:32:17.239972 containerd[1595]: time="2026-01-27T05:32:17.239000249Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Jan 27 05:32:17.239972 containerd[1595]: time="2026-01-27T05:32:17.239110138Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Jan 27 05:32:17.239972 containerd[1595]: time="2026-01-27T05:32:17.239133935Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 Jan 27 05:32:17.239972 containerd[1595]: time="2026-01-27T05:32:17.239200664Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 Jan 27 05:32:17.239972 containerd[1595]: time="2026-01-27T05:32:17.239647780Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 Jan 27 05:32:17.239972 containerd[1595]: time="2026-01-27T05:32:17.239788508Z" level=info msg="metadata content store policy set" policy=shared Jan 27 05:32:17.255071 containerd[1595]: time="2026-01-27T05:32:17.254633569Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 Jan 27 05:32:17.255071 containerd[1595]: time="2026-01-27T05:32:17.254817516Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255580545Z" level=info msg="skip loading plugin" error="could not find mkfs.erofs: exec: \"mkfs.erofs\": executable file not found in $PATH: skip plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255624156Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255674765Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255699862Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255759224Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255785207Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255831473Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255856414Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.255877653Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 Jan 27 05:32:17.257013 containerd[1595]: time="2026-01-27T05:32:17.256963878Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 Jan 27 05:32:17.258807 containerd[1595]: time="2026-01-27T05:32:17.257568068Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 Jan 27 05:32:17.261266 containerd[1595]: time="2026-01-27T05:32:17.258961839Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 Jan 27 05:32:17.261266 containerd[1595]: time="2026-01-27T05:32:17.261056083Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 Jan 27 05:32:17.261266 containerd[1595]: time="2026-01-27T05:32:17.261130275Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 Jan 27 05:32:17.261266 containerd[1595]: time="2026-01-27T05:32:17.261163727Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 Jan 27 05:32:17.261266 containerd[1595]: time="2026-01-27T05:32:17.261206928Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 Jan 27 05:32:17.261266 containerd[1595]: time="2026-01-27T05:32:17.261232501Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 Jan 27 05:32:17.263688 containerd[1595]: time="2026-01-27T05:32:17.261686804Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 Jan 27 05:32:17.263688 containerd[1595]: time="2026-01-27T05:32:17.262939129Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 Jan 27 05:32:17.263688 containerd[1595]: time="2026-01-27T05:32:17.263012514Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 Jan 27 05:32:17.263688 containerd[1595]: time="2026-01-27T05:32:17.263041800Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 Jan 27 05:32:17.265346 containerd[1595]: time="2026-01-27T05:32:17.263064750Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 Jan 27 05:32:17.265924 containerd[1595]: time="2026-01-27T05:32:17.265509469Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 Jan 27 05:32:17.265924 containerd[1595]: time="2026-01-27T05:32:17.265594050Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 Jan 27 05:32:17.265924 containerd[1595]: time="2026-01-27T05:32:17.265696321Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\"" Jan 27 05:32:17.265924 containerd[1595]: time="2026-01-27T05:32:17.265720732Z" level=info msg="Start snapshots syncer" Jan 27 05:32:17.265924 containerd[1595]: time="2026-01-27T05:32:17.265761249Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 Jan 27 05:32:17.278857 containerd[1595]: time="2026-01-27T05:32:17.278741255Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" Jan 27 05:32:17.279202 containerd[1595]: time="2026-01-27T05:32:17.278944493Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 Jan 27 05:32:17.285273 containerd[1595]: time="2026-01-27T05:32:17.281762469Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 Jan 27 05:32:17.285273 containerd[1595]: time="2026-01-27T05:32:17.285139237Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 Jan 27 05:32:17.286568 containerd[1595]: time="2026-01-27T05:32:17.286516193Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 Jan 27 05:32:17.286670 containerd[1595]: time="2026-01-27T05:32:17.286613710Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 Jan 27 05:32:17.286719 containerd[1595]: time="2026-01-27T05:32:17.286642172Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.286754783Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.286795589Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.286842057Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.286870736Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.286923185Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.287014637Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.287049018Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Jan 27 05:32:17.287145 containerd[1595]: time="2026-01-27T05:32:17.287121675Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287147384Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287168186Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287208735Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287234995Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287284026Z" level=info msg="runtime interface created" Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287295237Z" level=info msg="created NRI interface" Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287320406Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287368285Z" level=info msg="Connect containerd service" Jan 27 05:32:17.287533 containerd[1595]: time="2026-01-27T05:32:17.287438844Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" Jan 27 05:32:17.294881 containerd[1595]: time="2026-01-27T05:32:17.294299614Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jan 27 05:32:17.325530 systemd[1]: issuegen.service: Deactivated successfully. Jan 27 05:32:17.326820 systemd[1]: Finished issuegen.service - Generate /run/issue. Jan 27 05:32:17.343210 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions... Jan 27 05:32:17.409620 locksmithd[1634]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jan 27 05:32:17.460470 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions. Jan 27 05:32:17.478819 systemd[1]: Started getty@tty1.service - Getty on tty1. Jan 27 05:32:17.493909 systemd[1]: Started serial-getty@ttyS0.service - Serial Getty on ttyS0. Jan 27 05:32:17.505477 systemd[1]: Reached target getty.target - Login Prompts. Jan 27 05:32:17.563639 polkitd[1661]: Started polkitd version 126 Jan 27 05:32:17.593263 polkitd[1661]: Loading rules from directory /etc/polkit-1/rules.d Jan 27 05:32:17.599494 polkitd[1661]: Loading rules from directory /run/polkit-1/rules.d Jan 27 05:32:17.599593 polkitd[1661]: Error opening rules directory: Error opening directory “/run/polkit-1/rules.d”: No such file or directory (g-file-error-quark, 4) Jan 27 05:32:17.601533 polkitd[1661]: Loading rules from directory /usr/local/share/polkit-1/rules.d Jan 27 05:32:17.601604 polkitd[1661]: Error opening rules directory: Error opening directory “/usr/local/share/polkit-1/rules.d”: No such file or directory (g-file-error-quark, 4) Jan 27 05:32:17.601685 polkitd[1661]: Loading rules from directory /usr/share/polkit-1/rules.d Jan 27 05:32:17.605000 polkitd[1661]: Finished loading, compiling and executing 2 rules Jan 27 05:32:17.610549 systemd[1]: Started polkit.service - Authorization Manager. Jan 27 05:32:17.610881 dbus-daemon[1539]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Jan 27 05:32:17.612255 polkitd[1661]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jan 27 05:32:17.676354 systemd-hostnamed[1633]: Hostname set to (transient) Jan 27 05:32:17.681002 systemd-resolved[1247]: System hostname changed to 'ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356'. Jan 27 05:32:17.707420 containerd[1595]: time="2026-01-27T05:32:17.707129473Z" level=info msg="Start subscribing containerd event" Jan 27 05:32:17.707420 containerd[1595]: time="2026-01-27T05:32:17.707219966Z" level=info msg="Start recovering state" Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708463443Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708610917Z" level=info msg="Start event monitor" Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708643523Z" level=info msg="Start cni network conf syncer for default" Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708655739Z" level=info msg="Start streaming server" Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708668785Z" level=info msg="Registered namespace \"k8s.io\" with NRI" Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708680597Z" level=info msg="runtime interface starting up..." Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708691212Z" level=info msg="starting plugins..." Jan 27 05:32:17.709044 containerd[1595]: time="2026-01-27T05:32:17.708711315Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" Jan 27 05:32:17.709458 containerd[1595]: time="2026-01-27T05:32:17.709062848Z" level=info msg=serving... address=/run/containerd/containerd.sock Jan 27 05:32:17.709458 containerd[1595]: time="2026-01-27T05:32:17.709168257Z" level=info msg="containerd successfully booted in 0.613902s" Jan 27 05:32:17.709976 systemd[1]: Started containerd.service - containerd container runtime. Jan 27 05:32:17.800982 tar[1569]: linux-amd64/README.md Jan 27 05:32:17.827785 systemd[1]: Finished prepare-helm.service - Unpack helm to /opt/bin. Jan 27 05:32:18.091319 instance-setup[1635]: INFO Running google_set_multiqueue. Jan 27 05:32:18.119105 instance-setup[1635]: INFO Set channels for eth0 to 2. Jan 27 05:32:18.125437 instance-setup[1635]: INFO Setting /proc/irq/31/smp_affinity_list to 0 for device virtio1. Jan 27 05:32:18.128140 instance-setup[1635]: INFO /proc/irq/31/smp_affinity_list: real affinity 0 Jan 27 05:32:18.128710 instance-setup[1635]: INFO Setting /proc/irq/32/smp_affinity_list to 0 for device virtio1. Jan 27 05:32:18.130729 instance-setup[1635]: INFO /proc/irq/32/smp_affinity_list: real affinity 0 Jan 27 05:32:18.131543 instance-setup[1635]: INFO Setting /proc/irq/33/smp_affinity_list to 1 for device virtio1. Jan 27 05:32:18.132951 instance-setup[1635]: INFO /proc/irq/33/smp_affinity_list: real affinity 1 Jan 27 05:32:18.133380 instance-setup[1635]: INFO Setting /proc/irq/34/smp_affinity_list to 1 for device virtio1. Jan 27 05:32:18.136051 instance-setup[1635]: INFO /proc/irq/34/smp_affinity_list: real affinity 1 Jan 27 05:32:18.146260 instance-setup[1635]: INFO /usr/bin/google_set_multiqueue: line 133: echo: write error: Value too large for defined data type Jan 27 05:32:18.151482 instance-setup[1635]: INFO /usr/bin/google_set_multiqueue: line 133: echo: write error: Value too large for defined data type Jan 27 05:32:18.153846 instance-setup[1635]: INFO Queue 0 XPS=1 for /sys/class/net/eth0/queues/tx-0/xps_cpus Jan 27 05:32:18.153933 instance-setup[1635]: INFO Queue 1 XPS=2 for /sys/class/net/eth0/queues/tx-1/xps_cpus Jan 27 05:32:18.185292 init.sh[1632]: + /usr/bin/google_metadata_script_runner --script-type startup Jan 27 05:32:18.385214 startup-script[1729]: INFO Starting startup scripts. Jan 27 05:32:18.398300 startup-script[1729]: INFO No startup scripts found in metadata. Jan 27 05:32:18.398384 startup-script[1729]: INFO Finished running startup scripts. Jan 27 05:32:18.429750 init.sh[1632]: + trap 'stopping=1 ; kill "${daemon_pids[@]}" || :' SIGTERM Jan 27 05:32:18.429750 init.sh[1632]: + daemon_pids=() Jan 27 05:32:18.430589 init.sh[1632]: + for d in accounts clock_skew network Jan 27 05:32:18.431428 init.sh[1732]: + /usr/bin/google_accounts_daemon Jan 27 05:32:18.432088 init.sh[1632]: + daemon_pids+=($!) Jan 27 05:32:18.432088 init.sh[1632]: + for d in accounts clock_skew network Jan 27 05:32:18.432699 init.sh[1632]: + daemon_pids+=($!) Jan 27 05:32:18.432699 init.sh[1632]: + for d in accounts clock_skew network Jan 27 05:32:18.432811 init.sh[1733]: + /usr/bin/google_clock_skew_daemon Jan 27 05:32:18.433957 init.sh[1734]: + /usr/bin/google_network_daemon Jan 27 05:32:18.434258 init.sh[1632]: + daemon_pids+=($!) Jan 27 05:32:18.434258 init.sh[1632]: + NOTIFY_SOCKET=/run/systemd/notify Jan 27 05:32:18.434258 init.sh[1632]: + /usr/bin/systemd-notify --ready Jan 27 05:32:18.466073 systemd[1]: Started oem-gce.service - GCE Linux Agent. Jan 27 05:32:18.480920 init.sh[1632]: + wait -n 1732 1733 1734 Jan 27 05:32:18.775554 ntpd[1547]: Listen normally on 6 eth0 [fe80::4001:aff:fe80:63%2]:123 Jan 27 05:32:18.776112 ntpd[1547]: 27 Jan 05:32:18 ntpd[1547]: Listen normally on 6 eth0 [fe80::4001:aff:fe80:63%2]:123 Jan 27 05:32:18.926388 google-networking[1734]: INFO Starting Google Networking daemon. Jan 27 05:32:18.932026 google-clock-skew[1733]: INFO Starting Google Clock Skew daemon. Jan 27 05:32:18.948849 google-clock-skew[1733]: INFO Clock drift token has changed: 0. Jan 27 05:32:18.969706 groupadd[1743]: group added to /etc/group: name=google-sudoers, GID=1000 Jan 27 05:32:18.977504 groupadd[1743]: group added to /etc/gshadow: name=google-sudoers Jan 27 05:32:19.060421 systemd[1]: Started kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:32:19.073166 systemd[1]: Reached target multi-user.target - Multi-User System. Jan 27 05:32:19.079694 (kubelet)[1754]: kubelet.service: Referenced but unset environment variable evaluates to an empty string: KUBELET_EXTRA_ARGS, KUBELET_KUBEADM_ARGS Jan 27 05:32:19.084090 systemd[1]: Startup finished in 3.113s (kernel) + 11.601s (initrd) + 10.943s (userspace) = 25.659s. Jan 27 05:32:19.176884 groupadd[1743]: new group: name=google-sudoers, GID=1000 Jan 27 05:32:19.241492 google-accounts[1732]: INFO Starting Google Accounts daemon. Jan 27 05:32:19.263527 google-accounts[1732]: WARNING OS Login not installed. Jan 27 05:32:19.265992 google-accounts[1732]: INFO Creating a new user account for 0. Jan 27 05:32:19.274803 init.sh[1762]: useradd: invalid user name '0': use --badname to ignore Jan 27 05:32:19.274884 google-accounts[1732]: WARNING Could not create user 0. Command '['useradd', '-m', '-s', '/bin/bash', '-p', '*', '0']' returned non-zero exit status 3.. Jan 27 05:32:19.000100 systemd-resolved[1247]: Clock change detected. Flushing caches. Jan 27 05:32:19.015977 systemd-journald[1189]: Time jumped backwards, rotating. Jan 27 05:32:19.001990 google-clock-skew[1733]: INFO Synced system time with hardware clock. Jan 27 05:32:19.654299 kubelet[1754]: E0127 05:32:19.654152 1754 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jan 27 05:32:19.658302 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jan 27 05:32:19.658806 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jan 27 05:32:19.659770 systemd[1]: kubelet.service: Consumed 1.408s CPU time, 266.4M memory peak. Jan 27 05:32:24.767805 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd. Jan 27 05:32:24.770214 systemd[1]: Started sshd@0-10.128.0.99:22-4.153.228.146:52070.service - OpenSSH per-connection server daemon (4.153.228.146:52070). Jan 27 05:32:25.054798 sshd[1774]: Accepted publickey for core from 4.153.228.146 port 52070 ssh2: RSA SHA256:q6PayfOOwlqwAN/EbZY4isUzymJpCZLcm4qgUz6WpBE Jan 27 05:32:25.058186 sshd-session[1774]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:25.068193 systemd[1]: Created slice user-500.slice - User Slice of UID 500. Jan 27 05:32:25.069871 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500... Jan 27 05:32:25.081508 systemd-logind[1557]: New session 1 of user core. Jan 27 05:32:25.100184 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500. Jan 27 05:32:25.104775 systemd[1]: Starting user@500.service - User Manager for UID 500... Jan 27 05:32:25.153616 (systemd)[1780]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:25.158837 systemd-logind[1557]: New session 2 of user core. Jan 27 05:32:25.358309 systemd[1780]: Queued start job for default target default.target. Jan 27 05:32:25.367909 systemd[1780]: Created slice app.slice - User Application Slice. Jan 27 05:32:25.367964 systemd[1780]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Jan 27 05:32:25.367990 systemd[1780]: Reached target paths.target - Paths. Jan 27 05:32:25.368915 systemd[1780]: Reached target timers.target - Timers. Jan 27 05:32:25.370737 systemd[1780]: Starting dbus.socket - D-Bus User Message Bus Socket... Jan 27 05:32:25.373697 systemd[1780]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories... Jan 27 05:32:25.405246 systemd[1780]: Listening on dbus.socket - D-Bus User Message Bus Socket. Jan 27 05:32:25.407996 systemd[1780]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories. Jan 27 05:32:25.408265 systemd[1780]: Reached target sockets.target - Sockets. Jan 27 05:32:25.408443 systemd[1780]: Reached target basic.target - Basic System. Jan 27 05:32:25.408688 systemd[1780]: Reached target default.target - Main User Target. Jan 27 05:32:25.408993 systemd[1780]: Startup finished in 241ms. Jan 27 05:32:25.409114 systemd[1]: Started user@500.service - User Manager for UID 500. Jan 27 05:32:25.414753 systemd[1]: Started session-1.scope - Session 1 of User core. Jan 27 05:32:25.530629 systemd[1]: Started sshd@1-10.128.0.99:22-4.153.228.146:52074.service - OpenSSH per-connection server daemon (4.153.228.146:52074). Jan 27 05:32:25.770058 sshd[1794]: Accepted publickey for core from 4.153.228.146 port 52074 ssh2: RSA SHA256:q6PayfOOwlqwAN/EbZY4isUzymJpCZLcm4qgUz6WpBE Jan 27 05:32:25.771678 sshd-session[1794]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:25.782494 systemd-logind[1557]: New session 3 of user core. Jan 27 05:32:25.788768 systemd[1]: Started session-3.scope - Session 3 of User core. Jan 27 05:32:25.873131 sshd[1798]: Connection closed by 4.153.228.146 port 52074 Jan 27 05:32:25.874687 sshd-session[1794]: pam_unix(sshd:session): session closed for user core Jan 27 05:32:25.882219 systemd[1]: sshd@1-10.128.0.99:22-4.153.228.146:52074.service: Deactivated successfully. Jan 27 05:32:25.885064 systemd[1]: session-3.scope: Deactivated successfully. Jan 27 05:32:25.886841 systemd-logind[1557]: Session 3 logged out. Waiting for processes to exit. Jan 27 05:32:25.889059 systemd-logind[1557]: Removed session 3. Jan 27 05:32:25.918112 systemd[1]: Started sshd@2-10.128.0.99:22-4.153.228.146:52078.service - OpenSSH per-connection server daemon (4.153.228.146:52078). Jan 27 05:32:26.157720 sshd[1804]: Accepted publickey for core from 4.153.228.146 port 52078 ssh2: RSA SHA256:q6PayfOOwlqwAN/EbZY4isUzymJpCZLcm4qgUz6WpBE Jan 27 05:32:26.159682 sshd-session[1804]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:26.167472 systemd-logind[1557]: New session 4 of user core. Jan 27 05:32:26.175776 systemd[1]: Started session-4.scope - Session 4 of User core. Jan 27 05:32:26.253603 sshd[1808]: Connection closed by 4.153.228.146 port 52078 Jan 27 05:32:26.254647 sshd-session[1804]: pam_unix(sshd:session): session closed for user core Jan 27 05:32:26.263383 systemd[1]: sshd@2-10.128.0.99:22-4.153.228.146:52078.service: Deactivated successfully. Jan 27 05:32:26.266153 systemd[1]: session-4.scope: Deactivated successfully. Jan 27 05:32:26.267342 systemd-logind[1557]: Session 4 logged out. Waiting for processes to exit. Jan 27 05:32:26.269749 systemd-logind[1557]: Removed session 4. Jan 27 05:32:26.298984 systemd[1]: Started sshd@3-10.128.0.99:22-4.153.228.146:52084.service - OpenSSH per-connection server daemon (4.153.228.146:52084). Jan 27 05:32:26.526610 sshd[1814]: Accepted publickey for core from 4.153.228.146 port 52084 ssh2: RSA SHA256:q6PayfOOwlqwAN/EbZY4isUzymJpCZLcm4qgUz6WpBE Jan 27 05:32:26.528530 sshd-session[1814]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:26.537496 systemd-logind[1557]: New session 5 of user core. Jan 27 05:32:26.542822 systemd[1]: Started session-5.scope - Session 5 of User core. Jan 27 05:32:26.627551 sshd[1818]: Connection closed by 4.153.228.146 port 52084 Jan 27 05:32:26.628715 sshd-session[1814]: pam_unix(sshd:session): session closed for user core Jan 27 05:32:26.635458 systemd[1]: sshd@3-10.128.0.99:22-4.153.228.146:52084.service: Deactivated successfully. Jan 27 05:32:26.638137 systemd[1]: session-5.scope: Deactivated successfully. Jan 27 05:32:26.642231 systemd-logind[1557]: Session 5 logged out. Waiting for processes to exit. Jan 27 05:32:26.643952 systemd-logind[1557]: Removed session 5. Jan 27 05:32:26.671950 systemd[1]: Started sshd@4-10.128.0.99:22-4.153.228.146:52088.service - OpenSSH per-connection server daemon (4.153.228.146:52088). Jan 27 05:32:26.902570 sshd[1824]: Accepted publickey for core from 4.153.228.146 port 52088 ssh2: RSA SHA256:q6PayfOOwlqwAN/EbZY4isUzymJpCZLcm4qgUz6WpBE Jan 27 05:32:26.904910 sshd-session[1824]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:26.913869 systemd-logind[1557]: New session 6 of user core. Jan 27 05:32:26.919875 systemd[1]: Started session-6.scope - Session 6 of User core. Jan 27 05:32:26.998827 sudo[1829]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jan 27 05:32:26.999434 sudo[1829]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jan 27 05:32:27.011041 sudo[1829]: pam_unix(sudo:session): session closed for user root Jan 27 05:32:27.043425 sshd[1828]: Connection closed by 4.153.228.146 port 52088 Jan 27 05:32:27.042703 sshd-session[1824]: pam_unix(sshd:session): session closed for user core Jan 27 05:32:27.049950 systemd[1]: sshd@4-10.128.0.99:22-4.153.228.146:52088.service: Deactivated successfully. Jan 27 05:32:27.052685 systemd[1]: session-6.scope: Deactivated successfully. Jan 27 05:32:27.054096 systemd-logind[1557]: Session 6 logged out. Waiting for processes to exit. Jan 27 05:32:27.057843 systemd-logind[1557]: Removed session 6. Jan 27 05:32:27.084361 systemd[1]: Started sshd@5-10.128.0.99:22-4.153.228.146:52100.service - OpenSSH per-connection server daemon (4.153.228.146:52100). Jan 27 05:32:27.314721 sshd[1836]: Accepted publickey for core from 4.153.228.146 port 52100 ssh2: RSA SHA256:q6PayfOOwlqwAN/EbZY4isUzymJpCZLcm4qgUz6WpBE Jan 27 05:32:27.317155 sshd-session[1836]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:27.325475 systemd-logind[1557]: New session 7 of user core. Jan 27 05:32:27.333963 systemd[1]: Started session-7.scope - Session 7 of User core. Jan 27 05:32:27.396808 sudo[1842]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jan 27 05:32:27.397725 sudo[1842]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jan 27 05:32:27.402904 sudo[1842]: pam_unix(sudo:session): session closed for user root Jan 27 05:32:27.422619 sudo[1841]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules Jan 27 05:32:27.423185 sudo[1841]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jan 27 05:32:27.434275 systemd[1]: Starting audit-rules.service - Load Audit Rules... Jan 27 05:32:27.495490 kernel: kauditd_printk_skb: 110 callbacks suppressed Jan 27 05:32:27.495613 kernel: audit: type=1305 audit(1769491947.488:219): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jan 27 05:32:27.488000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jan 27 05:32:27.495723 augenrules[1866]: No rules Jan 27 05:32:27.498612 systemd[1]: audit-rules.service: Deactivated successfully. Jan 27 05:32:27.498988 systemd[1]: Finished audit-rules.service - Load Audit Rules. Jan 27 05:32:27.507749 sudo[1841]: pam_unix(sudo:session): session closed for user root Jan 27 05:32:27.488000 audit[1866]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe105caef0 a2=420 a3=0 items=0 ppid=1847 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:27.540155 kernel: audit: type=1300 audit(1769491947.488:219): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe105caef0 a2=420 a3=0 items=0 ppid=1847 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:27.540498 kernel: audit: type=1327 audit(1769491947.488:219): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jan 27 05:32:27.488000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jan 27 05:32:27.540798 sshd[1840]: Connection closed by 4.153.228.146 port 52100 Jan 27 05:32:27.542750 sshd-session[1836]: pam_unix(sshd:session): session closed for user core Jan 27 05:32:27.554447 kernel: audit: type=1130 audit(1769491947.499:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.553425 systemd[1]: sshd@5-10.128.0.99:22-4.153.228.146:52100.service: Deactivated successfully. Jan 27 05:32:27.558475 systemd[1]: session-7.scope: Deactivated successfully. Jan 27 05:32:27.560980 systemd-logind[1557]: Session 7 logged out. Waiting for processes to exit. Jan 27 05:32:27.565602 systemd-logind[1557]: Removed session 7. Jan 27 05:32:27.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.507000 audit[1841]: USER_END pid=1841 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.621387 kernel: audit: type=1131 audit(1769491947.499:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.621562 kernel: audit: type=1106 audit(1769491947.507:222): pid=1841 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.621599 kernel: audit: type=1104 audit(1769491947.507:223): pid=1841 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.507000 audit[1841]: CRED_DISP pid=1841 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.633897 systemd[1]: Started sshd@6-10.128.0.99:22-4.153.228.146:52106.service - OpenSSH per-connection server daemon (4.153.228.146:52106). Jan 27 05:32:27.548000 audit[1836]: USER_END pid=1836 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_mkhomedir,pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:27.679469 kernel: audit: type=1106 audit(1769491947.548:224): pid=1836 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_mkhomedir,pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:27.679647 kernel: audit: type=1104 audit(1769491947.548:225): pid=1836 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_oslogin_login acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:27.679681 kernel: audit: type=1131 audit(1769491947.553:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.128.0.99:22-4.153.228.146:52100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.548000 audit[1836]: CRED_DISP pid=1836 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_oslogin_login acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:27.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.128.0.99:22-4.153.228.146:52100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.128.0.99:22-4.153.228.146:52106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:27.958000 audit[1876]: USER_ACCT pid=1876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_oslogin_admin,pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:27.960317 sshd[1876]: Accepted publickey for core from 4.153.228.146 port 52106 ssh2: RSA SHA256:q6PayfOOwlqwAN/EbZY4isUzymJpCZLcm4qgUz6WpBE Jan 27 05:32:27.960000 audit[1876]: CRED_ACQ pid=1876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_oslogin_login acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:27.960000 audit[1876]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc38eb6300 a2=3 a3=0 items=0 ppid=1 pid=1876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:27.960000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jan 27 05:32:27.962325 sshd-session[1876]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 27 05:32:27.970256 systemd-logind[1557]: New session 8 of user core. Jan 27 05:32:27.979800 systemd[1]: Started session-8.scope - Session 8 of User core. Jan 27 05:32:27.983000 audit[1876]: USER_START pid=1876 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_mkhomedir,pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:27.985000 audit[1880]: CRED_ACQ pid=1880 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_oslogin_login acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:32:28.036000 audit[1881]: USER_ACCT pid=1881 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:32:28.038337 sudo[1881]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jan 27 05:32:28.037000 audit[1881]: CRED_REFR pid=1881 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:32:28.038935 sudo[1881]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jan 27 05:32:28.037000 audit[1881]: USER_START pid=1881 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:32:28.613044 systemd[1]: Starting docker.service - Docker Application Container Engine... Jan 27 05:32:28.629412 (dockerd)[1900]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU Jan 27 05:32:29.050347 dockerd[1900]: time="2026-01-27T05:32:29.049884002Z" level=info msg="Starting up" Jan 27 05:32:29.052344 dockerd[1900]: time="2026-01-27T05:32:29.052300769Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider" Jan 27 05:32:29.071282 dockerd[1900]: time="2026-01-27T05:32:29.071175334Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s Jan 27 05:32:29.130688 dockerd[1900]: time="2026-01-27T05:32:29.130615703Z" level=info msg="Loading containers: start." Jan 27 05:32:29.151447 kernel: Initializing XFRM netlink socket Jan 27 05:32:29.239000 audit[1949]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1949 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.239000 audit[1949]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcdab35e00 a2=0 a3=0 items=0 ppid=1900 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.239000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jan 27 05:32:29.243000 audit[1951]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1951 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.243000 audit[1951]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd26c36640 a2=0 a3=0 items=0 ppid=1900 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.243000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jan 27 05:32:29.246000 audit[1953]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1953 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.246000 audit[1953]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5b6aa5b0 a2=0 a3=0 items=0 ppid=1900 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.246000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Jan 27 05:32:29.250000 audit[1955]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.250000 audit[1955]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5a1bb6e0 a2=0 a3=0 items=0 ppid=1900 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.250000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Jan 27 05:32:29.253000 audit[1957]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_chain pid=1957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.253000 audit[1957]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffddf694500 a2=0 a3=0 items=0 ppid=1900 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.253000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Jan 27 05:32:29.256000 audit[1959]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.256000 audit[1959]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd3d1ca0a0 a2=0 a3=0 items=0 ppid=1900 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.256000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jan 27 05:32:29.260000 audit[1961]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.260000 audit[1961]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc5263ce30 a2=0 a3=0 items=0 ppid=1900 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.260000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jan 27 05:32:29.263000 audit[1963]: NETFILTER_CFG table=nat:9 family=2 entries=2 op=nft_register_chain pid=1963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.263000 audit[1963]: SYSCALL arch=c000003e syscall=46 success=yes exit=384 a0=3 a1=7ffd5048f330 a2=0 a3=0 items=0 ppid=1900 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.263000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jan 27 05:32:29.308000 audit[1966]: NETFILTER_CFG table=nat:10 family=2 entries=2 op=nft_register_chain pid=1966 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.308000 audit[1966]: SYSCALL arch=c000003e syscall=46 success=yes exit=472 a0=3 a1=7fff807876b0 a2=0 a3=0 items=0 ppid=1900 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.308000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jan 27 05:32:29.313000 audit[1968]: NETFILTER_CFG table=filter:11 family=2 entries=2 op=nft_register_chain pid=1968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.313000 audit[1968]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7fffea4c5940 a2=0 a3=0 items=0 ppid=1900 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.313000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Jan 27 05:32:29.316000 audit[1970]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1970 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.316000 audit[1970]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7fffe08876c0 a2=0 a3=0 items=0 ppid=1900 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.316000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Jan 27 05:32:29.320000 audit[1972]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.320000 audit[1972]: SYSCALL arch=c000003e syscall=46 success=yes exit=248 a0=3 a1=7fffafdc7df0 a2=0 a3=0 items=0 ppid=1900 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.320000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jan 27 05:32:29.323000 audit[1974]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=1974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.323000 audit[1974]: SYSCALL arch=c000003e syscall=46 success=yes exit=232 a0=3 a1=7ffc672afaa0 a2=0 a3=0 items=0 ppid=1900 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.323000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Jan 27 05:32:29.387000 audit[2004]: NETFILTER_CFG table=nat:15 family=10 entries=2 op=nft_register_chain pid=2004 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.387000 audit[2004]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc79a42900 a2=0 a3=0 items=0 ppid=1900 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.387000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jan 27 05:32:29.390000 audit[2006]: NETFILTER_CFG table=filter:16 family=10 entries=2 op=nft_register_chain pid=2006 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.390000 audit[2006]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffee7d90680 a2=0 a3=0 items=0 ppid=1900 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.390000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jan 27 05:32:29.393000 audit[2008]: NETFILTER_CFG table=filter:17 family=10 entries=1 op=nft_register_chain pid=2008 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.393000 audit[2008]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3534b8f0 a2=0 a3=0 items=0 ppid=1900 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.393000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Jan 27 05:32:29.396000 audit[2010]: NETFILTER_CFG table=filter:18 family=10 entries=1 op=nft_register_chain pid=2010 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.396000 audit[2010]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8ac7f740 a2=0 a3=0 items=0 ppid=1900 pid=2010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.396000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Jan 27 05:32:29.399000 audit[2012]: NETFILTER_CFG table=filter:19 family=10 entries=1 op=nft_register_chain pid=2012 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.399000 audit[2012]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffce0b7cb10 a2=0 a3=0 items=0 ppid=1900 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.399000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Jan 27 05:32:29.403000 audit[2014]: NETFILTER_CFG table=filter:20 family=10 entries=1 op=nft_register_chain pid=2014 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.403000 audit[2014]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdac4b8dd0 a2=0 a3=0 items=0 ppid=1900 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.403000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jan 27 05:32:29.406000 audit[2016]: NETFILTER_CFG table=filter:21 family=10 entries=1 op=nft_register_chain pid=2016 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.406000 audit[2016]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe4c2ca720 a2=0 a3=0 items=0 ppid=1900 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.406000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jan 27 05:32:29.410000 audit[2018]: NETFILTER_CFG table=nat:22 family=10 entries=2 op=nft_register_chain pid=2018 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.410000 audit[2018]: SYSCALL arch=c000003e syscall=46 success=yes exit=384 a0=3 a1=7fff3158ded0 a2=0 a3=0 items=0 ppid=1900 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.410000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jan 27 05:32:29.414000 audit[2020]: NETFILTER_CFG table=nat:23 family=10 entries=2 op=nft_register_chain pid=2020 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.414000 audit[2020]: SYSCALL arch=c000003e syscall=46 success=yes exit=484 a0=3 a1=7fffb517fb30 a2=0 a3=0 items=0 ppid=1900 pid=2020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.414000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003A3A312F313238 Jan 27 05:32:29.417000 audit[2022]: NETFILTER_CFG table=filter:24 family=10 entries=2 op=nft_register_chain pid=2022 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.417000 audit[2022]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7fff93043560 a2=0 a3=0 items=0 ppid=1900 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.417000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Jan 27 05:32:29.421000 audit[2024]: NETFILTER_CFG table=filter:25 family=10 entries=1 op=nft_register_rule pid=2024 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.421000 audit[2024]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7ffc187dbab0 a2=0 a3=0 items=0 ppid=1900 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.421000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Jan 27 05:32:29.425000 audit[2026]: NETFILTER_CFG table=filter:26 family=10 entries=1 op=nft_register_rule pid=2026 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.425000 audit[2026]: SYSCALL arch=c000003e syscall=46 success=yes exit=248 a0=3 a1=7fff3e4a07f0 a2=0 a3=0 items=0 ppid=1900 pid=2026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.425000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jan 27 05:32:29.430000 audit[2028]: NETFILTER_CFG table=filter:27 family=10 entries=1 op=nft_register_rule pid=2028 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.430000 audit[2028]: SYSCALL arch=c000003e syscall=46 success=yes exit=232 a0=3 a1=7ffc91770c30 a2=0 a3=0 items=0 ppid=1900 pid=2028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.430000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Jan 27 05:32:29.439000 audit[2033]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_chain pid=2033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.439000 audit[2033]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd4aec51d0 a2=0 a3=0 items=0 ppid=1900 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.439000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jan 27 05:32:29.443000 audit[2035]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=2035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.443000 audit[2035]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd33493cc0 a2=0 a3=0 items=0 ppid=1900 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.443000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jan 27 05:32:29.446000 audit[2037]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2037 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.446000 audit[2037]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffc5c3a1b0 a2=0 a3=0 items=0 ppid=1900 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.446000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jan 27 05:32:29.449000 audit[2039]: NETFILTER_CFG table=filter:31 family=10 entries=1 op=nft_register_chain pid=2039 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.449000 audit[2039]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd2e65e440 a2=0 a3=0 items=0 ppid=1900 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.449000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jan 27 05:32:29.453000 audit[2041]: NETFILTER_CFG table=filter:32 family=10 entries=1 op=nft_register_rule pid=2041 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.453000 audit[2041]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffce76f1520 a2=0 a3=0 items=0 ppid=1900 pid=2041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.453000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jan 27 05:32:29.457000 audit[2043]: NETFILTER_CFG table=filter:33 family=10 entries=1 op=nft_register_rule pid=2043 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:29.457000 audit[2043]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd63b8d1c0 a2=0 a3=0 items=0 ppid=1900 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.457000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jan 27 05:32:29.489000 audit[2048]: NETFILTER_CFG table=nat:34 family=2 entries=2 op=nft_register_chain pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.489000 audit[2048]: SYSCALL arch=c000003e syscall=46 success=yes exit=520 a0=3 a1=7ffc79fbd5c0 a2=0 a3=0 items=0 ppid=1900 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.489000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jan 27 05:32:29.493000 audit[2050]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_rule pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.493000 audit[2050]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffe4ccf510 a2=0 a3=0 items=0 ppid=1900 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.493000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jan 27 05:32:29.510000 audit[2058]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_rule pid=2058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.510000 audit[2058]: SYSCALL arch=c000003e syscall=46 success=yes exit=300 a0=3 a1=7ffd2e6190b0 a2=0 a3=0 items=0 ppid=1900 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.510000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D464F5257415244002D6900646F636B657230002D6A00414343455054 Jan 27 05:32:29.525000 audit[2064]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.525000 audit[2064]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcc61fb570 a2=0 a3=0 items=0 ppid=1900 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.525000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D6A0044524F50 Jan 27 05:32:29.529000 audit[2066]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_rule pid=2066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.529000 audit[2066]: SYSCALL arch=c000003e syscall=46 success=yes exit=512 a0=3 a1=7ffdc5eb5d60 a2=0 a3=0 items=0 ppid=1900 pid=2066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.529000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D4354002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jan 27 05:32:29.533000 audit[2068]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_rule pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.533000 audit[2068]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffec2e7700 a2=0 a3=0 items=0 ppid=1900 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.533000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D425249444745002D6F00646F636B657230002D6A00444F434B4552 Jan 27 05:32:29.537000 audit[2070]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_rule pid=2070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.537000 audit[2070]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd77cf5690 a2=0 a3=0 items=0 ppid=1900 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.537000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jan 27 05:32:29.540000 audit[2072]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_rule pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:29.540000 audit[2072]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffca646b0f0 a2=0 a3=0 items=0 ppid=1900 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:29.540000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jan 27 05:32:29.542625 systemd-networkd[1490]: docker0: Link UP Jan 27 05:32:29.550010 dockerd[1900]: time="2026-01-27T05:32:29.549870486Z" level=info msg="Loading containers: done." Jan 27 05:32:29.575577 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2502939375-merged.mount: Deactivated successfully. Jan 27 05:32:29.580980 dockerd[1900]: time="2026-01-27T05:32:29.580929620Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jan 27 05:32:29.581248 dockerd[1900]: time="2026-01-27T05:32:29.581190244Z" level=info msg="Docker daemon" commit=6430e49a55babd9b8f4d08e70ecb2b68900770fe containerd-snapshotter=false storage-driver=overlay2 version=28.0.4 Jan 27 05:32:29.581378 dockerd[1900]: time="2026-01-27T05:32:29.581351038Z" level=info msg="Initializing buildkit" Jan 27 05:32:29.619676 dockerd[1900]: time="2026-01-27T05:32:29.619605527Z" level=info msg="Completed buildkit initialization" Jan 27 05:32:29.630869 dockerd[1900]: time="2026-01-27T05:32:29.630778168Z" level=info msg="Daemon has completed initialization" Jan 27 05:32:29.631464 dockerd[1900]: time="2026-01-27T05:32:29.631084972Z" level=info msg="API listen on /run/docker.sock" Jan 27 05:32:29.631260 systemd[1]: Started docker.service - Docker Application Container Engine. Jan 27 05:32:29.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:29.662867 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jan 27 05:32:29.665595 systemd[1]: Starting kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:32:30.020746 systemd[1]: Started kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:32:30.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:30.036308 (kubelet)[2119]: kubelet.service: Referenced but unset environment variable evaluates to an empty string: KUBELET_EXTRA_ARGS, KUBELET_KUBEADM_ARGS Jan 27 05:32:30.126249 kubelet[2119]: E0127 05:32:30.126137 2119 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jan 27 05:32:30.132537 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jan 27 05:32:30.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jan 27 05:32:30.132832 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jan 27 05:32:30.133692 systemd[1]: kubelet.service: Consumed 269ms CPU time, 111.2M memory peak. Jan 27 05:32:30.631146 containerd[1595]: time="2026-01-27T05:32:30.630886178Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.11\"" Jan 27 05:32:31.546186 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3209358372.mount: Deactivated successfully. Jan 27 05:32:33.070899 containerd[1595]: time="2026-01-27T05:32:33.070809673Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-apiserver:v1.32.11\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:33.072427 containerd[1595]: time="2026-01-27T05:32:33.072360959Z" level=info msg="stop pulling image registry.k8s.io/kube-apiserver:v1.32.11: active requests=0, bytes read=27402224" Jan 27 05:32:33.073953 containerd[1595]: time="2026-01-27T05:32:33.073881668Z" level=info msg="ImageCreate event name:\"sha256:7757c58248a29fc7474a8072796848689852b0477adf16765f38b3d1a9bacadf\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:33.077410 containerd[1595]: time="2026-01-27T05:32:33.077325626Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-apiserver@sha256:41eaecaed9af0ca8ab36d7794819c7df199e68c6c6ee0649114d713c495f8bd5\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:33.078926 containerd[1595]: time="2026-01-27T05:32:33.078685977Z" level=info msg="Pulled image \"registry.k8s.io/kube-apiserver:v1.32.11\" with image id \"sha256:7757c58248a29fc7474a8072796848689852b0477adf16765f38b3d1a9bacadf\", repo tag \"registry.k8s.io/kube-apiserver:v1.32.11\", repo digest \"registry.k8s.io/kube-apiserver@sha256:41eaecaed9af0ca8ab36d7794819c7df199e68c6c6ee0649114d713c495f8bd5\", size \"29067246\" in 2.447739845s" Jan 27 05:32:33.078926 containerd[1595]: time="2026-01-27T05:32:33.078735097Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.11\" returns image reference \"sha256:7757c58248a29fc7474a8072796848689852b0477adf16765f38b3d1a9bacadf\"" Jan 27 05:32:33.079623 containerd[1595]: time="2026-01-27T05:32:33.079589468Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.11\"" Jan 27 05:32:34.540961 containerd[1595]: time="2026-01-27T05:32:34.540879306Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-controller-manager:v1.32.11\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:34.542974 containerd[1595]: time="2026-01-27T05:32:34.542868735Z" level=info msg="stop pulling image registry.k8s.io/kube-controller-manager:v1.32.11: active requests=0, bytes read=0" Jan 27 05:32:34.545581 containerd[1595]: time="2026-01-27T05:32:34.544741381Z" level=info msg="ImageCreate event name:\"sha256:0175d0a8243db520e3caa6d5c1e4248fddbc32447a9e8b5f4630831bc1e2489e\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:34.549971 containerd[1595]: time="2026-01-27T05:32:34.549887245Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-controller-manager@sha256:ce7b2ead5eef1a1554ef28b2b79596c6a8c6d506a87a7ab1381e77fe3d72f55f\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:34.551969 containerd[1595]: time="2026-01-27T05:32:34.551895593Z" level=info msg="Pulled image \"registry.k8s.io/kube-controller-manager:v1.32.11\" with image id \"sha256:0175d0a8243db520e3caa6d5c1e4248fddbc32447a9e8b5f4630831bc1e2489e\", repo tag \"registry.k8s.io/kube-controller-manager:v1.32.11\", repo digest \"registry.k8s.io/kube-controller-manager@sha256:ce7b2ead5eef1a1554ef28b2b79596c6a8c6d506a87a7ab1381e77fe3d72f55f\", size \"26650388\" in 1.472148126s" Jan 27 05:32:34.552306 containerd[1595]: time="2026-01-27T05:32:34.552264126Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.11\" returns image reference \"sha256:0175d0a8243db520e3caa6d5c1e4248fddbc32447a9e8b5f4630831bc1e2489e\"" Jan 27 05:32:34.553269 containerd[1595]: time="2026-01-27T05:32:34.553210432Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.11\"" Jan 27 05:32:35.783762 containerd[1595]: time="2026-01-27T05:32:35.783684885Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-scheduler:v1.32.11\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:35.785347 containerd[1595]: time="2026-01-27T05:32:35.785082050Z" level=info msg="stop pulling image registry.k8s.io/kube-scheduler:v1.32.11: active requests=0, bytes read=0" Jan 27 05:32:35.786501 containerd[1595]: time="2026-01-27T05:32:35.786456559Z" level=info msg="ImageCreate event name:\"sha256:23d6a1fb92fda53b787f364351c610e55f073e8bdf0de5831974df7875b13f21\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:35.789913 containerd[1595]: time="2026-01-27T05:32:35.789810620Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-scheduler@sha256:b3039587bbe70e61a6aeaff56c21fdeeef104524a31f835bcc80887d40b8e6b2\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:35.791475 containerd[1595]: time="2026-01-27T05:32:35.791214901Z" level=info msg="Pulled image \"registry.k8s.io/kube-scheduler:v1.32.11\" with image id \"sha256:23d6a1fb92fda53b787f364351c610e55f073e8bdf0de5831974df7875b13f21\", repo tag \"registry.k8s.io/kube-scheduler:v1.32.11\", repo digest \"registry.k8s.io/kube-scheduler@sha256:b3039587bbe70e61a6aeaff56c21fdeeef104524a31f835bcc80887d40b8e6b2\", size \"21062128\" in 1.237949647s" Jan 27 05:32:35.791475 containerd[1595]: time="2026-01-27T05:32:35.791263959Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.11\" returns image reference \"sha256:23d6a1fb92fda53b787f364351c610e55f073e8bdf0de5831974df7875b13f21\"" Jan 27 05:32:35.791926 containerd[1595]: time="2026-01-27T05:32:35.791887129Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.11\"" Jan 27 05:32:37.011657 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2639123456.mount: Deactivated successfully. Jan 27 05:32:37.726726 containerd[1595]: time="2026-01-27T05:32:37.726644339Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-proxy:v1.32.11\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:37.728169 containerd[1595]: time="2026-01-27T05:32:37.728109376Z" level=info msg="stop pulling image registry.k8s.io/kube-proxy:v1.32.11: active requests=0, bytes read=0" Jan 27 05:32:37.729831 containerd[1595]: time="2026-01-27T05:32:37.729752346Z" level=info msg="ImageCreate event name:\"sha256:4d8fb2dc5751966f058943ff7c5f10551e603d726ab8648c7c7b7f95a2663e3d\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:37.732836 containerd[1595]: time="2026-01-27T05:32:37.732757880Z" level=info msg="ImageCreate event name:\"registry.k8s.io/kube-proxy@sha256:4204f9136c23a867929d32046032fe069b49ad94cf168042405e7d0ec88bdba9\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:37.734119 containerd[1595]: time="2026-01-27T05:32:37.733643647Z" level=info msg="Pulled image \"registry.k8s.io/kube-proxy:v1.32.11\" with image id \"sha256:4d8fb2dc5751966f058943ff7c5f10551e603d726ab8648c7c7b7f95a2663e3d\", repo tag \"registry.k8s.io/kube-proxy:v1.32.11\", repo digest \"registry.k8s.io/kube-proxy@sha256:4204f9136c23a867929d32046032fe069b49ad94cf168042405e7d0ec88bdba9\", size \"31160918\" in 1.941700246s" Jan 27 05:32:37.734119 containerd[1595]: time="2026-01-27T05:32:37.733697017Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.11\" returns image reference \"sha256:4d8fb2dc5751966f058943ff7c5f10551e603d726ab8648c7c7b7f95a2663e3d\"" Jan 27 05:32:37.734882 containerd[1595]: time="2026-01-27T05:32:37.734848296Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jan 27 05:32:38.106845 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount966805356.mount: Deactivated successfully. Jan 27 05:32:39.506331 containerd[1595]: time="2026-01-27T05:32:39.506249031Z" level=info msg="ImageCreate event name:\"registry.k8s.io/coredns/coredns:v1.11.3\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:39.507534 containerd[1595]: time="2026-01-27T05:32:39.507484893Z" level=info msg="stop pulling image registry.k8s.io/coredns/coredns:v1.11.3: active requests=0, bytes read=17569900" Jan 27 05:32:39.508920 containerd[1595]: time="2026-01-27T05:32:39.508851852Z" level=info msg="ImageCreate event name:\"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:39.514026 containerd[1595]: time="2026-01-27T05:32:39.513940283Z" level=info msg="ImageCreate event name:\"registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:39.515854 containerd[1595]: time="2026-01-27T05:32:39.515500655Z" level=info msg="Pulled image \"registry.k8s.io/coredns/coredns:v1.11.3\" with image id \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\", repo tag \"registry.k8s.io/coredns/coredns:v1.11.3\", repo digest \"registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e\", size \"18562039\" in 1.780607997s" Jan 27 05:32:39.515854 containerd[1595]: time="2026-01-27T05:32:39.515578071Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jan 27 05:32:39.516273 containerd[1595]: time="2026-01-27T05:32:39.516241757Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jan 27 05:32:39.902812 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1870370276.mount: Deactivated successfully. Jan 27 05:32:39.911639 containerd[1595]: time="2026-01-27T05:32:39.911553586Z" level=info msg="ImageCreate event name:\"registry.k8s.io/pause:3.10\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"} labels:{key:\"io.cri-containerd.pinned\" value:\"pinned\"}" Jan 27 05:32:39.913163 containerd[1595]: time="2026-01-27T05:32:39.912977147Z" level=info msg="stop pulling image registry.k8s.io/pause:3.10: active requests=0, bytes read=0" Jan 27 05:32:39.914627 containerd[1595]: time="2026-01-27T05:32:39.914582405Z" level=info msg="ImageCreate event name:\"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"} labels:{key:\"io.cri-containerd.pinned\" value:\"pinned\"}" Jan 27 05:32:39.920425 containerd[1595]: time="2026-01-27T05:32:39.919496838Z" level=info msg="ImageCreate event name:\"registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"} labels:{key:\"io.cri-containerd.pinned\" value:\"pinned\"}" Jan 27 05:32:39.920688 containerd[1595]: time="2026-01-27T05:32:39.920650304Z" level=info msg="Pulled image \"registry.k8s.io/pause:3.10\" with image id \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\", repo tag \"registry.k8s.io/pause:3.10\", repo digest \"registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a\", size \"320368\" in 404.275391ms" Jan 27 05:32:39.920838 containerd[1595]: time="2026-01-27T05:32:39.920812576Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jan 27 05:32:39.921645 containerd[1595]: time="2026-01-27T05:32:39.921609372Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jan 27 05:32:40.163037 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jan 27 05:32:40.165577 systemd[1]: Starting kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:32:40.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:40.570710 kernel: kauditd_printk_skb: 134 callbacks suppressed Jan 27 05:32:40.570802 kernel: audit: type=1130 audit(1769491960.537:279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:40.538209 systemd[1]: Started kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:32:40.569964 (kubelet)[2269]: kubelet.service: Referenced but unset environment variable evaluates to an empty string: KUBELET_EXTRA_ARGS, KUBELET_KUBEADM_ARGS Jan 27 05:32:40.683929 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3630481334.mount: Deactivated successfully. Jan 27 05:32:40.709106 kubelet[2269]: E0127 05:32:40.709032 2269 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jan 27 05:32:40.714280 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jan 27 05:32:40.714855 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jan 27 05:32:40.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jan 27 05:32:40.716332 systemd[1]: kubelet.service: Consumed 290ms CPU time, 110.1M memory peak. Jan 27 05:32:40.738488 kernel: audit: type=1131 audit(1769491960.714:280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jan 27 05:32:42.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.128.0.99:22-34.106.250.139:42834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:42.655860 systemd[1]: Started sshd@7-10.128.0.99:22-34.106.250.139:42834.service - OpenSSH per-connection server daemon (34.106.250.139:42834). Jan 27 05:32:42.681944 kernel: audit: type=1130 audit(1769491962.654:281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.128.0.99:22-34.106.250.139:42834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:42.743330 sshd[2331]: Connection closed by 34.106.250.139 port 42834 Jan 27 05:32:42.747134 systemd[1]: sshd@7-10.128.0.99:22-34.106.250.139:42834.service: Deactivated successfully. Jan 27 05:32:42.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.128.0.99:22-34.106.250.139:42834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:42.773448 kernel: audit: type=1131 audit(1769491962.746:282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.128.0.99:22-34.106.250.139:42834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:42.786089 systemd[1]: Started sshd@8-10.128.0.99:22-34.106.250.139:42838.service - OpenSSH per-connection server daemon (34.106.250.139:42838). Jan 27 05:32:42.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.128.0.99:22-34.106.250.139:42838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:42.811566 kernel: audit: type=1130 audit(1769491962.784:283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.128.0.99:22-34.106.250.139:42838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:42.871733 sshd[2340]: Connection closed by 34.106.250.139 port 42838 Jan 27 05:32:42.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.128.0.99:22-34.106.250.139:42838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:42.873516 systemd[1]: sshd@8-10.128.0.99:22-34.106.250.139:42838.service: Deactivated successfully. Jan 27 05:32:42.898458 kernel: audit: type=1131 audit(1769491962.872:284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.128.0.99:22-34.106.250.139:42838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:43.068705 containerd[1595]: time="2026-01-27T05:32:43.068528203Z" level=info msg="ImageCreate event name:\"registry.k8s.io/etcd:3.5.16-0\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:43.070948 containerd[1595]: time="2026-01-27T05:32:43.070519923Z" level=info msg="stop pulling image registry.k8s.io/etcd:3.5.16-0: active requests=0, bytes read=56384408" Jan 27 05:32:43.072535 containerd[1595]: time="2026-01-27T05:32:43.072359543Z" level=info msg="ImageCreate event name:\"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:43.077150 containerd[1595]: time="2026-01-27T05:32:43.077052183Z" level=info msg="ImageCreate event name:\"registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:32:43.079074 containerd[1595]: time="2026-01-27T05:32:43.078627069Z" level=info msg="Pulled image \"registry.k8s.io/etcd:3.5.16-0\" with image id \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\", repo tag \"registry.k8s.io/etcd:3.5.16-0\", repo digest \"registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5\", size \"57680541\" in 3.156958113s" Jan 27 05:32:43.079074 containerd[1595]: time="2026-01-27T05:32:43.078682987Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Jan 27 05:32:45.448863 systemd[1]: Started sshd@9-10.128.0.99:22-34.106.250.139:46142.service - OpenSSH per-connection server daemon (34.106.250.139:46142). Jan 27 05:32:45.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.128.0.99:22-34.106.250.139:46142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.474433 kernel: audit: type=1130 audit(1769491965.447:285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.128.0.99:22-34.106.250.139:46142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.128.0.99:22-34.106.250.139:46152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.531542 systemd[1]: Started sshd@10-10.128.0.99:22-34.106.250.139:46152.service - OpenSSH per-connection server daemon (34.106.250.139:46152). Jan 27 05:32:45.557432 kernel: audit: type=1130 audit(1769491965.530:286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.128.0.99:22-34.106.250.139:46152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.588232 sshd[2363]: Connection closed by 34.106.250.139 port 46142 [preauth] Jan 27 05:32:45.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.128.0.99:22-34.106.250.139:46142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.592957 systemd[1]: sshd@9-10.128.0.99:22-34.106.250.139:46142.service: Deactivated successfully. Jan 27 05:32:45.619439 kernel: audit: type=1131 audit(1769491965.592:287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.128.0.99:22-34.106.250.139:46142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.632256 sshd[2367]: banner exchange: Connection from 34.106.250.139 port 46152: invalid format Jan 27 05:32:45.634925 systemd[1]: sshd@10-10.128.0.99:22-34.106.250.139:46152.service: Deactivated successfully. Jan 27 05:32:45.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.128.0.99:22-34.106.250.139:46152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.662514 kernel: audit: type=1131 audit(1769491965.634:288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.128.0.99:22-34.106.250.139:46152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.128.0.99:22-34.106.250.139:46162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.683914 systemd[1]: Started sshd@11-10.128.0.99:22-34.106.250.139:46162.service - OpenSSH per-connection server daemon (34.106.250.139:46162). Jan 27 05:32:45.709456 kernel: audit: type=1130 audit(1769491965.682:289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.128.0.99:22-34.106.250.139:46162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.747885 sshd[2374]: banner exchange: Connection from 34.106.250.139 port 46162: invalid format Jan 27 05:32:45.751075 systemd[1]: sshd@11-10.128.0.99:22-34.106.250.139:46162.service: Deactivated successfully. Jan 27 05:32:45.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.128.0.99:22-34.106.250.139:46162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.778447 kernel: audit: type=1131 audit(1769491965.750:290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.128.0.99:22-34.106.250.139:46162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.128.0.99:22-34.106.250.139:46178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.857499 systemd[1]: Started sshd@12-10.128.0.99:22-34.106.250.139:46178.service - OpenSSH per-connection server daemon (34.106.250.139:46178). Jan 27 05:32:45.885140 kernel: audit: type=1130 audit(1769491965.856:291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.128.0.99:22-34.106.250.139:46178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.128.0.99:22-34.106.250.139:46176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.888101 systemd[1]: Started sshd@13-10.128.0.99:22-34.106.250.139:46176.service - OpenSSH per-connection server daemon (34.106.250.139:46176). Jan 27 05:32:45.914957 kernel: audit: type=1130 audit(1769491965.886:292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.128.0.99:22-34.106.250.139:46176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.128.0.99:22-34.106.250.139:46190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:45.917535 systemd[1]: Started sshd@14-10.128.0.99:22-34.106.250.139:46190.service - OpenSSH per-connection server daemon (34.106.250.139:46190). Jan 27 05:32:45.943458 kernel: audit: type=1130 audit(1769491965.916:293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.128.0.99:22-34.106.250.139:46190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.016103 sshd[2382]: banner exchange: Connection from 34.106.250.139 port 46176: invalid format Jan 27 05:32:46.017984 systemd[1]: sshd@13-10.128.0.99:22-34.106.250.139:46176.service: Deactivated successfully. Jan 27 05:32:46.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.128.0.99:22-34.106.250.139:46176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.045633 kernel: audit: type=1131 audit(1769491966.019:294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.128.0.99:22-34.106.250.139:46176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.128.0.99:22-34.106.250.139:46202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.255928 systemd[1]: Started sshd@15-10.128.0.99:22-34.106.250.139:46202.service - OpenSSH per-connection server daemon (34.106.250.139:46202). Jan 27 05:32:46.281602 kernel: audit: type=1130 audit(1769491966.254:295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.128.0.99:22-34.106.250.139:46202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.324118 sshd[2390]: banner exchange: Connection from 34.106.250.139 port 46202: invalid format Jan 27 05:32:46.326749 systemd[1]: sshd@15-10.128.0.99:22-34.106.250.139:46202.service: Deactivated successfully. Jan 27 05:32:46.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.128.0.99:22-34.106.250.139:46202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.352441 kernel: audit: type=1131 audit(1769491966.325:296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.128.0.99:22-34.106.250.139:46202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.128.0.99:22-34.106.250.139:46204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.750952 systemd[1]: Started sshd@16-10.128.0.99:22-34.106.250.139:46204.service - OpenSSH per-connection server daemon (34.106.250.139:46204). Jan 27 05:32:46.900650 sshd[2381]: banner exchange: Connection from 34.106.250.139 port 46178: invalid format Jan 27 05:32:46.903733 systemd[1]: sshd@12-10.128.0.99:22-34.106.250.139:46178.service: Deactivated successfully. Jan 27 05:32:46.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.128.0.99:22-34.106.250.139:46178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:46.972307 systemd[1]: Stopped kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:32:46.972915 systemd[1]: kubelet.service: Consumed 290ms CPU time, 110.1M memory peak. Jan 27 05:32:46.978151 systemd[1]: Starting kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:32:47.034587 systemd[1]: Reload requested from client PID 2407 ('systemctl') (unit session-8.scope)... Jan 27 05:32:47.034683 systemd[1]: Reloading... Jan 27 05:32:47.040100 sshd[2395]: Invalid user from 34.106.250.139 port 46204 Jan 27 05:32:47.248471 zram_generator::config[2459]: No configuration found. Jan 27 05:32:47.256000 audit[2395]: USER_ERR pid=2395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:47.258718 sshd[2395]: maximum authentication attempts exceeded for invalid user from 34.106.250.139 port 46204 ssh2 [preauth] Jan 27 05:32:47.258718 sshd[2395]: Disconnecting invalid user 34.106.250.139 port 46204: Too many authentication failures [preauth] Jan 27 05:32:47.693024 systemd[1]: Reloading finished in 657 ms. Jan 27 05:32:47.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.720491 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Jan 27 05:32:47.724725 systemd[1]: sshd@16-10.128.0.99:22-34.106.250.139:46204.service: Deactivated successfully. Jan 27 05:32:47.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.128.0.99:22-34.106.250.139:46204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.738000 audit: BPF prog-id=66 op=LOAD Jan 27 05:32:47.738000 audit: BPF prog-id=65 op=UNLOAD Jan 27 05:32:47.740000 audit: BPF prog-id=67 op=LOAD Jan 27 05:32:47.740000 audit: BPF prog-id=50 op=UNLOAD Jan 27 05:32:47.740000 audit: BPF prog-id=68 op=LOAD Jan 27 05:32:47.740000 audit: BPF prog-id=69 op=LOAD Jan 27 05:32:47.740000 audit: BPF prog-id=51 op=UNLOAD Jan 27 05:32:47.740000 audit: BPF prog-id=52 op=UNLOAD Jan 27 05:32:47.740000 audit: BPF prog-id=70 op=LOAD Jan 27 05:32:47.740000 audit: BPF prog-id=71 op=LOAD Jan 27 05:32:47.740000 audit: BPF prog-id=53 op=UNLOAD Jan 27 05:32:47.741000 audit: BPF prog-id=54 op=UNLOAD Jan 27 05:32:47.741000 audit: BPF prog-id=72 op=LOAD Jan 27 05:32:47.741000 audit: BPF prog-id=43 op=UNLOAD Jan 27 05:32:47.742000 audit: BPF prog-id=73 op=LOAD Jan 27 05:32:47.742000 audit: BPF prog-id=74 op=LOAD Jan 27 05:32:47.742000 audit: BPF prog-id=44 op=UNLOAD Jan 27 05:32:47.742000 audit: BPF prog-id=45 op=UNLOAD Jan 27 05:32:47.743000 audit: BPF prog-id=75 op=LOAD Jan 27 05:32:47.743000 audit: BPF prog-id=46 op=UNLOAD Jan 27 05:32:47.743000 audit: BPF prog-id=76 op=LOAD Jan 27 05:32:47.743000 audit: BPF prog-id=77 op=LOAD Jan 27 05:32:47.743000 audit: BPF prog-id=47 op=UNLOAD Jan 27 05:32:47.743000 audit: BPF prog-id=48 op=UNLOAD Jan 27 05:32:47.745000 audit: BPF prog-id=78 op=LOAD Jan 27 05:32:47.745000 audit: BPF prog-id=49 op=UNLOAD Jan 27 05:32:47.748000 audit: BPF prog-id=79 op=LOAD Jan 27 05:32:47.750000 audit: BPF prog-id=59 op=UNLOAD Jan 27 05:32:47.750000 audit: BPF prog-id=80 op=LOAD Jan 27 05:32:47.750000 audit: BPF prog-id=81 op=LOAD Jan 27 05:32:47.750000 audit: BPF prog-id=60 op=UNLOAD Jan 27 05:32:47.750000 audit: BPF prog-id=61 op=UNLOAD Jan 27 05:32:47.754000 audit: BPF prog-id=82 op=LOAD Jan 27 05:32:47.754000 audit: BPF prog-id=58 op=UNLOAD Jan 27 05:32:47.757000 audit: BPF prog-id=83 op=LOAD Jan 27 05:32:47.757000 audit: BPF prog-id=55 op=UNLOAD Jan 27 05:32:47.757000 audit: BPF prog-id=84 op=LOAD Jan 27 05:32:47.757000 audit: BPF prog-id=85 op=LOAD Jan 27 05:32:47.757000 audit: BPF prog-id=56 op=UNLOAD Jan 27 05:32:47.757000 audit: BPF prog-id=57 op=UNLOAD Jan 27 05:32:47.775000 audit: BPF prog-id=62 op=UNLOAD Jan 27 05:32:47.794426 systemd[1]: Started kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:32:47.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.803181 (kubelet)[2508]: kubelet.service: Referenced but unset environment variable evaluates to an empty string: KUBELET_EXTRA_ARGS Jan 27 05:32:47.885110 kubelet[2508]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jan 27 05:32:47.885110 kubelet[2508]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jan 27 05:32:47.885110 kubelet[2508]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jan 27 05:32:47.885822 kubelet[2508]: I0127 05:32:47.885236 2508 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jan 27 05:32:47.942243 systemd[1]: Stopping kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:32:47.947509 systemd[1]: Started sshd@17-10.128.0.99:22-34.106.250.139:46208.service - OpenSSH per-connection server daemon (34.106.250.139:46208). Jan 27 05:32:47.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.128.0.99:22-34.106.250.139:46208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.952895 systemd[1]: Started sshd@18-10.128.0.99:22-34.106.250.139:46218.service - OpenSSH per-connection server daemon (34.106.250.139:46218). Jan 27 05:32:47.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.128.0.99:22-34.106.250.139:46218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.962250 systemd[1]: Started sshd@19-10.128.0.99:22-34.106.250.139:46260.service - OpenSSH per-connection server daemon (34.106.250.139:46260). Jan 27 05:32:47.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.128.0.99:22-34.106.250.139:46260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.967279 systemd[1]: Started sshd@20-10.128.0.99:22-34.106.250.139:46252.service - OpenSSH per-connection server daemon (34.106.250.139:46252). Jan 27 05:32:47.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.128.0.99:22-34.106.250.139:46252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.973303 systemd[1]: Started sshd@21-10.128.0.99:22-34.106.250.139:46216.service - OpenSSH per-connection server daemon (34.106.250.139:46216). Jan 27 05:32:47.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.128.0.99:22-34.106.250.139:46216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.981760 systemd[1]: Started sshd@22-10.128.0.99:22-34.106.250.139:46274.service - OpenSSH per-connection server daemon (34.106.250.139:46274). Jan 27 05:32:47.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.128.0.99:22-34.106.250.139:46274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.984643 systemd[1]: Started sshd@23-10.128.0.99:22-34.106.250.139:46270.service - OpenSSH per-connection server daemon (34.106.250.139:46270). Jan 27 05:32:47.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.128.0.99:22-34.106.250.139:46270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.987609 systemd[1]: Started sshd@24-10.128.0.99:22-34.106.250.139:46234.service - OpenSSH per-connection server daemon (34.106.250.139:46234). Jan 27 05:32:47.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.128.0.99:22-34.106.250.139:46234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:47.996364 systemd[1]: Started sshd@25-10.128.0.99:22-34.106.250.139:46264.service - OpenSSH per-connection server daemon (34.106.250.139:46264). Jan 27 05:32:47.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.128.0.99:22-34.106.250.139:46264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.000932 systemd[1]: Started sshd@26-10.128.0.99:22-34.106.250.139:46236.service - OpenSSH per-connection server daemon (34.106.250.139:46236). Jan 27 05:32:47.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.128.0.99:22-34.106.250.139:46236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.008604 systemd[1]: kubelet.service: Deactivated successfully. Jan 27 05:32:48.009174 systemd[1]: Stopped kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:32:48.009295 systemd[1]: kubelet.service: Consumed 328ms CPU time, 110.3M memory peak. Jan 27 05:32:48.026323 systemd[1]: Starting kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:32:48.413298 sshd[2525]: Invalid user anonymous from 34.106.250.139 port 46218 Jan 27 05:32:48.439717 sshd[2526]: Invalid user guest from 34.106.250.139 port 46260 Jan 27 05:32:48.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.441783 systemd[1]: Started kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:32:48.467086 sshd[2525]: Connection closed by invalid user anonymous 34.106.250.139 port 46218 [preauth] Jan 27 05:32:48.466000 audit[2525]: USER_ERR pid=2525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.468500 (kubelet)[2563]: kubelet.service: Referenced but unset environment variable evaluates to an empty string: KUBELET_EXTRA_ARGS Jan 27 05:32:48.478426 sshd[2526]: Connection closed by invalid user guest 34.106.250.139 port 46260 [preauth] Jan 27 05:32:48.480000 audit[2526]: USER_ERR pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.128.0.99:22-34.106.250.139:46218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.487038 systemd[1]: sshd@18-10.128.0.99:22-34.106.250.139:46218.service: Deactivated successfully. Jan 27 05:32:48.513525 sshd[2524]: Invalid user from 34.106.250.139 port 46208 Jan 27 05:32:48.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.128.0.99:22-34.106.250.139:46260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.520179 systemd[1]: sshd@19-10.128.0.99:22-34.106.250.139:46260.service: Deactivated successfully. Jan 27 05:32:48.526435 sshd[2528]: Invalid user from 34.106.250.139 port 46216 Jan 27 05:32:48.556823 sshd[2527]: Invalid user test from 34.106.250.139 port 46252 Jan 27 05:32:48.574000 audit[2530]: USER_ERR pid=2530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.578033 sshd[2530]: Connection closed by authenticating user adm 34.106.250.139 port 46270 [preauth] Jan 27 05:32:48.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.128.0.99:22-34.106.250.139:46276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.587074 systemd[1]: Started sshd@27-10.128.0.99:22-34.106.250.139:46276.service - OpenSSH per-connection server daemon (34.106.250.139:46276). Jan 27 05:32:48.591431 sshd[2528]: Connection closed by invalid user 34.106.250.139 port 46216 [preauth] Jan 27 05:32:48.596565 systemd[1]: sshd@23-10.128.0.99:22-34.106.250.139:46270.service: Deactivated successfully. Jan 27 05:32:48.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.128.0.99:22-34.106.250.139:46270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.599758 sshd[2524]: Connection closed by invalid user 34.106.250.139 port 46208 [preauth] Jan 27 05:32:48.603000 audit[2528]: USER_ERR pid=2528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.603000 audit[2524]: USER_ERR pid=2524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.610000 sshd[2533]: Invalid user admin from 34.106.250.139 port 46236 Jan 27 05:32:48.645271 systemd[1]: sshd@17-10.128.0.99:22-34.106.250.139:46208.service: Deactivated successfully. Jan 27 05:32:48.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.128.0.99:22-34.106.250.139:46208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.128.0.99:22-34.106.250.139:46216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.651849 systemd[1]: sshd@21-10.128.0.99:22-34.106.250.139:46216.service: Deactivated successfully. Jan 27 05:32:48.655471 sshd[2531]: Connection closed by authenticating user root 34.106.250.139 port 46234 [preauth] Jan 27 05:32:48.657000 audit[2531]: USER_ERR pid=2531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.662095 sshd[2533]: Connection closed by invalid user admin 34.106.250.139 port 46236 [preauth] Jan 27 05:32:48.662205 kubelet[2563]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jan 27 05:32:48.662205 kubelet[2563]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jan 27 05:32:48.662205 kubelet[2563]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jan 27 05:32:48.666087 kubelet[2563]: I0127 05:32:48.662320 2563 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jan 27 05:32:48.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.128.0.99:22-34.106.250.139:46300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.669603 systemd[1]: Started sshd@28-10.128.0.99:22-34.106.250.139:46300.service - OpenSSH per-connection server daemon (34.106.250.139:46300). Jan 27 05:32:48.671000 audit[2533]: USER_ERR pid=2533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.675482 sshd[2527]: Connection closed by invalid user test 34.106.250.139 port 46252 [preauth] Jan 27 05:32:48.674000 audit[2527]: USER_ERR pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.678176 sshd[2532]: Invalid user info from 34.106.250.139 port 46264 Jan 27 05:32:48.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.128.0.99:22-34.106.250.139:46292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.680545 systemd[1]: Started sshd@29-10.128.0.99:22-34.106.250.139:46292.service - OpenSSH per-connection server daemon (34.106.250.139:46292). Jan 27 05:32:48.682042 systemd[1]: sshd@24-10.128.0.99:22-34.106.250.139:46234.service: Deactivated successfully. Jan 27 05:32:48.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.128.0.99:22-34.106.250.139:46234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.128.0.99:22-34.106.250.139:46252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.703501 systemd[1]: sshd@20-10.128.0.99:22-34.106.250.139:46252.service: Deactivated successfully. Jan 27 05:32:48.707037 systemd[1]: sshd@26-10.128.0.99:22-34.106.250.139:46236.service: Deactivated successfully. Jan 27 05:32:48.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.128.0.99:22-34.106.250.139:46236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.754037 sshd[2529]: Invalid user mysql from 34.106.250.139 port 46274 Jan 27 05:32:48.766149 sshd[2532]: Connection closed by invalid user info 34.106.250.139 port 46264 [preauth] Jan 27 05:32:48.764000 audit[2532]: USER_ERR pid=2532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.128.0.99:22-34.106.250.139:46304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.771088 systemd[1]: Started sshd@30-10.128.0.99:22-34.106.250.139:46304.service - OpenSSH per-connection server daemon (34.106.250.139:46304). Jan 27 05:32:48.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-10.128.0.99:22-34.106.250.139:46316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.784138 systemd[1]: Started sshd@31-10.128.0.99:22-34.106.250.139:46316.service - OpenSSH per-connection server daemon (34.106.250.139:46316). Jan 27 05:32:48.790039 systemd[1]: Started sshd@32-10.128.0.99:22-34.106.250.139:46318.service - OpenSSH per-connection server daemon (34.106.250.139:46318). Jan 27 05:32:48.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10.128.0.99:22-34.106.250.139:46318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.793781 systemd[1]: sshd@25-10.128.0.99:22-34.106.250.139:46264.service: Deactivated successfully. Jan 27 05:32:48.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.128.0.99:22-34.106.250.139:46264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.809572 sshd[2529]: Connection closed by invalid user mysql 34.106.250.139 port 46274 [preauth] Jan 27 05:32:48.812000 audit[2529]: USER_ERR pid=2529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:48.834496 systemd[1]: sshd@22-10.128.0.99:22-34.106.250.139:46274.service: Deactivated successfully. Jan 27 05:32:48.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.128.0.99:22-34.106.250.139:46274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:48.854169 systemd[1]: Started sshd@33-10.128.0.99:22-34.106.250.139:46324.service - OpenSSH per-connection server daemon (34.106.250.139:46324). Jan 27 05:32:48.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-10.128.0.99:22-34.106.250.139:46324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.080907 sshd[2574]: Invalid user postgres from 34.106.250.139 port 46276 Jan 27 05:32:49.141441 sshd[2574]: Connection closed by invalid user postgres 34.106.250.139 port 46276 [preauth] Jan 27 05:32:49.140000 audit[2574]: USER_ERR pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.148000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.128.0.99:22-34.106.250.139:46276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.149109 systemd[1]: sshd@27-10.128.0.99:22-34.106.250.139:46276.service: Deactivated successfully. Jan 27 05:32:49.170576 sshd[2583]: Invalid user administrator from 34.106.250.139 port 46300 Jan 27 05:32:49.207603 sshd[2583]: Connection closed by invalid user administrator 34.106.250.139 port 46300 [preauth] Jan 27 05:32:49.207000 audit[2583]: USER_ERR pid=2583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-10.128.0.99:22-34.106.250.139:46334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.219152 systemd[1]: Started sshd@34-10.128.0.99:22-34.106.250.139:46334.service - OpenSSH per-connection server daemon (34.106.250.139:46334). Jan 27 05:32:49.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-10.128.0.99:22-34.106.250.139:46336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.221518 systemd[1]: Started sshd@35-10.128.0.99:22-34.106.250.139:46336.service - OpenSSH per-connection server daemon (34.106.250.139:46336). Jan 27 05:32:49.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-10.128.0.99:22-34.106.250.139:46346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.226991 systemd[1]: Started sshd@36-10.128.0.99:22-34.106.250.139:46346.service - OpenSSH per-connection server daemon (34.106.250.139:46346). Jan 27 05:32:49.228249 systemd[1]: sshd@28-10.128.0.99:22-34.106.250.139:46300.service: Deactivated successfully. Jan 27 05:32:49.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.128.0.99:22-34.106.250.139:46300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.305696 sshd[2584]: Invalid user user from 34.106.250.139 port 46292 Jan 27 05:32:49.310437 sshd[2595]: Invalid user oracle from 34.106.250.139 port 46304 Jan 27 05:32:49.343464 sshd[2597]: Invalid user pi from 34.106.250.139 port 46318 Jan 27 05:32:49.379729 sshd[2605]: Invalid user puppet from 34.106.250.139 port 46324 Jan 27 05:32:49.387423 sshd[2596]: Invalid user ftp from 34.106.250.139 port 46316 Jan 27 05:32:49.404000 audit[2597]: USER_ERR pid=2597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.407638 sshd[2597]: Connection closed by invalid user pi 34.106.250.139 port 46318 [preauth] Jan 27 05:32:49.427049 systemd[1]: sshd@32-10.128.0.99:22-34.106.250.139:46318.service: Deactivated successfully. Jan 27 05:32:49.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10.128.0.99:22-34.106.250.139:46318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.443646 sshd[2584]: Connection closed by invalid user user 34.106.250.139 port 46292 [preauth] Jan 27 05:32:49.442000 audit[2584]: USER_ERR pid=2584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.465241 sshd[2605]: Connection closed by invalid user puppet 34.106.250.139 port 46324 [preauth] Jan 27 05:32:49.467177 sshd[2595]: Connection closed by invalid user oracle 34.106.250.139 port 46304 [preauth] Jan 27 05:32:49.465000 audit[2595]: USER_ERR pid=2595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.470000 audit[2605]: USER_ERR pid=2605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.475066 systemd[1]: sshd@29-10.128.0.99:22-34.106.250.139:46292.service: Deactivated successfully. Jan 27 05:32:49.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.128.0.99:22-34.106.250.139:46292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.482299 systemd[1]: sshd@30-10.128.0.99:22-34.106.250.139:46304.service: Deactivated successfully. Jan 27 05:32:49.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.128.0.99:22-34.106.250.139:46304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.484676 sshd[2596]: Connection closed by invalid user ftp 34.106.250.139 port 46316 [preauth] Jan 27 05:32:49.483000 audit[2596]: USER_ERR pid=2596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.505013 systemd[1]: sshd@31-10.128.0.99:22-34.106.250.139:46316.service: Deactivated successfully. Jan 27 05:32:49.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-10.128.0.99:22-34.106.250.139:46316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.507615 systemd[1]: sshd@33-10.128.0.99:22-34.106.250.139:46324.service: Deactivated successfully. Jan 27 05:32:49.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-10.128.0.99:22-34.106.250.139:46324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-10.128.0.99:22-34.106.250.139:46350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.552013 systemd[1]: Started sshd@37-10.128.0.99:22-34.106.250.139:46350.service - OpenSSH per-connection server daemon (34.106.250.139:46350). Jan 27 05:32:49.558115 systemd[1]: Started sshd@38-10.128.0.99:22-34.106.250.139:46360.service - OpenSSH per-connection server daemon (34.106.250.139:46360). Jan 27 05:32:49.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-10.128.0.99:22-34.106.250.139:46360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.561972 systemd[1]: Started sshd@39-10.128.0.99:22-34.106.250.139:46364.service - OpenSSH per-connection server daemon (34.106.250.139:46364). Jan 27 05:32:49.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-10.128.0.99:22-34.106.250.139:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.565339 systemd[1]: Started sshd@40-10.128.0.99:22-34.106.250.139:46378.service - OpenSSH per-connection server daemon (34.106.250.139:46378). Jan 27 05:32:49.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-10.128.0.99:22-34.106.250.139:46378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.776423 sshd[2622]: Invalid user ansible from 34.106.250.139 port 46334 Jan 27 05:32:49.776865 sshd[2623]: Invalid user ec2-user from 34.106.250.139 port 46336 Jan 27 05:32:49.790708 sshd[2624]: Invalid user vagrant from 34.106.250.139 port 46346 Jan 27 05:32:49.822434 kubelet[2563]: I0127 05:32:49.821817 2563 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jan 27 05:32:49.822434 kubelet[2563]: I0127 05:32:49.821860 2563 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jan 27 05:32:49.824786 kubelet[2563]: I0127 05:32:49.823151 2563 server.go:954] "Client rotation is on, will bootstrap in background" Jan 27 05:32:49.834444 sshd[2622]: Connection closed by invalid user ansible 34.106.250.139 port 46334 [preauth] Jan 27 05:32:49.833000 audit[2622]: USER_ERR pid=2622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.839037 sshd[2623]: Connection closed by invalid user ec2-user 34.106.250.139 port 46336 [preauth] Jan 27 05:32:49.838000 audit[2623]: USER_ERR pid=2623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.843547 systemd[1]: sshd@35-10.128.0.99:22-34.106.250.139:46336.service: Deactivated successfully. Jan 27 05:32:49.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-10.128.0.99:22-34.106.250.139:46336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.848179 systemd[1]: sshd@34-10.128.0.99:22-34.106.250.139:46334.service: Deactivated successfully. Jan 27 05:32:49.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-10.128.0.99:22-34.106.250.139:46334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.878000 audit[2624]: USER_ERR pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:49.880126 sshd[2624]: Connection closed by invalid user vagrant 34.106.250.139 port 46346 [preauth] Jan 27 05:32:49.891067 systemd[1]: sshd@36-10.128.0.99:22-34.106.250.139:46346.service: Deactivated successfully. Jan 27 05:32:49.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-10.128.0.99:22-34.106.250.139:46346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.896923 kubelet[2563]: E0127 05:32:49.896883 2563 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.128.0.99:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:49.900422 kubelet[2563]: I0127 05:32:49.900355 2563 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jan 27 05:32:49.914205 systemd[1]: Started sshd@41-10.128.0.99:22-34.106.250.139:46390.service - OpenSSH per-connection server daemon (34.106.250.139:46390). Jan 27 05:32:49.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-10.128.0.99:22-34.106.250.139:46390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.918308 systemd[1]: Started sshd@42-10.128.0.99:22-34.106.250.139:46408.service - OpenSSH per-connection server daemon (34.106.250.139:46408). Jan 27 05:32:49.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-10.128.0.99:22-34.106.250.139:46408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-10.128.0.99:22-34.106.250.139:46394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:49.929561 kubelet[2563]: I0127 05:32:49.929140 2563 server.go:1444] "Using cgroup driver setting received from the CRI runtime" cgroupDriver="systemd" Jan 27 05:32:49.925937 systemd[1]: Started sshd@43-10.128.0.99:22-34.106.250.139:46394.service - OpenSSH per-connection server daemon (34.106.250.139:46394). Jan 27 05:32:49.938237 kubelet[2563]: I0127 05:32:49.938187 2563 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jan 27 05:32:49.939447 kubelet[2563]: I0127 05:32:49.938631 2563 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jan 27 05:32:49.939447 kubelet[2563]: I0127 05:32:49.938687 2563 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jan 27 05:32:49.939447 kubelet[2563]: I0127 05:32:49.939006 2563 topology_manager.go:138] "Creating topology manager with none policy" Jan 27 05:32:49.939447 kubelet[2563]: I0127 05:32:49.939022 2563 container_manager_linux.go:304] "Creating device plugin manager" Jan 27 05:32:49.939836 kubelet[2563]: I0127 05:32:49.939226 2563 state_mem.go:36] "Initialized new in-memory state store" Jan 27 05:32:49.948385 kubelet[2563]: I0127 05:32:49.948253 2563 kubelet.go:446] "Attempting to sync node with API server" Jan 27 05:32:49.948385 kubelet[2563]: I0127 05:32:49.948357 2563 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jan 27 05:32:49.948385 kubelet[2563]: I0127 05:32:49.948425 2563 kubelet.go:352] "Adding apiserver pod source" Jan 27 05:32:49.948747 kubelet[2563]: I0127 05:32:49.948446 2563 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jan 27 05:32:49.954431 kubelet[2563]: W0127 05:32:49.953704 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.128.0.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356&limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:49.954431 kubelet[2563]: E0127 05:32:49.953822 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.128.0.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356&limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:49.960801 kubelet[2563]: I0127 05:32:49.960678 2563 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="v2.1.5" apiVersion="v1" Jan 27 05:32:49.961434 kubelet[2563]: I0127 05:32:49.961389 2563 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jan 27 05:32:49.962807 kubelet[2563]: W0127 05:32:49.962771 2563 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jan 27 05:32:49.971098 kubelet[2563]: I0127 05:32:49.971046 2563 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jan 27 05:32:49.971260 kubelet[2563]: I0127 05:32:49.971115 2563 server.go:1287] "Started kubelet" Jan 27 05:32:49.971504 kubelet[2563]: W0127 05:32:49.971362 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.128.0.99:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:49.972303 kubelet[2563]: E0127 05:32:49.971582 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.128.0.99:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:49.984344 kubelet[2563]: I0127 05:32:49.984295 2563 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jan 27 05:32:49.996000 audit[2676]: NETFILTER_CFG table=mangle:42 family=2 entries=2 op=nft_register_chain pid=2676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:49.996000 audit[2676]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffeab960d0 a2=0 a3=0 items=0 ppid=2563 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:49.996000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jan 27 05:32:50.002507 kubelet[2563]: I0127 05:32:50.001546 2563 volume_manager.go:297] "Starting Kubelet Volume Manager" Jan 27 05:32:50.002507 kubelet[2563]: E0127 05:32:50.001871 2563 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" Jan 27 05:32:50.004806 kubelet[2563]: I0127 05:32:50.003679 2563 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jan 27 05:32:50.004806 kubelet[2563]: I0127 05:32:50.003784 2563 reconciler.go:26] "Reconciler: start to sync state" Jan 27 05:32:50.010890 kubelet[2563]: I0127 05:32:50.010810 2563 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jan 27 05:32:50.010000 audit[2678]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:50.010000 audit[2678]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeea6b9430 a2=0 a3=0 items=0 ppid=2563 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jan 27 05:32:50.014731 kubelet[2563]: I0127 05:32:50.014695 2563 server.go:479] "Adding debug handlers to kubelet server" Jan 27 05:32:50.020000 audit[2681]: NETFILTER_CFG table=filter:44 family=2 entries=2 op=nft_register_chain pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:50.020000 audit[2681]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7fff0c785950 a2=0 a3=0 items=0 ppid=2563 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.020000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jan 27 05:32:50.023798 kubelet[2563]: I0127 05:32:50.022299 2563 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jan 27 05:32:50.023798 kubelet[2563]: I0127 05:32:50.022656 2563 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jan 27 05:32:50.023798 kubelet[2563]: W0127 05:32:50.022940 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.128.0.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:50.023798 kubelet[2563]: E0127 05:32:50.023012 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.128.0.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:50.023798 kubelet[2563]: I0127 05:32:50.023329 2563 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jan 27 05:32:50.026146 kubelet[2563]: E0127 05:32:50.024716 2563 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.128.0.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356?timeout=10s\": dial tcp 10.128.0.99:6443: connect: connection refused" interval="200ms" Jan 27 05:32:50.026146 kubelet[2563]: I0127 05:32:50.025180 2563 factory.go:221] Registration of the systemd container factory successfully Jan 27 05:32:50.026146 kubelet[2563]: I0127 05:32:50.025302 2563 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jan 27 05:32:50.032458 kubelet[2563]: E0127 05:32:50.028390 2563 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.128.0.99:6443/api/v1/namespaces/default/events\": dial tcp 10.128.0.99:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356.188e7f924f085bd3 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,UID:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,},FirstTimestamp:2026-01-27 05:32:49.971084243 +0000 UTC m=+1.473916181,LastTimestamp:2026-01-27 05:32:49.971084243 +0000 UTC m=+1.473916181,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,}" Jan 27 05:32:50.029000 audit[2683]: NETFILTER_CFG table=filter:45 family=2 entries=2 op=nft_register_chain pid=2683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:50.029000 audit[2683]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7ffd088c8390 a2=0 a3=0 items=0 ppid=2563 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.035287 kubelet[2563]: I0127 05:32:50.035228 2563 factory.go:221] Registration of the containerd container factory successfully Jan 27 05:32:50.029000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jan 27 05:32:50.055732 kubelet[2563]: E0127 05:32:50.055680 2563 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jan 27 05:32:50.055000 audit[2686]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:50.055000 audit[2686]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd8ec1d720 a2=0 a3=0 items=0 ppid=2563 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jan 27 05:32:50.060543 kubelet[2563]: I0127 05:32:50.059973 2563 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jan 27 05:32:50.062000 audit[2687]: NETFILTER_CFG table=mangle:47 family=10 entries=2 op=nft_register_chain pid=2687 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:50.062000 audit[2687]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdeecc4e70 a2=0 a3=0 items=0 ppid=2563 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.062000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jan 27 05:32:50.072016 sshd[2647]: Invalid user azureuser from 34.106.250.139 port 46350 Jan 27 05:32:50.071000 audit[2690]: NETFILTER_CFG table=mangle:48 family=2 entries=1 op=nft_register_chain pid=2690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:50.071000 audit[2690]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6fee4450 a2=0 a3=0 items=0 ppid=2563 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jan 27 05:32:50.081198 sshd[2648]: Invalid user cisco from 34.106.250.139 port 46360 Jan 27 05:32:50.083554 kubelet[2563]: I0127 05:32:50.083509 2563 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jan 27 05:32:50.083697 kubelet[2563]: I0127 05:32:50.083578 2563 status_manager.go:227] "Starting to sync pod status with apiserver" Jan 27 05:32:50.083697 kubelet[2563]: I0127 05:32:50.083612 2563 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jan 27 05:32:50.083697 kubelet[2563]: I0127 05:32:50.083624 2563 kubelet.go:2382] "Starting kubelet main sync loop" Jan 27 05:32:50.083838 kubelet[2563]: E0127 05:32:50.083702 2563 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jan 27 05:32:50.088000 audit[2696]: NETFILTER_CFG table=nat:49 family=2 entries=1 op=nft_register_chain pid=2696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:50.088000 audit[2696]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe7b51d750 a2=0 a3=0 items=0 ppid=2563 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jan 27 05:32:50.097832 sshd[2649]: Invalid user rstudio from 34.106.250.139 port 46364 Jan 27 05:32:50.102307 kubelet[2563]: E0127 05:32:50.102057 2563 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" Jan 27 05:32:50.106941 kubelet[2563]: W0127 05:32:50.106849 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.128.0.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:50.107100 kubelet[2563]: E0127 05:32:50.106964 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.128.0.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:50.108000 audit[2698]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:32:50.108000 audit[2698]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd15a0a220 a2=0 a3=0 items=0 ppid=2563 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jan 27 05:32:50.119760 sshd[2650]: Invalid user tomcat from 34.106.250.139 port 46378 Jan 27 05:32:50.120000 audit[2697]: NETFILTER_CFG table=mangle:51 family=10 entries=1 op=nft_register_chain pid=2697 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:50.120000 audit[2697]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc394bf9b0 a2=0 a3=0 items=0 ppid=2563 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.120000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jan 27 05:32:50.133000 audit[2702]: NETFILTER_CFG table=nat:52 family=10 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:50.133000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc21baf20 a2=0 a3=0 items=0 ppid=2563 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jan 27 05:32:50.138000 audit[2703]: NETFILTER_CFG table=filter:53 family=10 entries=1 op=nft_register_chain pid=2703 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:32:50.138000 audit[2703]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff0c59b180 a2=0 a3=0 items=0 ppid=2563 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.138000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jan 27 05:32:50.154301 sshd[2649]: Connection closed by invalid user rstudio 34.106.250.139 port 46364 [preauth] Jan 27 05:32:50.153000 audit[2649]: USER_ERR pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.159852 kubelet[2563]: I0127 05:32:50.159663 2563 cpu_manager.go:221] "Starting CPU manager" policy="none" Jan 27 05:32:50.161537 kubelet[2563]: I0127 05:32:50.161139 2563 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jan 27 05:32:50.161537 kubelet[2563]: I0127 05:32:50.161180 2563 state_mem.go:36] "Initialized new in-memory state store" Jan 27 05:32:50.161781 sshd[2647]: Connection closed by invalid user azureuser 34.106.250.139 port 46350 [preauth] Jan 27 05:32:50.160000 audit[2647]: USER_ERR pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.164196 kubelet[2563]: I0127 05:32:50.163765 2563 policy_none.go:49] "None policy: Start" Jan 27 05:32:50.164196 kubelet[2563]: I0127 05:32:50.163800 2563 memory_manager.go:186] "Starting memorymanager" policy="None" Jan 27 05:32:50.164196 kubelet[2563]: I0127 05:32:50.163820 2563 state_mem.go:35] "Initializing new in-memory state store" Jan 27 05:32:50.165179 systemd[1]: sshd@39-10.128.0.99:22-34.106.250.139:46364.service: Deactivated successfully. Jan 27 05:32:50.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-10.128.0.99:22-34.106.250.139:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.169800 systemd[1]: sshd@37-10.128.0.99:22-34.106.250.139:46350.service: Deactivated successfully. Jan 27 05:32:50.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-10.128.0.99:22-34.106.250.139:46350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.185862 kubelet[2563]: E0127 05:32:50.185493 2563 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jan 27 05:32:50.202809 kubelet[2563]: E0127 05:32:50.202764 2563 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" Jan 27 05:32:50.209227 sshd[2648]: Connection closed by invalid user cisco 34.106.250.139 port 46360 [preauth] Jan 27 05:32:50.208000 audit[2648]: USER_ERR pid=2648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-10.128.0.99:22-34.106.250.139:46360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.216336 systemd[1]: sshd@38-10.128.0.99:22-34.106.250.139:46360.service: Deactivated successfully. Jan 27 05:32:50.220734 sshd[2650]: Connection closed by invalid user tomcat 34.106.250.139 port 46378 [preauth] Jan 27 05:32:50.221000 audit[2650]: USER_ERR pid=2650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.224377 systemd[1]: Created slice kubepods.slice - libcontainer container kubepods.slice. Jan 27 05:32:50.228999 kubelet[2563]: E0127 05:32:50.228603 2563 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.128.0.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356?timeout=10s\": dial tcp 10.128.0.99:6443: connect: connection refused" interval="400ms" Jan 27 05:32:50.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-10.128.0.99:22-34.106.250.139:46422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.229355 systemd[1]: Started sshd@44-10.128.0.99:22-34.106.250.139:46422.service - OpenSSH per-connection server daemon (34.106.250.139:46422). Jan 27 05:32:50.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-10.128.0.99:22-34.106.250.139:46426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.244777 systemd[1]: Started sshd@45-10.128.0.99:22-34.106.250.139:46426.service - OpenSSH per-connection server daemon (34.106.250.139:46426). Jan 27 05:32:50.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-10.128.0.99:22-34.106.250.139:46378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.247579 systemd[1]: sshd@40-10.128.0.99:22-34.106.250.139:46378.service: Deactivated successfully. Jan 27 05:32:50.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-10.128.0.99:22-34.106.250.139:46442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.303069 systemd[1]: Started sshd@46-10.128.0.99:22-34.106.250.139:46442.service - OpenSSH per-connection server daemon (34.106.250.139:46442). Jan 27 05:32:50.308672 kubelet[2563]: E0127 05:32:50.304084 2563 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" Jan 27 05:32:50.309600 systemd[1]: Started sshd@47-10.128.0.99:22-34.106.250.139:46450.service - OpenSSH per-connection server daemon (34.106.250.139:46450). Jan 27 05:32:50.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-10.128.0.99:22-34.106.250.139:46450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.316880 systemd[1]: Created slice kubepods-burstable.slice - libcontainer container kubepods-burstable.slice. Jan 27 05:32:50.328923 systemd[1]: Created slice kubepods-besteffort.slice - libcontainer container kubepods-besteffort.slice. Jan 27 05:32:50.345105 kubelet[2563]: I0127 05:32:50.344332 2563 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jan 27 05:32:50.345105 kubelet[2563]: I0127 05:32:50.344749 2563 eviction_manager.go:189] "Eviction manager: starting control loop" Jan 27 05:32:50.345105 kubelet[2563]: I0127 05:32:50.344769 2563 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jan 27 05:32:50.345407 kubelet[2563]: I0127 05:32:50.345249 2563 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jan 27 05:32:50.350418 kubelet[2563]: E0127 05:32:50.350354 2563 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jan 27 05:32:50.350536 kubelet[2563]: E0127 05:32:50.350447 2563 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" Jan 27 05:32:50.369692 sshd[2672]: Invalid user anonymous from 34.106.250.139 port 46408 Jan 27 05:32:50.379354 sshd[2671]: Invalid user manager from 34.106.250.139 port 46390 Jan 27 05:32:50.407981 kubelet[2563]: I0127 05:32:50.407772 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/31894e24818024eb2d47402e4ebe75db-k8s-certs\") pod \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"31894e24818024eb2d47402e4ebe75db\") " pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.407981 kubelet[2563]: I0127 05:32:50.407823 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/31894e24818024eb2d47402e4ebe75db-usr-share-ca-certificates\") pod \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"31894e24818024eb2d47402e4ebe75db\") " pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.407981 kubelet[2563]: I0127 05:32:50.407856 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-flexvolume-dir\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.407981 kubelet[2563]: I0127 05:32:50.407885 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-k8s-certs\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.408306 kubelet[2563]: I0127 05:32:50.407914 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.408306 kubelet[2563]: I0127 05:32:50.407944 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/39378272c33eb4707cca0c502f49b7e9-kubeconfig\") pod \"kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"39378272c33eb4707cca0c502f49b7e9\") " pod="kube-system/kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.408306 kubelet[2563]: I0127 05:32:50.407973 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/31894e24818024eb2d47402e4ebe75db-ca-certs\") pod \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"31894e24818024eb2d47402e4ebe75db\") " pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.408306 kubelet[2563]: I0127 05:32:50.407998 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-kubeconfig\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.409616 kubelet[2563]: I0127 05:32:50.408024 2563 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-ca-certs\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.414036 sshd[2673]: Invalid user from 34.106.250.139 port 46394 Jan 27 05:32:50.419000 audit[2672]: USER_ERR pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.421466 sshd[2672]: Connection closed by invalid user anonymous 34.106.250.139 port 46408 [preauth] Jan 27 05:32:50.437948 sshd[2671]: Connection closed by invalid user manager 34.106.250.139 port 46390 [preauth] Jan 27 05:32:50.443000 audit[2671]: USER_ERR pid=2671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.449527 systemd[1]: sshd@42-10.128.0.99:22-34.106.250.139:46408.service: Deactivated successfully. Jan 27 05:32:50.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-10.128.0.99:22-34.106.250.139:46408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.451562 kubelet[2563]: I0127 05:32:50.451526 2563 kubelet_node_status.go:75] "Attempting to register node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.452087 kubelet[2563]: E0127 05:32:50.452044 2563 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.128.0.99:6443/api/v1/nodes\": dial tcp 10.128.0.99:6443: connect: connection refused" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.456782 systemd[1]: sshd@41-10.128.0.99:22-34.106.250.139:46390.service: Deactivated successfully. Jan 27 05:32:50.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-10.128.0.99:22-34.106.250.139:46390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.470489 sshd[2673]: Connection closed by invalid user 34.106.250.139 port 46394 [preauth] Jan 27 05:32:50.469000 audit[2673]: USER_ERR pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.477464 systemd[1]: sshd@43-10.128.0.99:22-34.106.250.139:46394.service: Deactivated successfully. Jan 27 05:32:50.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-10.128.0.99:22-34.106.250.139:46394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.487924 systemd[1]: Created slice kubepods-burstable-pod31894e24818024eb2d47402e4ebe75db.slice - libcontainer container kubepods-burstable-pod31894e24818024eb2d47402e4ebe75db.slice. Jan 27 05:32:50.493472 systemd[1]: Started sshd@48-10.128.0.99:22-34.106.250.139:46464.service - OpenSSH per-connection server daemon (34.106.250.139:46464). Jan 27 05:32:50.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-10.128.0.99:22-34.106.250.139:46464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.498178 systemd[1]: Started sshd@49-10.128.0.99:22-34.106.250.139:46478.service - OpenSSH per-connection server daemon (34.106.250.139:46478). Jan 27 05:32:50.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-10.128.0.99:22-34.106.250.139:46478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.501956 systemd[1]: Started sshd@50-10.128.0.99:22-34.106.250.139:46470.service - OpenSSH per-connection server daemon (34.106.250.139:46470). Jan 27 05:32:50.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-10.128.0.99:22-34.106.250.139:46470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.516665 kubelet[2563]: E0127 05:32:50.516617 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.522435 containerd[1595]: time="2026-01-27T05:32:50.520894338Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,Uid:31894e24818024eb2d47402e4ebe75db,Namespace:kube-system,Attempt:0,}" Jan 27 05:32:50.522354 systemd[1]: Created slice kubepods-burstable-podd0d17432165eed8f095d448ba071c8dc.slice - libcontainer container kubepods-burstable-podd0d17432165eed8f095d448ba071c8dc.slice. Jan 27 05:32:50.537440 kubelet[2563]: E0127 05:32:50.537376 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.539971 containerd[1595]: time="2026-01-27T05:32:50.538211897Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,Uid:d0d17432165eed8f095d448ba071c8dc,Namespace:kube-system,Attempt:0,}" Jan 27 05:32:50.543070 systemd[1]: Created slice kubepods-burstable-pod39378272c33eb4707cca0c502f49b7e9.slice - libcontainer container kubepods-burstable-pod39378272c33eb4707cca0c502f49b7e9.slice. Jan 27 05:32:50.550533 kubelet[2563]: E0127 05:32:50.550471 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.553285 containerd[1595]: time="2026-01-27T05:32:50.553132844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,Uid:39378272c33eb4707cca0c502f49b7e9,Namespace:kube-system,Attempt:0,}" Jan 27 05:32:50.658615 kernel: kauditd_printk_skb: 175 callbacks suppressed Jan 27 05:32:50.658778 kernel: audit: type=1130 audit(1769491970.626:448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-10.128.0.99:22-34.106.250.139:46494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-10.128.0.99:22-34.106.250.139:46494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.627596 systemd[1]: Started sshd@51-10.128.0.99:22-34.106.250.139:46494.service - OpenSSH per-connection server daemon (34.106.250.139:46494). Jan 27 05:32:50.659057 kubelet[2563]: E0127 05:32:50.633289 2563 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.128.0.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356?timeout=10s\": dial tcp 10.128.0.99:6443: connect: connection refused" interval="800ms" Jan 27 05:32:50.659057 kubelet[2563]: I0127 05:32:50.657882 2563 kubelet_node_status.go:75] "Attempting to register node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.659170 containerd[1595]: time="2026-01-27T05:32:50.639984998Z" level=info msg="connecting to shim 930124e81a27e69ddd3d00eef805c9e1835c185c47090c5de8ac2b93883e4ca5" address="unix:///run/containerd/s/c246fdaca0791b4f8ac79d11fc20ba15f0001797d2003d0f4bd14d8eae80e005" namespace=k8s.io protocol=ttrpc version=3 Jan 27 05:32:50.659919 kubelet[2563]: E0127 05:32:50.659868 2563 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.128.0.99:6443/api/v1/nodes\": dial tcp 10.128.0.99:6443: connect: connection refused" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:50.712197 sshd[2714]: Connection closed by authenticating user root 34.106.250.139 port 46422 [preauth] Jan 27 05:32:50.725357 containerd[1595]: time="2026-01-27T05:32:50.724888139Z" level=info msg="connecting to shim 6eec95beac3723b0749bbfc20412d2bf71d652f42c89e5229917adb64d0d2061" address="unix:///run/containerd/s/2cbb52c6be00b6f15bf53007b3a70afdeb2ce3ac002bb1a650b83b89948c15bf" namespace=k8s.io protocol=ttrpc version=3 Jan 27 05:32:50.732910 containerd[1595]: time="2026-01-27T05:32:50.732779712Z" level=info msg="connecting to shim eba1e83f935892eec222fd59270d0a6eb2656861e55bd4ee0ceaa4dfd36e03f0" address="unix:///run/containerd/s/5588ea67c88aae3631ed745d0bedaf3d97fe675b3418c1779d664c64cfe8d880" namespace=k8s.io protocol=ttrpc version=3 Jan 27 05:32:50.761427 kernel: audit: type=1109 audit(1769491970.732:449): pid=2714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.732000 audit[2714]: USER_ERR pid=2714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:50.760322 systemd[1]: sshd@44-10.128.0.99:22-34.106.250.139:46422.service: Deactivated successfully. Jan 27 05:32:50.764299 sshd[2715]: Invalid user admin from 34.106.250.139 port 46426 Jan 27 05:32:50.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-10.128.0.99:22-34.106.250.139:46422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.799432 kernel: audit: type=1131 audit(1769491970.759:450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-10.128.0.99:22-34.106.250.139:46422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.828978 systemd[1]: Started cri-containerd-930124e81a27e69ddd3d00eef805c9e1835c185c47090c5de8ac2b93883e4ca5.scope - libcontainer container 930124e81a27e69ddd3d00eef805c9e1835c185c47090c5de8ac2b93883e4ca5. Jan 27 05:32:50.853460 sshd[2723]: Invalid user guest from 34.106.250.139 port 46450 Jan 27 05:32:50.873124 systemd[1]: Started sshd@52-10.128.0.99:22-34.106.250.139:46504.service - OpenSSH per-connection server daemon (34.106.250.139:46504). Jan 27 05:32:50.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-10.128.0.99:22-34.106.250.139:46504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.890781 kubelet[2563]: W0127 05:32:50.890616 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.128.0.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:50.890781 kubelet[2563]: E0127 05:32:50.890722 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.128.0.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:50.898517 kernel: audit: type=1130 audit(1769491970.872:451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-10.128.0.99:22-34.106.250.139:46504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:50.902885 sshd[2722]: Invalid user test from 34.106.250.139 port 46442 Jan 27 05:32:50.932000 audit: BPF prog-id=86 op=LOAD Jan 27 05:32:50.941498 kernel: audit: type=1334 audit(1769491970.932:452): prog-id=86 op=LOAD Jan 27 05:32:50.946000 audit: BPF prog-id=87 op=LOAD Jan 27 05:32:50.956553 kernel: audit: type=1334 audit(1769491970.946:453): prog-id=87 op=LOAD Jan 27 05:32:50.958224 sshd[2715]: Connection closed by invalid user admin 34.106.250.139 port 46426 [preauth] Jan 27 05:32:50.990311 kernel: audit: type=1300 audit(1769491970.946:453): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.946000 audit[2770]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:51.023677 kernel: audit: type=1327 audit(1769491970.946:453): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:51.023759 sshd[2723]: Connection closed by invalid user guest 34.106.250.139 port 46450 [preauth] Jan 27 05:32:50.997776 systemd[1]: Started cri-containerd-6eec95beac3723b0749bbfc20412d2bf71d652f42c89e5229917adb64d0d2061.scope - libcontainer container 6eec95beac3723b0749bbfc20412d2bf71d652f42c89e5229917adb64d0d2061. Jan 27 05:32:50.946000 audit: BPF prog-id=87 op=UNLOAD Jan 27 05:32:51.062128 kernel: audit: type=1334 audit(1769491970.946:454): prog-id=87 op=UNLOAD Jan 27 05:32:51.062237 kernel: audit: type=1300 audit(1769491970.946:454): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.946000 audit[2770]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.039560 systemd[1]: Started cri-containerd-eba1e83f935892eec222fd59270d0a6eb2656861e55bd4ee0ceaa4dfd36e03f0.scope - libcontainer container eba1e83f935892eec222fd59270d0a6eb2656861e55bd4ee0ceaa4dfd36e03f0. Jan 27 05:32:51.064997 systemd[1]: sshd@45-10.128.0.99:22-34.106.250.139:46426.service: Deactivated successfully. Jan 27 05:32:50.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:50.952000 audit: BPF prog-id=88 op=LOAD Jan 27 05:32:50.952000 audit[2770]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:50.952000 audit: BPF prog-id=89 op=LOAD Jan 27 05:32:50.952000 audit[2770]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000130218 a2=98 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:50.952000 audit: BPF prog-id=89 op=UNLOAD Jan 27 05:32:50.952000 audit[2770]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:50.952000 audit: BPF prog-id=88 op=UNLOAD Jan 27 05:32:50.952000 audit[2770]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:50.952000 audit: BPF prog-id=90 op=LOAD Jan 27 05:32:50.952000 audit[2770]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001306e8 a2=98 a3=0 items=0 ppid=2756 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:50.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303132346538316132376536396464643364303065656638303563 Jan 27 05:32:50.984000 audit[2715]: USER_ERR pid=2715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:51.021000 audit[2723]: USER_ERR pid=2723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:51.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-10.128.0.99:22-34.106.250.139:46426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.071269 sshd[2722]: Connection closed by invalid user test 34.106.250.139 port 46442 [preauth] Jan 27 05:32:51.072000 audit[2722]: USER_ERR pid=2722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:51.082813 kubelet[2563]: W0127 05:32:51.082729 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.128.0.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356&limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:51.083052 kubelet[2563]: E0127 05:32:51.082837 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.128.0.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356&limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:51.095777 kubelet[2563]: I0127 05:32:51.095551 2563 kubelet_node_status.go:75] "Attempting to register node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:51.100549 kubelet[2563]: E0127 05:32:51.097844 2563 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.128.0.99:6443/api/v1/nodes\": dial tcp 10.128.0.99:6443: connect: connection refused" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:51.104287 systemd[1]: sshd@46-10.128.0.99:22-34.106.250.139:46442.service: Deactivated successfully. Jan 27 05:32:51.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-10.128.0.99:22-34.106.250.139:46442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.110638 systemd[1]: sshd@47-10.128.0.99:22-34.106.250.139:46450.service: Deactivated successfully. Jan 27 05:32:51.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-10.128.0.99:22-34.106.250.139:46450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.154000 audit: BPF prog-id=91 op=LOAD Jan 27 05:32:51.160000 audit: BPF prog-id=92 op=LOAD Jan 27 05:32:51.160000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=2779 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665656339356265616333373233623037343962626663323034313264 Jan 27 05:32:51.160000 audit: BPF prog-id=92 op=UNLOAD Jan 27 05:32:51.160000 audit[2820]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2779 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665656339356265616333373233623037343962626663323034313264 Jan 27 05:32:51.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-10.128.0.99:22-34.106.250.139:46516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.163000 audit: BPF prog-id=93 op=LOAD Jan 27 05:32:51.163000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=2779 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665656339356265616333373233623037343962626663323034313264 Jan 27 05:32:51.163000 audit: BPF prog-id=94 op=LOAD Jan 27 05:32:51.163000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00017a218 a2=98 a3=0 items=0 ppid=2779 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665656339356265616333373233623037343962626663323034313264 Jan 27 05:32:51.163000 audit: BPF prog-id=94 op=UNLOAD Jan 27 05:32:51.163000 audit[2820]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=2779 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665656339356265616333373233623037343962626663323034313264 Jan 27 05:32:51.163000 audit: BPF prog-id=93 op=UNLOAD Jan 27 05:32:51.163000 audit[2820]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2779 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665656339356265616333373233623037343962626663323034313264 Jan 27 05:32:51.165000 audit: BPF prog-id=95 op=LOAD Jan 27 05:32:51.165000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a6e8 a2=98 a3=0 items=0 ppid=2779 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665656339356265616333373233623037343962626663323034313264 Jan 27 05:32:51.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-10.128.0.99:22-34.106.250.139:46532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.161860 systemd[1]: Started sshd@53-10.128.0.99:22-34.106.250.139:46516.service - OpenSSH per-connection server daemon (34.106.250.139:46516). Jan 27 05:32:51.169372 systemd[1]: Started sshd@54-10.128.0.99:22-34.106.250.139:46532.service - OpenSSH per-connection server daemon (34.106.250.139:46532). Jan 27 05:32:51.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-10.128.0.99:22-34.106.250.139:46534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.173739 systemd[1]: Started sshd@55-10.128.0.99:22-34.106.250.139:46534.service - OpenSSH per-connection server daemon (34.106.250.139:46534). Jan 27 05:32:51.189000 audit: BPF prog-id=96 op=LOAD Jan 27 05:32:51.194000 audit: BPF prog-id=97 op=LOAD Jan 27 05:32:51.194000 audit[2829]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=2792 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613165383366393335383932656563323232666435393237306430 Jan 27 05:32:51.195000 audit: BPF prog-id=97 op=UNLOAD Jan 27 05:32:51.195000 audit[2829]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2792 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613165383366393335383932656563323232666435393237306430 Jan 27 05:32:51.198000 audit: BPF prog-id=98 op=LOAD Jan 27 05:32:51.198000 audit[2829]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=2792 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613165383366393335383932656563323232666435393237306430 Jan 27 05:32:51.199000 audit: BPF prog-id=99 op=LOAD Jan 27 05:32:51.199000 audit[2829]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000130218 a2=98 a3=0 items=0 ppid=2792 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613165383366393335383932656563323232666435393237306430 Jan 27 05:32:51.199000 audit: BPF prog-id=99 op=UNLOAD Jan 27 05:32:51.199000 audit[2829]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=2792 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613165383366393335383932656563323232666435393237306430 Jan 27 05:32:51.199000 audit: BPF prog-id=98 op=UNLOAD Jan 27 05:32:51.199000 audit[2829]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2792 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613165383366393335383932656563323232666435393237306430 Jan 27 05:32:51.201000 audit: BPF prog-id=100 op=LOAD Jan 27 05:32:51.201000 audit[2829]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001306e8 a2=98 a3=0 items=0 ppid=2792 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562613165383366393335383932656563323232666435393237306430 Jan 27 05:32:51.246674 containerd[1595]: time="2026-01-27T05:32:51.246591497Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,Uid:39378272c33eb4707cca0c502f49b7e9,Namespace:kube-system,Attempt:0,} returns sandbox id \"930124e81a27e69ddd3d00eef805c9e1835c185c47090c5de8ac2b93883e4ca5\"" Jan 27 05:32:51.252454 kubelet[2563]: E0127 05:32:51.251518 2563 kubelet_pods.go:555] "Hostname for pod was too long, truncated it" podName="kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" hostnameMaxLen=63 truncatedHostname="kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d6" Jan 27 05:32:51.254714 containerd[1595]: time="2026-01-27T05:32:51.254663326Z" level=info msg="CreateContainer within sandbox \"930124e81a27e69ddd3d00eef805c9e1835c185c47090c5de8ac2b93883e4ca5\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jan 27 05:32:51.293427 containerd[1595]: time="2026-01-27T05:32:51.292644668Z" level=info msg="Container f69753583fae4574717cce6bdad168aa6fed30bdd80042049d58d8367ac61c7d: CDI devices from CRI Config.CDIDevices: []" Jan 27 05:32:51.341373 sshd[2741]: Connection closed by authenticating user adm 34.106.250.139 port 46470 [preauth] Jan 27 05:32:51.340000 audit[2741]: USER_ERR pid=2741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:51.349083 systemd[1]: sshd@50-10.128.0.99:22-34.106.250.139:46470.service: Deactivated successfully. Jan 27 05:32:51.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-10.128.0.99:22-34.106.250.139:46470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.371572 containerd[1595]: time="2026-01-27T05:32:51.371147914Z" level=info msg="CreateContainer within sandbox \"930124e81a27e69ddd3d00eef805c9e1835c185c47090c5de8ac2b93883e4ca5\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f69753583fae4574717cce6bdad168aa6fed30bdd80042049d58d8367ac61c7d\"" Jan 27 05:32:51.374550 containerd[1595]: time="2026-01-27T05:32:51.374178400Z" level=info msg="StartContainer for \"f69753583fae4574717cce6bdad168aa6fed30bdd80042049d58d8367ac61c7d\"" Jan 27 05:32:51.377350 sshd[2739]: Invalid user info from 34.106.250.139 port 46464 Jan 27 05:32:51.380298 sshd[2740]: Invalid user mysql from 34.106.250.139 port 46478 Jan 27 05:32:51.385435 containerd[1595]: time="2026-01-27T05:32:51.384699296Z" level=info msg="connecting to shim f69753583fae4574717cce6bdad168aa6fed30bdd80042049d58d8367ac61c7d" address="unix:///run/containerd/s/c246fdaca0791b4f8ac79d11fc20ba15f0001797d2003d0f4bd14d8eae80e005" protocol=ttrpc version=3 Jan 27 05:32:51.408195 containerd[1595]: time="2026-01-27T05:32:51.407571616Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,Uid:d0d17432165eed8f095d448ba071c8dc,Namespace:kube-system,Attempt:0,} returns sandbox id \"eba1e83f935892eec222fd59270d0a6eb2656861e55bd4ee0ceaa4dfd36e03f0\"" Jan 27 05:32:51.411620 containerd[1595]: time="2026-01-27T05:32:51.411559241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,Uid:31894e24818024eb2d47402e4ebe75db,Namespace:kube-system,Attempt:0,} returns sandbox id \"6eec95beac3723b0749bbfc20412d2bf71d652f42c89e5229917adb64d0d2061\"" Jan 27 05:32:51.417332 kubelet[2563]: E0127 05:32:51.417286 2563 kubelet_pods.go:555] "Hostname for pod was too long, truncated it" podName="kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" hostnameMaxLen=63 truncatedHostname="kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d6" Jan 27 05:32:51.419042 kubelet[2563]: E0127 05:32:51.418984 2563 kubelet_pods.go:555] "Hostname for pod was too long, truncated it" podName="kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" hostnameMaxLen=63 truncatedHostname="kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc00" Jan 27 05:32:51.421435 containerd[1595]: time="2026-01-27T05:32:51.420680905Z" level=info msg="CreateContainer within sandbox \"6eec95beac3723b0749bbfc20412d2bf71d652f42c89e5229917adb64d0d2061\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jan 27 05:32:51.426045 containerd[1595]: time="2026-01-27T05:32:51.425991473Z" level=info msg="CreateContainer within sandbox \"eba1e83f935892eec222fd59270d0a6eb2656861e55bd4ee0ceaa4dfd36e03f0\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jan 27 05:32:51.435339 kubelet[2563]: E0127 05:32:51.435267 2563 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.128.0.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356?timeout=10s\": dial tcp 10.128.0.99:6443: connect: connection refused" interval="1.6s" Jan 27 05:32:51.473623 containerd[1595]: time="2026-01-27T05:32:51.470405841Z" level=info msg="Container d54ddb6c29ac5e404ffd3ebef2be595a1179ea1381a84e654388c82c3705dfb8: CDI devices from CRI Config.CDIDevices: []" Jan 27 05:32:51.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-10.128.0.99:22-34.106.250.139:46542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.477583 sshd[2754]: Invalid user postgres from 34.106.250.139 port 46494 Jan 27 05:32:51.476325 systemd[1]: Started sshd@56-10.128.0.99:22-34.106.250.139:46542.service - OpenSSH per-connection server daemon (34.106.250.139:46542). Jan 27 05:32:51.486921 containerd[1595]: time="2026-01-27T05:32:51.486863196Z" level=info msg="Container 26c11991c826130c4ff443075e4b7451521e59b599f59eedba75e5e53215898b: CDI devices from CRI Config.CDIDevices: []" Jan 27 05:32:51.489489 systemd[1]: Started cri-containerd-f69753583fae4574717cce6bdad168aa6fed30bdd80042049d58d8367ac61c7d.scope - libcontainer container f69753583fae4574717cce6bdad168aa6fed30bdd80042049d58d8367ac61c7d. Jan 27 05:32:51.518761 containerd[1595]: time="2026-01-27T05:32:51.518598871Z" level=info msg="CreateContainer within sandbox \"6eec95beac3723b0749bbfc20412d2bf71d652f42c89e5229917adb64d0d2061\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d54ddb6c29ac5e404ffd3ebef2be595a1179ea1381a84e654388c82c3705dfb8\"" Jan 27 05:32:51.519557 containerd[1595]: time="2026-01-27T05:32:51.519522166Z" level=info msg="StartContainer for \"d54ddb6c29ac5e404ffd3ebef2be595a1179ea1381a84e654388c82c3705dfb8\"" Jan 27 05:32:51.523098 containerd[1595]: time="2026-01-27T05:32:51.523045841Z" level=info msg="connecting to shim d54ddb6c29ac5e404ffd3ebef2be595a1179ea1381a84e654388c82c3705dfb8" address="unix:///run/containerd/s/2cbb52c6be00b6f15bf53007b3a70afdeb2ce3ac002bb1a650b83b89948c15bf" protocol=ttrpc version=3 Jan 27 05:32:51.549039 systemd[1]: Started sshd@57-10.128.0.99:22-34.106.250.139:46554.service - OpenSSH per-connection server daemon (34.106.250.139:46554). Jan 27 05:32:51.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-10.128.0.99:22-34.106.250.139:46554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.559195 containerd[1595]: time="2026-01-27T05:32:51.557950789Z" level=info msg="CreateContainer within sandbox \"eba1e83f935892eec222fd59270d0a6eb2656861e55bd4ee0ceaa4dfd36e03f0\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"26c11991c826130c4ff443075e4b7451521e59b599f59eedba75e5e53215898b\"" Jan 27 05:32:51.558000 audit: BPF prog-id=101 op=LOAD Jan 27 05:32:51.560207 kubelet[2563]: W0127 05:32:51.559992 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.128.0.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:51.560207 kubelet[2563]: E0127 05:32:51.560049 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.128.0.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:51.560000 audit: BPF prog-id=102 op=LOAD Jan 27 05:32:51.560000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000220238 a2=98 a3=0 items=0 ppid=2756 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.561824 sshd[2740]: Connection closed by invalid user mysql 34.106.250.139 port 46478 [preauth] Jan 27 05:32:51.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393735333538336661653435373437313763636536626461643136 Jan 27 05:32:51.561000 audit: BPF prog-id=102 op=UNLOAD Jan 27 05:32:51.561000 audit[2913]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2756 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.561000 audit[2740]: USER_ERR pid=2740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:51.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393735333538336661653435373437313763636536626461643136 Jan 27 05:32:51.565463 containerd[1595]: time="2026-01-27T05:32:51.565424601Z" level=info msg="StartContainer for \"26c11991c826130c4ff443075e4b7451521e59b599f59eedba75e5e53215898b\"" Jan 27 05:32:51.563000 audit: BPF prog-id=103 op=LOAD Jan 27 05:32:51.563000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000220488 a2=98 a3=0 items=0 ppid=2756 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393735333538336661653435373437313763636536626461643136 Jan 27 05:32:51.567946 sshd[2739]: Connection closed by invalid user info 34.106.250.139 port 46464 [preauth] Jan 27 05:32:51.565000 audit: BPF prog-id=104 op=LOAD Jan 27 05:32:51.565000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000220218 a2=98 a3=0 items=0 ppid=2756 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393735333538336661653435373437313763636536626461643136 Jan 27 05:32:51.566000 audit: BPF prog-id=104 op=UNLOAD Jan 27 05:32:51.566000 audit[2913]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=2756 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393735333538336661653435373437313763636536626461643136 Jan 27 05:32:51.566000 audit: BPF prog-id=103 op=UNLOAD Jan 27 05:32:51.566000 audit[2913]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2756 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393735333538336661653435373437313763636536626461643136 Jan 27 05:32:51.566000 audit[2739]: USER_ERR pid=2739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:51.566000 audit: BPF prog-id=105 op=LOAD Jan 27 05:32:51.566000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002206e8 a2=98 a3=0 items=0 ppid=2756 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393735333538336661653435373437313763636536626461643136 Jan 27 05:32:51.575777 kubelet[2563]: W0127 05:32:51.575638 2563 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.128.0.99:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.128.0.99:6443: connect: connection refused Jan 27 05:32:51.575777 kubelet[2563]: E0127 05:32:51.575738 2563 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.128.0.99:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:51.580599 containerd[1595]: time="2026-01-27T05:32:51.580549489Z" level=info msg="connecting to shim 26c11991c826130c4ff443075e4b7451521e59b599f59eedba75e5e53215898b" address="unix:///run/containerd/s/5588ea67c88aae3631ed745d0bedaf3d97fe675b3418c1779d664c64cfe8d880" protocol=ttrpc version=3 Jan 27 05:32:51.617726 systemd[1]: sshd@48-10.128.0.99:22-34.106.250.139:46464.service: Deactivated successfully. Jan 27 05:32:51.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-10.128.0.99:22-34.106.250.139:46464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.623703 systemd[1]: sshd@49-10.128.0.99:22-34.106.250.139:46478.service: Deactivated successfully. Jan 27 05:32:51.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-10.128.0.99:22-34.106.250.139:46478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.641548 systemd[1]: Started cri-containerd-d54ddb6c29ac5e404ffd3ebef2be595a1179ea1381a84e654388c82c3705dfb8.scope - libcontainer container d54ddb6c29ac5e404ffd3ebef2be595a1179ea1381a84e654388c82c3705dfb8. Jan 27 05:32:51.693497 sshd[2754]: Connection closed by invalid user postgres 34.106.250.139 port 46494 [preauth] Jan 27 05:32:51.693000 audit[2754]: USER_ERR pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:51.710546 systemd[1]: sshd@51-10.128.0.99:22-34.106.250.139:46494.service: Deactivated successfully. Jan 27 05:32:51.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-10.128.0.99:22-34.106.250.139:46494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.725846 systemd[1]: Started cri-containerd-26c11991c826130c4ff443075e4b7451521e59b599f59eedba75e5e53215898b.scope - libcontainer container 26c11991c826130c4ff443075e4b7451521e59b599f59eedba75e5e53215898b. Jan 27 05:32:51.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-10.128.0.99:22-34.106.250.139:46586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.742967 systemd[1]: Started sshd@58-10.128.0.99:22-34.106.250.139:46586.service - OpenSSH per-connection server daemon (34.106.250.139:46586). Jan 27 05:32:51.748053 systemd[1]: Started sshd@59-10.128.0.99:22-34.106.250.139:46570.service - OpenSSH per-connection server daemon (34.106.250.139:46570). Jan 27 05:32:51.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-10.128.0.99:22-34.106.250.139:46570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-10.128.0.99:22-34.106.250.139:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:51.752432 systemd[1]: Started sshd@60-10.128.0.99:22-34.106.250.139:46560.service - OpenSSH per-connection server daemon (34.106.250.139:46560). Jan 27 05:32:51.754787 sshd[2831]: Invalid user user from 34.106.250.139 port 46504 Jan 27 05:32:51.760000 audit: BPF prog-id=106 op=LOAD Jan 27 05:32:51.769000 audit: BPF prog-id=107 op=LOAD Jan 27 05:32:51.769000 audit[2940]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=2779 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435346464623663323961633565343034666664336562656632626535 Jan 27 05:32:51.773000 audit: BPF prog-id=107 op=UNLOAD Jan 27 05:32:51.773000 audit[2940]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2779 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435346464623663323961633565343034666664336562656632626535 Jan 27 05:32:51.777000 audit: BPF prog-id=108 op=LOAD Jan 27 05:32:51.777000 audit[2940]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=2779 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435346464623663323961633565343034666664336562656632626535 Jan 27 05:32:51.779000 audit: BPF prog-id=109 op=LOAD Jan 27 05:32:51.779000 audit[2940]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000130218 a2=98 a3=0 items=0 ppid=2779 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435346464623663323961633565343034666664336562656632626535 Jan 27 05:32:51.780000 audit: BPF prog-id=109 op=UNLOAD Jan 27 05:32:51.780000 audit[2940]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=2779 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435346464623663323961633565343034666664336562656632626535 Jan 27 05:32:51.780000 audit: BPF prog-id=108 op=UNLOAD Jan 27 05:32:51.780000 audit[2940]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2779 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435346464623663323961633565343034666664336562656632626535 Jan 27 05:32:51.780000 audit: BPF prog-id=110 op=LOAD Jan 27 05:32:51.780000 audit[2940]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001306e8 a2=98 a3=0 items=0 ppid=2779 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435346464623663323961633565343034666664336562656632626535 Jan 27 05:32:51.790000 audit: BPF prog-id=111 op=LOAD Jan 27 05:32:51.791000 audit: BPF prog-id=112 op=LOAD Jan 27 05:32:51.791000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000228238 a2=98 a3=0 items=0 ppid=2792 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633131393931633832363133306334666634343330373565346237 Jan 27 05:32:51.791000 audit: BPF prog-id=112 op=UNLOAD Jan 27 05:32:51.791000 audit[2952]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2792 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633131393931633832363133306334666634343330373565346237 Jan 27 05:32:51.793000 audit: BPF prog-id=113 op=LOAD Jan 27 05:32:51.793000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000228488 a2=98 a3=0 items=0 ppid=2792 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633131393931633832363133306334666634343330373565346237 Jan 27 05:32:51.795000 audit: BPF prog-id=114 op=LOAD Jan 27 05:32:51.795000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000228218 a2=98 a3=0 items=0 ppid=2792 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633131393931633832363133306334666634343330373565346237 Jan 27 05:32:51.796000 audit: BPF prog-id=114 op=UNLOAD Jan 27 05:32:51.796000 audit[2952]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=2792 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633131393931633832363133306334666634343330373565346237 Jan 27 05:32:51.796000 audit: BPF prog-id=113 op=UNLOAD Jan 27 05:32:51.796000 audit[2952]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2792 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633131393931633832363133306334666634343330373565346237 Jan 27 05:32:51.796000 audit: BPF prog-id=115 op=LOAD Jan 27 05:32:51.796000 audit[2952]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002286e8 a2=98 a3=0 items=0 ppid=2792 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:32:51.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633131393931633832363133306334666634343330373565346237 Jan 27 05:32:51.816430 containerd[1595]: time="2026-01-27T05:32:51.814950439Z" level=info msg="StartContainer for \"f69753583fae4574717cce6bdad168aa6fed30bdd80042049d58d8367ac61c7d\" returns successfully" Jan 27 05:32:51.935433 sshd[2888]: Invalid user oracle from 34.106.250.139 port 46532 Jan 27 05:32:51.940836 kubelet[2563]: I0127 05:32:51.939654 2563 kubelet_node_status.go:75] "Attempting to register node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:51.950857 kubelet[2563]: E0127 05:32:51.950773 2563 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.128.0.99:6443/api/v1/nodes\": dial tcp 10.128.0.99:6443: connect: connection refused" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:51.990819 sshd[2831]: Connection closed by invalid user user 34.106.250.139 port 46504 [preauth] Jan 27 05:32:51.996000 audit[2831]: USER_ERR pid=2831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.003073 containerd[1595]: time="2026-01-27T05:32:52.003018520Z" level=info msg="StartContainer for \"d54ddb6c29ac5e404ffd3ebef2be595a1179ea1381a84e654388c82c3705dfb8\" returns successfully" Jan 27 05:32:52.004658 containerd[1595]: time="2026-01-27T05:32:52.004542696Z" level=info msg="StartContainer for \"26c11991c826130c4ff443075e4b7451521e59b599f59eedba75e5e53215898b\" returns successfully" Jan 27 05:32:52.019067 systemd[1]: sshd@52-10.128.0.99:22-34.106.250.139:46504.service: Deactivated successfully. Jan 27 05:32:52.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-10.128.0.99:22-34.106.250.139:46504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.056568 sshd[2887]: Invalid user administrator from 34.106.250.139 port 46516 Jan 27 05:32:52.071000 audit[2888]: USER_ERR pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.073528 sshd[2888]: Connection closed by invalid user oracle 34.106.250.139 port 46532 [preauth] Jan 27 05:32:52.090718 kubelet[2563]: E0127 05:32:52.090631 2563 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.128.0.99:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.128.0.99:6443: connect: connection refused" logger="UnhandledError" Jan 27 05:32:52.091632 systemd[1]: sshd@54-10.128.0.99:22-34.106.250.139:46532.service: Deactivated successfully. Jan 27 05:32:52.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-10.128.0.99:22-34.106.250.139:46532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.143285 kubelet[2563]: E0127 05:32:52.142919 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:52.157433 kubelet[2563]: E0127 05:32:52.154470 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:52.162171 sshd[2889]: Invalid user ftp from 34.106.250.139 port 46534 Jan 27 05:32:52.169573 kubelet[2563]: E0127 05:32:52.166986 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:52.196000 audit[2887]: USER_ERR pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.197931 sshd[2887]: Connection closed by invalid user administrator 34.106.250.139 port 46516 [preauth] Jan 27 05:32:52.226247 systemd[1]: sshd@53-10.128.0.99:22-34.106.250.139:46516.service: Deactivated successfully. Jan 27 05:32:52.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-10.128.0.99:22-34.106.250.139:46516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.256607 sshd[2931]: Invalid user pi from 34.106.250.139 port 46542 Jan 27 05:32:52.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-10.128.0.99:22-34.106.250.139:46606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.279854 systemd[1]: Started sshd@61-10.128.0.99:22-34.106.250.139:46606.service - OpenSSH per-connection server daemon (34.106.250.139:46606). Jan 27 05:32:52.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-10.128.0.99:22-34.106.250.139:46592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.290085 systemd[1]: Started sshd@62-10.128.0.99:22-34.106.250.139:46592.service - OpenSSH per-connection server daemon (34.106.250.139:46592). Jan 27 05:32:52.300071 systemd[1]: Started sshd@63-10.128.0.99:22-34.106.250.139:46600.service - OpenSSH per-connection server daemon (34.106.250.139:46600). Jan 27 05:32:52.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-10.128.0.99:22-34.106.250.139:46600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.344253 sshd[2889]: Connection closed by invalid user ftp 34.106.250.139 port 46534 [preauth] Jan 27 05:32:52.343000 audit[2889]: USER_ERR pid=2889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.371214 systemd[1]: sshd@55-10.128.0.99:22-34.106.250.139:46534.service: Deactivated successfully. Jan 27 05:32:52.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-10.128.0.99:22-34.106.250.139:46534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.392710 sshd[2946]: Invalid user puppet from 34.106.250.139 port 46554 Jan 27 05:32:52.418438 sshd[2931]: Connection closed by invalid user pi 34.106.250.139 port 46542 [preauth] Jan 27 05:32:52.417000 audit[2931]: USER_ERR pid=2931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.430743 systemd[1]: sshd@56-10.128.0.99:22-34.106.250.139:46542.service: Deactivated successfully. Jan 27 05:32:52.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-10.128.0.99:22-34.106.250.139:46542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.451333 sshd[2946]: Connection closed by invalid user puppet 34.106.250.139 port 46554 [preauth] Jan 27 05:32:52.454000 audit[2946]: USER_ERR pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-10.128.0.99:22-34.106.250.139:46616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.481520 systemd[1]: Started sshd@64-10.128.0.99:22-34.106.250.139:46616.service - OpenSSH per-connection server daemon (34.106.250.139:46616). Jan 27 05:32:52.500001 systemd[1]: sshd@57-10.128.0.99:22-34.106.250.139:46554.service: Deactivated successfully. Jan 27 05:32:52.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-10.128.0.99:22-34.106.250.139:46554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.538797 sshd[2982]: Invalid user vagrant from 34.106.250.139 port 46586 Jan 27 05:32:52.580506 sshd[2982]: Connection closed by invalid user vagrant 34.106.250.139 port 46586 [preauth] Jan 27 05:32:52.579000 audit[2982]: USER_ERR pid=2982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.598377 systemd[1]: sshd@58-10.128.0.99:22-34.106.250.139:46586.service: Deactivated successfully. Jan 27 05:32:52.599964 sshd[2992]: Invalid user ansible from 34.106.250.139 port 46560 Jan 27 05:32:52.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-10.128.0.99:22-34.106.250.139:46586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.603014 sshd[2991]: Invalid user ec2-user from 34.106.250.139 port 46570 Jan 27 05:32:52.640130 systemd[1]: Started sshd@65-10.128.0.99:22-34.106.250.139:46620.service - OpenSSH per-connection server daemon (34.106.250.139:46620). Jan 27 05:32:52.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-10.128.0.99:22-34.106.250.139:46620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.703000 audit[2991]: USER_ERR pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.706667 sshd[2991]: Connection closed by invalid user ec2-user 34.106.250.139 port 46570 [preauth] Jan 27 05:32:52.719055 systemd[1]: sshd@59-10.128.0.99:22-34.106.250.139:46570.service: Deactivated successfully. Jan 27 05:32:52.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-10.128.0.99:22-34.106.250.139:46570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.729143 sshd[2992]: Connection closed by invalid user ansible 34.106.250.139 port 46560 [preauth] Jan 27 05:32:52.730000 audit[2992]: USER_ERR pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:52.749316 systemd[1]: sshd@60-10.128.0.99:22-34.106.250.139:46560.service: Deactivated successfully. Jan 27 05:32:52.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-10.128.0.99:22-34.106.250.139:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-10.128.0.99:22-34.106.250.139:46640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.809108 systemd[1]: Started sshd@66-10.128.0.99:22-34.106.250.139:46640.service - OpenSSH per-connection server daemon (34.106.250.139:46640). Jan 27 05:32:52.817913 systemd[1]: Started sshd@67-10.128.0.99:22-34.106.250.139:46628.service - OpenSSH per-connection server daemon (34.106.250.139:46628). Jan 27 05:32:52.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-10.128.0.99:22-34.106.250.139:46628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.828123 systemd[1]: Started sshd@68-10.128.0.99:22-34.106.250.139:46648.service - OpenSSH per-connection server daemon (34.106.250.139:46648). Jan 27 05:32:52.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-10.128.0.99:22-34.106.250.139:46648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:52.894897 sshd[3047]: Invalid user rstudio from 34.106.250.139 port 46606 Jan 27 05:32:52.946000 sshd[3049]: Invalid user cisco from 34.106.250.139 port 46600 Jan 27 05:32:52.953451 sshd[3048]: Invalid user azureuser from 34.106.250.139 port 46592 Jan 27 05:32:52.997437 sshd[3047]: Connection closed by invalid user rstudio 34.106.250.139 port 46606 [preauth] Jan 27 05:32:52.996000 audit[3047]: USER_ERR pid=3047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.021966 systemd[1]: sshd@61-10.128.0.99:22-34.106.250.139:46606.service: Deactivated successfully. Jan 27 05:32:53.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-10.128.0.99:22-34.106.250.139:46606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-10.128.0.99:22-34.106.250.139:46654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.048319 systemd[1]: Started sshd@69-10.128.0.99:22-34.106.250.139:46654.service - OpenSSH per-connection server daemon (34.106.250.139:46654). Jan 27 05:32:53.058444 sshd[3048]: Connection closed by invalid user azureuser 34.106.250.139 port 46592 [preauth] Jan 27 05:32:53.058000 audit[3048]: USER_ERR pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-10.128.0.99:22-34.106.250.139:46592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.076918 systemd[1]: sshd@62-10.128.0.99:22-34.106.250.139:46592.service: Deactivated successfully. Jan 27 05:32:53.083858 sshd[3049]: Connection closed by invalid user cisco 34.106.250.139 port 46600 [preauth] Jan 27 05:32:53.083000 audit[3049]: USER_ERR pid=3049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.117798 systemd[1]: sshd@63-10.128.0.99:22-34.106.250.139:46600.service: Deactivated successfully. Jan 27 05:32:53.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-10.128.0.99:22-34.106.250.139:46600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.137745 sshd[3058]: Invalid user tomcat from 34.106.250.139 port 46616 Jan 27 05:32:53.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-10.128.0.99:22-34.106.250.139:46660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.140122 systemd[1]: Started sshd@70-10.128.0.99:22-34.106.250.139:46660.service - OpenSSH per-connection server daemon (34.106.250.139:46660). Jan 27 05:32:53.173427 kubelet[2563]: E0127 05:32:53.172890 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:53.175052 kubelet[2563]: E0127 05:32:53.174453 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:53.176276 kubelet[2563]: E0127 05:32:53.176242 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:53.212175 sshd[3068]: Invalid user manager from 34.106.250.139 port 46620 Jan 27 05:32:53.243525 sshd[3058]: Connection closed by invalid user tomcat 34.106.250.139 port 46616 [preauth] Jan 27 05:32:53.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-10.128.0.99:22-34.106.250.139:46670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.246418 systemd[1]: Started sshd@71-10.128.0.99:22-34.106.250.139:46670.service - OpenSSH per-connection server daemon (34.106.250.139:46670). Jan 27 05:32:53.253000 audit[3058]: USER_ERR pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-10.128.0.99:22-34.106.250.139:46616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.280422 systemd[1]: sshd@64-10.128.0.99:22-34.106.250.139:46616.service: Deactivated successfully. Jan 27 05:32:53.351227 sshd[3068]: Connection closed by invalid user manager 34.106.250.139 port 46620 [preauth] Jan 27 05:32:53.364000 audit[3068]: USER_ERR pid=3068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-10.128.0.99:22-34.106.250.139:46698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.366935 systemd[1]: Started sshd@72-10.128.0.99:22-34.106.250.139:46698.service - OpenSSH per-connection server daemon (34.106.250.139:46698). Jan 27 05:32:53.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-10.128.0.99:22-34.106.250.139:46688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.376481 systemd[1]: Started sshd@73-10.128.0.99:22-34.106.250.139:46688.service - OpenSSH per-connection server daemon (34.106.250.139:46688). Jan 27 05:32:53.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-10.128.0.99:22-34.106.250.139:46684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.385328 systemd[1]: Started sshd@74-10.128.0.99:22-34.106.250.139:46684.service - OpenSSH per-connection server daemon (34.106.250.139:46684). Jan 27 05:32:53.387820 systemd[1]: sshd@65-10.128.0.99:22-34.106.250.139:46620.service: Deactivated successfully. Jan 27 05:32:53.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-10.128.0.99:22-34.106.250.139:46620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.482793 sshd[3080]: Connection closed by authenticating user root 34.106.250.139 port 46648 [preauth] Jan 27 05:32:53.482000 audit[3080]: USER_ERR pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-10.128.0.99:22-34.106.250.139:46648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.502042 systemd[1]: sshd@68-10.128.0.99:22-34.106.250.139:46648.service: Deactivated successfully. Jan 27 05:32:53.538660 sshd[3078]: Invalid user anonymous from 34.106.250.139 port 46640 Jan 27 05:32:53.559687 kubelet[2563]: I0127 05:32:53.559208 2563 kubelet_node_status.go:75] "Attempting to register node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:53.573883 sshd[3079]: Invalid user from 34.106.250.139 port 46628 Jan 27 05:32:53.644758 sshd[3078]: Connection closed by invalid user anonymous 34.106.250.139 port 46640 [preauth] Jan 27 05:32:53.649000 audit[3078]: USER_ERR pid=3078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.670860 sshd[3079]: Connection closed by invalid user 34.106.250.139 port 46628 [preauth] Jan 27 05:32:53.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-10.128.0.99:22-34.106.250.139:46640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.671590 systemd[1]: sshd@66-10.128.0.99:22-34.106.250.139:46640.service: Deactivated successfully. Jan 27 05:32:53.672000 audit[3079]: USER_ERR pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.712635 systemd[1]: sshd@67-10.128.0.99:22-34.106.250.139:46628.service: Deactivated successfully. Jan 27 05:32:53.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-10.128.0.99:22-34.106.250.139:46628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-10.128.0.99:22-34.106.250.139:46710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.734077 systemd[1]: Started sshd@75-10.128.0.99:22-34.106.250.139:46710.service - OpenSSH per-connection server daemon (34.106.250.139:46710). Jan 27 05:32:53.797567 sshd[3099]: Invalid user guest from 34.106.250.139 port 46670 Jan 27 05:32:53.814467 sshd[3088]: Invalid user admin from 34.106.250.139 port 46654 Jan 27 05:32:53.842477 sshd[3095]: Invalid user test from 34.106.250.139 port 46660 Jan 27 05:32:53.857894 sshd[3099]: Connection closed by invalid user guest 34.106.250.139 port 46670 [preauth] Jan 27 05:32:53.856000 audit[3099]: USER_ERR pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-10.128.0.99:22-34.106.250.139:46670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.868490 systemd[1]: sshd@71-10.128.0.99:22-34.106.250.139:46670.service: Deactivated successfully. Jan 27 05:32:53.934930 sshd[3095]: Connection closed by invalid user test 34.106.250.139 port 46660 [preauth] Jan 27 05:32:53.933000 audit[3095]: USER_ERR pid=3095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-10.128.0.99:22-34.106.250.139:46730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.956774 systemd[1]: Started sshd@76-10.128.0.99:22-34.106.250.139:46730.service - OpenSSH per-connection server daemon (34.106.250.139:46730). Jan 27 05:32:53.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-10.128.0.99:22-34.106.250.139:46714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.963224 systemd[1]: Started sshd@77-10.128.0.99:22-34.106.250.139:46714.service - OpenSSH per-connection server daemon (34.106.250.139:46714). Jan 27 05:32:53.968463 sshd[3088]: Connection closed by invalid user admin 34.106.250.139 port 46654 [preauth] Jan 27 05:32:53.967000 audit[3088]: USER_ERR pid=3088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:53.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-10.128.0.99:22-34.106.250.139:46716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:53.971328 systemd[1]: Started sshd@78-10.128.0.99:22-34.106.250.139:46716.service - OpenSSH per-connection server daemon (34.106.250.139:46716). Jan 27 05:32:53.974143 systemd[1]: sshd@70-10.128.0.99:22-34.106.250.139:46660.service: Deactivated successfully. Jan 27 05:32:53.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-10.128.0.99:22-34.106.250.139:46660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.001671 systemd[1]: sshd@69-10.128.0.99:22-34.106.250.139:46654.service: Deactivated successfully. Jan 27 05:32:54.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-10.128.0.99:22-34.106.250.139:46654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-10.128.0.99:22-34.106.250.139:46734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.015008 systemd[1]: Started sshd@79-10.128.0.99:22-34.106.250.139:46734.service - OpenSSH per-connection server daemon (34.106.250.139:46734). Jan 27 05:32:54.028000 audit[3108]: USER_ERR pid=3108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.030202 sshd[3108]: Connection closed by authenticating user adm 34.106.250.139 port 46688 [preauth] Jan 27 05:32:54.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-10.128.0.99:22-34.106.250.139:46688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.053086 systemd[1]: sshd@73-10.128.0.99:22-34.106.250.139:46688.service: Deactivated successfully. Jan 27 05:32:54.068428 sshd[3107]: Invalid user mysql from 34.106.250.139 port 46698 Jan 27 05:32:54.100731 sshd[3109]: Invalid user info from 34.106.250.139 port 46684 Jan 27 05:32:54.145000 audit[3109]: USER_ERR pid=3109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.147337 sshd[3109]: Connection closed by invalid user info 34.106.250.139 port 46684 [preauth] Jan 27 05:32:54.177128 systemd[1]: Started sshd@80-10.128.0.99:22-34.106.250.139:46744.service - OpenSSH per-connection server daemon (34.106.250.139:46744). Jan 27 05:32:54.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-10.128.0.99:22-34.106.250.139:46744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.180318 kubelet[2563]: E0127 05:32:54.179662 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:54.200000 audit[3107]: USER_ERR pid=3107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.205745 sshd[3107]: Connection closed by invalid user mysql 34.106.250.139 port 46698 [preauth] Jan 27 05:32:54.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-10.128.0.99:22-34.106.250.139:46684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.206582 systemd[1]: sshd@74-10.128.0.99:22-34.106.250.139:46684.service: Deactivated successfully. Jan 27 05:32:54.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-10.128.0.99:22-34.106.250.139:46750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.218605 systemd[1]: Started sshd@81-10.128.0.99:22-34.106.250.139:46750.service - OpenSSH per-connection server daemon (34.106.250.139:46750). Jan 27 05:32:54.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-10.128.0.99:22-34.106.250.139:46698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.235005 systemd[1]: sshd@72-10.128.0.99:22-34.106.250.139:46698.service: Deactivated successfully. Jan 27 05:32:54.385451 kubelet[2563]: E0127 05:32:54.384012 2563 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:54.433007 sshd[3128]: Invalid user postgres from 34.106.250.139 port 46710 Jan 27 05:32:54.510872 sshd[3128]: Connection closed by invalid user postgres 34.106.250.139 port 46710 [preauth] Jan 27 05:32:54.509000 audit[3128]: USER_ERR pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.526411 systemd[1]: sshd@75-10.128.0.99:22-34.106.250.139:46710.service: Deactivated successfully. Jan 27 05:32:54.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-10.128.0.99:22-34.106.250.139:46710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.563218 systemd[1]: Started sshd@82-10.128.0.99:22-34.106.250.139:46758.service - OpenSSH per-connection server daemon (34.106.250.139:46758). Jan 27 05:32:54.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-10.128.0.99:22-34.106.250.139:46758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-10.128.0.99:22-34.106.250.139:46784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.569166 systemd[1]: Started sshd@83-10.128.0.99:22-34.106.250.139:46784.service - OpenSSH per-connection server daemon (34.106.250.139:46784). Jan 27 05:32:54.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-10.128.0.99:22-34.106.250.139:46772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.578762 systemd[1]: Started sshd@84-10.128.0.99:22-34.106.250.139:46772.service - OpenSSH per-connection server daemon (34.106.250.139:46772). Jan 27 05:32:54.656652 sshd[3144]: Invalid user ftp from 34.106.250.139 port 46734 Jan 27 05:32:54.674451 sshd[3138]: Invalid user administrator from 34.106.250.139 port 46716 Jan 27 05:32:54.683179 sshd[3136]: Invalid user oracle from 34.106.250.139 port 46730 Jan 27 05:32:54.685424 sshd[3137]: Invalid user user from 34.106.250.139 port 46714 Jan 27 05:32:54.756486 sshd[3144]: Connection closed by invalid user ftp 34.106.250.139 port 46734 [preauth] Jan 27 05:32:54.757674 sshd[3152]: Invalid user pi from 34.106.250.139 port 46744 Jan 27 05:32:54.770000 audit[3144]: USER_ERR pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.790543 sshd[3137]: Connection closed by invalid user user 34.106.250.139 port 46714 [preauth] Jan 27 05:32:54.790000 audit[3137]: USER_ERR pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-10.128.0.99:22-34.106.250.139:46734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.797025 systemd[1]: sshd@79-10.128.0.99:22-34.106.250.139:46734.service: Deactivated successfully. Jan 27 05:32:54.798926 sshd[3138]: Connection closed by invalid user administrator 34.106.250.139 port 46716 [preauth] Jan 27 05:32:54.798000 audit[3138]: USER_ERR pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.813914 systemd[1]: sshd@78-10.128.0.99:22-34.106.250.139:46716.service: Deactivated successfully. Jan 27 05:32:54.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-10.128.0.99:22-34.106.250.139:46716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-10.128.0.99:22-34.106.250.139:46714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.822593 systemd[1]: sshd@77-10.128.0.99:22-34.106.250.139:46714.service: Deactivated successfully. Jan 27 05:32:54.832000 audit[3136]: USER_ERR pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.835452 sshd[3136]: Connection closed by invalid user oracle 34.106.250.139 port 46730 [preauth] Jan 27 05:32:54.853290 systemd[1]: sshd@76-10.128.0.99:22-34.106.250.139:46730.service: Deactivated successfully. Jan 27 05:32:54.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-10.128.0.99:22-34.106.250.139:46730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.864000 audit[3152]: USER_ERR pid=3152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:54.866168 sshd[3152]: Connection closed by invalid user pi 34.106.250.139 port 46744 [preauth] Jan 27 05:32:54.889252 systemd[1]: sshd@80-10.128.0.99:22-34.106.250.139:46744.service: Deactivated successfully. Jan 27 05:32:54.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-10.128.0.99:22-34.106.250.139:46744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.934524 sshd[3156]: Invalid user puppet from 34.106.250.139 port 46750 Jan 27 05:32:54.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-10.128.0.99:22-34.106.250.139:43066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.938972 systemd[1]: Started sshd@85-10.128.0.99:22-34.106.250.139:43066.service - OpenSSH per-connection server daemon (34.106.250.139:43066). Jan 27 05:32:54.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-10.128.0.99:22-34.106.250.139:43072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.951086 systemd[1]: Started sshd@86-10.128.0.99:22-34.106.250.139:43072.service - OpenSSH per-connection server daemon (34.106.250.139:43072). Jan 27 05:32:54.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-10.128.0.99:22-34.106.250.139:43088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:54.959976 systemd[1]: Started sshd@87-10.128.0.99:22-34.106.250.139:43088.service - OpenSSH per-connection server daemon (34.106.250.139:43088). Jan 27 05:32:55.074000 audit[3156]: USER_ERR pid=3156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.075954 sshd[3156]: Connection closed by invalid user puppet 34.106.250.139 port 46750 [preauth] Jan 27 05:32:55.090030 systemd[1]: sshd@81-10.128.0.99:22-34.106.250.139:46750.service: Deactivated successfully. Jan 27 05:32:55.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-10.128.0.99:22-34.106.250.139:46750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-10.128.0.99:22-34.106.250.139:43118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.164463 systemd[1]: Started sshd@88-10.128.0.99:22-34.106.250.139:43118.service - OpenSSH per-connection server daemon (34.106.250.139:43118). Jan 27 05:32:55.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-10.128.0.99:22-34.106.250.139:43104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.171080 systemd[1]: Started sshd@89-10.128.0.99:22-34.106.250.139:43104.service - OpenSSH per-connection server daemon (34.106.250.139:43104). Jan 27 05:32:55.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-10.128.0.99:22-34.106.250.139:43090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.176900 systemd[1]: Started sshd@90-10.128.0.99:22-34.106.250.139:43090.service - OpenSSH per-connection server daemon (34.106.250.139:43090). Jan 27 05:32:55.221144 sshd[3174]: Invalid user vagrant from 34.106.250.139 port 46784 Jan 27 05:32:55.279431 sshd[3173]: Invalid user ansible from 34.106.250.139 port 46758 Jan 27 05:32:55.296739 sshd[3175]: Invalid user ec2-user from 34.106.250.139 port 46772 Jan 27 05:32:55.321444 sshd[3174]: Connection closed by invalid user vagrant 34.106.250.139 port 46784 [preauth] Jan 27 05:32:55.332000 audit[3174]: USER_ERR pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.352353 systemd[1]: sshd@83-10.128.0.99:22-34.106.250.139:46784.service: Deactivated successfully. Jan 27 05:32:55.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-10.128.0.99:22-34.106.250.139:46784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.396000 audit[3173]: USER_ERR pid=3173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.398418 sshd[3173]: Connection closed by invalid user ansible 34.106.250.139 port 46758 [preauth] Jan 27 05:32:55.401150 sshd[3175]: Connection closed by invalid user ec2-user 34.106.250.139 port 46772 [preauth] Jan 27 05:32:55.399000 audit[3175]: USER_ERR pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.435698 systemd[1]: sshd@82-10.128.0.99:22-34.106.250.139:46758.service: Deactivated successfully. Jan 27 05:32:55.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-10.128.0.99:22-34.106.250.139:46758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.441189 systemd[1]: sshd@84-10.128.0.99:22-34.106.250.139:46772.service: Deactivated successfully. Jan 27 05:32:55.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-10.128.0.99:22-34.106.250.139:46772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-10.128.0.99:22-34.106.250.139:43126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.457715 systemd[1]: Started sshd@91-10.128.0.99:22-34.106.250.139:43126.service - OpenSSH per-connection server daemon (34.106.250.139:43126). Jan 27 05:32:55.561059 sshd[3195]: Invalid user cisco from 34.106.250.139 port 43072 Jan 27 05:32:55.626103 sshd[3195]: Connection closed by invalid user cisco 34.106.250.139 port 43072 [preauth] Jan 27 05:32:55.625000 audit[3195]: USER_ERR pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.627762 sshd[3194]: Invalid user azureuser from 34.106.250.139 port 43066 Jan 27 05:32:55.633444 sshd[3197]: Invalid user rstudio from 34.106.250.139 port 43088 Jan 27 05:32:55.638473 systemd[1]: sshd@86-10.128.0.99:22-34.106.250.139:43072.service: Deactivated successfully. Jan 27 05:32:55.669929 kernel: kauditd_printk_skb: 246 callbacks suppressed Jan 27 05:32:55.670037 kernel: audit: type=1131 audit(1769491975.638:620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-10.128.0.99:22-34.106.250.139:43072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-10.128.0.99:22-34.106.250.139:43072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.737984 systemd[1]: Started sshd@92-10.128.0.99:22-34.106.250.139:43154.service - OpenSSH per-connection server daemon (34.106.250.139:43154). Jan 27 05:32:55.768841 kernel: audit: type=1130 audit(1769491975.736:621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-10.128.0.99:22-34.106.250.139:43154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-10.128.0.99:22-34.106.250.139:43154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.769176 sshd[3197]: Connection closed by invalid user rstudio 34.106.250.139 port 43088 [preauth] Jan 27 05:32:55.743933 systemd[1]: Started sshd@93-10.128.0.99:22-34.106.250.139:43142.service - OpenSSH per-connection server daemon (34.106.250.139:43142). Jan 27 05:32:55.770374 systemd[1]: Started sshd@94-10.128.0.99:22-34.106.250.139:43156.service - OpenSSH per-connection server daemon (34.106.250.139:43156). Jan 27 05:32:55.773461 sshd[3194]: Connection closed by invalid user azureuser 34.106.250.139 port 43066 [preauth] Jan 27 05:32:55.809015 kernel: audit: type=1130 audit(1769491975.742:622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-10.128.0.99:22-34.106.250.139:43142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-10.128.0.99:22-34.106.250.139:43142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.811871 systemd[1]: sshd@87-10.128.0.99:22-34.106.250.139:43088.service: Deactivated successfully. Jan 27 05:32:55.839896 kernel: audit: type=1109 audit(1769491975.754:623): pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.754000 audit[3197]: USER_ERR pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.834083 systemd[1]: sshd@85-10.128.0.99:22-34.106.250.139:43066.service: Deactivated successfully. Jan 27 05:32:55.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-10.128.0.99:22-34.106.250.139:43156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.865436 kernel: audit: type=1130 audit(1769491975.769:624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-10.128.0.99:22-34.106.250.139:43156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.771000 audit[3194]: USER_ERR pid=3194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.893032 sshd[3207]: Invalid user manager from 34.106.250.139 port 43104 Jan 27 05:32:55.894267 kernel: audit: type=1109 audit(1769491975.771:625): pid=3194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:55.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-10.128.0.99:22-34.106.250.139:43088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.920707 kernel: audit: type=1131 audit(1769491975.811:626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-10.128.0.99:22-34.106.250.139:43088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-10.128.0.99:22-34.106.250.139:43066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.921432 kernel: audit: type=1131 audit(1769491975.833:627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-10.128.0.99:22-34.106.250.139:43066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:55.961104 sshd[3206]: Invalid user from 34.106.250.139 port 43118 Jan 27 05:32:55.985429 sshd[3208]: Invalid user tomcat from 34.106.250.139 port 43090 Jan 27 05:32:56.083451 kernel: audit: type=1130 audit(1769491976.054:628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-10.128.0.99:22-34.106.250.139:43160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-10.128.0.99:22-34.106.250.139:43160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.083679 sshd[3208]: Connection closed by invalid user tomcat 34.106.250.139 port 43090 [preauth] Jan 27 05:32:56.055940 systemd[1]: Started sshd@95-10.128.0.99:22-34.106.250.139:43160.service - OpenSSH per-connection server daemon (34.106.250.139:43160). Jan 27 05:32:56.075000 audit[3208]: USER_ERR pid=3208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.122330 kernel: audit: type=1109 audit(1769491976.075:629): pid=3208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.122380 sshd[3222]: Invalid user anonymous from 34.106.250.139 port 43126 Jan 27 05:32:56.111836 systemd[1]: sshd@90-10.128.0.99:22-34.106.250.139:43090.service: Deactivated successfully. Jan 27 05:32:56.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-10.128.0.99:22-34.106.250.139:43090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.138000 audit[3207]: USER_ERR pid=3207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.139909 sshd[3207]: Connection closed by invalid user manager 34.106.250.139 port 43104 [preauth] Jan 27 05:32:56.169020 systemd[1]: sshd@89-10.128.0.99:22-34.106.250.139:43104.service: Deactivated successfully. Jan 27 05:32:56.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-10.128.0.99:22-34.106.250.139:43104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.197994 sshd[3222]: Connection closed by invalid user anonymous 34.106.250.139 port 43126 [preauth] Jan 27 05:32:56.204000 audit[3222]: USER_ERR pid=3222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.221000 audit[3206]: USER_ERR pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.223663 sshd[3206]: Connection closed by invalid user 34.106.250.139 port 43118 [preauth] Jan 27 05:32:56.232512 systemd[1]: sshd@91-10.128.0.99:22-34.106.250.139:43126.service: Deactivated successfully. Jan 27 05:32:56.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-10.128.0.99:22-34.106.250.139:43126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.242544 systemd[1]: sshd@88-10.128.0.99:22-34.106.250.139:43118.service: Deactivated successfully. Jan 27 05:32:56.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-10.128.0.99:22-34.106.250.139:43118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-10.128.0.99:22-34.106.250.139:43162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.273353 systemd[1]: Started sshd@96-10.128.0.99:22-34.106.250.139:43162.service - OpenSSH per-connection server daemon (34.106.250.139:43162). Jan 27 05:32:56.280340 systemd[1]: Started sshd@97-10.128.0.99:22-34.106.250.139:43178.service - OpenSSH per-connection server daemon (34.106.250.139:43178). Jan 27 05:32:56.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-10.128.0.99:22-34.106.250.139:43178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.291229 systemd[1]: Started sshd@98-10.128.0.99:22-34.106.250.139:43174.service - OpenSSH per-connection server daemon (34.106.250.139:43174). Jan 27 05:32:56.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-10.128.0.99:22-34.106.250.139:43174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.380989 systemd[1]: Started sshd@99-10.128.0.99:22-34.106.250.139:43186.service - OpenSSH per-connection server daemon (34.106.250.139:43186). Jan 27 05:32:56.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-10.128.0.99:22-34.106.250.139:43186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.433591 sshd[3234]: Connection closed by authenticating user root 34.106.250.139 port 43142 [preauth] Jan 27 05:32:56.435000 audit[3234]: USER_ERR pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-10.128.0.99:22-34.106.250.139:43142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.457171 systemd[1]: sshd@93-10.128.0.99:22-34.106.250.139:43142.service: Deactivated successfully. Jan 27 05:32:56.563216 sshd[3233]: Invalid user admin from 34.106.250.139 port 43154 Jan 27 05:32:56.604531 sshd[3243]: Invalid user guest from 34.106.250.139 port 43160 Jan 27 05:32:56.618145 sshd[3235]: Invalid user test from 34.106.250.139 port 43156 Jan 27 05:32:56.663000 audit[3243]: USER_ERR pid=3243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.665133 sshd[3243]: Connection closed by invalid user guest 34.106.250.139 port 43160 [preauth] Jan 27 05:32:56.683154 sshd[3235]: Connection closed by invalid user test 34.106.250.139 port 43156 [preauth] Jan 27 05:32:56.686000 audit[3235]: USER_ERR pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.696808 systemd[1]: sshd@94-10.128.0.99:22-34.106.250.139:43156.service: Deactivated successfully. Jan 27 05:32:56.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-10.128.0.99:22-34.106.250.139:43156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.702301 systemd[1]: sshd@95-10.128.0.99:22-34.106.250.139:43160.service: Deactivated successfully. Jan 27 05:32:56.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-10.128.0.99:22-34.106.250.139:43160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.718592 sshd[3233]: Connection closed by invalid user admin 34.106.250.139 port 43154 [preauth] Jan 27 05:32:56.717000 audit[3233]: USER_ERR pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.733680 systemd[1]: sshd@92-10.128.0.99:22-34.106.250.139:43154.service: Deactivated successfully. Jan 27 05:32:56.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-10.128.0.99:22-34.106.250.139:43154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.772627 systemd[1]: Started sshd@100-10.128.0.99:22-34.106.250.139:43214.service - OpenSSH per-connection server daemon (34.106.250.139:43214). Jan 27 05:32:56.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-10.128.0.99:22-34.106.250.139:43214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-10.128.0.99:22-34.106.250.139:43196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.777692 systemd[1]: Started sshd@101-10.128.0.99:22-34.106.250.139:43196.service - OpenSSH per-connection server daemon (34.106.250.139:43196). Jan 27 05:32:56.782019 systemd[1]: Started sshd@102-10.128.0.99:22-34.106.250.139:43206.service - OpenSSH per-connection server daemon (34.106.250.139:43206). Jan 27 05:32:56.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-10.128.0.99:22-34.106.250.139:43206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.824689 sshd[3262]: Invalid user mysql from 34.106.250.139 port 43178 Jan 27 05:32:56.847434 sshd[3261]: Invalid user info from 34.106.250.139 port 43162 Jan 27 05:32:56.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-10.128.0.99:22-34.106.250.139:43228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.875042 systemd[1]: Started sshd@103-10.128.0.99:22-34.106.250.139:43228.service - OpenSSH per-connection server daemon (34.106.250.139:43228). Jan 27 05:32:56.918426 sshd[3263]: Connection closed by authenticating user adm 34.106.250.139 port 43174 [preauth] Jan 27 05:32:56.917000 audit[3263]: USER_ERR pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.931000 audit[3262]: USER_ERR pid=3262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-10.128.0.99:22-34.106.250.139:43244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.937566 sshd[3262]: Connection closed by invalid user mysql 34.106.250.139 port 43178 [preauth] Jan 27 05:32:56.932996 systemd[1]: Started sshd@104-10.128.0.99:22-34.106.250.139:43244.service - OpenSSH per-connection server daemon (34.106.250.139:43244). Jan 27 05:32:56.957945 systemd[1]: sshd@97-10.128.0.99:22-34.106.250.139:43178.service: Deactivated successfully. Jan 27 05:32:56.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-10.128.0.99:22-34.106.250.139:43178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.964286 systemd[1]: sshd@98-10.128.0.99:22-34.106.250.139:43174.service: Deactivated successfully. Jan 27 05:32:56.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-10.128.0.99:22-34.106.250.139:43174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.972252 sshd[3261]: Connection closed by invalid user info 34.106.250.139 port 43162 [preauth] Jan 27 05:32:56.981000 audit[3261]: USER_ERR pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:56.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-10.128.0.99:22-34.106.250.139:43248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:56.998221 systemd[1]: Started sshd@105-10.128.0.99:22-34.106.250.139:43248.service - OpenSSH per-connection server daemon (34.106.250.139:43248). Jan 27 05:32:57.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-10.128.0.99:22-34.106.250.139:43162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.013039 systemd[1]: sshd@96-10.128.0.99:22-34.106.250.139:43162.service: Deactivated successfully. Jan 27 05:32:57.051699 sshd[3266]: Invalid user postgres from 34.106.250.139 port 43186 Jan 27 05:32:57.118700 sshd[3266]: Connection closed by invalid user postgres 34.106.250.139 port 43186 [preauth] Jan 27 05:32:57.122000 audit[3266]: USER_ERR pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-10.128.0.99:22-34.106.250.139:43256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.145588 systemd[1]: Started sshd@106-10.128.0.99:22-34.106.250.139:43256.service - OpenSSH per-connection server daemon (34.106.250.139:43256). Jan 27 05:32:57.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-10.128.0.99:22-34.106.250.139:43186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.149477 systemd[1]: sshd@99-10.128.0.99:22-34.106.250.139:43186.service: Deactivated successfully. Jan 27 05:32:57.395507 sshd[3286]: Invalid user oracle from 34.106.250.139 port 43214 Jan 27 05:32:57.432780 sshd[3292]: Invalid user pi from 34.106.250.139 port 43244 Jan 27 05:32:57.475462 sshd[3286]: Connection closed by invalid user oracle 34.106.250.139 port 43214 [preauth] Jan 27 05:32:57.489000 audit[3286]: USER_ERR pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-10.128.0.99:22-34.106.250.139:43214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.515269 systemd[1]: sshd@100-10.128.0.99:22-34.106.250.139:43214.service: Deactivated successfully. Jan 27 05:32:57.527165 sshd[3292]: Connection closed by invalid user pi 34.106.250.139 port 43244 [preauth] Jan 27 05:32:57.527000 audit[3292]: USER_ERR pid=3292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-10.128.0.99:22-34.106.250.139:43266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.535089 systemd[1]: Started sshd@107-10.128.0.99:22-34.106.250.139:43266.service - OpenSSH per-connection server daemon (34.106.250.139:43266). Jan 27 05:32:57.541076 systemd[1]: Started sshd@108-10.128.0.99:22-34.106.250.139:43276.service - OpenSSH per-connection server daemon (34.106.250.139:43276). Jan 27 05:32:57.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-10.128.0.99:22-34.106.250.139:43276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.550382 systemd[1]: Started sshd@109-10.128.0.99:22-34.106.250.139:43284.service - OpenSSH per-connection server daemon (34.106.250.139:43284). Jan 27 05:32:57.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-10.128.0.99:22-34.106.250.139:43284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.552805 systemd[1]: sshd@104-10.128.0.99:22-34.106.250.139:43244.service: Deactivated successfully. Jan 27 05:32:57.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-10.128.0.99:22-34.106.250.139:43244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.572935 sshd[3287]: Invalid user user from 34.106.250.139 port 43196 Jan 27 05:32:57.581694 sshd[3288]: Invalid user administrator from 34.106.250.139 port 43206 Jan 27 05:32:57.613248 sshd[3290]: Invalid user ftp from 34.106.250.139 port 43228 Jan 27 05:32:57.659105 sshd[3290]: Connection closed by invalid user ftp 34.106.250.139 port 43228 [preauth] Jan 27 05:32:57.657000 audit[3290]: USER_ERR pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.678000 audit[3287]: USER_ERR pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.680557 sshd[3299]: Invalid user puppet from 34.106.250.139 port 43248 Jan 27 05:32:57.680959 sshd[3287]: Connection closed by invalid user user 34.106.250.139 port 43196 [preauth] Jan 27 05:32:57.685000 audit[3288]: USER_ERR pid=3288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.688616 sshd[3288]: Connection closed by invalid user administrator 34.106.250.139 port 43206 [preauth] Jan 27 05:32:57.689038 systemd[1]: sshd@103-10.128.0.99:22-34.106.250.139:43228.service: Deactivated successfully. Jan 27 05:32:57.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-10.128.0.99:22-34.106.250.139:43228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.690653 sshd[3307]: Invalid user ansible from 34.106.250.139 port 43256 Jan 27 05:32:57.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-10.128.0.99:22-34.106.250.139:43196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.737766 systemd[1]: sshd@101-10.128.0.99:22-34.106.250.139:43196.service: Deactivated successfully. Jan 27 05:32:57.744019 systemd[1]: sshd@102-10.128.0.99:22-34.106.250.139:43206.service: Deactivated successfully. Jan 27 05:32:57.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-10.128.0.99:22-34.106.250.139:43206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.778117 systemd[1]: Started sshd@110-10.128.0.99:22-34.106.250.139:43286.service - OpenSSH per-connection server daemon (34.106.250.139:43286). Jan 27 05:32:57.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-10.128.0.99:22-34.106.250.139:43286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-10.128.0.99:22-34.106.250.139:43298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.784901 systemd[1]: Started sshd@111-10.128.0.99:22-34.106.250.139:43298.service - OpenSSH per-connection server daemon (34.106.250.139:43298). Jan 27 05:32:57.818552 sshd[3299]: Connection closed by invalid user puppet 34.106.250.139 port 43248 [preauth] Jan 27 05:32:57.818000 audit[3299]: USER_ERR pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.818000 audit[3307]: USER_ERR pid=3307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:57.820262 sshd[3307]: Connection closed by invalid user ansible 34.106.250.139 port 43256 [preauth] Jan 27 05:32:57.830032 systemd[1]: sshd@105-10.128.0.99:22-34.106.250.139:43248.service: Deactivated successfully. Jan 27 05:32:57.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-10.128.0.99:22-34.106.250.139:43248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.861235 systemd[1]: sshd@106-10.128.0.99:22-34.106.250.139:43256.service: Deactivated successfully. Jan 27 05:32:57.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-10.128.0.99:22-34.106.250.139:43256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-10.128.0.99:22-34.106.250.139:43314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.905025 systemd[1]: Started sshd@112-10.128.0.99:22-34.106.250.139:43314.service - OpenSSH per-connection server daemon (34.106.250.139:43314). Jan 27 05:32:57.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-10.128.0.99:22-34.106.250.139:43316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:57.911685 systemd[1]: Started sshd@113-10.128.0.99:22-34.106.250.139:43316.service - OpenSSH per-connection server daemon (34.106.250.139:43316). Jan 27 05:32:58.140048 sshd[3326]: Invalid user azureuser from 34.106.250.139 port 43284 Jan 27 05:32:58.141080 sshd[3324]: Invalid user ec2-user from 34.106.250.139 port 43266 Jan 27 05:32:58.200519 sshd[3324]: Connection closed by invalid user ec2-user 34.106.250.139 port 43266 [preauth] Jan 27 05:32:58.200000 audit[3324]: USER_ERR pid=3324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:58.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-10.128.0.99:22-34.106.250.139:43266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.210201 systemd[1]: sshd@107-10.128.0.99:22-34.106.250.139:43266.service: Deactivated successfully. Jan 27 05:32:58.252490 sshd[3326]: Connection closed by invalid user azureuser 34.106.250.139 port 43284 [preauth] Jan 27 05:32:58.251000 audit[3326]: USER_ERR pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:58.270964 systemd[1]: sshd@109-10.128.0.99:22-34.106.250.139:43284.service: Deactivated successfully. Jan 27 05:32:58.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-10.128.0.99:22-34.106.250.139:43284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-10.128.0.99:22-34.106.250.139:43330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.288689 systemd[1]: Started sshd@114-10.128.0.99:22-34.106.250.139:43330.service - OpenSSH per-connection server daemon (34.106.250.139:43330). Jan 27 05:32:58.292941 systemd[1]: Started sshd@115-10.128.0.99:22-34.106.250.139:43328.service - OpenSSH per-connection server daemon (34.106.250.139:43328). Jan 27 05:32:58.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-10.128.0.99:22-34.106.250.139:43328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-10.128.0.99:22-34.106.250.139:43344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.298965 systemd[1]: Started sshd@116-10.128.0.99:22-34.106.250.139:43344.service - OpenSSH per-connection server daemon (34.106.250.139:43344). Jan 27 05:32:58.303194 sshd[3325]: Invalid user vagrant from 34.106.250.139 port 43276 Jan 27 05:32:58.384448 sshd[3341]: Invalid user rstudio from 34.106.250.139 port 43298 Jan 27 05:32:58.419052 sshd[3340]: Invalid user cisco from 34.106.250.139 port 43286 Jan 27 05:32:58.473933 sshd[3350]: Invalid user tomcat from 34.106.250.139 port 43314 Jan 27 05:32:58.475456 sshd[3341]: Connection closed by invalid user rstudio 34.106.250.139 port 43298 [preauth] Jan 27 05:32:58.486000 audit[3341]: USER_ERR pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:58.507000 audit[3325]: USER_ERR pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:58.509616 sshd[3325]: Connection closed by invalid user vagrant 34.106.250.139 port 43276 [preauth] Jan 27 05:32:58.517728 sshd[3351]: Invalid user manager from 34.106.250.139 port 43316 Jan 27 05:32:58.519442 systemd[1]: sshd@111-10.128.0.99:22-34.106.250.139:43298.service: Deactivated successfully. Jan 27 05:32:58.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-10.128.0.99:22-34.106.250.139:43298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.534966 sshd[3340]: Connection closed by invalid user cisco 34.106.250.139 port 43286 [preauth] Jan 27 05:32:58.533000 audit[3340]: USER_ERR pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:58.550795 systemd[1]: sshd@108-10.128.0.99:22-34.106.250.139:43276.service: Deactivated successfully. Jan 27 05:32:58.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-10.128.0.99:22-34.106.250.139:43276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.576368 sshd[3350]: Connection closed by invalid user tomcat 34.106.250.139 port 43314 [preauth] Jan 27 05:32:58.575000 audit[3350]: USER_ERR pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:58.580233 systemd[1]: Started sshd@117-10.128.0.99:22-34.106.250.139:43354.service - OpenSSH per-connection server daemon (34.106.250.139:43354). Jan 27 05:32:58.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-10.128.0.99:22-34.106.250.139:43354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.585359 systemd[1]: Started sshd@118-10.128.0.99:22-34.106.250.139:43356.service - OpenSSH per-connection server daemon (34.106.250.139:43356). Jan 27 05:32:58.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-10.128.0.99:22-34.106.250.139:43356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-10.128.0.99:22-34.106.250.139:43286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.589500 systemd[1]: sshd@110-10.128.0.99:22-34.106.250.139:43286.service: Deactivated successfully. Jan 27 05:32:58.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-10.128.0.99:22-34.106.250.139:43372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.633257 systemd[1]: Started sshd@119-10.128.0.99:22-34.106.250.139:43372.service - OpenSSH per-connection server daemon (34.106.250.139:43372). Jan 27 05:32:58.634267 systemd[1]: sshd@112-10.128.0.99:22-34.106.250.139:43314.service: Deactivated successfully. Jan 27 05:32:58.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-10.128.0.99:22-34.106.250.139:43314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.673434 sshd[3351]: Connection closed by invalid user manager 34.106.250.139 port 43316 [preauth] Jan 27 05:32:58.677000 audit[3351]: USER_ERR pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:58.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-10.128.0.99:22-34.106.250.139:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.694893 systemd[1]: Started sshd@120-10.128.0.99:22-34.106.250.139:43380.service - OpenSSH per-connection server daemon (34.106.250.139:43380). Jan 27 05:32:58.701081 systemd[1]: sshd@113-10.128.0.99:22-34.106.250.139:43316.service: Deactivated successfully. Jan 27 05:32:58.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-10.128.0.99:22-34.106.250.139:43316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:58.977565 sshd[3369]: Invalid user from 34.106.250.139 port 43328 Jan 27 05:32:59.015907 systemd[1]: Started sshd@121-10.128.0.99:22-34.106.250.139:43412.service - OpenSSH per-connection server daemon (34.106.250.139:43412). Jan 27 05:32:59.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-10.128.0.99:22-34.106.250.139:43412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.028059 systemd[1]: Started sshd@122-10.128.0.99:22-34.106.250.139:43390.service - OpenSSH per-connection server daemon (34.106.250.139:43390). Jan 27 05:32:59.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-10.128.0.99:22-34.106.250.139:43390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.032117 systemd[1]: Started sshd@123-10.128.0.99:22-34.106.250.139:43398.service - OpenSSH per-connection server daemon (34.106.250.139:43398). Jan 27 05:32:59.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-10.128.0.99:22-34.106.250.139:43398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.046424 sshd[3368]: Invalid user anonymous from 34.106.250.139 port 43330 Jan 27 05:32:59.052000 audit[3369]: USER_ERR pid=3369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.056498 sshd[3369]: Connection closed by invalid user 34.106.250.139 port 43328 [preauth] Jan 27 05:32:59.061752 systemd[1]: sshd@115-10.128.0.99:22-34.106.250.139:43328.service: Deactivated successfully. Jan 27 05:32:59.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-10.128.0.99:22-34.106.250.139:43328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.080436 sshd[3370]: Connection closed by authenticating user root 34.106.250.139 port 43344 [preauth] Jan 27 05:32:59.079000 audit[3370]: USER_ERR pid=3370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.091671 systemd[1]: sshd@116-10.128.0.99:22-34.106.250.139:43344.service: Deactivated successfully. Jan 27 05:32:59.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-10.128.0.99:22-34.106.250.139:43344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.126478 sshd[3368]: Connection closed by invalid user anonymous 34.106.250.139 port 43330 [preauth] Jan 27 05:32:59.125000 audit[3368]: USER_ERR pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-10.128.0.99:22-34.106.250.139:43330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.145141 systemd[1]: sshd@114-10.128.0.99:22-34.106.250.139:43330.service: Deactivated successfully. Jan 27 05:32:59.153424 sshd[3383]: Invalid user test from 34.106.250.139 port 43356 Jan 27 05:32:59.163429 sshd[3387]: Invalid user guest from 34.106.250.139 port 43372 Jan 27 05:32:59.212316 sshd[3381]: Invalid user admin from 34.106.250.139 port 43354 Jan 27 05:32:59.229330 sshd[3383]: Connection closed by invalid user test 34.106.250.139 port 43356 [preauth] Jan 27 05:32:59.230000 audit[3383]: USER_ERR pid=3383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-10.128.0.99:22-34.106.250.139:43418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.243155 systemd[1]: Started sshd@124-10.128.0.99:22-34.106.250.139:43418.service - OpenSSH per-connection server daemon (34.106.250.139:43418). Jan 27 05:32:59.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-10.128.0.99:22-34.106.250.139:43356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.256038 systemd[1]: sshd@118-10.128.0.99:22-34.106.250.139:43356.service: Deactivated successfully. Jan 27 05:32:59.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-10.128.0.99:22-34.106.250.139:43422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.290480 systemd[1]: Started sshd@125-10.128.0.99:22-34.106.250.139:43422.service - OpenSSH per-connection server daemon (34.106.250.139:43422). Jan 27 05:32:59.317478 sshd[3387]: Connection closed by invalid user guest 34.106.250.139 port 43372 [preauth] Jan 27 05:32:59.316000 audit[3387]: USER_ERR pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.328797 sshd[3391]: Invalid user info from 34.106.250.139 port 43380 Jan 27 05:32:59.330721 sshd[3381]: Connection closed by invalid user admin 34.106.250.139 port 43354 [preauth] Jan 27 05:32:59.352000 audit[3381]: USER_ERR pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-10.128.0.99:22-34.106.250.139:43438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.357742 systemd[1]: Started sshd@126-10.128.0.99:22-34.106.250.139:43438.service - OpenSSH per-connection server daemon (34.106.250.139:43438). Jan 27 05:32:59.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-10.128.0.99:22-34.106.250.139:43372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.361051 systemd[1]: sshd@119-10.128.0.99:22-34.106.250.139:43372.service: Deactivated successfully. Jan 27 05:32:59.373191 systemd[1]: sshd@117-10.128.0.99:22-34.106.250.139:43354.service: Deactivated successfully. Jan 27 05:32:59.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-10.128.0.99:22-34.106.250.139:43354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.425690 sshd[3391]: Connection closed by invalid user info 34.106.250.139 port 43380 [preauth] Jan 27 05:32:59.424000 audit[3391]: USER_ERR pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-10.128.0.99:22-34.106.250.139:43444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.447984 systemd[1]: Started sshd@127-10.128.0.99:22-34.106.250.139:43444.service - OpenSSH per-connection server daemon (34.106.250.139:43444). Jan 27 05:32:59.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-10.128.0.99:22-34.106.250.139:43380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.476036 systemd[1]: sshd@120-10.128.0.99:22-34.106.250.139:43380.service: Deactivated successfully. Jan 27 05:32:59.665294 sshd[3406]: Invalid user postgres from 34.106.250.139 port 43412 Jan 27 05:32:59.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-10.128.0.99:22-34.106.250.139:43466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.767110 systemd[1]: Started sshd@128-10.128.0.99:22-34.106.250.139:43466.service - OpenSSH per-connection server daemon (34.106.250.139:43466). Jan 27 05:32:59.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-10.128.0.99:22-34.106.250.139:43456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.772895 systemd[1]: Started sshd@129-10.128.0.99:22-34.106.250.139:43456.service - OpenSSH per-connection server daemon (34.106.250.139:43456). Jan 27 05:32:59.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-10.128.0.99:22-34.106.250.139:43476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.780111 systemd[1]: Started sshd@130-10.128.0.99:22-34.106.250.139:43476.service - OpenSSH per-connection server daemon (34.106.250.139:43476). Jan 27 05:32:59.795013 sshd[3406]: Connection closed by invalid user postgres 34.106.250.139 port 43412 [preauth] Jan 27 05:32:59.797000 audit[3406]: USER_ERR pid=3406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-10.128.0.99:22-34.106.250.139:43412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.831195 systemd[1]: sshd@121-10.128.0.99:22-34.106.250.139:43412.service: Deactivated successfully. Jan 27 05:32:59.833895 sshd[3407]: Connection closed by authenticating user adm 34.106.250.139 port 43390 [preauth] Jan 27 05:32:59.832000 audit[3407]: USER_ERR pid=3407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.835816 sshd[3408]: Invalid user mysql from 34.106.250.139 port 43398 Jan 27 05:32:59.840493 kubelet[2563]: E0127 05:32:59.838186 2563 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:59.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-10.128.0.99:22-34.106.250.139:43390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.873865 systemd[1]: sshd@122-10.128.0.99:22-34.106.250.139:43390.service: Deactivated successfully. Jan 27 05:32:59.925951 sshd[3423]: Invalid user administrator from 34.106.250.139 port 43422 Jan 27 05:32:59.942000 audit[3408]: USER_ERR pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:32:59.944559 sshd[3408]: Connection closed by invalid user mysql 34.106.250.139 port 43398 [preauth] Jan 27 05:32:59.961885 kubelet[2563]: E0127 05:32:59.961734 2563 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356.188e7f924f085bd3 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,UID:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,},FirstTimestamp:2026-01-27 05:32:49.971084243 +0000 UTC m=+1.473916181,LastTimestamp:2026-01-27 05:32:49.971084243 +0000 UTC m=+1.473916181,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356,}" Jan 27 05:32:59.978757 systemd[1]: sshd@123-10.128.0.99:22-34.106.250.139:43398.service: Deactivated successfully. Jan 27 05:32:59.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-10.128.0.99:22-34.106.250.139:43398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:32:59.992151 sshd[3417]: Invalid user user from 34.106.250.139 port 43418 Jan 27 05:32:59.993743 kubelet[2563]: I0127 05:32:59.993242 2563 kubelet_node_status.go:78] "Successfully registered node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:32:59.993743 kubelet[2563]: E0127 05:32:59.993295 2563 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\": node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" Jan 27 05:32:59.996007 kubelet[2563]: I0127 05:32:59.994324 2563 apiserver.go:52] "Watching apiserver" Jan 27 05:33:00.002769 kubelet[2563]: I0127 05:33:00.002724 2563 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:00.050782 sshd[3423]: Connection closed by invalid user administrator 34.106.250.139 port 43422 [preauth] Jan 27 05:33:00.051000 audit[3423]: USER_ERR pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-10.128.0.99:22-34.106.250.139:43422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.070017 systemd[1]: sshd@125-10.128.0.99:22-34.106.250.139:43422.service: Deactivated successfully. Jan 27 05:33:00.079723 sshd[3427]: Invalid user oracle from 34.106.250.139 port 43438 Jan 27 05:33:00.086291 kubelet[2563]: E0127 05:33:00.086226 2563 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:00.086573 kubelet[2563]: I0127 05:33:00.086536 2563 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:00.105206 kubelet[2563]: I0127 05:33:00.105164 2563 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jan 27 05:33:00.120455 sshd[3417]: Connection closed by invalid user user 34.106.250.139 port 43418 [preauth] Jan 27 05:33:00.121040 kubelet[2563]: E0127 05:33:00.120647 2563 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:00.121040 kubelet[2563]: I0127 05:33:00.120681 2563 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:00.125000 audit[3417]: USER_ERR pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-10.128.0.99:22-34.106.250.139:43478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.133742 systemd[1]: Started sshd@131-10.128.0.99:22-34.106.250.139:43478.service - OpenSSH per-connection server daemon (34.106.250.139:43478). Jan 27 05:33:00.142279 kubelet[2563]: E0127 05:33:00.142208 2563 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:00.145554 systemd[1]: Started sshd@132-10.128.0.99:22-34.106.250.139:43492.service - OpenSSH per-connection server daemon (34.106.250.139:43492). Jan 27 05:33:00.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-10.128.0.99:22-34.106.250.139:43492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.157712 systemd[1]: sshd@124-10.128.0.99:22-34.106.250.139:43418.service: Deactivated successfully. Jan 27 05:33:00.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-10.128.0.99:22-34.106.250.139:43418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.174318 sshd[3427]: Connection closed by invalid user oracle 34.106.250.139 port 43438 [preauth] Jan 27 05:33:00.177000 audit[3427]: USER_ERR pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.206829 systemd[1]: sshd@126-10.128.0.99:22-34.106.250.139:43438.service: Deactivated successfully. Jan 27 05:33:00.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-10.128.0.99:22-34.106.250.139:43438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.222994 systemd[1]: Started sshd@133-10.128.0.99:22-34.106.250.139:43502.service - OpenSSH per-connection server daemon (34.106.250.139:43502). Jan 27 05:33:00.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-10.128.0.99:22-34.106.250.139:43502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.254994 sshd[3435]: Invalid user ftp from 34.106.250.139 port 43444 Jan 27 05:33:00.371000 audit[3435]: USER_ERR pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.374199 systemd[1]: Started sshd@134-10.128.0.99:22-34.106.250.139:43514.service - OpenSSH per-connection server daemon (34.106.250.139:43514). Jan 27 05:33:00.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-10.128.0.99:22-34.106.250.139:43514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.377097 sshd[3435]: Connection closed by invalid user ftp 34.106.250.139 port 43444 [preauth] Jan 27 05:33:00.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-10.128.0.99:22-34.106.250.139:43508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.380529 systemd[1]: Started sshd@135-10.128.0.99:22-34.106.250.139:43508.service - OpenSSH per-connection server daemon (34.106.250.139:43508). Jan 27 05:33:00.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-10.128.0.99:22-34.106.250.139:43530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.408460 systemd[1]: Started sshd@136-10.128.0.99:22-34.106.250.139:43530.service - OpenSSH per-connection server daemon (34.106.250.139:43530). Jan 27 05:33:00.444861 systemd[1]: sshd@127-10.128.0.99:22-34.106.250.139:43444.service: Deactivated successfully. Jan 27 05:33:00.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-10.128.0.99:22-34.106.250.139:43444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.634904 sshd[3451]: Invalid user ansible from 34.106.250.139 port 43476 Jan 27 05:33:00.646811 sshd[3448]: Invalid user puppet from 34.106.250.139 port 43466 Jan 27 05:33:00.711571 sshd[3449]: Invalid user pi from 34.106.250.139 port 43456 Jan 27 05:33:00.774000 audit[3448]: USER_ERR pid=3448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.776532 sshd[3448]: Connection closed by invalid user puppet 34.106.250.139 port 43466 [preauth] Jan 27 05:33:00.781684 kernel: kauditd_printk_skb: 120 callbacks suppressed Jan 27 05:33:00.781917 kernel: audit: type=1109 audit(1769491980.774:750): pid=3448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.784098 sshd[3451]: Connection closed by invalid user ansible 34.106.250.139 port 43476 [preauth] Jan 27 05:33:00.815836 systemd[1]: sshd@128-10.128.0.99:22-34.106.250.139:43466.service: Deactivated successfully. Jan 27 05:33:00.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-10.128.0.99:22-34.106.250.139:43466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.844901 kernel: audit: type=1131 audit(1769491980.817:751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-10.128.0.99:22-34.106.250.139:43466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.849904 systemd[1]: sshd@130-10.128.0.99:22-34.106.250.139:43476.service: Deactivated successfully. Jan 27 05:33:00.818000 audit[3451]: USER_ERR pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.879858 kernel: audit: type=1109 audit(1769491980.818:752): pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-10.128.0.99:22-34.106.250.139:43476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.886669 sshd[3449]: Connection closed by invalid user pi 34.106.250.139 port 43456 [preauth] Jan 27 05:33:00.912516 kernel: audit: type=1131 audit(1769491980.849:753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-10.128.0.99:22-34.106.250.139:43476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.882000 audit[3449]: USER_ERR pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.930997 systemd[1]: sshd@129-10.128.0.99:22-34.106.250.139:43456.service: Deactivated successfully. Jan 27 05:33:00.945608 kernel: audit: type=1109 audit(1769491980.882:754): pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:00.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-10.128.0.99:22-34.106.250.139:43456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:00.976453 kernel: audit: type=1131 audit(1769491980.931:755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-10.128.0.99:22-34.106.250.139:43456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.018058 systemd[1]: Started sshd@137-10.128.0.99:22-34.106.250.139:43534.service - OpenSSH per-connection server daemon (34.106.250.139:43534). Jan 27 05:33:01.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-10.128.0.99:22-34.106.250.139:43534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.024985 systemd[1]: Started sshd@138-10.128.0.99:22-34.106.250.139:43548.service - OpenSSH per-connection server daemon (34.106.250.139:43548). Jan 27 05:33:01.037088 systemd[1]: Started sshd@139-10.128.0.99:22-34.106.250.139:43532.service - OpenSSH per-connection server daemon (34.106.250.139:43532). Jan 27 05:33:01.043739 kernel: audit: type=1130 audit(1769491981.017:756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-10.128.0.99:22-34.106.250.139:43534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.044509 update_engine[1561]: I20260127 05:33:01.044212 1561 update_attempter.cc:509] Updating boot flags... Jan 27 05:33:01.051949 sshd[3466]: Invalid user ec2-user from 34.106.250.139 port 43478 Jan 27 05:33:01.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-10.128.0.99:22-34.106.250.139:43548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.083799 kernel: audit: type=1130 audit(1769491981.024:757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-10.128.0.99:22-34.106.250.139:43548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-10.128.0.99:22-34.106.250.139:43532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.116771 kernel: audit: type=1130 audit(1769491981.035:758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-10.128.0.99:22-34.106.250.139:43532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.149731 sshd[3475]: Invalid user azureuser from 34.106.250.139 port 43502 Jan 27 05:33:01.151659 sshd[3479]: Invalid user rstudio from 34.106.250.139 port 43514 Jan 27 05:33:01.202047 sshd[3468]: Invalid user vagrant from 34.106.250.139 port 43492 Jan 27 05:33:01.212989 sshd[3466]: Connection closed by invalid user ec2-user 34.106.250.139 port 43478 [preauth] Jan 27 05:33:01.220000 audit[3466]: USER_ERR pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:01.247585 kernel: audit: type=1109 audit(1769491981.220:759): pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:01.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-10.128.0.99:22-34.106.250.139:43478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.273102 systemd[1]: sshd@131-10.128.0.99:22-34.106.250.139:43478.service: Deactivated successfully. Jan 27 05:33:01.338701 sshd[3480]: Invalid user cisco from 34.106.250.139 port 43508 Jan 27 05:33:01.345435 sshd[3475]: Connection closed by invalid user azureuser 34.106.250.139 port 43502 [preauth] Jan 27 05:33:01.344000 audit[3475]: USER_ERR pid=3475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:01.364113 systemd[1]: Started sshd@140-10.128.0.99:22-34.106.250.139:43560.service - OpenSSH per-connection server daemon (34.106.250.139:43560). Jan 27 05:33:01.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-10.128.0.99:22-34.106.250.139:43560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.380532 sshd[3481]: Invalid user tomcat from 34.106.250.139 port 43530 Jan 27 05:33:01.391304 systemd[1]: sshd@133-10.128.0.99:22-34.106.250.139:43502.service: Deactivated successfully. Jan 27 05:33:01.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-10.128.0.99:22-34.106.250.139:43502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.423675 systemd[1]: Started sshd@141-10.128.0.99:22-34.106.250.139:43572.service - OpenSSH per-connection server daemon (34.106.250.139:43572). Jan 27 05:33:01.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-10.128.0.99:22-34.106.250.139:43572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.430073 sshd[3479]: Connection closed by invalid user rstudio 34.106.250.139 port 43514 [preauth] Jan 27 05:33:01.428000 audit[3479]: USER_ERR pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:01.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-10.128.0.99:22-34.106.250.139:43514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.535270 systemd[1]: sshd@134-10.128.0.99:22-34.106.250.139:43514.service: Deactivated successfully. Jan 27 05:33:01.592000 audit[3468]: USER_ERR pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:01.594889 sshd[3468]: Connection closed by invalid user vagrant 34.106.250.139 port 43492 [preauth] Jan 27 05:33:01.622000 audit[3480]: USER_ERR pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:01.624039 sshd[3480]: Connection closed by invalid user cisco 34.106.250.139 port 43508 [preauth] Jan 27 05:33:01.685306 systemd[1]: sshd@135-10.128.0.99:22-34.106.250.139:43508.service: Deactivated successfully. Jan 27 05:33:01.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-10.128.0.99:22-34.106.250.139:43508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-10.128.0.99:22-34.106.250.139:43492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.700502 systemd[1]: sshd@132-10.128.0.99:22-34.106.250.139:43492.service: Deactivated successfully. Jan 27 05:33:01.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-10.128.0.99:22-34.106.250.139:43580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.743106 systemd[1]: Started sshd@142-10.128.0.99:22-34.106.250.139:43580.service - OpenSSH per-connection server daemon (34.106.250.139:43580). Jan 27 05:33:01.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-10.128.0.99:22-34.106.250.139:43584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.749056 systemd[1]: Started sshd@143-10.128.0.99:22-34.106.250.139:43584.service - OpenSSH per-connection server daemon (34.106.250.139:43584). Jan 27 05:33:01.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-10.128.0.99:22-34.106.250.139:43588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:01.756021 systemd[1]: Started sshd@144-10.128.0.99:22-34.106.250.139:43588.service - OpenSSH per-connection server daemon (34.106.250.139:43588). Jan 27 05:33:01.791483 sshd[3481]: Connection closed by invalid user tomcat 34.106.250.139 port 43530 [preauth] Jan 27 05:33:01.790000 audit[3481]: USER_ERR pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:01.806659 systemd[1]: sshd@136-10.128.0.99:22-34.106.250.139:43530.service: Deactivated successfully. Jan 27 05:33:01.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-10.128.0.99:22-34.106.250.139:43530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.015297 sshd[3512]: Invalid user manager from 34.106.250.139 port 43532 Jan 27 05:33:02.099000 audit[3512]: USER_ERR pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.101105 sshd[3512]: Connection closed by invalid user manager 34.106.250.139 port 43532 [preauth] Jan 27 05:33:02.111939 systemd[1]: sshd@139-10.128.0.99:22-34.106.250.139:43532.service: Deactivated successfully. Jan 27 05:33:02.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-10.128.0.99:22-34.106.250.139:43532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.135443 sshd[3511]: Invalid user anonymous from 34.106.250.139 port 43548 Jan 27 05:33:02.147101 sshd[3510]: Invalid user from 34.106.250.139 port 43534 Jan 27 05:33:02.191732 sshd[3552]: Invalid user info from 34.106.250.139 port 43588 Jan 27 05:33:02.198434 sshd[3510]: Connection closed by invalid user 34.106.250.139 port 43534 [preauth] Jan 27 05:33:02.198000 audit[3510]: USER_ERR pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.209430 sshd[3511]: Connection closed by invalid user anonymous 34.106.250.139 port 43548 [preauth] Jan 27 05:33:02.211730 systemd[1]: sshd@137-10.128.0.99:22-34.106.250.139:43534.service: Deactivated successfully. Jan 27 05:33:02.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-10.128.0.99:22-34.106.250.139:43534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.212000 audit[3511]: USER_ERR pid=3511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.238841 systemd[1]: sshd@138-10.128.0.99:22-34.106.250.139:43548.service: Deactivated successfully. Jan 27 05:33:02.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-10.128.0.99:22-34.106.250.139:43548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.248344 kubelet[2563]: I0127 05:33:02.248183 2563 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:02.251000 audit[3552]: USER_ERR pid=3552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.253725 sshd[3552]: Connection closed by invalid user info 34.106.250.139 port 43588 [preauth] Jan 27 05:33:02.267524 sshd[3531]: Connection closed by authenticating user root 34.106.250.139 port 43560 [preauth] Jan 27 05:33:02.268000 audit[3531]: USER_ERR pid=3531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-10.128.0.99:22-34.106.250.139:43588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.271420 systemd[1]: sshd@144-10.128.0.99:22-34.106.250.139:43588.service: Deactivated successfully. Jan 27 05:33:02.286427 kubelet[2563]: W0127 05:33:02.285641 2563 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must be no more than 63 characters] Jan 27 05:33:02.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-10.128.0.99:22-34.106.250.139:43560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.303787 systemd[1]: sshd@140-10.128.0.99:22-34.106.250.139:43560.service: Deactivated successfully. Jan 27 05:33:02.340257 systemd[1]: Started sshd@145-10.128.0.99:22-34.106.250.139:43594.service - OpenSSH per-connection server daemon (34.106.250.139:43594). Jan 27 05:33:02.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-10.128.0.99:22-34.106.250.139:43594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-10.128.0.99:22-34.106.250.139:43590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.347374 systemd[1]: Started sshd@146-10.128.0.99:22-34.106.250.139:43590.service - OpenSSH per-connection server daemon (34.106.250.139:43590). Jan 27 05:33:02.354115 sshd[3535]: Invalid user admin from 34.106.250.139 port 43572 Jan 27 05:33:02.357766 kubelet[2563]: I0127 05:33:02.355807 2563 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" podStartSLOduration=0.355739859 podStartE2EDuration="355.739859ms" podCreationTimestamp="2026-01-27 05:33:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2026-01-27 05:33:02.355616763 +0000 UTC m=+13.858448690" watchObservedRunningTime="2026-01-27 05:33:02.355739859 +0000 UTC m=+13.858571792" Jan 27 05:33:02.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-10.128.0.99:22-34.106.250.139:43602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.358767 systemd[1]: Started sshd@147-10.128.0.99:22-34.106.250.139:43602.service - OpenSSH per-connection server daemon (34.106.250.139:43602). Jan 27 05:33:02.364792 systemd[1]: Started sshd@148-10.128.0.99:22-34.106.250.139:43614.service - OpenSSH per-connection server daemon (34.106.250.139:43614). Jan 27 05:33:02.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-10.128.0.99:22-34.106.250.139:43614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.377827 sshd[3551]: Invalid user guest from 34.106.250.139 port 43584 Jan 27 05:33:02.419715 sshd[3550]: Invalid user test from 34.106.250.139 port 43580 Jan 27 05:33:02.482000 audit[3550]: USER_ERR pid=3550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.485889 sshd[3550]: Connection closed by invalid user test 34.106.250.139 port 43580 [preauth] Jan 27 05:33:02.495578 sshd[3535]: Connection closed by invalid user admin 34.106.250.139 port 43572 [preauth] Jan 27 05:33:02.494000 audit[3535]: USER_ERR pid=3535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.523278 systemd[1]: sshd@142-10.128.0.99:22-34.106.250.139:43580.service: Deactivated successfully. Jan 27 05:33:02.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-10.128.0.99:22-34.106.250.139:43580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.530612 systemd[1]: sshd@141-10.128.0.99:22-34.106.250.139:43572.service: Deactivated successfully. Jan 27 05:33:02.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-10.128.0.99:22-34.106.250.139:43572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.536545 sshd[3551]: Connection closed by invalid user guest 34.106.250.139 port 43584 [preauth] Jan 27 05:33:02.535000 audit[3551]: USER_ERR pid=3551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.567159 systemd[1]: sshd@143-10.128.0.99:22-34.106.250.139:43584.service: Deactivated successfully. Jan 27 05:33:02.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-10.128.0.99:22-34.106.250.139:43584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-10.128.0.99:22-34.106.250.139:43618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.619381 systemd[1]: Started sshd@149-10.128.0.99:22-34.106.250.139:43618.service - OpenSSH per-connection server daemon (34.106.250.139:43618). Jan 27 05:33:02.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-10.128.0.99:22-34.106.250.139:43630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.625794 systemd[1]: Started sshd@150-10.128.0.99:22-34.106.250.139:43630.service - OpenSSH per-connection server daemon (34.106.250.139:43630). Jan 27 05:33:02.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-10.128.0.99:22-34.106.250.139:43640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:02.630317 systemd[1]: Started sshd@151-10.128.0.99:22-34.106.250.139:43640.service - OpenSSH per-connection server daemon (34.106.250.139:43640). Jan 27 05:33:02.633887 systemd[1]: Reload requested from client PID 3592 ('systemctl') (unit session-8.scope)... Jan 27 05:33:02.633915 systemd[1]: Reloading... Jan 27 05:33:02.754759 kubelet[2563]: I0127 05:33:02.753639 2563 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:02.782929 kubelet[2563]: W0127 05:33:02.781735 2563 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must be no more than 63 characters] Jan 27 05:33:02.933000 audit[3583]: USER_ERR pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:02.934786 sshd[3583]: Connection closed by authenticating user adm 34.106.250.139 port 43590 [preauth] Jan 27 05:33:03.056450 zram_generator::config[3673]: No configuration found. Jan 27 05:33:03.479114 systemd[1]: Reloading finished in 844 ms. Jan 27 05:33:03.510500 systemd[1]: sshd@146-10.128.0.99:22-34.106.250.139:43590.service: Deactivated successfully. Jan 27 05:33:03.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-10.128.0.99:22-34.106.250.139:43590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.528000 audit: BPF prog-id=116 op=LOAD Jan 27 05:33:03.528000 audit: BPF prog-id=83 op=UNLOAD Jan 27 05:33:03.528000 audit: BPF prog-id=117 op=LOAD Jan 27 05:33:03.528000 audit: BPF prog-id=118 op=LOAD Jan 27 05:33:03.528000 audit: BPF prog-id=84 op=UNLOAD Jan 27 05:33:03.528000 audit: BPF prog-id=85 op=UNLOAD Jan 27 05:33:03.528000 audit: BPF prog-id=119 op=LOAD Jan 27 05:33:03.529000 audit: BPF prog-id=66 op=UNLOAD Jan 27 05:33:03.530000 audit: BPF prog-id=120 op=LOAD Jan 27 05:33:03.530000 audit: BPF prog-id=79 op=UNLOAD Jan 27 05:33:03.530000 audit: BPF prog-id=121 op=LOAD Jan 27 05:33:03.531000 audit: BPF prog-id=122 op=LOAD Jan 27 05:33:03.531000 audit: BPF prog-id=80 op=UNLOAD Jan 27 05:33:03.531000 audit: BPF prog-id=81 op=UNLOAD Jan 27 05:33:03.532000 audit: BPF prog-id=123 op=LOAD Jan 27 05:33:03.532000 audit: BPF prog-id=67 op=UNLOAD Jan 27 05:33:03.532000 audit: BPF prog-id=124 op=LOAD Jan 27 05:33:03.532000 audit: BPF prog-id=125 op=LOAD Jan 27 05:33:03.532000 audit: BPF prog-id=68 op=UNLOAD Jan 27 05:33:03.532000 audit: BPF prog-id=69 op=UNLOAD Jan 27 05:33:03.533000 audit: BPF prog-id=126 op=LOAD Jan 27 05:33:03.533000 audit: BPF prog-id=127 op=LOAD Jan 27 05:33:03.533000 audit: BPF prog-id=70 op=UNLOAD Jan 27 05:33:03.533000 audit: BPF prog-id=71 op=UNLOAD Jan 27 05:33:03.534000 audit: BPF prog-id=128 op=LOAD Jan 27 05:33:03.534000 audit: BPF prog-id=82 op=UNLOAD Jan 27 05:33:03.536000 audit: BPF prog-id=129 op=LOAD Jan 27 05:33:03.536000 audit: BPF prog-id=78 op=UNLOAD Jan 27 05:33:03.537000 audit: BPF prog-id=130 op=LOAD Jan 27 05:33:03.537000 audit: BPF prog-id=72 op=UNLOAD Jan 27 05:33:03.537000 audit: BPF prog-id=131 op=LOAD Jan 27 05:33:03.537000 audit: BPF prog-id=132 op=LOAD Jan 27 05:33:03.537000 audit: BPF prog-id=73 op=UNLOAD Jan 27 05:33:03.537000 audit: BPF prog-id=74 op=UNLOAD Jan 27 05:33:03.539000 audit: BPF prog-id=133 op=LOAD Jan 27 05:33:03.539000 audit: BPF prog-id=75 op=UNLOAD Jan 27 05:33:03.539000 audit: BPF prog-id=134 op=LOAD Jan 27 05:33:03.539000 audit: BPF prog-id=135 op=LOAD Jan 27 05:33:03.539000 audit: BPF prog-id=76 op=UNLOAD Jan 27 05:33:03.539000 audit: BPF prog-id=77 op=UNLOAD Jan 27 05:33:03.604625 systemd[1]: Stopping kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:33:03.609273 systemd[1]: Started sshd@152-10.128.0.99:22-34.106.250.139:43648.service - OpenSSH per-connection server daemon (34.106.250.139:43648). Jan 27 05:33:03.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-10.128.0.99:22-34.106.250.139:43648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-10.128.0.99:22-34.106.250.139:43650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.612362 systemd[1]: Started sshd@153-10.128.0.99:22-34.106.250.139:43650.service - OpenSSH per-connection server daemon (34.106.250.139:43650). Jan 27 05:33:03.614724 sshd[3585]: Invalid user user from 34.106.250.139 port 43614 Jan 27 05:33:03.617792 systemd[1]: Started sshd@154-10.128.0.99:22-34.106.250.139:43666.service - OpenSSH per-connection server daemon (34.106.250.139:43666). Jan 27 05:33:03.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-10.128.0.99:22-34.106.250.139:43666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.618706 sshd[3582]: Invalid user mysql from 34.106.250.139 port 43594 Jan 27 05:33:03.635219 systemd[1]: kubelet.service: Deactivated successfully. Jan 27 05:33:03.637520 systemd[1]: Stopped kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:33:03.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.637654 systemd[1]: kubelet.service: Consumed 1.974s CPU time, 130.8M memory peak. Jan 27 05:33:03.652930 systemd[1]: Starting kubelet.service - kubelet: The Kubernetes Node Agent... Jan 27 05:33:03.692000 audit[3585]: USER_ERR pid=3585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:03.694594 sshd[3585]: Connection closed by invalid user user 34.106.250.139 port 43614 [preauth] Jan 27 05:33:03.699988 systemd[1]: sshd@148-10.128.0.99:22-34.106.250.139:43614.service: Deactivated successfully. Jan 27 05:33:03.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-10.128.0.99:22-34.106.250.139:43614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-10.128.0.99:22-34.106.250.139:43682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.723735 systemd[1]: Started sshd@155-10.128.0.99:22-34.106.250.139:43682.service - OpenSSH per-connection server daemon (34.106.250.139:43682). Jan 27 05:33:03.732455 sshd[3606]: Invalid user oracle from 34.106.250.139 port 43630 Jan 27 05:33:03.735182 sshd[3605]: Invalid user administrator from 34.106.250.139 port 43618 Jan 27 05:33:03.735963 sshd[3607]: Invalid user ftp from 34.106.250.139 port 43640 Jan 27 05:33:03.739803 sshd[3584]: Invalid user postgres from 34.106.250.139 port 43602 Jan 27 05:33:03.812502 sshd[3582]: Connection closed by invalid user mysql 34.106.250.139 port 43594 [preauth] Jan 27 05:33:03.811000 audit[3582]: USER_ERR pid=3582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:03.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-10.128.0.99:22-34.106.250.139:43594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.840262 systemd[1]: sshd@145-10.128.0.99:22-34.106.250.139:43594.service: Deactivated successfully. Jan 27 05:33:03.884000 audit[3607]: USER_ERR pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:03.887773 sshd[3607]: Connection closed by invalid user ftp 34.106.250.139 port 43640 [preauth] Jan 27 05:33:03.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-10.128.0.99:22-34.106.250.139:43640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:03.896455 systemd[1]: sshd@151-10.128.0.99:22-34.106.250.139:43640.service: Deactivated successfully. Jan 27 05:33:04.031419 sshd[3727]: Invalid user ec2-user from 34.106.250.139 port 43682 Jan 27 05:33:04.064600 sshd[3727]: Connection closed by invalid user ec2-user 34.106.250.139 port 43682 [preauth] Jan 27 05:33:04.064000 audit[3727]: USER_ERR pid=3727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:04.072075 sshd[3718]: Invalid user puppet from 34.106.250.139 port 43650 Jan 27 05:33:04.074622 systemd[1]: sshd@155-10.128.0.99:22-34.106.250.139:43682.service: Deactivated successfully. Jan 27 05:33:04.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-10.128.0.99:22-34.106.250.139:43682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.104102 sshd[3605]: Connection closed by invalid user administrator 34.106.250.139 port 43618 [preauth] Jan 27 05:33:04.106344 sshd[3718]: Connection closed by invalid user puppet 34.106.250.139 port 43650 [preauth] Jan 27 05:33:04.105000 audit[3718]: USER_ERR pid=3718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:04.106000 audit[3605]: USER_ERR pid=3605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:04.114437 systemd[1]: Started sshd@156-10.128.0.99:22-34.106.250.139:43698.service - OpenSSH per-connection server daemon (34.106.250.139:43698). Jan 27 05:33:04.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-10.128.0.99:22-34.106.250.139:43698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.117620 sshd[3717]: Invalid user pi from 34.106.250.139 port 43648 Jan 27 05:33:04.117651 systemd[1]: sshd@153-10.128.0.99:22-34.106.250.139:43650.service: Deactivated successfully. Jan 27 05:33:04.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-10.128.0.99:22-34.106.250.139:43650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.130076 systemd[1]: Started kubelet.service - kubelet: The Kubernetes Node Agent. Jan 27 05:33:04.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.135138 systemd[1]: sshd@149-10.128.0.99:22-34.106.250.139:43618.service: Deactivated successfully. Jan 27 05:33:04.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-10.128.0.99:22-34.106.250.139:43618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.145202 sshd[3606]: Connection closed by invalid user oracle 34.106.250.139 port 43630 [preauth] Jan 27 05:33:04.153000 audit[3606]: USER_ERR pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:04.164647 (kubelet)[3749]: kubelet.service: Referenced but unset environment variable evaluates to an empty string: KUBELET_EXTRA_ARGS Jan 27 05:33:04.174366 sshd[3717]: Connection closed by invalid user pi 34.106.250.139 port 43648 [preauth] Jan 27 05:33:04.173000 audit[3717]: USER_ERR pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:04.188359 systemd[1]: sshd@150-10.128.0.99:22-34.106.250.139:43630.service: Deactivated successfully. Jan 27 05:33:04.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-10.128.0.99:22-34.106.250.139:43630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.190889 systemd[1]: sshd@152-10.128.0.99:22-34.106.250.139:43648.service: Deactivated successfully. Jan 27 05:33:04.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-10.128.0.99:22-34.106.250.139:43648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-10.128.0.99:22-34.106.250.139:43704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.329253 systemd[1]: Started sshd@157-10.128.0.99:22-34.106.250.139:43704.service - OpenSSH per-connection server daemon (34.106.250.139:43704). Jan 27 05:33:04.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-10.128.0.99:22-34.106.250.139:43706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.335779 systemd[1]: Started sshd@158-10.128.0.99:22-34.106.250.139:43706.service - OpenSSH per-connection server daemon (34.106.250.139:43706). Jan 27 05:33:04.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-10.128.0.99:22-34.106.250.139:43718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.340831 systemd[1]: Started sshd@159-10.128.0.99:22-34.106.250.139:43718.service - OpenSSH per-connection server daemon (34.106.250.139:43718). Jan 27 05:33:04.347329 systemd[1]: Started sshd@160-10.128.0.99:22-34.106.250.139:43720.service - OpenSSH per-connection server daemon (34.106.250.139:43720). Jan 27 05:33:04.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-10.128.0.99:22-34.106.250.139:43720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.351725 sshd[3719]: Invalid user ansible from 34.106.250.139 port 43666 Jan 27 05:33:04.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@161-10.128.0.99:22-34.106.250.139:43740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.357073 systemd[1]: Started sshd@161-10.128.0.99:22-34.106.250.139:43740.service - OpenSSH per-connection server daemon (34.106.250.139:43740). Jan 27 05:33:04.362963 systemd[1]: Started sshd@162-10.128.0.99:22-34.106.250.139:43726.service - OpenSSH per-connection server daemon (34.106.250.139:43726). Jan 27 05:33:04.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@162-10.128.0.99:22-34.106.250.139:43726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.396246 kubelet[3749]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jan 27 05:33:04.396246 kubelet[3749]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jan 27 05:33:04.396246 kubelet[3749]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jan 27 05:33:04.396246 kubelet[3749]: I0127 05:33:04.396070 3749 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jan 27 05:33:04.421812 kubelet[3749]: I0127 05:33:04.420686 3749 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jan 27 05:33:04.421812 kubelet[3749]: I0127 05:33:04.420718 3749 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jan 27 05:33:04.424243 kubelet[3749]: I0127 05:33:04.423733 3749 server.go:954] "Client rotation is on, will bootstrap in background" Jan 27 05:33:04.430639 sshd[3719]: Connection closed by invalid user ansible 34.106.250.139 port 43666 [preauth] Jan 27 05:33:04.429000 audit[3719]: USER_ERR pid=3719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:04.435590 kubelet[3749]: I0127 05:33:04.435389 3749 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jan 27 05:33:04.440267 systemd[1]: sshd@154-10.128.0.99:22-34.106.250.139:43666.service: Deactivated successfully. Jan 27 05:33:04.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-10.128.0.99:22-34.106.250.139:43666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.459669 kubelet[3749]: I0127 05:33:04.458901 3749 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jan 27 05:33:04.488850 kubelet[3749]: I0127 05:33:04.488807 3749 server.go:1444] "Using cgroup driver setting received from the CRI runtime" cgroupDriver="systemd" Jan 27 05:33:04.511615 kubelet[3749]: I0127 05:33:04.511451 3749 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jan 27 05:33:04.512982 kubelet[3749]: I0127 05:33:04.512833 3749 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jan 27 05:33:04.513844 kubelet[3749]: I0127 05:33:04.513146 3749 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jan 27 05:33:04.513844 kubelet[3749]: I0127 05:33:04.513519 3749 topology_manager.go:138] "Creating topology manager with none policy" Jan 27 05:33:04.513844 kubelet[3749]: I0127 05:33:04.513542 3749 container_manager_linux.go:304] "Creating device plugin manager" Jan 27 05:33:04.513844 kubelet[3749]: I0127 05:33:04.513618 3749 state_mem.go:36] "Initialized new in-memory state store" Jan 27 05:33:04.514420 kubelet[3749]: I0127 05:33:04.514216 3749 kubelet.go:446] "Attempting to sync node with API server" Jan 27 05:33:04.517439 kubelet[3749]: I0127 05:33:04.516471 3749 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jan 27 05:33:04.517439 kubelet[3749]: I0127 05:33:04.516530 3749 kubelet.go:352] "Adding apiserver pod source" Jan 27 05:33:04.517439 kubelet[3749]: I0127 05:33:04.516551 3749 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jan 27 05:33:04.529289 kubelet[3749]: I0127 05:33:04.529080 3749 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="v2.1.5" apiVersion="v1" Jan 27 05:33:04.535710 kubelet[3749]: I0127 05:33:04.534351 3749 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jan 27 05:33:04.543916 kubelet[3749]: I0127 05:33:04.543661 3749 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jan 27 05:33:04.544585 kubelet[3749]: I0127 05:33:04.544310 3749 server.go:1287] "Started kubelet" Jan 27 05:33:04.563095 kubelet[3749]: I0127 05:33:04.563058 3749 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jan 27 05:33:04.570131 kubelet[3749]: I0127 05:33:04.569715 3749 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jan 27 05:33:04.579068 kubelet[3749]: I0127 05:33:04.579032 3749 server.go:479] "Adding debug handlers to kubelet server" Jan 27 05:33:04.638956 kubelet[3749]: I0127 05:33:04.580452 3749 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jan 27 05:33:04.638956 kubelet[3749]: I0127 05:33:04.581313 3749 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jan 27 05:33:04.638956 kubelet[3749]: I0127 05:33:04.583717 3749 volume_manager.go:297] "Starting Kubelet Volume Manager" Jan 27 05:33:04.638956 kubelet[3749]: I0127 05:33:04.583741 3749 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jan 27 05:33:04.638956 kubelet[3749]: E0127 05:33:04.584532 3749 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" not found" Jan 27 05:33:04.642425 kubelet[3749]: I0127 05:33:04.635689 3749 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jan 27 05:33:04.691606 kubelet[3749]: I0127 05:33:04.690689 3749 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jan 27 05:33:04.702000 audit[3584]: USER_ERR pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:04.704218 sshd[3584]: Connection closed by invalid user postgres 34.106.250.139 port 43602 [preauth] Jan 27 05:33:04.707512 sshd[3747]: Invalid user vagrant from 34.106.250.139 port 43698 Jan 27 05:33:04.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-10.128.0.99:22-34.106.250.139:43602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.775728 systemd[1]: sshd@147-10.128.0.99:22-34.106.250.139:43602.service: Deactivated successfully. Jan 27 05:33:04.781165 kubelet[3749]: I0127 05:33:04.776567 3749 reconciler.go:26] "Reconciler: start to sync state" Jan 27 05:33:04.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-10.128.0.99:22-34.106.250.139:37464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.807156 systemd[1]: Started sshd@163-10.128.0.99:22-34.106.250.139:37464.service - OpenSSH per-connection server daemon (34.106.250.139:37464). Jan 27 05:33:04.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-10.128.0.99:22-34.106.250.139:37476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:04.813047 systemd[1]: Started sshd@164-10.128.0.99:22-34.106.250.139:37476.service - OpenSSH per-connection server daemon (34.106.250.139:37476). Jan 27 05:33:04.814447 kubelet[3749]: I0127 05:33:04.814261 3749 factory.go:221] Registration of the containerd container factory successfully Jan 27 05:33:04.814447 kubelet[3749]: I0127 05:33:04.814300 3749 factory.go:221] Registration of the systemd container factory successfully Jan 27 05:33:04.840429 kubelet[3749]: I0127 05:33:04.840289 3749 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jan 27 05:33:04.852460 kubelet[3749]: I0127 05:33:04.851686 3749 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jan 27 05:33:04.852460 kubelet[3749]: I0127 05:33:04.851750 3749 status_manager.go:227] "Starting to sync pod status with apiserver" Jan 27 05:33:04.852460 kubelet[3749]: I0127 05:33:04.851866 3749 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jan 27 05:33:04.852460 kubelet[3749]: I0127 05:33:04.851884 3749 kubelet.go:2382] "Starting kubelet main sync loop" Jan 27 05:33:04.852460 kubelet[3749]: E0127 05:33:04.851987 3749 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jan 27 05:33:04.852460 kubelet[3749]: E0127 05:33:04.852318 3749 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jan 27 05:33:04.952582 kubelet[3749]: E0127 05:33:04.952059 3749 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jan 27 05:33:05.009096 sshd[3747]: Connection closed by invalid user vagrant 34.106.250.139 port 43698 [preauth] Jan 27 05:33:05.008000 audit[3747]: USER_ERR pid=3747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.017996 systemd[1]: sshd@156-10.128.0.99:22-34.106.250.139:43698.service: Deactivated successfully. Jan 27 05:33:05.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-10.128.0.99:22-34.106.250.139:43698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.092208 kubelet[3749]: I0127 05:33:05.092141 3749 cpu_manager.go:221] "Starting CPU manager" policy="none" Jan 27 05:33:05.092208 kubelet[3749]: I0127 05:33:05.092172 3749 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jan 27 05:33:05.092208 kubelet[3749]: I0127 05:33:05.092203 3749 state_mem.go:36] "Initialized new in-memory state store" Jan 27 05:33:05.094094 kubelet[3749]: I0127 05:33:05.093858 3749 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jan 27 05:33:05.094094 kubelet[3749]: I0127 05:33:05.093909 3749 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jan 27 05:33:05.094094 kubelet[3749]: I0127 05:33:05.093942 3749 policy_none.go:49] "None policy: Start" Jan 27 05:33:05.094094 kubelet[3749]: I0127 05:33:05.093960 3749 memory_manager.go:186] "Starting memorymanager" policy="None" Jan 27 05:33:05.094094 kubelet[3749]: I0127 05:33:05.093999 3749 state_mem.go:35] "Initializing new in-memory state store" Jan 27 05:33:05.094417 kubelet[3749]: I0127 05:33:05.094322 3749 state_mem.go:75] "Updated machine memory state" Jan 27 05:33:05.115458 kubelet[3749]: I0127 05:33:05.114349 3749 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jan 27 05:33:05.115458 kubelet[3749]: I0127 05:33:05.115332 3749 eviction_manager.go:189] "Eviction manager: starting control loop" Jan 27 05:33:05.115458 kubelet[3749]: I0127 05:33:05.115351 3749 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jan 27 05:33:05.132660 kubelet[3749]: I0127 05:33:05.131491 3749 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jan 27 05:33:05.135487 sshd[3774]: Invalid user azureuser from 34.106.250.139 port 43704 Jan 27 05:33:05.154448 kubelet[3749]: E0127 05:33:05.149557 3749 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jan 27 05:33:05.162290 kubelet[3749]: I0127 05:33:05.162247 3749 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.169762 kubelet[3749]: I0127 05:33:05.169375 3749 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.188943 kubelet[3749]: I0127 05:33:05.188004 3749 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.213829 kubelet[3749]: W0127 05:33:05.213486 3749 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must be no more than 63 characters] Jan 27 05:33:05.218545 kubelet[3749]: W0127 05:33:05.215548 3749 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must be no more than 63 characters] Jan 27 05:33:05.218545 kubelet[3749]: E0127 05:33:05.215726 3749 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" already exists" pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.218545 kubelet[3749]: E0127 05:33:05.216470 3749 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" already exists" pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.231809 kubelet[3749]: W0127 05:33:05.230336 3749 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must be no more than 63 characters] Jan 27 05:33:05.266298 sshd[3776]: Invalid user cisco from 34.106.250.139 port 43706 Jan 27 05:33:05.283457 kubelet[3749]: I0127 05:33:05.281992 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/31894e24818024eb2d47402e4ebe75db-k8s-certs\") pod \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"31894e24818024eb2d47402e4ebe75db\") " pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.283457 kubelet[3749]: I0127 05:33:05.282063 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-ca-certs\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.283457 kubelet[3749]: I0127 05:33:05.282099 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-kubeconfig\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.283457 kubelet[3749]: I0127 05:33:05.282129 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.283803 kubelet[3749]: I0127 05:33:05.282162 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/39378272c33eb4707cca0c502f49b7e9-kubeconfig\") pod \"kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"39378272c33eb4707cca0c502f49b7e9\") " pod="kube-system/kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.283803 kubelet[3749]: I0127 05:33:05.282359 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/31894e24818024eb2d47402e4ebe75db-ca-certs\") pod \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"31894e24818024eb2d47402e4ebe75db\") " pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.285586 kubelet[3749]: I0127 05:33:05.285475 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/31894e24818024eb2d47402e4ebe75db-usr-share-ca-certificates\") pod \"kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"31894e24818024eb2d47402e4ebe75db\") " pod="kube-system/kube-apiserver-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.285586 kubelet[3749]: I0127 05:33:05.285545 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-flexvolume-dir\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.285586 kubelet[3749]: I0127 05:33:05.285578 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d0d17432165eed8f095d448ba071c8dc-k8s-certs\") pod \"kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356\" (UID: \"d0d17432165eed8f095d448ba071c8dc\") " pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.298727 sshd[3779]: Invalid user from 34.106.250.139 port 43740 Jan 27 05:33:05.321311 sshd[3782]: Invalid user manager from 34.106.250.139 port 43726 Jan 27 05:33:05.323000 audit[3774]: USER_ERR pid=3774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.327045 sshd[3774]: Connection closed by invalid user azureuser 34.106.250.139 port 43704 [preauth] Jan 27 05:33:05.337893 kubelet[3749]: I0127 05:33:05.336810 3749 kubelet_node_status.go:75] "Attempting to register node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-10.128.0.99:22-34.106.250.139:43704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.369295 systemd[1]: sshd@157-10.128.0.99:22-34.106.250.139:43704.service: Deactivated successfully. Jan 27 05:33:05.389628 sshd[3778]: Invalid user tomcat from 34.106.250.139 port 43720 Jan 27 05:33:05.393844 kubelet[3749]: I0127 05:33:05.393786 3749 kubelet_node_status.go:124] "Node was previously registered" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.396426 kubelet[3749]: I0127 05:33:05.395755 3749 kubelet_node_status.go:78] "Successfully registered node" node="ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" Jan 27 05:33:05.409433 sshd[3779]: Connection closed by invalid user 34.106.250.139 port 43740 [preauth] Jan 27 05:33:05.410426 sshd[3813]: Connection closed by authenticating user root 34.106.250.139 port 37476 [preauth] Jan 27 05:33:05.409000 audit[3813]: USER_ERR pid=3813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.412000 audit[3779]: USER_ERR pid=3779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.422353 sshd[3776]: Connection closed by invalid user cisco 34.106.250.139 port 43706 [preauth] Jan 27 05:33:05.422000 audit[3776]: USER_ERR pid=3776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.424085 systemd[1]: Started sshd@165-10.128.0.99:22-34.106.250.139:37506.service - OpenSSH per-connection server daemon (34.106.250.139:37506). Jan 27 05:33:05.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-10.128.0.99:22-34.106.250.139:37506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.431190 systemd[1]: Started sshd@166-10.128.0.99:22-34.106.250.139:37490.service - OpenSSH per-connection server daemon (34.106.250.139:37490). Jan 27 05:33:05.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@166-10.128.0.99:22-34.106.250.139:37490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.434038 systemd[1]: sshd@161-10.128.0.99:22-34.106.250.139:43740.service: Deactivated successfully. Jan 27 05:33:05.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@161-10.128.0.99:22-34.106.250.139:43740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.443502 systemd[1]: sshd@164-10.128.0.99:22-34.106.250.139:37476.service: Deactivated successfully. Jan 27 05:33:05.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-10.128.0.99:22-34.106.250.139:37476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.452644 systemd[1]: sshd@158-10.128.0.99:22-34.106.250.139:43706.service: Deactivated successfully. Jan 27 05:33:05.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-10.128.0.99:22-34.106.250.139:43706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.475512 sshd[3782]: Connection closed by invalid user manager 34.106.250.139 port 43726 [preauth] Jan 27 05:33:05.476000 audit[3782]: USER_ERR pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.518661 kubelet[3749]: I0127 05:33:05.518595 3749 apiserver.go:52] "Watching apiserver" Jan 27 05:33:05.520046 systemd[1]: sshd@162-10.128.0.99:22-34.106.250.139:43726.service: Deactivated successfully. Jan 27 05:33:05.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@162-10.128.0.99:22-34.106.250.139:43726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.546548 systemd[1]: Started sshd@167-10.128.0.99:22-34.106.250.139:37510.service - OpenSSH per-connection server daemon (34.106.250.139:37510). Jan 27 05:33:05.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@167-10.128.0.99:22-34.106.250.139:37510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.551015 sshd[3811]: Invalid user anonymous from 34.106.250.139 port 37464 Jan 27 05:33:05.551888 kubelet[3749]: I0127 05:33:05.550898 3749 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jan 27 05:33:05.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@168-10.128.0.99:22-34.106.250.139:37526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.552634 systemd[1]: Started sshd@168-10.128.0.99:22-34.106.250.139:37526.service - OpenSSH per-connection server daemon (34.106.250.139:37526). Jan 27 05:33:05.559431 sshd[3777]: Invalid user rstudio from 34.106.250.139 port 43718 Jan 27 05:33:05.604000 audit[3777]: USER_ERR pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.606606 sshd[3777]: Connection closed by invalid user rstudio 34.106.250.139 port 43718 [preauth] Jan 27 05:33:05.617220 systemd[1]: sshd@159-10.128.0.99:22-34.106.250.139:43718.service: Deactivated successfully. Jan 27 05:33:05.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-10.128.0.99:22-34.106.250.139:43718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.618778 sshd[3778]: Connection closed by invalid user tomcat 34.106.250.139 port 43720 [preauth] Jan 27 05:33:05.617000 audit[3778]: USER_ERR pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.651195 systemd[1]: sshd@160-10.128.0.99:22-34.106.250.139:43720.service: Deactivated successfully. Jan 27 05:33:05.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-10.128.0.99:22-34.106.250.139:43720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.696615 systemd[1]: Started sshd@169-10.128.0.99:22-34.106.250.139:37532.service - OpenSSH per-connection server daemon (34.106.250.139:37532). Jan 27 05:33:05.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@169-10.128.0.99:22-34.106.250.139:37532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@170-10.128.0.99:22-34.106.250.139:37540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.706826 systemd[1]: Started sshd@170-10.128.0.99:22-34.106.250.139:37540.service - OpenSSH per-connection server daemon (34.106.250.139:37540). Jan 27 05:33:05.738096 sshd[3811]: Connection closed by invalid user anonymous 34.106.250.139 port 37464 [preauth] Jan 27 05:33:05.740000 audit[3811]: USER_ERR pid=3811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:05.758038 systemd[1]: sshd@163-10.128.0.99:22-34.106.250.139:37464.service: Deactivated successfully. Jan 27 05:33:05.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-10.128.0.99:22-34.106.250.139:37464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@171-10.128.0.99:22-34.106.250.139:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.797496 systemd[1]: Started sshd@171-10.128.0.99:22-34.106.250.139:37556.service - OpenSSH per-connection server daemon (34.106.250.139:37556). Jan 27 05:33:05.803245 kernel: kauditd_printk_skb: 140 callbacks suppressed Jan 27 05:33:05.804583 kernel: audit: type=1130 audit(1769491985.796:900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@171-10.128.0.99:22-34.106.250.139:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:05.955198 kubelet[3749]: I0127 05:33:05.954531 3749 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" podStartSLOduration=3.95450047 podStartE2EDuration="3.95450047s" podCreationTimestamp="2026-01-27 05:33:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2026-01-27 05:33:05.949492312 +0000 UTC m=+1.768428877" watchObservedRunningTime="2026-01-27 05:33:05.95450047 +0000 UTC m=+1.773437035" Jan 27 05:33:05.996445 kubelet[3749]: I0127 05:33:05.995651 3749 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-4592-0-0-nightly-20260126-2100-5fc001c51088d629b356" podStartSLOduration=0.99562436 podStartE2EDuration="995.62436ms" podCreationTimestamp="2026-01-27 05:33:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2026-01-27 05:33:05.995262351 +0000 UTC m=+1.814198919" watchObservedRunningTime="2026-01-27 05:33:05.99562436 +0000 UTC m=+1.814560924" Jan 27 05:33:06.042427 sshd[3841]: Invalid user test from 34.106.250.139 port 37506 Jan 27 05:33:06.199203 sshd[3841]: Connection closed by invalid user test 34.106.250.139 port 37506 [preauth] Jan 27 05:33:06.203000 audit[3841]: USER_ERR pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.232480 kernel: audit: type=1109 audit(1769491986.203:901): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.236696 systemd[1]: sshd@165-10.128.0.99:22-34.106.250.139:37506.service: Deactivated successfully. Jan 27 05:33:06.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-10.128.0.99:22-34.106.250.139:37506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.248745 sshd[3842]: Invalid user admin from 34.106.250.139 port 37490 Jan 27 05:33:06.270318 kernel: audit: type=1131 audit(1769491986.235:902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-10.128.0.99:22-34.106.250.139:37506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.296088 sshd[3842]: Connection closed by invalid user admin 34.106.250.139 port 37490 [preauth] Jan 27 05:33:06.294000 audit[3842]: USER_ERR pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.299726 systemd[1]: Started sshd@172-10.128.0.99:22-34.106.250.139:37566.service - OpenSSH per-connection server daemon (34.106.250.139:37566). Jan 27 05:33:06.323461 kernel: audit: type=1109 audit(1769491986.294:903): pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.329616 systemd[1]: Started sshd@173-10.128.0.99:22-34.106.250.139:37582.service - OpenSSH per-connection server daemon (34.106.250.139:37582). Jan 27 05:33:06.332202 sshd[3853]: Invalid user guest from 34.106.250.139 port 37510 Jan 27 05:33:06.336186 sshd[3854]: Invalid user info from 34.106.250.139 port 37526 Jan 27 05:33:06.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@172-10.128.0.99:22-34.106.250.139:37566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.354614 systemd[1]: Started sshd@174-10.128.0.99:22-34.106.250.139:37562.service - OpenSSH per-connection server daemon (34.106.250.139:37562). Jan 27 05:33:06.356975 systemd[1]: sshd@166-10.128.0.99:22-34.106.250.139:37490.service: Deactivated successfully. Jan 27 05:33:06.363422 kernel: audit: type=1130 audit(1769491986.299:904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@172-10.128.0.99:22-34.106.250.139:37566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@173-10.128.0.99:22-34.106.250.139:37582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.398647 kernel: audit: type=1130 audit(1769491986.328:905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@173-10.128.0.99:22-34.106.250.139:37582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@174-10.128.0.99:22-34.106.250.139:37562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.430647 kernel: audit: type=1130 audit(1769491986.354:906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@174-10.128.0.99:22-34.106.250.139:37562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@166-10.128.0.99:22-34.106.250.139:37490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.463610 kernel: audit: type=1131 audit(1769491986.356:907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@166-10.128.0.99:22-34.106.250.139:37490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.539785 sshd[3853]: Connection closed by invalid user guest 34.106.250.139 port 37510 [preauth] Jan 27 05:33:06.567439 kernel: audit: type=1109 audit(1769491986.539:908): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.539000 audit[3853]: USER_ERR pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.571469 sshd[3854]: Connection closed by invalid user info 34.106.250.139 port 37526 [preauth] Jan 27 05:33:06.573082 systemd[1]: Started sshd@175-10.128.0.99:22-34.106.250.139:37590.service - OpenSSH per-connection server daemon (34.106.250.139:37590). Jan 27 05:33:06.606569 kernel: audit: type=1109 audit(1769491986.572:909): pid=3854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.572000 audit[3854]: USER_ERR pid=3854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@175-10.128.0.99:22-34.106.250.139:37590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.646696 systemd[1]: Started sshd@176-10.128.0.99:22-34.106.250.139:37602.service - OpenSSH per-connection server daemon (34.106.250.139:37602). Jan 27 05:33:06.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@176-10.128.0.99:22-34.106.250.139:37602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.648247 systemd[1]: sshd@168-10.128.0.99:22-34.106.250.139:37526.service: Deactivated successfully. Jan 27 05:33:06.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@168-10.128.0.99:22-34.106.250.139:37526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.659556 systemd[1]: sshd@167-10.128.0.99:22-34.106.250.139:37510.service: Deactivated successfully. Jan 27 05:33:06.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@167-10.128.0.99:22-34.106.250.139:37510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.677456 sshd[3867]: Invalid user mysql from 34.106.250.139 port 37540 Jan 27 05:33:06.715442 sshd[3866]: Connection closed by authenticating user adm 34.106.250.139 port 37532 [preauth] Jan 27 05:33:06.723000 audit[3866]: USER_ERR pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.741170 systemd[1]: sshd@169-10.128.0.99:22-34.106.250.139:37532.service: Deactivated successfully. Jan 27 05:33:06.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@169-10.128.0.99:22-34.106.250.139:37532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.758434 sshd[3873]: Invalid user postgres from 34.106.250.139 port 37556 Jan 27 05:33:06.860554 sshd[3873]: Connection closed by invalid user postgres 34.106.250.139 port 37556 [preauth] Jan 27 05:33:06.860000 audit[3873]: USER_ERR pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.869440 systemd[1]: sshd@171-10.128.0.99:22-34.106.250.139:37556.service: Deactivated successfully. Jan 27 05:33:06.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@171-10.128.0.99:22-34.106.250.139:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.914309 sshd[3867]: Connection closed by invalid user mysql 34.106.250.139 port 37540 [preauth] Jan 27 05:33:06.913000 audit[3867]: USER_ERR pid=3867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:06.932788 systemd[1]: sshd@170-10.128.0.99:22-34.106.250.139:37540.service: Deactivated successfully. Jan 27 05:33:06.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@170-10.128.0.99:22-34.106.250.139:37540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@177-10.128.0.99:22-34.106.250.139:37606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.947661 systemd[1]: Started sshd@177-10.128.0.99:22-34.106.250.139:37606.service - OpenSSH per-connection server daemon (34.106.250.139:37606). Jan 27 05:33:06.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@178-10.128.0.99:22-34.106.250.139:37622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.954114 systemd[1]: Started sshd@178-10.128.0.99:22-34.106.250.139:37622.service - OpenSSH per-connection server daemon (34.106.250.139:37622). Jan 27 05:33:06.958255 systemd[1]: Started sshd@179-10.128.0.99:22-34.106.250.139:37612.service - OpenSSH per-connection server daemon (34.106.250.139:37612). Jan 27 05:33:06.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@179-10.128.0.99:22-34.106.250.139:37612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:06.998525 sshd[3887]: Invalid user oracle from 34.106.250.139 port 37582 Jan 27 05:33:07.030603 sshd[3888]: Invalid user user from 34.106.250.139 port 37562 Jan 27 05:33:07.050776 sshd[3886]: Invalid user administrator from 34.106.250.139 port 37566 Jan 27 05:33:07.063140 sshd[3887]: Connection closed by invalid user oracle 34.106.250.139 port 37582 [preauth] Jan 27 05:33:07.068000 audit[3887]: USER_ERR pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.090830 systemd[1]: sshd@173-10.128.0.99:22-34.106.250.139:37582.service: Deactivated successfully. Jan 27 05:33:07.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@173-10.128.0.99:22-34.106.250.139:37582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.141745 sshd[3899]: Invalid user pi from 34.106.250.139 port 37602 Jan 27 05:33:07.163192 sshd[3892]: Invalid user ftp from 34.106.250.139 port 37590 Jan 27 05:33:07.182612 sshd[3888]: Connection closed by invalid user user 34.106.250.139 port 37562 [preauth] Jan 27 05:33:07.186000 audit[3888]: USER_ERR pid=3888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.214945 sshd[3886]: Connection closed by invalid user administrator 34.106.250.139 port 37566 [preauth] Jan 27 05:33:07.216000 audit[3886]: USER_ERR pid=3886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@174-10.128.0.99:22-34.106.250.139:37562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.223464 systemd[1]: sshd@174-10.128.0.99:22-34.106.250.139:37562.service: Deactivated successfully. Jan 27 05:33:07.243509 sshd[3899]: Connection closed by invalid user pi 34.106.250.139 port 37602 [preauth] Jan 27 05:33:07.244000 audit[3899]: USER_ERR pid=3899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.257924 systemd[1]: sshd@172-10.128.0.99:22-34.106.250.139:37566.service: Deactivated successfully. Jan 27 05:33:07.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@172-10.128.0.99:22-34.106.250.139:37566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.262965 kubelet[3749]: I0127 05:33:07.262925 3749 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jan 27 05:33:07.266847 containerd[1595]: time="2026-01-27T05:33:07.264228821Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jan 27 05:33:07.268000 audit[3892]: USER_ERR pid=3892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.274202 kubelet[3749]: I0127 05:33:07.268256 3749 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jan 27 05:33:07.274328 sshd[3892]: Connection closed by invalid user ftp 34.106.250.139 port 37590 [preauth] Jan 27 05:33:07.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@175-10.128.0.99:22-34.106.250.139:37590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.287858 systemd[1]: sshd@175-10.128.0.99:22-34.106.250.139:37590.service: Deactivated successfully. Jan 27 05:33:07.292643 systemd[1]: sshd@176-10.128.0.99:22-34.106.250.139:37602.service: Deactivated successfully. Jan 27 05:33:07.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@176-10.128.0.99:22-34.106.250.139:37602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.330806 systemd[1]: Started sshd@180-10.128.0.99:22-34.106.250.139:37626.service - OpenSSH per-connection server daemon (34.106.250.139:37626). Jan 27 05:33:07.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@180-10.128.0.99:22-34.106.250.139:37626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.336822 systemd[1]: Started sshd@181-10.128.0.99:22-34.106.250.139:37636.service - OpenSSH per-connection server daemon (34.106.250.139:37636). Jan 27 05:33:07.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@181-10.128.0.99:22-34.106.250.139:37636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@182-10.128.0.99:22-34.106.250.139:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.342847 systemd[1]: Started sshd@182-10.128.0.99:22-34.106.250.139:37644.service - OpenSSH per-connection server daemon (34.106.250.139:37644). Jan 27 05:33:07.349943 systemd[1]: Started sshd@183-10.128.0.99:22-34.106.250.139:37656.service - OpenSSH per-connection server daemon (34.106.250.139:37656). Jan 27 05:33:07.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@183-10.128.0.99:22-34.106.250.139:37656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.367736 systemd[1]: Created slice kubepods-besteffort-pod752b5487_467d_4527_957a_a395bcf8091b.slice - libcontainer container kubepods-besteffort-pod752b5487_467d_4527_957a_a395bcf8091b.slice. Jan 27 05:33:07.405455 kubelet[3749]: I0127 05:33:07.403386 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/752b5487-467d-4527-957a-a395bcf8091b-xtables-lock\") pod \"kube-proxy-zhfdp\" (UID: \"752b5487-467d-4527-957a-a395bcf8091b\") " pod="kube-system/kube-proxy-zhfdp" Jan 27 05:33:07.405455 kubelet[3749]: I0127 05:33:07.403476 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/752b5487-467d-4527-957a-a395bcf8091b-lib-modules\") pod \"kube-proxy-zhfdp\" (UID: \"752b5487-467d-4527-957a-a395bcf8091b\") " pod="kube-system/kube-proxy-zhfdp" Jan 27 05:33:07.405455 kubelet[3749]: I0127 05:33:07.403506 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nhm9z\" (UniqueName: \"kubernetes.io/projected/752b5487-467d-4527-957a-a395bcf8091b-kube-api-access-nhm9z\") pod \"kube-proxy-zhfdp\" (UID: \"752b5487-467d-4527-957a-a395bcf8091b\") " pod="kube-system/kube-proxy-zhfdp" Jan 27 05:33:07.405455 kubelet[3749]: I0127 05:33:07.403554 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/752b5487-467d-4527-957a-a395bcf8091b-kube-proxy\") pod \"kube-proxy-zhfdp\" (UID: \"752b5487-467d-4527-957a-a395bcf8091b\") " pod="kube-system/kube-proxy-zhfdp" Jan 27 05:33:07.561900 sshd[3923]: Invalid user ec2-user from 34.106.250.139 port 37622 Jan 27 05:33:07.564572 sshd[3922]: Invalid user puppet from 34.106.250.139 port 37606 Jan 27 05:33:07.565606 sshd[3924]: Invalid user ansible from 34.106.250.139 port 37612 Jan 27 05:33:07.593000 audit[3922]: USER_ERR pid=3922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.595605 sshd[3922]: Connection closed by invalid user puppet 34.106.250.139 port 37606 [preauth] Jan 27 05:33:07.598542 systemd[1]: sshd@177-10.128.0.99:22-34.106.250.139:37606.service: Deactivated successfully. Jan 27 05:33:07.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@177-10.128.0.99:22-34.106.250.139:37606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.621441 sshd[3923]: Connection closed by invalid user ec2-user 34.106.250.139 port 37622 [preauth] Jan 27 05:33:07.624533 sshd[3924]: Connection closed by invalid user ansible 34.106.250.139 port 37612 [preauth] Jan 27 05:33:07.623000 audit[3924]: USER_ERR pid=3924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.624000 audit[3923]: USER_ERR pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.641596 systemd[1]: sshd@178-10.128.0.99:22-34.106.250.139:37622.service: Deactivated successfully. Jan 27 05:33:07.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@178-10.128.0.99:22-34.106.250.139:37622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.644860 systemd[1]: sshd@179-10.128.0.99:22-34.106.250.139:37612.service: Deactivated successfully. Jan 27 05:33:07.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@179-10.128.0.99:22-34.106.250.139:37612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.663957 systemd[1]: Started sshd@184-10.128.0.99:22-34.106.250.139:37684.service - OpenSSH per-connection server daemon (34.106.250.139:37684). Jan 27 05:33:07.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@184-10.128.0.99:22-34.106.250.139:37684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.668547 systemd[1]: Started sshd@185-10.128.0.99:22-34.106.250.139:37690.service - OpenSSH per-connection server daemon (34.106.250.139:37690). Jan 27 05:33:07.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@185-10.128.0.99:22-34.106.250.139:37690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@186-10.128.0.99:22-34.106.250.139:37672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.673941 systemd[1]: Started sshd@186-10.128.0.99:22-34.106.250.139:37672.service - OpenSSH per-connection server daemon (34.106.250.139:37672). Jan 27 05:33:07.681943 containerd[1595]: time="2026-01-27T05:33:07.681496731Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-zhfdp,Uid:752b5487-467d-4527-957a-a395bcf8091b,Namespace:kube-system,Attempt:0,}" Jan 27 05:33:07.755891 containerd[1595]: time="2026-01-27T05:33:07.755826963Z" level=info msg="connecting to shim a7f800fdfca6c445d4229ceabf6a0acd6c711f22838baadc519ad958800122fe" address="unix:///run/containerd/s/b8a1761f3a9f5abe82bfd8b4f9045298c8c4fe81079f30210ff542bf31b01b9a" namespace=k8s.io protocol=ttrpc version=3 Jan 27 05:33:07.775970 sshd[3949]: Invalid user cisco from 34.106.250.139 port 37644 Jan 27 05:33:07.805423 sshd[3947]: Invalid user vagrant from 34.106.250.139 port 37626 Jan 27 05:33:07.850268 sshd[3950]: Invalid user rstudio from 34.106.250.139 port 37656 Jan 27 05:33:07.862445 sshd[3948]: Invalid user azureuser from 34.106.250.139 port 37636 Jan 27 05:33:07.863785 systemd[1]: Started cri-containerd-a7f800fdfca6c445d4229ceabf6a0acd6c711f22838baadc519ad958800122fe.scope - libcontainer container a7f800fdfca6c445d4229ceabf6a0acd6c711f22838baadc519ad958800122fe. Jan 27 05:33:07.880299 sshd[3949]: Connection closed by invalid user cisco 34.106.250.139 port 37644 [preauth] Jan 27 05:33:07.886000 audit[3949]: USER_ERR pid=3949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.896432 sshd[3947]: Connection closed by invalid user vagrant 34.106.250.139 port 37626 [preauth] Jan 27 05:33:07.895000 audit[3947]: USER_ERR pid=3947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@180-10.128.0.99:22-34.106.250.139:37626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.915336 systemd[1]: sshd@180-10.128.0.99:22-34.106.250.139:37626.service: Deactivated successfully. Jan 27 05:33:07.922507 systemd[1]: sshd@182-10.128.0.99:22-34.106.250.139:37644.service: Deactivated successfully. Jan 27 05:33:07.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@182-10.128.0.99:22-34.106.250.139:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.932032 sshd[3948]: Connection closed by invalid user azureuser 34.106.250.139 port 37636 [preauth] Jan 27 05:33:07.932000 audit[3948]: USER_ERR pid=3948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:07.954492 systemd[1]: sshd@181-10.128.0.99:22-34.106.250.139:37636.service: Deactivated successfully. Jan 27 05:33:07.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@181-10.128.0.99:22-34.106.250.139:37636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@187-10.128.0.99:22-34.106.250.139:37704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:07.994746 systemd[1]: Started sshd@187-10.128.0.99:22-34.106.250.139:37704.service - OpenSSH per-connection server daemon (34.106.250.139:37704). Jan 27 05:33:08.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@188-10.128.0.99:22-34.106.250.139:37714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.005588 systemd[1]: Started sshd@188-10.128.0.99:22-34.106.250.139:37714.service - OpenSSH per-connection server daemon (34.106.250.139:37714). Jan 27 05:33:08.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@189-10.128.0.99:22-34.106.250.139:37728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.010330 systemd[1]: Started sshd@189-10.128.0.99:22-34.106.250.139:37728.service - OpenSSH per-connection server daemon (34.106.250.139:37728). Jan 27 05:33:08.016000 audit: BPF prog-id=136 op=LOAD Jan 27 05:33:08.018000 audit: BPF prog-id=137 op=LOAD Jan 27 05:33:08.020446 sshd[3950]: Connection closed by invalid user rstudio 34.106.250.139 port 37656 [preauth] Jan 27 05:33:08.018000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3981 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663830306664666361366334343564343232396365616266366130 Jan 27 05:33:08.019000 audit: BPF prog-id=137 op=UNLOAD Jan 27 05:33:08.019000 audit[3993]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3981 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663830306664666361366334343564343232396365616266366130 Jan 27 05:33:08.019000 audit[3950]: USER_ERR pid=3950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:08.019000 audit: BPF prog-id=138 op=LOAD Jan 27 05:33:08.019000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3981 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663830306664666361366334343564343232396365616266366130 Jan 27 05:33:08.020000 audit: BPF prog-id=139 op=LOAD Jan 27 05:33:08.020000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000130218 a2=98 a3=0 items=0 ppid=3981 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663830306664666361366334343564343232396365616266366130 Jan 27 05:33:08.021000 audit: BPF prog-id=139 op=UNLOAD Jan 27 05:33:08.021000 audit[3993]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3981 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663830306664666361366334343564343232396365616266366130 Jan 27 05:33:08.021000 audit: BPF prog-id=138 op=UNLOAD Jan 27 05:33:08.021000 audit[3993]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3981 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663830306664666361366334343564343232396365616266366130 Jan 27 05:33:08.021000 audit: BPF prog-id=140 op=LOAD Jan 27 05:33:08.021000 audit[3993]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001306e8 a2=98 a3=0 items=0 ppid=3981 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663830306664666361366334343564343232396365616266366130 Jan 27 05:33:08.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@190-10.128.0.99:22-34.106.250.139:37738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.049995 systemd[1]: Started sshd@190-10.128.0.99:22-34.106.250.139:37738.service - OpenSSH per-connection server daemon (34.106.250.139:37738). Jan 27 05:33:08.071963 systemd[1]: sshd@183-10.128.0.99:22-34.106.250.139:37656.service: Deactivated successfully. Jan 27 05:33:08.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@183-10.128.0.99:22-34.106.250.139:37656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.217809 containerd[1595]: time="2026-01-27T05:33:08.217717402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-zhfdp,Uid:752b5487-467d-4527-957a-a395bcf8091b,Namespace:kube-system,Attempt:0,} returns sandbox id \"a7f800fdfca6c445d4229ceabf6a0acd6c711f22838baadc519ad958800122fe\"" Jan 27 05:33:08.232064 containerd[1595]: time="2026-01-27T05:33:08.232008928Z" level=info msg="CreateContainer within sandbox \"a7f800fdfca6c445d4229ceabf6a0acd6c711f22838baadc519ad958800122fe\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jan 27 05:33:08.286616 containerd[1595]: time="2026-01-27T05:33:08.283995730Z" level=info msg="Container 1b35b3b47e5c287811c3e57cd11c2d599ca8cf332c15947e52c4ce63d5c513fe: CDI devices from CRI Config.CDIDevices: []" Jan 27 05:33:08.287895 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1775261723.mount: Deactivated successfully. Jan 27 05:33:08.313136 sshd[3971]: Invalid user tomcat from 34.106.250.139 port 37672 Jan 27 05:33:08.325260 containerd[1595]: time="2026-01-27T05:33:08.325185160Z" level=info msg="CreateContainer within sandbox \"a7f800fdfca6c445d4229ceabf6a0acd6c711f22838baadc519ad958800122fe\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"1b35b3b47e5c287811c3e57cd11c2d599ca8cf332c15947e52c4ce63d5c513fe\"" Jan 27 05:33:08.333453 containerd[1595]: time="2026-01-27T05:33:08.330585912Z" level=info msg="StartContainer for \"1b35b3b47e5c287811c3e57cd11c2d599ca8cf332c15947e52c4ce63d5c513fe\"" Jan 27 05:33:08.341594 containerd[1595]: time="2026-01-27T05:33:08.341448235Z" level=info msg="connecting to shim 1b35b3b47e5c287811c3e57cd11c2d599ca8cf332c15947e52c4ce63d5c513fe" address="unix:///run/containerd/s/b8a1761f3a9f5abe82bfd8b4f9045298c8c4fe81079f30210ff542bf31b01b9a" protocol=ttrpc version=3 Jan 27 05:33:08.388602 sshd[3971]: Connection closed by invalid user tomcat 34.106.250.139 port 37672 [preauth] Jan 27 05:33:08.399000 audit[3971]: USER_ERR pid=3971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:08.407298 systemd[1]: sshd@186-10.128.0.99:22-34.106.250.139:37672.service: Deactivated successfully. Jan 27 05:33:08.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@186-10.128.0.99:22-34.106.250.139:37672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.500874 systemd[1]: Started cri-containerd-1b35b3b47e5c287811c3e57cd11c2d599ca8cf332c15947e52c4ce63d5c513fe.scope - libcontainer container 1b35b3b47e5c287811c3e57cd11c2d599ca8cf332c15947e52c4ce63d5c513fe. Jan 27 05:33:08.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@191-10.128.0.99:22-34.106.250.139:37764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.509984 systemd[1]: Started sshd@191-10.128.0.99:22-34.106.250.139:37764.service - OpenSSH per-connection server daemon (34.106.250.139:37764). Jan 27 05:33:08.521349 systemd[1]: Started sshd@192-10.128.0.99:22-34.106.250.139:37768.service - OpenSSH per-connection server daemon (34.106.250.139:37768). Jan 27 05:33:08.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@192-10.128.0.99:22-34.106.250.139:37768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@193-10.128.0.99:22-34.106.250.139:37750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.535384 sshd[3970]: Invalid user from 34.106.250.139 port 37690 Jan 27 05:33:08.530171 systemd[1]: Started sshd@193-10.128.0.99:22-34.106.250.139:37750.service - OpenSSH per-connection server daemon (34.106.250.139:37750). Jan 27 05:33:08.547825 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount270034611.mount: Deactivated successfully. Jan 27 05:33:08.575651 sshd[3969]: Invalid user manager from 34.106.250.139 port 37684 Jan 27 05:33:08.674878 systemd[1]: Created slice kubepods-besteffort-podddf29afd_1e74_40c2_acff_fbfdb54646fa.slice - libcontainer container kubepods-besteffort-podddf29afd_1e74_40c2_acff_fbfdb54646fa.slice. Jan 27 05:33:08.714760 kubelet[3749]: I0127 05:33:08.714376 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ddf29afd-1e74-40c2-acff-fbfdb54646fa-var-lib-calico\") pod \"tigera-operator-7dcd859c48-chzzn\" (UID: \"ddf29afd-1e74-40c2-acff-fbfdb54646fa\") " pod="tigera-operator/tigera-operator-7dcd859c48-chzzn" Jan 27 05:33:08.714760 kubelet[3749]: I0127 05:33:08.714578 3749 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-prmqv\" (UniqueName: \"kubernetes.io/projected/ddf29afd-1e74-40c2-acff-fbfdb54646fa-kube-api-access-prmqv\") pod \"tigera-operator-7dcd859c48-chzzn\" (UID: \"ddf29afd-1e74-40c2-acff-fbfdb54646fa\") " pod="tigera-operator/tigera-operator-7dcd859c48-chzzn" Jan 27 05:33:08.728437 sshd[4026]: Invalid user anonymous from 34.106.250.139 port 37704 Jan 27 05:33:08.763976 sshd[3970]: Connection closed by invalid user 34.106.250.139 port 37690 [preauth] Jan 27 05:33:08.763000 audit[3970]: USER_ERR pid=3970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:08.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@185-10.128.0.99:22-34.106.250.139:37690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.777654 systemd[1]: sshd@185-10.128.0.99:22-34.106.250.139:37690.service: Deactivated successfully. Jan 27 05:33:08.787749 sshd[3969]: Connection closed by invalid user manager 34.106.250.139 port 37684 [preauth] Jan 27 05:33:08.790000 audit[3969]: USER_ERR pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:08.803173 systemd[1]: sshd@184-10.128.0.99:22-34.106.250.139:37684.service: Deactivated successfully. Jan 27 05:33:08.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@184-10.128.0.99:22-34.106.250.139:37684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.808059 sshd[4026]: Connection closed by invalid user anonymous 34.106.250.139 port 37704 [preauth] Jan 27 05:33:08.807000 audit[4026]: USER_ERR pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:08.825495 systemd[1]: sshd@187-10.128.0.99:22-34.106.250.139:37704.service: Deactivated successfully. Jan 27 05:33:08.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@187-10.128.0.99:22-34.106.250.139:37704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@194-10.128.0.99:22-34.106.250.139:37784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.893510 systemd[1]: Started sshd@194-10.128.0.99:22-34.106.250.139:37784.service - OpenSSH per-connection server daemon (34.106.250.139:37784). Jan 27 05:33:08.899423 systemd[1]: Started sshd@195-10.128.0.99:22-34.106.250.139:37800.service - OpenSSH per-connection server daemon (34.106.250.139:37800). Jan 27 05:33:08.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@195-10.128.0.99:22-34.106.250.139:37800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.914000 audit: BPF prog-id=141 op=LOAD Jan 27 05:33:08.914000 audit[4044]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a8488 a2=98 a3=0 items=0 ppid=3981 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333562336234376535633238373831316333653537636431316332 Jan 27 05:33:08.914000 audit: BPF prog-id=142 op=LOAD Jan 27 05:33:08.914000 audit[4044]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001a8218 a2=98 a3=0 items=0 ppid=3981 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333562336234376535633238373831316333653537636431316332 Jan 27 05:33:08.914000 audit: BPF prog-id=142 op=UNLOAD Jan 27 05:33:08.914000 audit[4044]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3981 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333562336234376535633238373831316333653537636431316332 Jan 27 05:33:08.914000 audit: BPF prog-id=141 op=UNLOAD Jan 27 05:33:08.914000 audit[4044]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3981 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333562336234376535633238373831316333653537636431316332 Jan 27 05:33:08.914000 audit: BPF prog-id=143 op=LOAD Jan 27 05:33:08.914000 audit[4044]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a86e8 a2=98 a3=0 items=0 ppid=3981 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:08.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333562336234376535633238373831316333653537636431316332 Jan 27 05:33:08.924292 sshd[4028]: Connection closed by authenticating user root 34.106.250.139 port 37714 [preauth] Jan 27 05:33:08.923000 audit[4028]: USER_ERR pid=4028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:08.945994 systemd[1]: sshd@188-10.128.0.99:22-34.106.250.139:37714.service: Deactivated successfully. Jan 27 05:33:08.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@188-10.128.0.99:22-34.106.250.139:37714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:08.991384 containerd[1595]: time="2026-01-27T05:33:08.991329037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-chzzn,Uid:ddf29afd-1e74-40c2-acff-fbfdb54646fa,Namespace:tigera-operator,Attempt:0,}" Jan 27 05:33:08.994327 sshd[4029]: Invalid user admin from 34.106.250.139 port 37728 Jan 27 05:33:08.996380 sshd[4031]: Invalid user test from 34.106.250.139 port 37738 Jan 27 05:33:09.008213 containerd[1595]: time="2026-01-27T05:33:09.008147100Z" level=info msg="StartContainer for \"1b35b3b47e5c287811c3e57cd11c2d599ca8cf332c15947e52c4ce63d5c513fe\" returns successfully" Jan 27 05:33:09.092212 containerd[1595]: time="2026-01-27T05:33:09.091815963Z" level=info msg="connecting to shim 8d5f5211c1744d27767b469b814d249a45c68d7c20d4cf174047c779831ab010" address="unix:///run/containerd/s/71310c1f5cacca99008d490df6b76cba44da6f1545510b658fc7e86a42677519" namespace=k8s.io protocol=ttrpc version=3 Jan 27 05:33:09.101418 sshd[4031]: Connection closed by invalid user test 34.106.250.139 port 37738 [preauth] Jan 27 05:33:09.104000 audit[4031]: USER_ERR pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.140147 systemd[1]: sshd@190-10.128.0.99:22-34.106.250.139:37738.service: Deactivated successfully. Jan 27 05:33:09.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@190-10.128.0.99:22-34.106.250.139:37738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.152000 audit[4029]: USER_ERR pid=4029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.154599 sshd[4029]: Connection closed by invalid user admin 34.106.250.139 port 37728 [preauth] Jan 27 05:33:09.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@196-10.128.0.99:22-34.106.250.139:37808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.158581 systemd[1]: Started sshd@196-10.128.0.99:22-34.106.250.139:37808.service - OpenSSH per-connection server daemon (34.106.250.139:37808). Jan 27 05:33:09.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@197-10.128.0.99:22-34.106.250.139:37814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.163561 systemd[1]: Started sshd@197-10.128.0.99:22-34.106.250.139:37814.service - OpenSSH per-connection server daemon (34.106.250.139:37814). Jan 27 05:33:09.168371 systemd[1]: Started sshd@198-10.128.0.99:22-34.106.250.139:37822.service - OpenSSH per-connection server daemon (34.106.250.139:37822). Jan 27 05:33:09.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@198-10.128.0.99:22-34.106.250.139:37822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.207419 systemd[1]: sshd@189-10.128.0.99:22-34.106.250.139:37728.service: Deactivated successfully. Jan 27 05:33:09.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@189-10.128.0.99:22-34.106.250.139:37728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.259257 systemd[1]: Started cri-containerd-8d5f5211c1744d27767b469b814d249a45c68d7c20d4cf174047c779831ab010.scope - libcontainer container 8d5f5211c1744d27767b469b814d249a45c68d7c20d4cf174047c779831ab010. Jan 27 05:33:09.269686 sshd[4062]: Invalid user info from 34.106.250.139 port 37764 Jan 27 05:33:09.334950 sshd[4064]: Invalid user guest from 34.106.250.139 port 37750 Jan 27 05:33:09.355427 sshd[4062]: Connection closed by invalid user info 34.106.250.139 port 37764 [preauth] Jan 27 05:33:09.354000 audit[4062]: USER_ERR pid=4062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.359000 audit: BPF prog-id=144 op=LOAD Jan 27 05:33:09.361000 audit: BPF prog-id=145 op=LOAD Jan 27 05:33:09.361000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a8238 a2=98 a3=0 items=0 ppid=4118 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864356635323131633137343464323737363762343639623831346432 Jan 27 05:33:09.363000 audit: BPF prog-id=145 op=UNLOAD Jan 27 05:33:09.363000 audit[4134]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4118 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864356635323131633137343464323737363762343639623831346432 Jan 27 05:33:09.365000 audit: BPF prog-id=146 op=LOAD Jan 27 05:33:09.365000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a8488 a2=98 a3=0 items=0 ppid=4118 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864356635323131633137343464323737363762343639623831346432 Jan 27 05:33:09.367000 audit[4063]: USER_ERR pid=4063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.369485 sshd[4063]: Connection closed by authenticating user adm 34.106.250.139 port 37768 [preauth] Jan 27 05:33:09.367000 audit: BPF prog-id=147 op=LOAD Jan 27 05:33:09.367000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001a8218 a2=98 a3=0 items=0 ppid=4118 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864356635323131633137343464323737363762343639623831346432 Jan 27 05:33:09.371000 audit: BPF prog-id=147 op=UNLOAD Jan 27 05:33:09.371000 audit[4134]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4118 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864356635323131633137343464323737363762343639623831346432 Jan 27 05:33:09.375000 audit: BPF prog-id=146 op=UNLOAD Jan 27 05:33:09.375000 audit[4134]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4118 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864356635323131633137343464323737363762343639623831346432 Jan 27 05:33:09.377000 audit: BPF prog-id=148 op=LOAD Jan 27 05:33:09.377000 audit[4134]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a86e8 a2=98 a3=0 items=0 ppid=4118 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864356635323131633137343464323737363762343639623831346432 Jan 27 05:33:09.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@199-10.128.0.99:22-34.106.250.139:37824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@191-10.128.0.99:22-34.106.250.139:37764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.404666 systemd[1]: Started sshd@199-10.128.0.99:22-34.106.250.139:37824.service - OpenSSH per-connection server daemon (34.106.250.139:37824). Jan 27 05:33:09.405812 systemd[1]: sshd@191-10.128.0.99:22-34.106.250.139:37764.service: Deactivated successfully. Jan 27 05:33:09.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@192-10.128.0.99:22-34.106.250.139:37768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.424325 systemd[1]: sshd@192-10.128.0.99:22-34.106.250.139:37768.service: Deactivated successfully. Jan 27 05:33:09.451000 audit[4064]: USER_ERR pid=4064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.453729 sshd[4064]: Connection closed by invalid user guest 34.106.250.139 port 37750 [preauth] Jan 27 05:33:09.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@200-10.128.0.99:22-34.106.250.139:37828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.479352 systemd[1]: Started sshd@200-10.128.0.99:22-34.106.250.139:37828.service - OpenSSH per-connection server daemon (34.106.250.139:37828). Jan 27 05:33:09.480379 systemd[1]: sshd@193-10.128.0.99:22-34.106.250.139:37750.service: Deactivated successfully. Jan 27 05:33:09.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@193-10.128.0.99:22-34.106.250.139:37750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.566991 containerd[1595]: time="2026-01-27T05:33:09.565986198Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-chzzn,Uid:ddf29afd-1e74-40c2-acff-fbfdb54646fa,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"8d5f5211c1744d27767b469b814d249a45c68d7c20d4cf174047c779831ab010\"" Jan 27 05:33:09.575219 containerd[1595]: time="2026-01-27T05:33:09.574822087Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Jan 27 05:33:09.591657 sshd[4090]: Invalid user postgres from 34.106.250.139 port 37800 Jan 27 05:33:09.603000 audit[4217]: NETFILTER_CFG table=mangle:54 family=2 entries=1 op=nft_register_chain pid=4217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.603000 audit[4217]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc8215eb70 a2=0 a3=7ffc8215eb5c items=0 ppid=4066 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.603000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jan 27 05:33:09.608000 audit[4218]: NETFILTER_CFG table=mangle:55 family=10 entries=1 op=nft_register_chain pid=4218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:09.608000 audit[4218]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd61d48030 a2=0 a3=7ffd61d4801c items=0 ppid=4066 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.608000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jan 27 05:33:09.619000 audit[4220]: NETFILTER_CFG table=nat:56 family=10 entries=1 op=nft_register_chain pid=4220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:09.619000 audit[4220]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd18819d10 a2=0 a3=7ffd18819cfc items=0 ppid=4066 pid=4220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.619000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jan 27 05:33:09.643000 audit[4222]: NETFILTER_CFG table=nat:57 family=2 entries=1 op=nft_register_chain pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.646552 sshd[4090]: Connection closed by invalid user postgres 34.106.250.139 port 37800 [preauth] Jan 27 05:33:09.643000 audit[4222]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc003032b0 a2=0 a3=7ffc0030329c items=0 ppid=4066 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.643000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jan 27 05:33:09.645000 audit[4223]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=4223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:09.645000 audit[4223]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd01675d30 a2=0 a3=7ffd01675d1c items=0 ppid=4066 pid=4223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.645000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jan 27 05:33:09.647000 audit[4090]: USER_ERR pid=4090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.652000 audit[4226]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_chain pid=4226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.652000 audit[4226]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9fbfd1a0 a2=0 a3=7ffd9fbfd18c items=0 ppid=4066 pid=4226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.652000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jan 27 05:33:09.658859 systemd[1]: sshd@195-10.128.0.99:22-34.106.250.139:37800.service: Deactivated successfully. Jan 27 05:33:09.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@195-10.128.0.99:22-34.106.250.139:37800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.700734 sshd[4089]: Invalid user mysql from 34.106.250.139 port 37784 Jan 27 05:33:09.705000 audit[4234]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_chain pid=4234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.705000 audit[4234]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffce25318b0 a2=0 a3=7ffce253189c items=0 ppid=4066 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.705000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jan 27 05:33:09.711000 audit[4236]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=4236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.711000 audit[4236]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe00042ea0 a2=0 a3=7ffe00042e8c items=0 ppid=4066 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.711000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jan 27 05:33:09.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@201-10.128.0.99:22-34.106.250.139:37838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.721942 systemd[1]: Started sshd@201-10.128.0.99:22-34.106.250.139:37838.service - OpenSSH per-connection server daemon (34.106.250.139:37838). Jan 27 05:33:09.724000 audit[4240]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=4240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.724000 audit[4240]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff51fb02b0 a2=0 a3=7fff51fb029c items=0 ppid=4066 pid=4240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.724000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jan 27 05:33:09.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@202-10.128.0.99:22-34.106.250.139:37848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.728601 systemd[1]: Started sshd@202-10.128.0.99:22-34.106.250.139:37848.service - OpenSSH per-connection server daemon (34.106.250.139:37848). Jan 27 05:33:09.732000 audit[4242]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_chain pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.732000 audit[4242]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbe082ea0 a2=0 a3=7ffcbe082e8c items=0 ppid=4066 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.732000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jan 27 05:33:09.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@203-10.128.0.99:22-34.106.250.139:37836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.740737 systemd[1]: Started sshd@203-10.128.0.99:22-34.106.250.139:37836.service - OpenSSH per-connection server daemon (34.106.250.139:37836). Jan 27 05:33:09.747000 audit[4245]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_rule pid=4245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.747000 audit[4245]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffca00f8540 a2=0 a3=7ffca00f852c items=0 ppid=4066 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.747000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jan 27 05:33:09.756000 audit[4246]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=4246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.756000 audit[4246]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc929d2590 a2=0 a3=7ffc929d257c items=0 ppid=4066 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jan 27 05:33:09.780000 audit[4248]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=4248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.780000 audit[4248]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffceb392850 a2=0 a3=7ffceb39283c items=0 ppid=4066 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.780000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jan 27 05:33:09.808000 audit[4252]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=4252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.808000 audit[4252]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdb3c8ed80 a2=0 a3=7ffdb3c8ed6c items=0 ppid=4066 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.808000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jan 27 05:33:09.812000 audit[4253]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=4253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.812000 audit[4253]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd40cc4750 a2=0 a3=7ffd40cc473c items=0 ppid=4066 pid=4253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.812000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jan 27 05:33:09.826000 audit[4255]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=4255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.826000 audit[4255]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeccce2260 a2=0 a3=7ffeccce224c items=0 ppid=4066 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jan 27 05:33:09.832000 audit[4256]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=4256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.832000 audit[4256]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe32cf6ec0 a2=0 a3=7ffe32cf6eac items=0 ppid=4066 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.832000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jan 27 05:33:09.836222 sshd[4144]: Invalid user oracle from 34.106.250.139 port 37822 Jan 27 05:33:09.836000 audit[4089]: USER_ERR pid=4089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.838616 sshd[4089]: Connection closed by invalid user mysql 34.106.250.139 port 37784 [preauth] Jan 27 05:33:09.845000 audit[4258]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=4258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.845000 audit[4258]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc269aa6c0 a2=0 a3=7ffc269aa6ac items=0 ppid=4066 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jan 27 05:33:09.858000 audit[4261]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.858000 audit[4261]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc18ac77c0 a2=0 a3=7ffc18ac77ac items=0 ppid=4066 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.858000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jan 27 05:33:09.866157 sshd[4140]: Invalid user administrator from 34.106.250.139 port 37814 Jan 27 05:33:09.867370 systemd[1]: sshd@194-10.128.0.99:22-34.106.250.139:37784.service: Deactivated successfully. Jan 27 05:33:09.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@194-10.128.0.99:22-34.106.250.139:37784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.868000 audit[4265]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_rule pid=4265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.868000 audit[4265]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc9a6f5e50 a2=0 a3=7ffc9a6f5e3c items=0 ppid=4066 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.868000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jan 27 05:33:09.871000 audit[4266]: NETFILTER_CFG table=nat:74 family=2 entries=1 op=nft_register_chain pid=4266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.871000 audit[4266]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffa4794810 a2=0 a3=7fffa47947fc items=0 ppid=4066 pid=4266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.871000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jan 27 05:33:09.877000 audit[4269]: NETFILTER_CFG table=nat:75 family=2 entries=1 op=nft_register_rule pid=4269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.877000 audit[4269]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffc51fe330 a2=0 a3=7fffc51fe31c items=0 ppid=4066 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jan 27 05:33:09.886659 sshd[4137]: Invalid user user from 34.106.250.139 port 37808 Jan 27 05:33:09.886000 audit[4272]: NETFILTER_CFG table=nat:76 family=2 entries=1 op=nft_register_rule pid=4272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.886000 audit[4272]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdc162eaa0 a2=0 a3=7ffdc162ea8c items=0 ppid=4066 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.886000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jan 27 05:33:09.890000 audit[4273]: NETFILTER_CFG table=nat:77 family=2 entries=1 op=nft_register_chain pid=4273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.890000 audit[4273]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc00655cf0 a2=0 a3=7ffc00655cdc items=0 ppid=4066 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.890000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jan 27 05:33:09.905000 audit[4275]: NETFILTER_CFG table=nat:78 family=2 entries=1 op=nft_register_rule pid=4275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jan 27 05:33:09.905000 audit[4275]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff21329d70 a2=0 a3=7fff21329d5c items=0 ppid=4066 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.905000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jan 27 05:33:09.959000 audit[4282]: NETFILTER_CFG table=filter:79 family=2 entries=8 op=nft_register_rule pid=4282 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jan 27 05:33:09.959000 audit[4282]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffffe30ffc0 a2=0 a3=7ffffe30ffac items=0 ppid=4066 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.959000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jan 27 05:33:09.969853 sshd[4144]: Connection closed by invalid user oracle 34.106.250.139 port 37822 [preauth] Jan 27 05:33:09.968000 audit[4144]: USER_ERR pid=4144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:09.972000 audit[4282]: NETFILTER_CFG table=nat:80 family=2 entries=14 op=nft_register_chain pid=4282 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jan 27 05:33:09.972000 audit[4282]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffffe30ffc0 a2=0 a3=7ffffe30ffac items=0 ppid=4066 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.972000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jan 27 05:33:09.978000 audit[4289]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_chain pid=4289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:09.978000 audit[4289]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd05faa170 a2=0 a3=7ffd05faa15c items=0 ppid=4066 pid=4289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jan 27 05:33:09.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@198-10.128.0.99:22-34.106.250.139:37822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:09.990625 systemd[1]: sshd@198-10.128.0.99:22-34.106.250.139:37822.service: Deactivated successfully. Jan 27 05:33:09.993000 audit[4292]: NETFILTER_CFG table=filter:82 family=10 entries=2 op=nft_register_chain pid=4292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:09.993000 audit[4292]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff8658ee00 a2=0 a3=7fff8658edec items=0 ppid=4066 pid=4292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:09.993000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jan 27 05:33:10.003210 sshd[4137]: Connection closed by invalid user user 34.106.250.139 port 37808 [preauth] Jan 27 05:33:10.010000 audit[4137]: USER_ERR pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.019000 audit[4296]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=4296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.019000 audit[4296]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd46290d40 a2=0 a3=7ffd46290d2c items=0 ppid=4066 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jan 27 05:33:10.028000 audit[4299]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=4299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.028000 audit[4299]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffbd68780 a2=0 a3=7ffffbd6876c items=0 ppid=4066 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.028000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jan 27 05:33:10.031000 audit[4140]: USER_ERR pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.034845 sshd[4140]: Connection closed by invalid user administrator 34.106.250.139 port 37814 [preauth] Jan 27 05:33:10.048000 audit[4302]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=4302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.048000 audit[4302]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff2931ab20 a2=0 a3=7fff2931ab0c items=0 ppid=4066 pid=4302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.048000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jan 27 05:33:10.060000 audit[4304]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=4304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.063478 sshd[4173]: Invalid user ftp from 34.106.250.139 port 37824 Jan 27 05:33:10.064374 systemd[1]: sshd@196-10.128.0.99:22-34.106.250.139:37808.service: Deactivated successfully. Jan 27 05:33:10.060000 audit[4304]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffaf2b2700 a2=0 a3=7fffaf2b26ec items=0 ppid=4066 pid=4304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.060000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jan 27 05:33:10.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@196-10.128.0.99:22-34.106.250.139:37808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@204-10.128.0.99:22-34.106.250.139:37864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.086058 kubelet[3749]: I0127 05:33:10.084718 3749 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-zhfdp" podStartSLOduration=3.084684639 podStartE2EDuration="3.084684639s" podCreationTimestamp="2026-01-27 05:33:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2026-01-27 05:33:10.081628971 +0000 UTC m=+5.900565536" watchObservedRunningTime="2026-01-27 05:33:10.084684639 +0000 UTC m=+5.903621203" Jan 27 05:33:10.083457 systemd[1]: Started sshd@204-10.128.0.99:22-34.106.250.139:37864.service - OpenSSH per-connection server daemon (34.106.250.139:37864). Jan 27 05:33:10.090626 systemd[1]: Started sshd@205-10.128.0.99:22-34.106.250.139:37868.service - OpenSSH per-connection server daemon (34.106.250.139:37868). Jan 27 05:33:10.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@205-10.128.0.99:22-34.106.250.139:37868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@197-10.128.0.99:22-34.106.250.139:37814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.099999 systemd[1]: sshd@197-10.128.0.99:22-34.106.250.139:37814.service: Deactivated successfully. Jan 27 05:33:10.102000 audit[4309]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=4309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.102000 audit[4309]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff6829fc30 a2=0 a3=7fff6829fc1c items=0 ppid=4066 pid=4309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.102000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jan 27 05:33:10.108013 sshd[4193]: Invalid user pi from 34.106.250.139 port 37828 Jan 27 05:33:10.127000 audit[4315]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=4315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.127000 audit[4315]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe1444b640 a2=0 a3=7ffe1444b62c items=0 ppid=4066 pid=4315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.127000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jan 27 05:33:10.136000 audit[4316]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=4316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.136000 audit[4316]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa50fd3b0 a2=0 a3=7fffa50fd39c items=0 ppid=4066 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.136000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jan 27 05:33:10.148000 audit[4320]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=4320 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.148000 audit[4320]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdff0dcad0 a2=0 a3=7ffdff0dcabc items=0 ppid=4066 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.148000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jan 27 05:33:10.153000 audit[4321]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=4321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.153000 audit[4321]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff5b805b0 a2=0 a3=7ffff5b8059c items=0 ppid=4066 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jan 27 05:33:10.169000 audit[4323]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=4323 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.169000 audit[4323]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcc426f260 a2=0 a3=7ffcc426f24c items=0 ppid=4066 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jan 27 05:33:10.188000 audit[4327]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=4327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.188000 audit[4327]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff16a498d0 a2=0 a3=7fff16a498bc items=0 ppid=4066 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jan 27 05:33:10.207000 audit[4331]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.207000 audit[4331]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffda9824a0 a2=0 a3=7fffda98248c items=0 ppid=4066 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jan 27 05:33:10.215000 audit[4332]: NETFILTER_CFG table=nat:95 family=10 entries=1 op=nft_register_chain pid=4332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.215000 audit[4332]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd5bd3c700 a2=0 a3=7ffd5bd3c6ec items=0 ppid=4066 pid=4332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.215000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jan 27 05:33:10.226000 audit[4335]: NETFILTER_CFG table=nat:96 family=10 entries=1 op=nft_register_rule pid=4335 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.226000 audit[4335]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffeea3c1710 a2=0 a3=7ffeea3c16fc items=0 ppid=4066 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.226000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jan 27 05:33:10.245000 audit[4338]: NETFILTER_CFG table=nat:97 family=10 entries=1 op=nft_register_rule pid=4338 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.245000 audit[4338]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc9eb35bf0 a2=0 a3=7ffc9eb35bdc items=0 ppid=4066 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.245000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jan 27 05:33:10.251000 audit[4339]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=4339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.251000 audit[4339]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffdd8842b0 a2=0 a3=7fffdd88429c items=0 ppid=4066 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.251000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jan 27 05:33:10.258736 sshd[4173]: Connection closed by invalid user ftp 34.106.250.139 port 37824 [preauth] Jan 27 05:33:10.257000 audit[4173]: USER_ERR pid=4173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.266000 audit[4341]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=4341 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.266000 audit[4341]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffdd03ecc70 a2=0 a3=7ffdd03ecc5c items=0 ppid=4066 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.266000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jan 27 05:33:10.267935 sshd[4193]: Connection closed by invalid user pi 34.106.250.139 port 37828 [preauth] Jan 27 05:33:10.266000 audit[4193]: USER_ERR pid=4193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.270000 audit[4342]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_chain pid=4342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.270000 audit[4342]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb3805b30 a2=0 a3=7fffb3805b1c items=0 ppid=4066 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.270000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jan 27 05:33:10.281000 audit[4346]: NETFILTER_CFG table=filter:101 family=10 entries=1 op=nft_register_rule pid=4346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.281000 audit[4346]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe12170c90 a2=0 a3=7ffe12170c7c items=0 ppid=4066 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.281000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jan 27 05:33:10.290467 systemd[1]: sshd@199-10.128.0.99:22-34.106.250.139:37824.service: Deactivated successfully. Jan 27 05:33:10.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@199-10.128.0.99:22-34.106.250.139:37824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.295111 systemd[1]: sshd@200-10.128.0.99:22-34.106.250.139:37828.service: Deactivated successfully. Jan 27 05:33:10.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@200-10.128.0.99:22-34.106.250.139:37828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.303000 audit[4352]: NETFILTER_CFG table=filter:102 family=10 entries=1 op=nft_register_rule pid=4352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jan 27 05:33:10.303000 audit[4352]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe0357da50 a2=0 a3=7ffe0357da3c items=0 ppid=4066 pid=4352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.303000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jan 27 05:33:10.314000 audit[4355]: NETFILTER_CFG table=filter:103 family=10 entries=3 op=nft_register_rule pid=4355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jan 27 05:33:10.314000 audit[4355]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffc121cd530 a2=0 a3=7ffc121cd51c items=0 ppid=4066 pid=4355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.314000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jan 27 05:33:10.315000 audit[4355]: NETFILTER_CFG table=nat:104 family=10 entries=7 op=nft_register_chain pid=4355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jan 27 05:33:10.315000 audit[4355]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc121cd530 a2=0 a3=7ffc121cd51c items=0 ppid=4066 pid=4355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:10.315000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jan 27 05:33:10.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@206-10.128.0.99:22-34.106.250.139:37898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.346103 systemd[1]: Started sshd@206-10.128.0.99:22-34.106.250.139:37898.service - OpenSSH per-connection server daemon (34.106.250.139:37898). Jan 27 05:33:10.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@207-10.128.0.99:22-34.106.250.139:37892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.352069 systemd[1]: Started sshd@207-10.128.0.99:22-34.106.250.139:37892.service - OpenSSH per-connection server daemon (34.106.250.139:37892). Jan 27 05:33:10.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@208-10.128.0.99:22-34.106.250.139:37882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.355384 systemd[1]: Started sshd@208-10.128.0.99:22-34.106.250.139:37882.service - OpenSSH per-connection server daemon (34.106.250.139:37882). Jan 27 05:33:10.401450 sshd[4239]: Invalid user ansible from 34.106.250.139 port 37838 Jan 27 05:33:10.414702 sshd[4241]: Invalid user ec2-user from 34.106.250.139 port 37848 Jan 27 05:33:10.415375 sshd[4243]: Invalid user puppet from 34.106.250.139 port 37836 Jan 27 05:33:10.469442 sshd[4241]: Connection closed by invalid user ec2-user 34.106.250.139 port 37848 [preauth] Jan 27 05:33:10.472000 audit[4241]: USER_ERR pid=4241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.481016 systemd[1]: sshd@202-10.128.0.99:22-34.106.250.139:37848.service: Deactivated successfully. Jan 27 05:33:10.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@202-10.128.0.99:22-34.106.250.139:37848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.486786 sshd[4239]: Connection closed by invalid user ansible 34.106.250.139 port 37838 [preauth] Jan 27 05:33:10.485000 audit[4239]: USER_ERR pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.503721 systemd[1]: sshd@201-10.128.0.99:22-34.106.250.139:37838.service: Deactivated successfully. Jan 27 05:33:10.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@201-10.128.0.99:22-34.106.250.139:37838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.521075 sshd[4243]: Connection closed by invalid user puppet 34.106.250.139 port 37836 [preauth] Jan 27 05:33:10.523000 audit[4243]: USER_ERR pid=4243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.530853 systemd[1]: sshd@203-10.128.0.99:22-34.106.250.139:37836.service: Deactivated successfully. Jan 27 05:33:10.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@203-10.128.0.99:22-34.106.250.139:37836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.543820 sshd[4310]: Invalid user azureuser from 34.106.250.139 port 37868 Jan 27 05:33:10.545218 sshd[4308]: Invalid user vagrant from 34.106.250.139 port 37864 Jan 27 05:33:10.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@209-10.128.0.99:22-34.106.250.139:37912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.564846 systemd[1]: Started sshd@209-10.128.0.99:22-34.106.250.139:37912.service - OpenSSH per-connection server daemon (34.106.250.139:37912). Jan 27 05:33:10.573196 systemd[1]: Started sshd@210-10.128.0.99:22-34.106.250.139:37920.service - OpenSSH per-connection server daemon (34.106.250.139:37920). Jan 27 05:33:10.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@210-10.128.0.99:22-34.106.250.139:37920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.579000 audit[4308]: USER_ERR pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.581587 sshd[4308]: Connection closed by invalid user vagrant 34.106.250.139 port 37864 [preauth] Jan 27 05:33:10.586376 systemd[1]: sshd@204-10.128.0.99:22-34.106.250.139:37864.service: Deactivated successfully. Jan 27 05:33:10.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@204-10.128.0.99:22-34.106.250.139:37864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.618209 systemd[1]: Started sshd@211-10.128.0.99:22-34.106.250.139:37930.service - OpenSSH per-connection server daemon (34.106.250.139:37930). Jan 27 05:33:10.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@211-10.128.0.99:22-34.106.250.139:37930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.657242 sshd[4310]: Connection closed by invalid user azureuser 34.106.250.139 port 37868 [preauth] Jan 27 05:33:10.656000 audit[4310]: USER_ERR pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.666623 systemd[1]: sshd@205-10.128.0.99:22-34.106.250.139:37868.service: Deactivated successfully. Jan 27 05:33:10.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@205-10.128.0.99:22-34.106.250.139:37868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.698727 systemd[1]: Started sshd@212-10.128.0.99:22-34.106.250.139:37942.service - OpenSSH per-connection server daemon (34.106.250.139:37942). Jan 27 05:33:10.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@212-10.128.0.99:22-34.106.250.139:37942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.800314 sshd[4361]: Invalid user rstudio from 34.106.250.139 port 37892 Jan 27 05:33:10.829036 sshd[4362]: Invalid user cisco from 34.106.250.139 port 37882 Jan 27 05:33:10.830438 sshd[4360]: Invalid user tomcat from 34.106.250.139 port 37898 Jan 27 05:33:10.910223 sshd[4361]: Connection closed by invalid user rstudio 34.106.250.139 port 37892 [preauth] Jan 27 05:33:10.965294 kernel: kauditd_printk_skb: 326 callbacks suppressed Jan 27 05:33:10.965420 kernel: audit: type=1109 audit(1769491990.931:1096): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.931000 audit[4361]: USER_ERR pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.965578 sshd[4362]: Connection closed by invalid user cisco 34.106.250.139 port 37882 [preauth] Jan 27 05:33:10.965654 sshd[4360]: Connection closed by invalid user tomcat 34.106.250.139 port 37898 [preauth] Jan 27 05:33:10.932848 systemd[1]: Started sshd@213-10.128.0.99:22-34.106.250.139:37958.service - OpenSSH per-connection server daemon (34.106.250.139:37958). Jan 27 05:33:10.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@213-10.128.0.99:22-34.106.250.139:37958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.992733 kernel: audit: type=1130 audit(1769491990.964:1097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@213-10.128.0.99:22-34.106.250.139:37958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.972000 audit[4362]: USER_ERR pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.994500 systemd[1]: Started sshd@214-10.128.0.99:22-34.106.250.139:37980.service - OpenSSH per-connection server daemon (34.106.250.139:37980). Jan 27 05:33:11.002454 systemd[1]: Started sshd@215-10.128.0.99:22-34.106.250.139:37974.service - OpenSSH per-connection server daemon (34.106.250.139:37974). Jan 27 05:33:11.004231 systemd[1]: sshd@206-10.128.0.99:22-34.106.250.139:37898.service: Deactivated successfully. Jan 27 05:33:11.020132 kernel: audit: type=1109 audit(1769491990.972:1098): pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.972000 audit[4360]: USER_ERR pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.028250 systemd[1]: sshd@207-10.128.0.99:22-34.106.250.139:37892.service: Deactivated successfully. Jan 27 05:33:11.040440 systemd[1]: sshd@208-10.128.0.99:22-34.106.250.139:37882.service: Deactivated successfully. Jan 27 05:33:11.049044 kernel: audit: type=1109 audit(1769491990.972:1099): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:10.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@214-10.128.0.99:22-34.106.250.139:37980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.075901 kernel: audit: type=1130 audit(1769491990.992:1100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@214-10.128.0.99:22-34.106.250.139:37980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:10.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@215-10.128.0.99:22-34.106.250.139:37974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.104514 kernel: audit: type=1130 audit(1769491990.998:1101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@215-10.128.0.99:22-34.106.250.139:37974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@206-10.128.0.99:22-34.106.250.139:37898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.128318 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3235918598.mount: Deactivated successfully. Jan 27 05:33:11.140429 kernel: audit: type=1131 audit(1769491991.003:1102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@206-10.128.0.99:22-34.106.250.139:37898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.140562 kernel: audit: type=1131 audit(1769491991.027:1103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@207-10.128.0.99:22-34.106.250.139:37892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@207-10.128.0.99:22-34.106.250.139:37892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.167631 kernel: audit: type=1131 audit(1769491991.037:1104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@208-10.128.0.99:22-34.106.250.139:37882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@208-10.128.0.99:22-34.106.250.139:37882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.209763 sshd[4379]: Invalid user from 34.106.250.139 port 37920 Jan 27 05:33:11.215985 sshd[4378]: Invalid user manager from 34.106.250.139 port 37912 Jan 27 05:33:11.285000 audit[4379]: USER_ERR pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.288006 sshd[4379]: Connection closed by invalid user 34.106.250.139 port 37920 [preauth] Jan 27 05:33:11.312485 kernel: audit: type=1109 audit(1769491991.285:1105): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.333152 systemd[1]: sshd@210-10.128.0.99:22-34.106.250.139:37920.service: Deactivated successfully. Jan 27 05:33:11.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@210-10.128.0.99:22-34.106.250.139:37920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.334939 sshd[4390]: Connection closed by authenticating user root 34.106.250.139 port 37942 [preauth] Jan 27 05:33:11.333000 audit[4390]: USER_ERR pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.340155 systemd[1]: sshd@212-10.128.0.99:22-34.106.250.139:37942.service: Deactivated successfully. Jan 27 05:33:11.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@212-10.128.0.99:22-34.106.250.139:37942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.365335 sshd[4383]: Invalid user anonymous from 34.106.250.139 port 37930 Jan 27 05:33:11.365000 audit[4378]: USER_ERR pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.367082 sshd[4378]: Connection closed by invalid user manager 34.106.250.139 port 37912 [preauth] Jan 27 05:33:11.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@216-10.128.0.99:22-34.106.250.139:37996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.368982 systemd[1]: Started sshd@216-10.128.0.99:22-34.106.250.139:37996.service - OpenSSH per-connection server daemon (34.106.250.139:37996). Jan 27 05:33:11.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@217-10.128.0.99:22-34.106.250.139:38008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@209-10.128.0.99:22-34.106.250.139:37912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.374832 systemd[1]: Started sshd@217-10.128.0.99:22-34.106.250.139:38008.service - OpenSSH per-connection server daemon (34.106.250.139:38008). Jan 27 05:33:11.375931 systemd[1]: sshd@209-10.128.0.99:22-34.106.250.139:37912.service: Deactivated successfully. Jan 27 05:33:11.450850 sshd[4383]: Connection closed by invalid user anonymous 34.106.250.139 port 37930 [preauth] Jan 27 05:33:11.451000 audit[4383]: USER_ERR pid=4383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@218-10.128.0.99:22-34.106.250.139:38038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.457766 systemd[1]: Started sshd@218-10.128.0.99:22-34.106.250.139:38038.service - OpenSSH per-connection server daemon (34.106.250.139:38038). Jan 27 05:33:11.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@219-10.128.0.99:22-34.106.250.139:38020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.463843 systemd[1]: Started sshd@219-10.128.0.99:22-34.106.250.139:38020.service - OpenSSH per-connection server daemon (34.106.250.139:38020). Jan 27 05:33:11.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@220-10.128.0.99:22-34.106.250.139:38032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.469343 systemd[1]: Started sshd@220-10.128.0.99:22-34.106.250.139:38032.service - OpenSSH per-connection server daemon (34.106.250.139:38032). Jan 27 05:33:11.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@211-10.128.0.99:22-34.106.250.139:37930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.471564 systemd[1]: sshd@211-10.128.0.99:22-34.106.250.139:37930.service: Deactivated successfully. Jan 27 05:33:11.540665 sshd[4402]: Invalid user admin from 34.106.250.139 port 37958 Jan 27 05:33:11.578432 sshd[4404]: Invalid user guest from 34.106.250.139 port 37980 Jan 27 05:33:11.598229 sshd[4402]: Connection closed by invalid user admin 34.106.250.139 port 37958 [preauth] Jan 27 05:33:11.602000 audit[4402]: USER_ERR pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.615620 systemd[1]: sshd@213-10.128.0.99:22-34.106.250.139:37958.service: Deactivated successfully. Jan 27 05:33:11.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@213-10.128.0.99:22-34.106.250.139:37958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.640426 sshd[4404]: Connection closed by invalid user guest 34.106.250.139 port 37980 [preauth] Jan 27 05:33:11.642000 audit[4404]: USER_ERR pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.669664 systemd[1]: sshd@214-10.128.0.99:22-34.106.250.139:37980.service: Deactivated successfully. Jan 27 05:33:11.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@214-10.128.0.99:22-34.106.250.139:37980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@221-10.128.0.99:22-34.106.250.139:38044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.686032 systemd[1]: Started sshd@221-10.128.0.99:22-34.106.250.139:38044.service - OpenSSH per-connection server daemon (34.106.250.139:38044). Jan 27 05:33:11.688449 sshd[4405]: Invalid user test from 34.106.250.139 port 37974 Jan 27 05:33:11.767433 sshd[4405]: Connection closed by invalid user test 34.106.250.139 port 37974 [preauth] Jan 27 05:33:11.767000 audit[4405]: USER_ERR pid=4405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@215-10.128.0.99:22-34.106.250.139:37974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.795147 systemd[1]: sshd@215-10.128.0.99:22-34.106.250.139:37974.service: Deactivated successfully. Jan 27 05:33:11.806463 sshd[4424]: Connection closed by authenticating user adm 34.106.250.139 port 38008 [preauth] Jan 27 05:33:11.807000 audit[4424]: USER_ERR pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.817125 systemd[1]: sshd@217-10.128.0.99:22-34.106.250.139:38008.service: Deactivated successfully. Jan 27 05:33:11.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@217-10.128.0.99:22-34.106.250.139:38008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.833324 sshd[4423]: Invalid user info from 34.106.250.139 port 37996 Jan 27 05:33:11.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@222-10.128.0.99:22-34.106.250.139:38046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@223-10.128.0.99:22-34.106.250.139:38048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.832526 systemd[1]: Started sshd@222-10.128.0.99:22-34.106.250.139:38046.service - OpenSSH per-connection server daemon (34.106.250.139:38046). Jan 27 05:33:11.836991 systemd[1]: Started sshd@223-10.128.0.99:22-34.106.250.139:38048.service - OpenSSH per-connection server daemon (34.106.250.139:38048). Jan 27 05:33:11.882619 sshd[4432]: Invalid user user from 34.106.250.139 port 38038 Jan 27 05:33:11.898778 sshd[4423]: Connection closed by invalid user info 34.106.250.139 port 37996 [preauth] Jan 27 05:33:11.897000 audit[4423]: USER_ERR pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@216-10.128.0.99:22-34.106.250.139:37996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.933245 systemd[1]: sshd@216-10.128.0.99:22-34.106.250.139:37996.service: Deactivated successfully. Jan 27 05:33:11.968037 sshd[4432]: Connection closed by invalid user user 34.106.250.139 port 38038 [preauth] Jan 27 05:33:11.967000 audit[4432]: USER_ERR pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:11.982111 systemd[1]: sshd@218-10.128.0.99:22-34.106.250.139:38038.service: Deactivated successfully. Jan 27 05:33:11.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@218-10.128.0.99:22-34.106.250.139:38038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:11.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@224-10.128.0.99:22-34.106.250.139:38080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.000378 systemd[1]: Started sshd@224-10.128.0.99:22-34.106.250.139:38080.service - OpenSSH per-connection server daemon (34.106.250.139:38080). Jan 27 05:33:12.007513 sshd[4434]: Invalid user mysql from 34.106.250.139 port 38020 Jan 27 05:33:12.011066 systemd[1]: Started sshd@225-10.128.0.99:22-34.106.250.139:38062.service - OpenSSH per-connection server daemon (34.106.250.139:38062). Jan 27 05:33:12.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@225-10.128.0.99:22-34.106.250.139:38062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@226-10.128.0.99:22-34.106.250.139:38074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.021912 systemd[1]: Started sshd@226-10.128.0.99:22-34.106.250.139:38074.service - OpenSSH per-connection server daemon (34.106.250.139:38074). Jan 27 05:33:12.053593 sshd[4435]: Invalid user postgres from 34.106.250.139 port 38032 Jan 27 05:33:12.073217 sshd[4450]: Invalid user administrator from 34.106.250.139 port 38044 Jan 27 05:33:12.156272 sshd[4435]: Connection closed by invalid user postgres 34.106.250.139 port 38032 [preauth] Jan 27 05:33:12.162000 audit[4434]: USER_ERR pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.164611 sshd[4434]: Connection closed by invalid user mysql 34.106.250.139 port 38020 [preauth] Jan 27 05:33:12.163000 audit[4435]: USER_ERR pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.185975 systemd[1]: Started sshd@227-10.128.0.99:22-34.106.250.139:38088.service - OpenSSH per-connection server daemon (34.106.250.139:38088). Jan 27 05:33:12.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@227-10.128.0.99:22-34.106.250.139:38088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.194113 systemd[1]: sshd@220-10.128.0.99:22-34.106.250.139:38032.service: Deactivated successfully. Jan 27 05:33:12.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@220-10.128.0.99:22-34.106.250.139:38032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.209641 sshd[4450]: Connection closed by invalid user administrator 34.106.250.139 port 38044 [preauth] Jan 27 05:33:12.208000 audit[4450]: USER_ERR pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.216131 systemd[1]: sshd@219-10.128.0.99:22-34.106.250.139:38020.service: Deactivated successfully. Jan 27 05:33:12.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@219-10.128.0.99:22-34.106.250.139:38020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@221-10.128.0.99:22-34.106.250.139:38044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.245937 systemd[1]: sshd@221-10.128.0.99:22-34.106.250.139:38044.service: Deactivated successfully. Jan 27 05:33:12.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@228-10.128.0.99:22-34.106.250.139:38102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.270899 systemd[1]: Started sshd@228-10.128.0.99:22-34.106.250.139:38102.service - OpenSSH per-connection server daemon (34.106.250.139:38102). Jan 27 05:33:12.361168 sshd[4461]: Invalid user oracle from 34.106.250.139 port 38046 Jan 27 05:33:12.439000 audit[4461]: USER_ERR pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.441284 sshd[4461]: Connection closed by invalid user oracle 34.106.250.139 port 38046 [preauth] Jan 27 05:33:12.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@222-10.128.0.99:22-34.106.250.139:38046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.467509 systemd[1]: sshd@222-10.128.0.99:22-34.106.250.139:38046.service: Deactivated successfully. Jan 27 05:33:12.517182 systemd[1]: Started sshd@229-10.128.0.99:22-34.106.250.139:38114.service - OpenSSH per-connection server daemon (34.106.250.139:38114). Jan 27 05:33:12.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@229-10.128.0.99:22-34.106.250.139:38114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@230-10.128.0.99:22-34.106.250.139:38126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.524189 systemd[1]: Started sshd@230-10.128.0.99:22-34.106.250.139:38126.service - OpenSSH per-connection server daemon (34.106.250.139:38126). Jan 27 05:33:12.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@231-10.128.0.99:22-34.106.250.139:38128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.529481 systemd[1]: Started sshd@231-10.128.0.99:22-34.106.250.139:38128.service - OpenSSH per-connection server daemon (34.106.250.139:38128). Jan 27 05:33:12.617806 sshd[4462]: Invalid user ftp from 34.106.250.139 port 38048 Jan 27 05:33:12.621455 sshd[4477]: Invalid user pi from 34.106.250.139 port 38062 Jan 27 05:33:12.628145 sshd[4476]: Invalid user ansible from 34.106.250.139 port 38080 Jan 27 05:33:12.678889 sshd[4478]: Invalid user puppet from 34.106.250.139 port 38074 Jan 27 05:33:12.686000 audit[4462]: USER_ERR pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.688334 sshd[4462]: Connection closed by invalid user ftp 34.106.250.139 port 38048 [preauth] Jan 27 05:33:12.690645 sshd[4477]: Connection closed by invalid user pi 34.106.250.139 port 38062 [preauth] Jan 27 05:33:12.689000 audit[4477]: USER_ERR pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.704156 sshd[4476]: Connection closed by invalid user ansible 34.106.250.139 port 38080 [preauth] Jan 27 05:33:12.702000 audit[4476]: USER_ERR pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.706184 systemd[1]: sshd@223-10.128.0.99:22-34.106.250.139:38048.service: Deactivated successfully. Jan 27 05:33:12.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@223-10.128.0.99:22-34.106.250.139:38048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.728940 systemd[1]: sshd@225-10.128.0.99:22-34.106.250.139:38062.service: Deactivated successfully. Jan 27 05:33:12.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@225-10.128.0.99:22-34.106.250.139:38062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.743706 systemd[1]: Started sshd@232-10.128.0.99:22-34.106.250.139:38132.service - OpenSSH per-connection server daemon (34.106.250.139:38132). Jan 27 05:33:12.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@232-10.128.0.99:22-34.106.250.139:38132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.758513 systemd[1]: sshd@224-10.128.0.99:22-34.106.250.139:38080.service: Deactivated successfully. Jan 27 05:33:12.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@224-10.128.0.99:22-34.106.250.139:38080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.794632 systemd[1]: Started sshd@233-10.128.0.99:22-34.106.250.139:38138.service - OpenSSH per-connection server daemon (34.106.250.139:38138). Jan 27 05:33:12.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@233-10.128.0.99:22-34.106.250.139:38138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.806000 audit[4478]: USER_ERR pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.809138 sshd[4478]: Connection closed by invalid user puppet 34.106.250.139 port 38074 [preauth] Jan 27 05:33:12.821838 systemd[1]: sshd@226-10.128.0.99:22-34.106.250.139:38074.service: Deactivated successfully. Jan 27 05:33:12.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@226-10.128.0.99:22-34.106.250.139:38074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.864530 sshd[4493]: Invalid user vagrant from 34.106.250.139 port 38102 Jan 27 05:33:12.916000 audit[4493]: USER_ERR pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:12.918935 sshd[4493]: Connection closed by invalid user vagrant 34.106.250.139 port 38102 [preauth] Jan 27 05:33:12.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@234-10.128.0.99:22-34.106.250.139:38146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.939619 systemd[1]: Started sshd@234-10.128.0.99:22-34.106.250.139:38146.service - OpenSSH per-connection server daemon (34.106.250.139:38146). Jan 27 05:33:12.950315 systemd[1]: sshd@228-10.128.0.99:22-34.106.250.139:38102.service: Deactivated successfully. Jan 27 05:33:12.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@228-10.128.0.99:22-34.106.250.139:38102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:12.972041 sshd[4482]: Invalid user ec2-user from 34.106.250.139 port 38088 Jan 27 05:33:13.018999 sshd[4482]: Connection closed by invalid user ec2-user 34.106.250.139 port 38088 [preauth] Jan 27 05:33:13.017000 audit[4482]: USER_ERR pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@227-10.128.0.99:22-34.106.250.139:38088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.030564 systemd[1]: sshd@227-10.128.0.99:22-34.106.250.139:38088.service: Deactivated successfully. Jan 27 05:33:13.099810 systemd[1]: Started sshd@235-10.128.0.99:22-34.106.250.139:38178.service - OpenSSH per-connection server daemon (34.106.250.139:38178). Jan 27 05:33:13.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@235-10.128.0.99:22-34.106.250.139:38178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@236-10.128.0.99:22-34.106.250.139:38164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.103784 systemd[1]: Started sshd@236-10.128.0.99:22-34.106.250.139:38164.service - OpenSSH per-connection server daemon (34.106.250.139:38164). Jan 27 05:33:13.108297 systemd[1]: Started sshd@237-10.128.0.99:22-34.106.250.139:38150.service - OpenSSH per-connection server daemon (34.106.250.139:38150). Jan 27 05:33:13.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@237-10.128.0.99:22-34.106.250.139:38150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.187768 sshd[4507]: Invalid user rstudio from 34.106.250.139 port 38128 Jan 27 05:33:13.202446 sshd[4506]: Invalid user cisco from 34.106.250.139 port 38126 Jan 27 05:33:13.257817 sshd[4506]: Connection closed by invalid user cisco 34.106.250.139 port 38126 [preauth] Jan 27 05:33:13.259000 audit[4506]: USER_ERR pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.265839 sshd[4507]: Connection closed by invalid user rstudio 34.106.250.139 port 38128 [preauth] Jan 27 05:33:13.264000 audit[4507]: USER_ERR pid=4507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.269370 sshd[4504]: Invalid user azureuser from 34.106.250.139 port 38114 Jan 27 05:33:13.275751 systemd[1]: sshd@230-10.128.0.99:22-34.106.250.139:38126.service: Deactivated successfully. Jan 27 05:33:13.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@230-10.128.0.99:22-34.106.250.139:38126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.294086 systemd[1]: sshd@231-10.128.0.99:22-34.106.250.139:38128.service: Deactivated successfully. Jan 27 05:33:13.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@231-10.128.0.99:22-34.106.250.139:38128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.363521 sshd[4521]: Invalid user manager from 34.106.250.139 port 38138 Jan 27 05:33:13.379078 sshd[4504]: Connection closed by invalid user azureuser 34.106.250.139 port 38114 [preauth] Jan 27 05:33:13.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@238-10.128.0.99:22-34.106.250.139:38192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.380866 systemd[1]: Started sshd@238-10.128.0.99:22-34.106.250.139:38192.service - OpenSSH per-connection server daemon (34.106.250.139:38192). Jan 27 05:33:13.388000 audit[4504]: USER_ERR pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.393516 sshd[4515]: Invalid user tomcat from 34.106.250.139 port 38132 Jan 27 05:33:13.419000 audit[4521]: USER_ERR pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.421304 sshd[4521]: Connection closed by invalid user manager 34.106.250.139 port 38138 [preauth] Jan 27 05:33:13.425627 systemd[1]: sshd@229-10.128.0.99:22-34.106.250.139:38114.service: Deactivated successfully. Jan 27 05:33:13.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@229-10.128.0.99:22-34.106.250.139:38114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.433000 audit[4515]: USER_ERR pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.435674 sshd[4515]: Connection closed by invalid user tomcat 34.106.250.139 port 38132 [preauth] Jan 27 05:33:13.457152 systemd[1]: sshd@232-10.128.0.99:22-34.106.250.139:38132.service: Deactivated successfully. Jan 27 05:33:13.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@232-10.128.0.99:22-34.106.250.139:38132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.465112 systemd[1]: sshd@233-10.128.0.99:22-34.106.250.139:38138.service: Deactivated successfully. Jan 27 05:33:13.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@233-10.128.0.99:22-34.106.250.139:38138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.496678 systemd[1]: Started sshd@239-10.128.0.99:22-34.106.250.139:38196.service - OpenSSH per-connection server daemon (34.106.250.139:38196). Jan 27 05:33:13.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@239-10.128.0.99:22-34.106.250.139:38196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@240-10.128.0.99:22-34.106.250.139:38212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.506608 systemd[1]: Started sshd@240-10.128.0.99:22-34.106.250.139:38212.service - OpenSSH per-connection server daemon (34.106.250.139:38212). Jan 27 05:33:13.553779 sshd[4528]: Invalid user from 34.106.250.139 port 38146 Jan 27 05:33:13.634479 sshd[4528]: Connection closed by invalid user 34.106.250.139 port 38146 [preauth] Jan 27 05:33:13.633000 audit[4528]: USER_ERR pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.659305 systemd[1]: sshd@234-10.128.0.99:22-34.106.250.139:38146.service: Deactivated successfully. Jan 27 05:33:13.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@234-10.128.0.99:22-34.106.250.139:38146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@241-10.128.0.99:22-34.106.250.139:38226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.711848 systemd[1]: Started sshd@241-10.128.0.99:22-34.106.250.139:38226.service - OpenSSH per-connection server daemon (34.106.250.139:38226). Jan 27 05:33:13.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@242-10.128.0.99:22-34.106.250.139:38222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.717586 systemd[1]: Started sshd@242-10.128.0.99:22-34.106.250.139:38222.service - OpenSSH per-connection server daemon (34.106.250.139:38222). Jan 27 05:33:13.722959 systemd[1]: Started sshd@243-10.128.0.99:22-34.106.250.139:38240.service - OpenSSH per-connection server daemon (34.106.250.139:38240). Jan 27 05:33:13.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@243-10.128.0.99:22-34.106.250.139:38240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.756000 audit[4541]: USER_ERR pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.758619 sshd[4541]: Connection closed by authenticating user root 34.106.250.139 port 38164 [preauth] Jan 27 05:33:13.773548 systemd[1]: sshd@236-10.128.0.99:22-34.106.250.139:38164.service: Deactivated successfully. Jan 27 05:33:13.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@236-10.128.0.99:22-34.106.250.139:38164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.788336 sshd[4540]: Invalid user admin from 34.106.250.139 port 38178 Jan 27 05:33:13.821695 sshd[4540]: Connection closed by invalid user admin 34.106.250.139 port 38178 [preauth] Jan 27 05:33:13.820000 audit[4540]: USER_ERR pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.832768 systemd[1]: sshd@235-10.128.0.99:22-34.106.250.139:38178.service: Deactivated successfully. Jan 27 05:33:13.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@235-10.128.0.99:22-34.106.250.139:38178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:13.912030 sshd[4542]: Invalid user anonymous from 34.106.250.139 port 38150 Jan 27 05:33:13.950973 sshd[4554]: Invalid user test from 34.106.250.139 port 38192 Jan 27 05:33:13.960454 sshd[4542]: Connection closed by invalid user anonymous 34.106.250.139 port 38150 [preauth] Jan 27 05:33:13.959000 audit[4542]: USER_ERR pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:13.996979 systemd[1]: sshd@237-10.128.0.99:22-34.106.250.139:38150.service: Deactivated successfully. Jan 27 05:33:13.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@237-10.128.0.99:22-34.106.250.139:38150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.009505 systemd[1]: Started sshd@244-10.128.0.99:22-34.106.250.139:38246.service - OpenSSH per-connection server daemon (34.106.250.139:38246). Jan 27 05:33:14.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@244-10.128.0.99:22-34.106.250.139:38246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.030514 sshd[4554]: Connection closed by invalid user test 34.106.250.139 port 38192 [preauth] Jan 27 05:33:14.029000 audit[4554]: USER_ERR pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.048756 systemd[1]: Started sshd@245-10.128.0.99:22-34.106.250.139:38248.service - OpenSSH per-connection server daemon (34.106.250.139:38248). Jan 27 05:33:14.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@245-10.128.0.99:22-34.106.250.139:38248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@238-10.128.0.99:22-34.106.250.139:38192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.050718 systemd[1]: sshd@238-10.128.0.99:22-34.106.250.139:38192.service: Deactivated successfully. Jan 27 05:33:14.079819 sshd[4566]: Invalid user info from 34.106.250.139 port 38212 Jan 27 05:33:14.084359 sshd[4565]: Invalid user guest from 34.106.250.139 port 38196 Jan 27 05:33:14.205000 audit[4566]: USER_ERR pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.207624 sshd[4566]: Connection closed by invalid user info 34.106.250.139 port 38212 [preauth] Jan 27 05:33:14.214336 systemd[1]: sshd@240-10.128.0.99:22-34.106.250.139:38212.service: Deactivated successfully. Jan 27 05:33:14.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@240-10.128.0.99:22-34.106.250.139:38212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.232463 sshd[4578]: Connection closed by authenticating user adm 34.106.250.139 port 38222 [preauth] Jan 27 05:33:14.231000 audit[4578]: USER_ERR pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.240435 sshd[4565]: Connection closed by invalid user guest 34.106.250.139 port 38196 [preauth] Jan 27 05:33:14.240000 audit[4565]: USER_ERR pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.242694 systemd[1]: sshd@242-10.128.0.99:22-34.106.250.139:38222.service: Deactivated successfully. Jan 27 05:33:14.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@242-10.128.0.99:22-34.106.250.139:38222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.260352 systemd[1]: sshd@239-10.128.0.99:22-34.106.250.139:38196.service: Deactivated successfully. Jan 27 05:33:14.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@239-10.128.0.99:22-34.106.250.139:38196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@246-10.128.0.99:22-34.106.250.139:38264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.313014 systemd[1]: Started sshd@246-10.128.0.99:22-34.106.250.139:38264.service - OpenSSH per-connection server daemon (34.106.250.139:38264). Jan 27 05:33:14.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@247-10.128.0.99:22-34.106.250.139:38276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.320897 systemd[1]: Started sshd@247-10.128.0.99:22-34.106.250.139:38276.service - OpenSSH per-connection server daemon (34.106.250.139:38276). Jan 27 05:33:14.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@248-10.128.0.99:22-34.106.250.139:38292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.328074 systemd[1]: Started sshd@248-10.128.0.99:22-34.106.250.139:38292.service - OpenSSH per-connection server daemon (34.106.250.139:38292). Jan 27 05:33:14.353957 sshd[4577]: Invalid user mysql from 34.106.250.139 port 38226 Jan 27 05:33:14.377672 sshd[4579]: Invalid user postgres from 34.106.250.139 port 38240 Jan 27 05:33:14.412000 audit[4577]: USER_ERR pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.414602 sshd[4577]: Connection closed by invalid user mysql 34.106.250.139 port 38226 [preauth] Jan 27 05:33:14.424704 systemd[1]: sshd@241-10.128.0.99:22-34.106.250.139:38226.service: Deactivated successfully. Jan 27 05:33:14.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@241-10.128.0.99:22-34.106.250.139:38226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.459605 systemd[1]: Started sshd@249-10.128.0.99:22-34.106.250.139:38300.service - OpenSSH per-connection server daemon (34.106.250.139:38300). Jan 27 05:33:14.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@249-10.128.0.99:22-34.106.250.139:38300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.487823 sshd[4597]: Invalid user administrator from 34.106.250.139 port 38248 Jan 27 05:33:14.518891 sshd[4579]: Connection closed by invalid user postgres 34.106.250.139 port 38240 [preauth] Jan 27 05:33:14.518000 audit[4579]: USER_ERR pid=4579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.569646 systemd[1]: sshd@243-10.128.0.99:22-34.106.250.139:38240.service: Deactivated successfully. Jan 27 05:33:14.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@243-10.128.0.99:22-34.106.250.139:38240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@250-10.128.0.99:22-34.106.250.139:38302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.590626 systemd[1]: Started sshd@250-10.128.0.99:22-34.106.250.139:38302.service - OpenSSH per-connection server daemon (34.106.250.139:38302). Jan 27 05:33:14.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@251-10.128.0.99:22-34.106.250.139:38316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.605553 systemd[1]: Started sshd@251-10.128.0.99:22-34.106.250.139:38316.service - OpenSSH per-connection server daemon (34.106.250.139:38316). Jan 27 05:33:14.618845 sshd[4593]: Invalid user user from 34.106.250.139 port 38246 Jan 27 05:33:14.626368 containerd[1595]: time="2026-01-27T05:33:14.626302497Z" level=info msg="ImageCreate event name:\"quay.io/tigera/operator:v1.38.7\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:33:14.628513 containerd[1595]: time="2026-01-27T05:33:14.628461454Z" level=info msg="stop pulling image quay.io/tigera/operator:v1.38.7: active requests=0, bytes read=23558205" Jan 27 05:33:14.630015 containerd[1595]: time="2026-01-27T05:33:14.629195597Z" level=info msg="ImageCreate event name:\"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:33:14.635826 sshd[4597]: Connection closed by invalid user administrator 34.106.250.139 port 38248 [preauth] Jan 27 05:33:14.634000 audit[4597]: USER_ERR pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.640995 containerd[1595]: time="2026-01-27T05:33:14.640910633Z" level=info msg="ImageCreate event name:\"quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" Jan 27 05:33:14.643125 containerd[1595]: time="2026-01-27T05:33:14.643076444Z" level=info msg="Pulled image \"quay.io/tigera/operator:v1.38.7\" with image id \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\", repo tag \"quay.io/tigera/operator:v1.38.7\", repo digest \"quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e\", size \"25057686\" in 5.068194578s" Jan 27 05:33:14.645542 containerd[1595]: time="2026-01-27T05:33:14.644222505Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Jan 27 05:33:14.653924 containerd[1595]: time="2026-01-27T05:33:14.652941949Z" level=info msg="CreateContainer within sandbox \"8d5f5211c1744d27767b469b814d249a45c68d7c20d4cf174047c779831ab010\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jan 27 05:33:14.662350 systemd[1]: sshd@245-10.128.0.99:22-34.106.250.139:38248.service: Deactivated successfully. Jan 27 05:33:14.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@245-10.128.0.99:22-34.106.250.139:38248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.683467 containerd[1595]: time="2026-01-27T05:33:14.681798278Z" level=info msg="Container 9f364feb4ffdae86ed3ccbd1eaf6c0e8403f131ddd992cc0778c45b1752d879c: CDI devices from CRI Config.CDIDevices: []" Jan 27 05:33:14.690629 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1110545193.mount: Deactivated successfully. Jan 27 05:33:14.700316 containerd[1595]: time="2026-01-27T05:33:14.700253094Z" level=info msg="CreateContainer within sandbox \"8d5f5211c1744d27767b469b814d249a45c68d7c20d4cf174047c779831ab010\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"9f364feb4ffdae86ed3ccbd1eaf6c0e8403f131ddd992cc0778c45b1752d879c\"" Jan 27 05:33:14.703461 containerd[1595]: time="2026-01-27T05:33:14.702579435Z" level=info msg="StartContainer for \"9f364feb4ffdae86ed3ccbd1eaf6c0e8403f131ddd992cc0778c45b1752d879c\"" Jan 27 05:33:14.703875 sshd[4593]: Connection closed by invalid user user 34.106.250.139 port 38246 [preauth] Jan 27 05:33:14.702000 audit[4593]: USER_ERR pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:14.707360 containerd[1595]: time="2026-01-27T05:33:14.706732456Z" level=info msg="connecting to shim 9f364feb4ffdae86ed3ccbd1eaf6c0e8403f131ddd992cc0778c45b1752d879c" address="unix:///run/containerd/s/71310c1f5cacca99008d490df6b76cba44da6f1545510b658fc7e86a42677519" protocol=ttrpc version=3 Jan 27 05:33:14.744204 systemd[1]: sshd@244-10.128.0.99:22-34.106.250.139:38246.service: Deactivated successfully. Jan 27 05:33:14.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@244-10.128.0.99:22-34.106.250.139:38246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.762168 systemd[1]: Started sshd@252-10.128.0.99:22-34.106.250.139:58974.service - OpenSSH per-connection server daemon (34.106.250.139:58974). Jan 27 05:33:14.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@252-10.128.0.99:22-34.106.250.139:58974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:14.791115 systemd[1]: Started cri-containerd-9f364feb4ffdae86ed3ccbd1eaf6c0e8403f131ddd992cc0778c45b1752d879c.scope - libcontainer container 9f364feb4ffdae86ed3ccbd1eaf6c0e8403f131ddd992cc0778c45b1752d879c. Jan 27 05:33:14.842000 audit: BPF prog-id=149 op=LOAD Jan 27 05:33:14.849000 audit: BPF prog-id=150 op=LOAD Jan 27 05:33:14.849000 audit[4633]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=4118 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:14.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966333634666562346666646165383665643363636264316561663663 Jan 27 05:33:14.849000 audit: BPF prog-id=150 op=UNLOAD Jan 27 05:33:14.849000 audit[4633]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4118 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:14.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966333634666562346666646165383665643363636264316561663663 Jan 27 05:33:14.850000 audit: BPF prog-id=151 op=LOAD Jan 27 05:33:14.850000 audit[4633]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=4118 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:14.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966333634666562346666646165383665643363636264316561663663 Jan 27 05:33:14.853000 audit: BPF prog-id=152 op=LOAD Jan 27 05:33:14.853000 audit[4633]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00017a218 a2=98 a3=0 items=0 ppid=4118 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:14.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966333634666562346666646165383665643363636264316561663663 Jan 27 05:33:14.853000 audit: BPF prog-id=152 op=UNLOAD Jan 27 05:33:14.853000 audit[4633]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4118 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:14.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966333634666562346666646165383665643363636264316561663663 Jan 27 05:33:14.853000 audit: BPF prog-id=151 op=UNLOAD Jan 27 05:33:14.853000 audit[4633]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4118 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:14.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966333634666562346666646165383665643363636264316561663663 Jan 27 05:33:14.853000 audit: BPF prog-id=153 op=LOAD Jan 27 05:33:14.853000 audit[4633]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a6e8 a2=98 a3=0 items=0 ppid=4118 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 27 05:33:14.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966333634666562346666646165383665643363636264316561663663 Jan 27 05:33:14.927999 sshd[4612]: Invalid user oracle from 34.106.250.139 port 38264 Jan 27 05:33:14.930717 containerd[1595]: time="2026-01-27T05:33:14.930474267Z" level=info msg="StartContainer for \"9f364feb4ffdae86ed3ccbd1eaf6c0e8403f131ddd992cc0778c45b1752d879c\" returns successfully" Jan 27 05:33:14.984241 sshd[4612]: Connection closed by invalid user oracle 34.106.250.139 port 38264 [preauth] Jan 27 05:33:14.983000 audit[4612]: USER_ERR pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.000953 systemd[1]: sshd@246-10.128.0.99:22-34.106.250.139:38264.service: Deactivated successfully. Jan 27 05:33:15.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@246-10.128.0.99:22-34.106.250.139:38264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.038410 sshd[4614]: Invalid user pi from 34.106.250.139 port 38292 Jan 27 05:33:15.064308 systemd[1]: Started sshd@253-10.128.0.99:22-34.106.250.139:58976.service - OpenSSH per-connection server daemon (34.106.250.139:58976). Jan 27 05:33:15.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@253-10.128.0.99:22-34.106.250.139:58976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@254-10.128.0.99:22-34.106.250.139:58990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.079094 systemd[1]: Started sshd@254-10.128.0.99:22-34.106.250.139:58990.service - OpenSSH per-connection server daemon (34.106.250.139:58990). Jan 27 05:33:15.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@255-10.128.0.99:22-34.106.250.139:58980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.085688 systemd[1]: Started sshd@255-10.128.0.99:22-34.106.250.139:58980.service - OpenSSH per-connection server daemon (34.106.250.139:58980). Jan 27 05:33:15.106525 sshd[4613]: Invalid user ftp from 34.106.250.139 port 38276 Jan 27 05:33:15.125131 sshd[4614]: Connection closed by invalid user pi 34.106.250.139 port 38292 [preauth] Jan 27 05:33:15.128000 audit[4614]: USER_ERR pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@248-10.128.0.99:22-34.106.250.139:38292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.145710 systemd[1]: sshd@248-10.128.0.99:22-34.106.250.139:38292.service: Deactivated successfully. Jan 27 05:33:15.174160 sshd[4618]: Invalid user puppet from 34.106.250.139 port 38300 Jan 27 05:33:15.180499 sshd[4613]: Connection closed by invalid user ftp 34.106.250.139 port 38276 [preauth] Jan 27 05:33:15.180000 audit[4613]: USER_ERR pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.197716 kubelet[3749]: I0127 05:33:15.197412 3749 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-chzzn" podStartSLOduration=2.124727436 podStartE2EDuration="7.197362032s" podCreationTimestamp="2026-01-27 05:33:08 +0000 UTC" firstStartedPulling="2026-01-27 05:33:09.573353033 +0000 UTC m=+5.392289588" lastFinishedPulling="2026-01-27 05:33:14.645987631 +0000 UTC m=+10.464924184" observedRunningTime="2026-01-27 05:33:15.193533938 +0000 UTC m=+11.012470502" watchObservedRunningTime="2026-01-27 05:33:15.197362032 +0000 UTC m=+11.016298596" Jan 27 05:33:15.208436 sshd[4626]: Invalid user ansible from 34.106.250.139 port 38302 Jan 27 05:33:15.213288 systemd[1]: sshd@247-10.128.0.99:22-34.106.250.139:38276.service: Deactivated successfully. Jan 27 05:33:15.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@247-10.128.0.99:22-34.106.250.139:38276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.227724 sshd[4627]: Invalid user ec2-user from 34.106.250.139 port 38316 Jan 27 05:33:15.253727 sshd[4643]: Invalid user vagrant from 34.106.250.139 port 58974 Jan 27 05:33:15.309750 sshd[4626]: Connection closed by invalid user ansible 34.106.250.139 port 38302 [preauth] Jan 27 05:33:15.312000 audit[4626]: USER_ERR pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@250-10.128.0.99:22-34.106.250.139:38302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.320080 systemd[1]: sshd@250-10.128.0.99:22-34.106.250.139:38302.service: Deactivated successfully. Jan 27 05:33:15.329650 sshd[4627]: Connection closed by invalid user ec2-user 34.106.250.139 port 38316 [preauth] Jan 27 05:33:15.330000 audit[4627]: USER_ERR pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.346104 systemd[1]: sshd@251-10.128.0.99:22-34.106.250.139:38316.service: Deactivated successfully. Jan 27 05:33:15.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@251-10.128.0.99:22-34.106.250.139:38316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.356483 sshd[4618]: Connection closed by invalid user puppet 34.106.250.139 port 38300 [preauth] Jan 27 05:33:15.355000 audit[4643]: USER_ERR pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.358174 sshd[4643]: Connection closed by invalid user vagrant 34.106.250.139 port 58974 [preauth] Jan 27 05:33:15.359000 audit[4618]: USER_ERR pid=4618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.370118 systemd[1]: sshd@249-10.128.0.99:22-34.106.250.139:38300.service: Deactivated successfully. Jan 27 05:33:15.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@249-10.128.0.99:22-34.106.250.139:38300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.373855 systemd[1]: sshd@252-10.128.0.99:22-34.106.250.139:58974.service: Deactivated successfully. Jan 27 05:33:15.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@252-10.128.0.99:22-34.106.250.139:58974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@256-10.128.0.99:22-34.106.250.139:59002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.409920 systemd[1]: Started sshd@256-10.128.0.99:22-34.106.250.139:59002.service - OpenSSH per-connection server daemon (34.106.250.139:59002). Jan 27 05:33:15.414458 systemd[1]: Started sshd@257-10.128.0.99:22-34.106.250.139:59006.service - OpenSSH per-connection server daemon (34.106.250.139:59006). Jan 27 05:33:15.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@257-10.128.0.99:22-34.106.250.139:59006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.419007 systemd[1]: Started sshd@258-10.128.0.99:22-34.106.250.139:59018.service - OpenSSH per-connection server daemon (34.106.250.139:59018). Jan 27 05:33:15.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@258-10.128.0.99:22-34.106.250.139:59018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.423284 systemd[1]: Started sshd@259-10.128.0.99:22-34.106.250.139:59022.service - OpenSSH per-connection server daemon (34.106.250.139:59022). Jan 27 05:33:15.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@259-10.128.0.99:22-34.106.250.139:59022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.535724 sshd[4684]: Invalid user cisco from 34.106.250.139 port 58980 Jan 27 05:33:15.540013 sshd[4683]: Invalid user rstudio from 34.106.250.139 port 58990 Jan 27 05:33:15.552191 sshd[4682]: Invalid user azureuser from 34.106.250.139 port 58976 Jan 27 05:33:15.577000 audit[4683]: USER_ERR pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.579757 sshd[4683]: Connection closed by invalid user rstudio 34.106.250.139 port 58990 [preauth] Jan 27 05:33:15.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@254-10.128.0.99:22-34.106.250.139:58990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.588869 systemd[1]: sshd@254-10.128.0.99:22-34.106.250.139:58990.service: Deactivated successfully. Jan 27 05:33:15.599602 sshd[4684]: Connection closed by invalid user cisco 34.106.250.139 port 58980 [preauth] Jan 27 05:33:15.599000 audit[4684]: USER_ERR pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.611213 systemd[1]: sshd@255-10.128.0.99:22-34.106.250.139:58980.service: Deactivated successfully. Jan 27 05:33:15.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@255-10.128.0.99:22-34.106.250.139:58980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.616737 sshd[4682]: Connection closed by invalid user azureuser 34.106.250.139 port 58976 [preauth] Jan 27 05:33:15.616000 audit[4682]: USER_ERR pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.627523 systemd[1]: sshd@253-10.128.0.99:22-34.106.250.139:58976.service: Deactivated successfully. Jan 27 05:33:15.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@253-10.128.0.99:22-34.106.250.139:58976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.651266 systemd[1]: Started sshd@260-10.128.0.99:22-34.106.250.139:59036.service - OpenSSH per-connection server daemon (34.106.250.139:59036). Jan 27 05:33:15.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@260-10.128.0.99:22-34.106.250.139:59036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@261-10.128.0.99:22-34.106.250.139:59058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.655190 systemd[1]: Started sshd@261-10.128.0.99:22-34.106.250.139:59058.service - OpenSSH per-connection server daemon (34.106.250.139:59058). Jan 27 05:33:15.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@262-10.128.0.99:22-34.106.250.139:59044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.659873 systemd[1]: Started sshd@262-10.128.0.99:22-34.106.250.139:59044.service - OpenSSH per-connection server daemon (34.106.250.139:59044). Jan 27 05:33:15.692950 sshd[4712]: Invalid user anonymous from 34.106.250.139 port 59022 Jan 27 05:33:15.730789 sshd[4712]: Connection closed by invalid user anonymous 34.106.250.139 port 59022 [preauth] Jan 27 05:33:15.732000 audit[4712]: USER_ERR pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.749601 sshd[4709]: Invalid user tomcat from 34.106.250.139 port 59002 Jan 27 05:33:15.750067 systemd[1]: sshd@259-10.128.0.99:22-34.106.250.139:59022.service: Deactivated successfully. Jan 27 05:33:15.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@259-10.128.0.99:22-34.106.250.139:59022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.777495 sshd[4709]: Connection closed by invalid user tomcat 34.106.250.139 port 59002 [preauth] Jan 27 05:33:15.776000 audit[4709]: USER_ERR pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.783933 systemd[1]: Started sshd@263-10.128.0.99:22-34.106.250.139:59062.service - OpenSSH per-connection server daemon (34.106.250.139:59062). Jan 27 05:33:15.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@263-10.128.0.99:22-34.106.250.139:59062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.784870 systemd[1]: sshd@256-10.128.0.99:22-34.106.250.139:59002.service: Deactivated successfully. Jan 27 05:33:15.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@256-10.128.0.99:22-34.106.250.139:59002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.822637 systemd[1]: Started sshd@264-10.128.0.99:22-34.106.250.139:59064.service - OpenSSH per-connection server daemon (34.106.250.139:59064). Jan 27 05:33:15.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@264-10.128.0.99:22-34.106.250.139:59064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.844712 sshd[4710]: Invalid user manager from 34.106.250.139 port 59006 Jan 27 05:33:15.846824 sshd[4711]: Invalid user from 34.106.250.139 port 59018 Jan 27 05:33:15.887197 sshd[4710]: Connection closed by invalid user manager 34.106.250.139 port 59006 [preauth] Jan 27 05:33:15.887000 audit[4710]: USER_ERR pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.906000 audit[4711]: USER_ERR pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:15.909281 sshd[4711]: Connection closed by invalid user 34.106.250.139 port 59018 [preauth] Jan 27 05:33:15.924667 systemd[1]: sshd@257-10.128.0.99:22-34.106.250.139:59006.service: Deactivated successfully. Jan 27 05:33:15.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@257-10.128.0.99:22-34.106.250.139:59006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.933824 systemd[1]: sshd@258-10.128.0.99:22-34.106.250.139:59018.service: Deactivated successfully. Jan 27 05:33:15.958481 kernel: kauditd_printk_skb: 171 callbacks suppressed Jan 27 05:33:15.958635 kernel: audit: type=1131 audit(1769491995.933:1263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@258-10.128.0.99:22-34.106.250.139:59018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@258-10.128.0.99:22-34.106.250.139:59018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:15.986543 systemd[1]: Started sshd@265-10.128.0.99:22-34.106.250.139:59074.service - OpenSSH per-connection server daemon (34.106.250.139:59074). Jan 27 05:33:15.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@265-10.128.0.99:22-34.106.250.139:59074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.013469 kernel: audit: type=1130 audit(1769491995.985:1264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@265-10.128.0.99:22-34.106.250.139:59074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@266-10.128.0.99:22-34.106.250.139:59086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.019107 systemd[1]: Started sshd@266-10.128.0.99:22-34.106.250.139:59086.service - OpenSSH per-connection server daemon (34.106.250.139:59086). Jan 27 05:33:16.045471 kernel: audit: type=1130 audit(1769491996.017:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@266-10.128.0.99:22-34.106.250.139:59086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.063671 systemd[1]: Started sshd@267-10.128.0.99:22-34.106.250.139:59090.service - OpenSSH per-connection server daemon (34.106.250.139:59090). Jan 27 05:33:16.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@267-10.128.0.99:22-34.106.250.139:59090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.090015 kernel: audit: type=1130 audit(1769491996.062:1266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@267-10.128.0.99:22-34.106.250.139:59090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.092173 sshd[4730]: Connection closed by authenticating user root 34.106.250.139 port 59036 [preauth] Jan 27 05:33:16.090000 audit[4730]: USER_ERR pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.119441 kernel: audit: type=1109 audit(1769491996.090:1267): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.147035 systemd[1]: sshd@260-10.128.0.99:22-34.106.250.139:59036.service: Deactivated successfully. Jan 27 05:33:16.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@260-10.128.0.99:22-34.106.250.139:59036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.173604 kernel: audit: type=1131 audit(1769491996.146:1268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@260-10.128.0.99:22-34.106.250.139:59036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.184782 sshd[4732]: Invalid user admin from 34.106.250.139 port 59044 Jan 27 05:33:16.206969 sshd[4731]: Invalid user test from 34.106.250.139 port 59058 Jan 27 05:33:16.239425 sshd[4741]: Invalid user guest from 34.106.250.139 port 59062 Jan 27 05:33:16.281314 sshd[4732]: Connection closed by invalid user admin 34.106.250.139 port 59044 [preauth] Jan 27 05:33:16.283000 audit[4732]: USER_ERR pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.311256 systemd[1]: sshd@262-10.128.0.99:22-34.106.250.139:59044.service: Deactivated successfully. Jan 27 05:33:16.311507 kernel: audit: type=1109 audit(1769491996.283:1269): pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@262-10.128.0.99:22-34.106.250.139:59044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.348346 sshd[4731]: Connection closed by invalid user test 34.106.250.139 port 59058 [preauth] Jan 27 05:33:16.356958 kernel: audit: type=1131 audit(1769491996.310:1270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@262-10.128.0.99:22-34.106.250.139:59044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.357094 kernel: audit: type=1109 audit(1769491996.347:1271): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.347000 audit[4731]: USER_ERR pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.395749 systemd[1]: sshd@261-10.128.0.99:22-34.106.250.139:59058.service: Deactivated successfully. Jan 27 05:33:16.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@261-10.128.0.99:22-34.106.250.139:59058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.423425 kernel: audit: type=1131 audit(1769491996.396:1272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@261-10.128.0.99:22-34.106.250.139:59058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.425533 sshd[4741]: Connection closed by invalid user guest 34.106.250.139 port 59062 [preauth] Jan 27 05:33:16.430112 sshd[4747]: Invalid user info from 34.106.250.139 port 59064 Jan 27 05:33:16.424000 audit[4741]: USER_ERR pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.447366 sshd[4757]: Connection closed by authenticating user adm 34.106.250.139 port 59074 [preauth] Jan 27 05:33:16.446000 audit[4757]: USER_ERR pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.448254 systemd[1]: sshd@263-10.128.0.99:22-34.106.250.139:59062.service: Deactivated successfully. Jan 27 05:33:16.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@263-10.128.0.99:22-34.106.250.139:59062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.457353 systemd[1]: sshd@265-10.128.0.99:22-34.106.250.139:59074.service: Deactivated successfully. Jan 27 05:33:16.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@265-10.128.0.99:22-34.106.250.139:59074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.487652 sshd[4747]: Connection closed by invalid user info 34.106.250.139 port 59064 [preauth] Jan 27 05:33:16.487000 audit[4747]: USER_ERR pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.497252 systemd[1]: Started sshd@268-10.128.0.99:22-34.106.250.139:59102.service - OpenSSH per-connection server daemon (34.106.250.139:59102). Jan 27 05:33:16.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@268-10.128.0.99:22-34.106.250.139:59102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@269-10.128.0.99:22-34.106.250.139:59108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.502096 systemd[1]: Started sshd@269-10.128.0.99:22-34.106.250.139:59108.service - OpenSSH per-connection server daemon (34.106.250.139:59108). Jan 27 05:33:16.507670 systemd[1]: Started sshd@270-10.128.0.99:22-34.106.250.139:59100.service - OpenSSH per-connection server daemon (34.106.250.139:59100). Jan 27 05:33:16.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@270-10.128.0.99:22-34.106.250.139:59100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.512104 systemd[1]: Started sshd@271-10.128.0.99:22-34.106.250.139:59116.service - OpenSSH per-connection server daemon (34.106.250.139:59116). Jan 27 05:33:16.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@271-10.128.0.99:22-34.106.250.139:59116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.514650 systemd[1]: sshd@264-10.128.0.99:22-34.106.250.139:59064.service: Deactivated successfully. Jan 27 05:33:16.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@264-10.128.0.99:22-34.106.250.139:59064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.548665 sshd[4759]: Invalid user mysql from 34.106.250.139 port 59086 Jan 27 05:33:16.552254 systemd[1]: Started sshd@272-10.128.0.99:22-34.106.250.139:59128.service - OpenSSH per-connection server daemon (34.106.250.139:59128). Jan 27 05:33:16.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@272-10.128.0.99:22-34.106.250.139:59128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.574639 sshd[4759]: Connection closed by invalid user mysql 34.106.250.139 port 59086 [preauth] Jan 27 05:33:16.573000 audit[4759]: USER_ERR pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.580756 sshd[4762]: Invalid user postgres from 34.106.250.139 port 59090 Jan 27 05:33:16.586971 systemd[1]: sshd@266-10.128.0.99:22-34.106.250.139:59086.service: Deactivated successfully. Jan 27 05:33:16.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@266-10.128.0.99:22-34.106.250.139:59086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.631974 systemd[1]: Started sshd@273-10.128.0.99:22-34.106.250.139:59132.service - OpenSSH per-connection server daemon (34.106.250.139:59132). Jan 27 05:33:16.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@273-10.128.0.99:22-34.106.250.139:59132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.697767 sshd[4762]: Connection closed by invalid user postgres 34.106.250.139 port 59090 [preauth] Jan 27 05:33:16.699382 systemd[1]: Started sshd@274-10.128.0.99:22-34.106.250.139:59140.service - OpenSSH per-connection server daemon (34.106.250.139:59140). Jan 27 05:33:16.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@274-10.128.0.99:22-34.106.250.139:59140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.705000 audit[4762]: USER_ERR pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@267-10.128.0.99:22-34.106.250.139:59090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:16.733737 systemd[1]: sshd@267-10.128.0.99:22-34.106.250.139:59090.service: Deactivated successfully. Jan 27 05:33:16.963266 sshd[4783]: Invalid user administrator from 34.106.250.139 port 59102 Jan 27 05:33:16.993000 audit[4783]: USER_ERR pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:16.995651 sshd[4783]: Connection closed by invalid user administrator 34.106.250.139 port 59102 [preauth] Jan 27 05:33:17.007939 systemd[1]: sshd@268-10.128.0.99:22-34.106.250.139:59102.service: Deactivated successfully. Jan 27 05:33:17.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@268-10.128.0.99:22-34.106.250.139:59102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.019946 sshd[4786]: Invalid user ftp from 34.106.250.139 port 59116 Jan 27 05:33:17.072066 sshd[4786]: Connection closed by invalid user ftp 34.106.250.139 port 59116 [preauth] Jan 27 05:33:17.073000 audit[4786]: USER_ERR pid=4786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.080988 systemd[1]: sshd@271-10.128.0.99:22-34.106.250.139:59116.service: Deactivated successfully. Jan 27 05:33:17.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@271-10.128.0.99:22-34.106.250.139:59116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@275-10.128.0.99:22-34.106.250.139:59158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.099987 systemd[1]: Started sshd@275-10.128.0.99:22-34.106.250.139:59158.service - OpenSSH per-connection server daemon (34.106.250.139:59158). Jan 27 05:33:17.104148 systemd[1]: Started sshd@276-10.128.0.99:22-34.106.250.139:59174.service - OpenSSH per-connection server daemon (34.106.250.139:59174). Jan 27 05:33:17.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@276-10.128.0.99:22-34.106.250.139:59174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@277-10.128.0.99:22-34.106.250.139:59150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.114166 systemd[1]: Started sshd@277-10.128.0.99:22-34.106.250.139:59150.service - OpenSSH per-connection server daemon (34.106.250.139:59150). Jan 27 05:33:17.120683 sshd[4785]: Invalid user user from 34.106.250.139 port 59100 Jan 27 05:33:17.200479 sshd[4784]: Invalid user oracle from 34.106.250.139 port 59108 Jan 27 05:33:17.215987 sshd[4790]: Invalid user pi from 34.106.250.139 port 59128 Jan 27 05:33:17.218193 sshd[4794]: Invalid user puppet from 34.106.250.139 port 59132 Jan 27 05:33:17.218699 sshd[4798]: Invalid user ansible from 34.106.250.139 port 59140 Jan 27 05:33:17.268590 sshd[4785]: Connection closed by invalid user user 34.106.250.139 port 59100 [preauth] Jan 27 05:33:17.267000 audit[4785]: USER_ERR pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@270-10.128.0.99:22-34.106.250.139:59100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.289926 systemd[1]: sshd@270-10.128.0.99:22-34.106.250.139:59100.service: Deactivated successfully. Jan 27 05:33:17.293256 sshd[4784]: Connection closed by invalid user oracle 34.106.250.139 port 59108 [preauth] Jan 27 05:33:17.292000 audit[4784]: USER_ERR pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.333712 systemd[1]: sshd@269-10.128.0.99:22-34.106.250.139:59108.service: Deactivated successfully. Jan 27 05:33:17.334000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@269-10.128.0.99:22-34.106.250.139:59108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.348693 sshd[4790]: Connection closed by invalid user pi 34.106.250.139 port 59128 [preauth] Jan 27 05:33:17.347000 audit[4790]: USER_ERR pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.350086 systemd[1]: Started sshd@278-10.128.0.99:22-34.106.250.139:59186.service - OpenSSH per-connection server daemon (34.106.250.139:59186). Jan 27 05:33:17.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@278-10.128.0.99:22-34.106.250.139:59186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.386000 audit[4798]: USER_ERR pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.389368 sshd[4798]: Connection closed by invalid user ansible 34.106.250.139 port 59140 [preauth] Jan 27 05:33:17.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@272-10.128.0.99:22-34.106.250.139:59128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.388633 systemd[1]: sshd@272-10.128.0.99:22-34.106.250.139:59128.service: Deactivated successfully. Jan 27 05:33:17.393388 sshd[4794]: Connection closed by invalid user puppet 34.106.250.139 port 59132 [preauth] Jan 27 05:33:17.391000 audit[4794]: USER_ERR pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@273-10.128.0.99:22-34.106.250.139:59132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.420617 systemd[1]: sshd@273-10.128.0.99:22-34.106.250.139:59132.service: Deactivated successfully. Jan 27 05:33:17.424175 systemd[1]: sshd@274-10.128.0.99:22-34.106.250.139:59140.service: Deactivated successfully. Jan 27 05:33:17.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@274-10.128.0.99:22-34.106.250.139:59140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.462104 systemd[1]: Started sshd@279-10.128.0.99:22-34.106.250.139:59192.service - OpenSSH per-connection server daemon (34.106.250.139:59192). Jan 27 05:33:17.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@279-10.128.0.99:22-34.106.250.139:59192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@280-10.128.0.99:22-34.106.250.139:59194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.466788 systemd[1]: Started sshd@280-10.128.0.99:22-34.106.250.139:59194.service - OpenSSH per-connection server daemon (34.106.250.139:59194). Jan 27 05:33:17.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@281-10.128.0.99:22-34.106.250.139:59204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.477637 systemd[1]: Started sshd@281-10.128.0.99:22-34.106.250.139:59204.service - OpenSSH per-connection server daemon (34.106.250.139:59204). Jan 27 05:33:17.754895 sshd[4820]: Invalid user vagrant from 34.106.250.139 port 59158 Jan 27 05:33:17.782968 sshd[4822]: Invalid user ec2-user from 34.106.250.139 port 59150 Jan 27 05:33:17.801749 sshd[4821]: Invalid user azureuser from 34.106.250.139 port 59174 Jan 27 05:33:17.832168 sshd[4821]: Connection closed by invalid user azureuser 34.106.250.139 port 59174 [preauth] Jan 27 05:33:17.831000 audit[4821]: USER_ERR pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@276-10.128.0.99:22-34.106.250.139:59174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.849000 audit[4822]: USER_ERR pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.853815 sshd[4822]: Connection closed by invalid user ec2-user 34.106.250.139 port 59150 [preauth] Jan 27 05:33:17.852000 audit[4820]: USER_ERR pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:17.847032 systemd[1]: sshd@276-10.128.0.99:22-34.106.250.139:59174.service: Deactivated successfully. Jan 27 05:33:17.858618 sshd[4820]: Connection closed by invalid user vagrant 34.106.250.139 port 59158 [preauth] Jan 27 05:33:17.879113 systemd[1]: sshd@275-10.128.0.99:22-34.106.250.139:59158.service: Deactivated successfully. Jan 27 05:33:17.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@275-10.128.0.99:22-34.106.250.139:59158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.889763 systemd[1]: sshd@277-10.128.0.99:22-34.106.250.139:59150.service: Deactivated successfully. Jan 27 05:33:17.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@277-10.128.0.99:22-34.106.250.139:59150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@282-10.128.0.99:22-34.106.250.139:59222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.958033 systemd[1]: Started sshd@282-10.128.0.99:22-34.106.250.139:59222.service - OpenSSH per-connection server daemon (34.106.250.139:59222). Jan 27 05:33:17.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@283-10.128.0.99:22-34.106.250.139:59210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.970676 systemd[1]: Started sshd@283-10.128.0.99:22-34.106.250.139:59210.service - OpenSSH per-connection server daemon (34.106.250.139:59210). Jan 27 05:33:17.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@284-10.128.0.99:22-34.106.250.139:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:17.978036 systemd[1]: Started sshd@284-10.128.0.99:22-34.106.250.139:59212.service - OpenSSH per-connection server daemon (34.106.250.139:59212). Jan 27 05:33:17.984926 sshd[4831]: Invalid user cisco from 34.106.250.139 port 59186 Jan 27 05:33:18.050291 sshd[4845]: Invalid user manager from 34.106.250.139 port 59204 Jan 27 05:33:18.050936 sshd[4842]: Invalid user rstudio from 34.106.250.139 port 59192 Jan 27 05:33:18.064709 sshd[4844]: Invalid user tomcat from 34.106.250.139 port 59194 Jan 27 05:33:18.093000 audit[4831]: USER_ERR pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.097604 sshd[4831]: Connection closed by invalid user cisco 34.106.250.139 port 59186 [preauth] Jan 27 05:33:18.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@285-10.128.0.99:22-34.106.250.139:59228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.101489 systemd[1]: Started sshd@285-10.128.0.99:22-34.106.250.139:59228.service - OpenSSH per-connection server daemon (34.106.250.139:59228). Jan 27 05:33:18.130168 systemd[1]: sshd@278-10.128.0.99:22-34.106.250.139:59186.service: Deactivated successfully. Jan 27 05:33:18.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@278-10.128.0.99:22-34.106.250.139:59186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.157480 sshd[4842]: Connection closed by invalid user rstudio 34.106.250.139 port 59192 [preauth] Jan 27 05:33:18.157000 audit[4842]: USER_ERR pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.175057 systemd[1]: sshd@279-10.128.0.99:22-34.106.250.139:59192.service: Deactivated successfully. Jan 27 05:33:18.177059 sshd[4844]: Connection closed by invalid user tomcat 34.106.250.139 port 59194 [preauth] Jan 27 05:33:18.176000 audit[4844]: USER_ERR pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@279-10.128.0.99:22-34.106.250.139:59192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.193774 sshd[4845]: Connection closed by invalid user manager 34.106.250.139 port 59204 [preauth] Jan 27 05:33:18.192000 audit[4845]: USER_ERR pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.212642 systemd[1]: sshd@280-10.128.0.99:22-34.106.250.139:59194.service: Deactivated successfully. Jan 27 05:33:18.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@280-10.128.0.99:22-34.106.250.139:59194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.226742 systemd[1]: sshd@281-10.128.0.99:22-34.106.250.139:59204.service: Deactivated successfully. Jan 27 05:33:18.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@281-10.128.0.99:22-34.106.250.139:59204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.296198 systemd[1]: Started sshd@286-10.128.0.99:22-34.106.250.139:59238.service - OpenSSH per-connection server daemon (34.106.250.139:59238). Jan 27 05:33:18.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@286-10.128.0.99:22-34.106.250.139:59238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@287-10.128.0.99:22-34.106.250.139:59240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.306309 systemd[1]: Started sshd@287-10.128.0.99:22-34.106.250.139:59240.service - OpenSSH per-connection server daemon (34.106.250.139:59240). Jan 27 05:33:18.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@288-10.128.0.99:22-34.106.250.139:59254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.318695 systemd[1]: Started sshd@288-10.128.0.99:22-34.106.250.139:59254.service - OpenSSH per-connection server daemon (34.106.250.139:59254). Jan 27 05:33:18.463117 sshd[4864]: Connection closed by authenticating user root 34.106.250.139 port 59222 [preauth] Jan 27 05:33:18.462000 audit[4864]: USER_ERR pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.489562 systemd[1]: sshd@282-10.128.0.99:22-34.106.250.139:59222.service: Deactivated successfully. Jan 27 05:33:18.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@282-10.128.0.99:22-34.106.250.139:59222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@289-10.128.0.99:22-34.106.250.139:59264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.553535 systemd[1]: Started sshd@289-10.128.0.99:22-34.106.250.139:59264.service - OpenSSH per-connection server daemon (34.106.250.139:59264). Jan 27 05:33:18.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@290-10.128.0.99:22-34.106.250.139:59282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.563641 systemd[1]: Started sshd@290-10.128.0.99:22-34.106.250.139:59282.service - OpenSSH per-connection server daemon (34.106.250.139:59282). Jan 27 05:33:18.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@291-10.128.0.99:22-34.106.250.139:59266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.571619 systemd[1]: Started sshd@291-10.128.0.99:22-34.106.250.139:59266.service - OpenSSH per-connection server daemon (34.106.250.139:59266). Jan 27 05:33:18.581677 sshd[4865]: Invalid user from 34.106.250.139 port 59210 Jan 27 05:33:18.629764 sshd[4866]: Invalid user anonymous from 34.106.250.139 port 59212 Jan 27 05:33:18.635857 sshd[4865]: Connection closed by invalid user 34.106.250.139 port 59210 [preauth] Jan 27 05:33:18.641000 audit[4865]: USER_ERR pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@283-10.128.0.99:22-34.106.250.139:59210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.660680 systemd[1]: sshd@283-10.128.0.99:22-34.106.250.139:59210.service: Deactivated successfully. Jan 27 05:33:18.665759 sshd[4868]: Invalid user admin from 34.106.250.139 port 59228 Jan 27 05:33:18.701347 sshd[4866]: Connection closed by invalid user anonymous 34.106.250.139 port 59212 [preauth] Jan 27 05:33:18.705000 audit[4866]: USER_ERR pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.723782 systemd[1]: sshd@284-10.128.0.99:22-34.106.250.139:59212.service: Deactivated successfully. Jan 27 05:33:18.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@284-10.128.0.99:22-34.106.250.139:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.745136 sshd[4868]: Connection closed by invalid user admin 34.106.250.139 port 59228 [preauth] Jan 27 05:33:18.752000 audit[4868]: USER_ERR pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.789443 systemd[1]: Started sshd@292-10.128.0.99:22-34.106.250.139:59292.service - OpenSSH per-connection server daemon (34.106.250.139:59292). Jan 27 05:33:18.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@292-10.128.0.99:22-34.106.250.139:59292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.791134 systemd[1]: sshd@285-10.128.0.99:22-34.106.250.139:59228.service: Deactivated successfully. Jan 27 05:33:18.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@285-10.128.0.99:22-34.106.250.139:59228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.873365 sshd[4885]: Invalid user test from 34.106.250.139 port 59238 Jan 27 05:33:18.929488 sshd[4885]: Connection closed by invalid user test 34.106.250.139 port 59238 [preauth] Jan 27 05:33:18.932000 audit[4885]: USER_ERR pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:18.957174 systemd[1]: Started sshd@293-10.128.0.99:22-34.106.250.139:59298.service - OpenSSH per-connection server daemon (34.106.250.139:59298). Jan 27 05:33:18.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@293-10.128.0.99:22-34.106.250.139:59298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:18.970585 systemd[1]: sshd@286-10.128.0.99:22-34.106.250.139:59238.service: Deactivated successfully. Jan 27 05:33:18.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@286-10.128.0.99:22-34.106.250.139:59238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.011445 sshd[4886]: Invalid user guest from 34.106.250.139 port 59240 Jan 27 05:33:19.038597 sshd[4889]: Invalid user info from 34.106.250.139 port 59254 Jan 27 05:33:19.068662 sshd[4886]: Connection closed by invalid user guest 34.106.250.139 port 59240 [preauth] Jan 27 05:33:19.068000 audit[4886]: USER_ERR pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:19.098798 systemd[1]: sshd@287-10.128.0.99:22-34.106.250.139:59240.service: Deactivated successfully. Jan 27 05:33:19.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@287-10.128.0.99:22-34.106.250.139:59240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@294-10.128.0.99:22-34.106.250.139:59330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.152738 systemd[1]: Started sshd@294-10.128.0.99:22-34.106.250.139:59330.service - OpenSSH per-connection server daemon (34.106.250.139:59330). Jan 27 05:33:19.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@295-10.128.0.99:22-34.106.250.139:59314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.157620 systemd[1]: Started sshd@295-10.128.0.99:22-34.106.250.139:59314.service - OpenSSH per-connection server daemon (34.106.250.139:59314). Jan 27 05:33:19.165432 sshd[4889]: Connection closed by invalid user info 34.106.250.139 port 59254 [preauth] Jan 27 05:33:19.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@296-10.128.0.99:22-34.106.250.139:59320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.166797 systemd[1]: Started sshd@296-10.128.0.99:22-34.106.250.139:59320.service - OpenSSH per-connection server daemon (34.106.250.139:59320). Jan 27 05:33:19.175000 audit[4889]: USER_ERR pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:19.196852 systemd[1]: sshd@288-10.128.0.99:22-34.106.250.139:59254.service: Deactivated successfully. Jan 27 05:33:19.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@288-10.128.0.99:22-34.106.250.139:59254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.211762 sshd[4902]: Invalid user mysql from 34.106.250.139 port 59266 Jan 27 05:33:19.281433 sshd[4900]: Connection closed by authenticating user adm 34.106.250.139 port 59264 [preauth] Jan 27 05:33:19.284000 audit[4900]: USER_ERR pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:19.300046 systemd[1]: sshd@289-10.128.0.99:22-34.106.250.139:59264.service: Deactivated successfully. Jan 27 05:33:19.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@289-10.128.0.99:22-34.106.250.139:59264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.307217 sshd[4901]: Invalid user postgres from 34.106.250.139 port 59282 Jan 27 05:33:19.330000 audit[4902]: USER_ERR pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:19.331946 sshd[4902]: Connection closed by invalid user mysql 34.106.250.139 port 59266 [preauth] Jan 27 05:33:19.369861 systemd[1]: sshd@291-10.128.0.99:22-34.106.250.139:59266.service: Deactivated successfully. Jan 27 05:33:19.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@291-10.128.0.99:22-34.106.250.139:59266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@297-10.128.0.99:22-34.106.250.139:59346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.386177 systemd[1]: Started sshd@297-10.128.0.99:22-34.106.250.139:59346.service - OpenSSH per-connection server daemon (34.106.250.139:59346). Jan 27 05:33:19.389000 audit[4901]: USER_ERR pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:19.391168 sshd[4901]: Connection closed by invalid user postgres 34.106.250.139 port 59282 [preauth] Jan 27 05:33:19.392545 sshd[4911]: Invalid user user from 34.106.250.139 port 59292 Jan 27 05:33:19.430790 systemd[1]: sshd@290-10.128.0.99:22-34.106.250.139:59282.service: Deactivated successfully. Jan 27 05:33:19.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@290-10.128.0.99:22-34.106.250.139:59282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@298-10.128.0.99:22-34.106.250.139:59362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.459522 systemd[1]: Started sshd@298-10.128.0.99:22-34.106.250.139:59362.service - OpenSSH per-connection server daemon (34.106.250.139:59362). Jan 27 05:33:19.518695 sshd[4911]: Connection closed by invalid user user 34.106.250.139 port 59292 [preauth] Jan 27 05:33:19.521000 audit[4911]: USER_ERR pid=4911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:19.538839 systemd[1]: sshd@292-10.128.0.99:22-34.106.250.139:59292.service: Deactivated successfully. Jan 27 05:33:19.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@292-10.128.0.99:22-34.106.250.139:59292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@299-10.128.0.99:22-34.106.250.139:59366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.568594 systemd[1]: Started sshd@299-10.128.0.99:22-34.106.250.139:59366.service - OpenSSH per-connection server daemon (34.106.250.139:59366). Jan 27 05:33:19.662433 sshd[4921]: Invalid user administrator from 34.106.250.139 port 59298 Jan 27 05:33:19.709000 audit[4921]: USER_ERR pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:19.712946 sshd[4921]: Connection closed by invalid user administrator 34.106.250.139 port 59298 [preauth] Jan 27 05:33:19.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@293-10.128.0.99:22-34.106.250.139:59298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.722145 systemd[1]: sshd@293-10.128.0.99:22-34.106.250.139:59298.service: Deactivated successfully. Jan 27 05:33:19.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@300-10.128.0.99:22-34.106.250.139:59382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.809640 systemd[1]: Started sshd@300-10.128.0.99:22-34.106.250.139:59382.service - OpenSSH per-connection server daemon (34.106.250.139:59382). Jan 27 05:33:19.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@301-10.128.0.99:22-34.106.250.139:59374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.819935 systemd[1]: Started sshd@301-10.128.0.99:22-34.106.250.139:59374.service - OpenSSH per-connection server daemon (34.106.250.139:59374). Jan 27 05:33:19.830440 systemd[1]: Started sshd@302-10.128.0.99:22-34.106.250.139:59394.service - OpenSSH per-connection server daemon (34.106.250.139:59394). Jan 27 05:33:19.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@302-10.128.0.99:22-34.106.250.139:59394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:19.906756 sshd[4931]: Invalid user pi from 34.106.250.139 port 59330 Jan 27 05:33:19.918953 sshd[4943]: Invalid user puppet from 34.106.250.139 port 59346 Jan 27 05:33:19.938693 sshd[4932]: Invalid user oracle from 34.106.250.139 port 59314 Jan 27 05:33:19.940844 sshd[4933]: Invalid user ftp from 34.106.250.139 port 59320 Jan 27 05:33:20.003000 audit[4943]: USER_ERR pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.007963 sshd[4943]: Connection closed by invalid user puppet 34.106.250.139 port 59346 [preauth] Jan 27 05:33:20.024000 audit[4932]: USER_ERR pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.027367 sshd[4932]: Connection closed by invalid user oracle 34.106.250.139 port 59314 [preauth] Jan 27 05:33:20.026002 systemd[1]: sshd@297-10.128.0.99:22-34.106.250.139:59346.service: Deactivated successfully. Jan 27 05:33:20.039320 sshd[4931]: Connection closed by invalid user pi 34.106.250.139 port 59330 [preauth] Jan 27 05:33:20.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@297-10.128.0.99:22-34.106.250.139:59346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.043000 audit[4931]: USER_ERR pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.057781 systemd[1]: sshd@294-10.128.0.99:22-34.106.250.139:59330.service: Deactivated successfully. Jan 27 05:33:20.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@294-10.128.0.99:22-34.106.250.139:59330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.068709 sshd[4950]: Invalid user ansible from 34.106.250.139 port 59362 Jan 27 05:33:20.082834 systemd[1]: sshd@295-10.128.0.99:22-34.106.250.139:59314.service: Deactivated successfully. Jan 27 05:33:20.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@295-10.128.0.99:22-34.106.250.139:59314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.097890 systemd[1]: Started sshd@303-10.128.0.99:22-34.106.250.139:59400.service - OpenSSH per-connection server daemon (34.106.250.139:59400). Jan 27 05:33:20.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@303-10.128.0.99:22-34.106.250.139:59400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.111968 sshd[4958]: Invalid user ec2-user from 34.106.250.139 port 59366 Jan 27 05:33:20.122679 sshd[4933]: Connection closed by invalid user ftp 34.106.250.139 port 59320 [preauth] Jan 27 05:33:20.121000 audit[4933]: USER_ERR pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@296-10.128.0.99:22-34.106.250.139:59320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.136783 systemd[1]: sshd@296-10.128.0.99:22-34.106.250.139:59320.service: Deactivated successfully. Jan 27 05:33:20.179896 systemd[1]: Started sshd@304-10.128.0.99:22-34.106.250.139:59416.service - OpenSSH per-connection server daemon (34.106.250.139:59416). Jan 27 05:33:20.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@304-10.128.0.99:22-34.106.250.139:59416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@305-10.128.0.99:22-34.106.250.139:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.185647 systemd[1]: Started sshd@305-10.128.0.99:22-34.106.250.139:59432.service - OpenSSH per-connection server daemon (34.106.250.139:59432). Jan 27 05:33:20.213882 sshd[4950]: Connection closed by invalid user ansible 34.106.250.139 port 59362 [preauth] Jan 27 05:33:20.212000 audit[4950]: USER_ERR pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.215467 sshd[4958]: Connection closed by invalid user ec2-user 34.106.250.139 port 59366 [preauth] Jan 27 05:33:20.214000 audit[4958]: USER_ERR pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.225863 systemd[1]: sshd@298-10.128.0.99:22-34.106.250.139:59362.service: Deactivated successfully. Jan 27 05:33:20.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@298-10.128.0.99:22-34.106.250.139:59362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@299-10.128.0.99:22-34.106.250.139:59366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.260240 systemd[1]: sshd@299-10.128.0.99:22-34.106.250.139:59366.service: Deactivated successfully. Jan 27 05:33:20.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@306-10.128.0.99:22-34.106.250.139:59448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.317081 systemd[1]: Started sshd@306-10.128.0.99:22-34.106.250.139:59448.service - OpenSSH per-connection server daemon (34.106.250.139:59448). Jan 27 05:33:20.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@307-10.128.0.99:22-34.106.250.139:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.329943 systemd[1]: Started sshd@307-10.128.0.99:22-34.106.250.139:59464.service - OpenSSH per-connection server daemon (34.106.250.139:59464). Jan 27 05:33:20.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@308-10.128.0.99:22-34.106.250.139:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.334532 systemd[1]: Started sshd@308-10.128.0.99:22-34.106.250.139:59466.service - OpenSSH per-connection server daemon (34.106.250.139:59466). Jan 27 05:33:20.547185 sshd[4971]: Invalid user cisco from 34.106.250.139 port 59394 Jan 27 05:33:20.586700 sshd[4969]: Invalid user azureuser from 34.106.250.139 port 59382 Jan 27 05:33:20.623255 sshd[4970]: Invalid user vagrant from 34.106.250.139 port 59374 Jan 27 05:33:20.676666 sshd[4969]: Connection closed by invalid user azureuser 34.106.250.139 port 59382 [preauth] Jan 27 05:33:20.677470 sshd[4971]: Connection closed by invalid user cisco 34.106.250.139 port 59394 [preauth] Jan 27 05:33:20.677000 audit[4969]: USER_ERR pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.679000 audit[4971]: USER_ERR pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@302-10.128.0.99:22-34.106.250.139:59394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.707965 systemd[1]: sshd@302-10.128.0.99:22-34.106.250.139:59394.service: Deactivated successfully. Jan 27 05:33:20.713513 sshd[4970]: Connection closed by invalid user vagrant 34.106.250.139 port 59374 [preauth] Jan 27 05:33:20.712000 audit[4970]: USER_ERR pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@300-10.128.0.99:22-34.106.250.139:59382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.714127 systemd[1]: sshd@300-10.128.0.99:22-34.106.250.139:59382.service: Deactivated successfully. Jan 27 05:33:20.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@301-10.128.0.99:22-34.106.250.139:59374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.751181 systemd[1]: sshd@301-10.128.0.99:22-34.106.250.139:59374.service: Deactivated successfully. Jan 27 05:33:20.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@309-10.128.0.99:22-34.106.250.139:59480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.778544 systemd[1]: Started sshd@309-10.128.0.99:22-34.106.250.139:59480.service - OpenSSH per-connection server daemon (34.106.250.139:59480). Jan 27 05:33:20.796274 sshd[4987]: Invalid user tomcat from 34.106.250.139 port 59416 Jan 27 05:33:20.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@310-10.128.0.99:22-34.106.250.139:59504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.917093 systemd[1]: Started sshd@310-10.128.0.99:22-34.106.250.139:59504.service - OpenSSH per-connection server daemon (34.106.250.139:59504). Jan 27 05:33:20.921983 sshd[4982]: Invalid user rstudio from 34.106.250.139 port 59400 Jan 27 05:33:20.926730 systemd[1]: Started sshd@311-10.128.0.99:22-34.106.250.139:59492.service - OpenSSH per-connection server daemon (34.106.250.139:59492). Jan 27 05:33:20.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@311-10.128.0.99:22-34.106.250.139:59492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.938037 systemd[1]: Started sshd@312-10.128.0.99:22-34.106.250.139:59494.service - OpenSSH per-connection server daemon (34.106.250.139:59494). Jan 27 05:33:20.970441 kernel: kauditd_printk_skb: 124 callbacks suppressed Jan 27 05:33:20.970568 kernel: audit: type=1130 audit(1769492000.936:1397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@312-10.128.0.99:22-34.106.250.139:59494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@312-10.128.0.99:22-34.106.250.139:59494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:20.974453 sshd[4987]: Connection closed by invalid user tomcat 34.106.250.139 port 59416 [preauth] Jan 27 05:33:20.980899 sshd[4988]: Invalid user manager from 34.106.250.139 port 59432 Jan 27 05:33:20.972000 audit[4987]: USER_ERR pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.011959 sshd[5003]: Connection closed by authenticating user root 34.106.250.139 port 59466 [preauth] Jan 27 05:33:21.012878 kernel: audit: type=1109 audit(1769492000.972:1398): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:20.984000 audit[5003]: USER_ERR pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.054225 sshd[5001]: Invalid user anonymous from 34.106.250.139 port 59464 Jan 27 05:33:21.054744 kernel: audit: type=1109 audit(1769492000.984:1399): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.061030 systemd[1]: sshd@304-10.128.0.99:22-34.106.250.139:59416.service: Deactivated successfully. Jan 27 05:33:21.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@304-10.128.0.99:22-34.106.250.139:59416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.069995 systemd[1]: sshd@308-10.128.0.99:22-34.106.250.139:59466.service: Deactivated successfully. Jan 27 05:33:21.091959 kernel: audit: type=1131 audit(1769492001.060:1400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@304-10.128.0.99:22-34.106.250.139:59416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.096521 kernel: audit: type=1131 audit(1769492001.065:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@308-10.128.0.99:22-34.106.250.139:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@308-10.128.0.99:22-34.106.250.139:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.099757 sshd[4988]: Connection closed by invalid user manager 34.106.250.139 port 59432 [preauth] Jan 27 05:33:21.097000 audit[4988]: USER_ERR pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.123552 kernel: audit: type=1109 audit(1769492001.097:1402): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.141769 systemd[1]: sshd@305-10.128.0.99:22-34.106.250.139:59432.service: Deactivated successfully. Jan 27 05:33:21.144858 kernel: audit: type=1131 audit(1769492001.142:1403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@305-10.128.0.99:22-34.106.250.139:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@305-10.128.0.99:22-34.106.250.139:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.145743 sshd[5000]: Invalid user from 34.106.250.139 port 59448 Jan 27 05:33:21.145000 audit[5001]: USER_ERR pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.146995 sshd[5001]: Connection closed by invalid user anonymous 34.106.250.139 port 59464 [preauth] Jan 27 05:33:21.147433 kernel: audit: type=1109 audit(1769492001.145:1404): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.152503 systemd[1]: sshd@307-10.128.0.99:22-34.106.250.139:59464.service: Deactivated successfully. Jan 27 05:33:21.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@307-10.128.0.99:22-34.106.250.139:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.155432 kernel: audit: type=1131 audit(1769492001.153:1405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@307-10.128.0.99:22-34.106.250.139:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.181166 sshd[4982]: Connection closed by invalid user rstudio 34.106.250.139 port 59400 [preauth] Jan 27 05:33:21.180000 audit[4982]: USER_ERR pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.182754 kernel: audit: type=1109 audit(1769492001.180:1406): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.221675 systemd[1]: sshd@303-10.128.0.99:22-34.106.250.139:59400.service: Deactivated successfully. Jan 27 05:33:21.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@303-10.128.0.99:22-34.106.250.139:59400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@313-10.128.0.99:22-34.106.250.139:59510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@314-10.128.0.99:22-34.106.250.139:59520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.244208 systemd[1]: Started sshd@313-10.128.0.99:22-34.106.250.139:59510.service - OpenSSH per-connection server daemon (34.106.250.139:59510). Jan 27 05:33:21.257965 systemd[1]: Started sshd@314-10.128.0.99:22-34.106.250.139:59520.service - OpenSSH per-connection server daemon (34.106.250.139:59520). Jan 27 05:33:21.395494 sshd[5000]: Connection closed by invalid user 34.106.250.139 port 59448 [preauth] Jan 27 05:33:21.395000 audit[5000]: USER_ERR pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@306-10.128.0.99:22-34.106.250.139:59448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.436916 systemd[1]: sshd@306-10.128.0.99:22-34.106.250.139:59448.service: Deactivated successfully. Jan 27 05:33:21.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@315-10.128.0.99:22-34.106.250.139:59528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.502751 systemd[1]: Started sshd@315-10.128.0.99:22-34.106.250.139:59528.service - OpenSSH per-connection server daemon (34.106.250.139:59528). Jan 27 05:33:21.508710 systemd[1]: Started sshd@316-10.128.0.99:22-34.106.250.139:59550.service - OpenSSH per-connection server daemon (34.106.250.139:59550). Jan 27 05:33:21.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@316-10.128.0.99:22-34.106.250.139:59550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.514289 sshd[5030]: Invalid user guest from 34.106.250.139 port 59494 Jan 27 05:33:21.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@317-10.128.0.99:22-34.106.250.139:59544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.519945 systemd[1]: Started sshd@317-10.128.0.99:22-34.106.250.139:59544.service - OpenSSH per-connection server daemon (34.106.250.139:59544). Jan 27 05:33:21.647486 sshd[5030]: Connection closed by invalid user guest 34.106.250.139 port 59494 [preauth] Jan 27 05:33:21.646000 audit[5030]: USER_ERR pid=5030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.673464 sshd[5022]: Invalid user admin from 34.106.250.139 port 59480 Jan 27 05:33:21.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@312-10.128.0.99:22-34.106.250.139:59494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.675972 systemd[1]: sshd@312-10.128.0.99:22-34.106.250.139:59494.service: Deactivated successfully. Jan 27 05:33:21.796582 sshd[5022]: Connection closed by invalid user admin 34.106.250.139 port 59480 [preauth] Jan 27 05:33:21.795000 audit[5022]: USER_ERR pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.825461 systemd[1]: sshd@309-10.128.0.99:22-34.106.250.139:59480.service: Deactivated successfully. Jan 27 05:33:21.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@309-10.128.0.99:22-34.106.250.139:59480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:21.988331 sshd[5046]: Connection closed by authenticating user adm 34.106.250.139 port 59510 [preauth] Jan 27 05:33:21.987000 audit[5046]: USER_ERR pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:21.999448 sshd[5029]: Invalid user test from 34.106.250.139 port 59492 Jan 27 05:33:22.030933 systemd[1]: sshd@313-10.128.0.99:22-34.106.250.139:59510.service: Deactivated successfully. Jan 27 05:33:22.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@313-10.128.0.99:22-34.106.250.139:59510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.073245 systemd[1]: Started sshd@318-10.128.0.99:22-34.106.250.139:59558.service - OpenSSH per-connection server daemon (34.106.250.139:59558). Jan 27 05:33:22.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@318-10.128.0.99:22-34.106.250.139:59558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@319-10.128.0.99:22-34.106.250.139:59552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.084584 systemd[1]: Started sshd@319-10.128.0.99:22-34.106.250.139:59552.service - OpenSSH per-connection server daemon (34.106.250.139:59552). Jan 27 05:33:22.090155 sshd[5028]: Invalid user info from 34.106.250.139 port 59504 Jan 27 05:33:22.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@320-10.128.0.99:22-34.106.250.139:59572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.095964 systemd[1]: Started sshd@320-10.128.0.99:22-34.106.250.139:59572.service - OpenSSH per-connection server daemon (34.106.250.139:59572). Jan 27 05:33:22.108515 sshd[5047]: Invalid user mysql from 34.106.250.139 port 59520 Jan 27 05:33:22.135144 sshd[5029]: Connection closed by invalid user test 34.106.250.139 port 59492 [preauth] Jan 27 05:33:22.142000 audit[5029]: USER_ERR pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:22.164095 systemd[1]: sshd@311-10.128.0.99:22-34.106.250.139:59492.service: Deactivated successfully. Jan 27 05:33:22.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@311-10.128.0.99:22-34.106.250.139:59492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.207491 sshd[5047]: Connection closed by invalid user mysql 34.106.250.139 port 59520 [preauth] Jan 27 05:33:22.206000 audit[5047]: USER_ERR pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:22.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@314-10.128.0.99:22-34.106.250.139:59520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.218784 systemd[1]: sshd@314-10.128.0.99:22-34.106.250.139:59520.service: Deactivated successfully. Jan 27 05:33:22.234436 sshd[5057]: Invalid user user from 34.106.250.139 port 59544 Jan 27 05:33:22.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@321-10.128.0.99:22-34.106.250.139:59578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.252113 systemd[1]: Started sshd@321-10.128.0.99:22-34.106.250.139:59578.service - OpenSSH per-connection server daemon (34.106.250.139:59578). Jan 27 05:33:22.261161 sshd[5056]: Invalid user administrator from 34.106.250.139 port 59550 Jan 27 05:33:22.308698 sshd[5028]: Connection closed by invalid user info 34.106.250.139 port 59504 [preauth] Jan 27 05:33:22.309000 audit[5028]: USER_ERR pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:22.322768 sshd[5055]: Invalid user postgres from 34.106.250.139 port 59528 Jan 27 05:33:22.342802 systemd[1]: sshd@310-10.128.0.99:22-34.106.250.139:59504.service: Deactivated successfully. Jan 27 05:33:22.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@310-10.128.0.99:22-34.106.250.139:59504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.385078 sshd[5057]: Connection closed by invalid user user 34.106.250.139 port 59544 [preauth] Jan 27 05:33:22.384000 audit[5057]: USER_ERR pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:22.404000 audit[5056]: USER_ERR pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:22.406641 sshd[5056]: Connection closed by invalid user administrator 34.106.250.139 port 59550 [preauth] Jan 27 05:33:22.422840 systemd[1]: sshd@316-10.128.0.99:22-34.106.250.139:59550.service: Deactivated successfully. Jan 27 05:33:22.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@316-10.128.0.99:22-34.106.250.139:59550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.433113 systemd[1]: sshd@317-10.128.0.99:22-34.106.250.139:59544.service: Deactivated successfully. Jan 27 05:33:22.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@317-10.128.0.99:22-34.106.250.139:59544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.478934 systemd[1]: Started sshd@322-10.128.0.99:22-34.106.250.139:59594.service - OpenSSH per-connection server daemon (34.106.250.139:59594). Jan 27 05:33:22.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@322-10.128.0.99:22-34.106.250.139:59594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.490329 systemd[1]: Started sshd@323-10.128.0.99:22-34.106.250.139:59608.service - OpenSSH per-connection server daemon (34.106.250.139:59608). Jan 27 05:33:22.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@323-10.128.0.99:22-34.106.250.139:59608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.496772 sshd[5055]: Connection closed by invalid user postgres 34.106.250.139 port 59528 [preauth] Jan 27 05:33:22.497000 audit[5055]: USER_ERR pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:22.506050 systemd[1]: sshd@315-10.128.0.99:22-34.106.250.139:59528.service: Deactivated successfully. Jan 27 05:33:22.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@315-10.128.0.99:22-34.106.250.139:59528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@324-10.128.0.99:22-34.106.250.139:59620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.576532 systemd[1]: Started sshd@324-10.128.0.99:22-34.106.250.139:59620.service - OpenSSH per-connection server daemon (34.106.250.139:59620). Jan 27 05:33:22.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@325-10.128.0.99:22-34.106.250.139:59628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.582335 systemd[1]: Started sshd@325-10.128.0.99:22-34.106.250.139:59628.service - OpenSSH per-connection server daemon (34.106.250.139:59628). Jan 27 05:33:22.589680 systemd[1]: Started sshd@326-10.128.0.99:22-34.106.250.139:59630.service - OpenSSH per-connection server daemon (34.106.250.139:59630). Jan 27 05:33:22.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@326-10.128.0.99:22-34.106.250.139:59630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:22.880429 sshd[5080]: Invalid user ftp from 34.106.250.139 port 59558 Jan 27 05:33:22.897342 sshd[5081]: Invalid user oracle from 34.106.250.139 port 59552 Jan 27 05:33:22.958839 sshd[5093]: Invalid user puppet from 34.106.250.139 port 59578 Jan 27 05:33:22.963508 sshd[5082]: Invalid user pi from 34.106.250.139 port 59572 Jan 27 05:33:22.973427 sshd[5080]: Connection closed by invalid user ftp 34.106.250.139 port 59558 [preauth] Jan 27 05:33:22.972000 audit[5080]: USER_ERR pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:22.985086 systemd[1]: sshd@318-10.128.0.99:22-34.106.250.139:59558.service: Deactivated successfully. Jan 27 05:33:22.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@318-10.128.0.99:22-34.106.250.139:59558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.026594 sshd[5081]: Connection closed by invalid user oracle 34.106.250.139 port 59552 [preauth] Jan 27 05:33:23.029000 audit[5081]: USER_ERR pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.063115 systemd[1]: sshd@319-10.128.0.99:22-34.106.250.139:59552.service: Deactivated successfully. Jan 27 05:33:23.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@319-10.128.0.99:22-34.106.250.139:59552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@327-10.128.0.99:22-34.106.250.139:59654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.107159 systemd[1]: Started sshd@327-10.128.0.99:22-34.106.250.139:59654.service - OpenSSH per-connection server daemon (34.106.250.139:59654). Jan 27 05:33:23.114856 systemd[1]: Started sshd@328-10.128.0.99:22-34.106.250.139:59646.service - OpenSSH per-connection server daemon (34.106.250.139:59646). Jan 27 05:33:23.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@328-10.128.0.99:22-34.106.250.139:59646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.129000 audit[5082]: USER_ERR pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.131021 sshd[5082]: Connection closed by invalid user pi 34.106.250.139 port 59572 [preauth] Jan 27 05:33:23.147000 audit[5093]: USER_ERR pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.149325 sshd[5093]: Connection closed by invalid user puppet 34.106.250.139 port 59578 [preauth] Jan 27 05:33:23.154196 systemd[1]: sshd@320-10.128.0.99:22-34.106.250.139:59572.service: Deactivated successfully. Jan 27 05:33:23.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@320-10.128.0.99:22-34.106.250.139:59572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@321-10.128.0.99:22-34.106.250.139:59578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.171067 systemd[1]: sshd@321-10.128.0.99:22-34.106.250.139:59578.service: Deactivated successfully. Jan 27 05:33:23.222909 sshd[5117]: Invalid user vagrant from 34.106.250.139 port 59620 Jan 27 05:33:23.262918 sshd[5108]: Invalid user ec2-user from 34.106.250.139 port 59608 Jan 27 05:33:23.290444 sshd[5107]: Invalid user ansible from 34.106.250.139 port 59594 Jan 27 05:33:23.299610 sshd[5119]: Invalid user cisco from 34.106.250.139 port 59630 Jan 27 05:33:23.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@329-10.128.0.99:22-34.106.250.139:59666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.341935 systemd[1]: Started sshd@329-10.128.0.99:22-34.106.250.139:59666.service - OpenSSH per-connection server daemon (34.106.250.139:59666). Jan 27 05:33:23.368085 sshd[5118]: Invalid user azureuser from 34.106.250.139 port 59628 Jan 27 05:33:23.375970 sshd[5117]: Connection closed by invalid user vagrant 34.106.250.139 port 59620 [preauth] Jan 27 05:33:23.382000 audit[5117]: USER_ERR pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.396000 audit[1881]: USER_END pid=1881 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.396000 audit[1881]: CRED_DISP pid=1881 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.398040 sudo[1881]: pam_unix(sudo:session): session closed for user root Jan 27 05:33:23.416441 sshd[5108]: Connection closed by invalid user ec2-user 34.106.250.139 port 59608 [preauth] Jan 27 05:33:23.416000 audit[5108]: USER_ERR pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.429000 audit[5107]: USER_ERR pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.431648 sshd[5107]: Connection closed by invalid user ansible 34.106.250.139 port 59594 [preauth] Jan 27 05:33:23.439602 sshd[1880]: Connection closed by 4.153.228.146 port 52106 Jan 27 05:33:23.435712 sshd-session[1876]: pam_unix(sshd:session): session closed for user core Jan 27 05:33:23.447044 systemd[1]: Started sshd@330-10.128.0.99:22-34.106.250.139:59668.service - OpenSSH per-connection server daemon (34.106.250.139:59668). Jan 27 05:33:23.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@330-10.128.0.99:22-34.106.250.139:59668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.451000 audit[1876]: USER_END pid=1876 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_mkhomedir,pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:33:23.451000 audit[1876]: CRED_DISP pid=1876 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_oslogin_login acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 27 05:33:23.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@331-10.128.0.99:22-34.106.250.139:59670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.455712 systemd[1]: Started sshd@331-10.128.0.99:22-34.106.250.139:59670.service - OpenSSH per-connection server daemon (34.106.250.139:59670). Jan 27 05:33:23.461797 systemd[1]: Started sshd@332-10.128.0.99:22-34.106.250.139:59682.service - OpenSSH per-connection server daemon (34.106.250.139:59682). Jan 27 05:33:23.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@332-10.128.0.99:22-34.106.250.139:59682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.128.0.99:22-4.153.228.146:52106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.465868 systemd[1]: sshd@6-10.128.0.99:22-4.153.228.146:52106.service: Deactivated successfully. Jan 27 05:33:23.471203 systemd[1]: sshd@323-10.128.0.99:22-34.106.250.139:59608.service: Deactivated successfully. Jan 27 05:33:23.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@323-10.128.0.99:22-34.106.250.139:59608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@324-10.128.0.99:22-34.106.250.139:59620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.477149 systemd[1]: sshd@324-10.128.0.99:22-34.106.250.139:59620.service: Deactivated successfully. Jan 27 05:33:23.483082 systemd[1]: sshd@322-10.128.0.99:22-34.106.250.139:59594.service: Deactivated successfully. Jan 27 05:33:23.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@322-10.128.0.99:22-34.106.250.139:59594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.493362 systemd[1]: session-8.scope: Deactivated successfully. Jan 27 05:33:23.494973 systemd[1]: session-8.scope: Consumed 6.233s CPU time, 228.7M memory peak. Jan 27 05:33:23.514566 systemd-logind[1557]: Session 8 logged out. Waiting for processes to exit. Jan 27 05:33:23.517797 systemd-logind[1557]: Removed session 8. Jan 27 05:33:23.535000 audit[5119]: USER_ERR pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.537626 sshd[5119]: Connection closed by invalid user cisco 34.106.250.139 port 59630 [preauth] Jan 27 05:33:23.556008 sshd[5118]: Connection closed by invalid user azureuser 34.106.250.139 port 59628 [preauth] Jan 27 05:33:23.554000 audit[5118]: USER_ERR pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@326-10.128.0.99:22-34.106.250.139:59630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.566076 systemd[1]: sshd@326-10.128.0.99:22-34.106.250.139:59630.service: Deactivated successfully. Jan 27 05:33:23.594201 systemd[1]: sshd@325-10.128.0.99:22-34.106.250.139:59628.service: Deactivated successfully. Jan 27 05:33:23.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@325-10.128.0.99:22-34.106.250.139:59628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@333-10.128.0.99:22-34.106.250.139:59700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.652434 systemd[1]: Started sshd@333-10.128.0.99:22-34.106.250.139:59700.service - OpenSSH per-connection server daemon (34.106.250.139:59700). Jan 27 05:33:23.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@334-10.128.0.99:22-34.106.250.139:59712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.661899 systemd[1]: Started sshd@334-10.128.0.99:22-34.106.250.139:59712.service - OpenSSH per-connection server daemon (34.106.250.139:59712). Jan 27 05:33:23.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@335-10.128.0.99:22-34.106.250.139:59688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:23.673961 systemd[1]: Started sshd@335-10.128.0.99:22-34.106.250.139:59688.service - OpenSSH per-connection server daemon (34.106.250.139:59688). Jan 27 05:33:23.853431 sshd[5138]: Invalid user tomcat from 34.106.250.139 port 59654 Jan 27 05:33:23.938383 sshd[5145]: Invalid user manager from 34.106.250.139 port 59666 Jan 27 05:33:23.964147 sshd[5139]: Invalid user rstudio from 34.106.250.139 port 59646 Jan 27 05:33:23.992000 audit[5138]: USER_ERR pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:23.993938 sshd[5138]: Connection closed by invalid user tomcat 34.106.250.139 port 59654 [preauth] Jan 27 05:33:24.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@327-10.128.0.99:22-34.106.250.139:59654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.014322 systemd[1]: sshd@327-10.128.0.99:22-34.106.250.139:59654.service: Deactivated successfully. Jan 27 05:33:24.048450 sshd[5139]: Connection closed by invalid user rstudio 34.106.250.139 port 59646 [preauth] Jan 27 05:33:24.049000 audit[5139]: USER_ERR pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.067818 systemd[1]: sshd@328-10.128.0.99:22-34.106.250.139:59646.service: Deactivated successfully. Jan 27 05:33:24.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@328-10.128.0.99:22-34.106.250.139:59646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.087179 sshd[5145]: Connection closed by invalid user manager 34.106.250.139 port 59666 [preauth] Jan 27 05:33:24.085000 audit[5145]: USER_ERR pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.092853 sshd[5152]: Invalid user anonymous from 34.106.250.139 port 59670 Jan 27 05:33:24.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@329-10.128.0.99:22-34.106.250.139:59666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.102458 systemd[1]: sshd@329-10.128.0.99:22-34.106.250.139:59666.service: Deactivated successfully. Jan 27 05:33:24.176786 sshd[5152]: Connection closed by invalid user anonymous 34.106.250.139 port 59670 [preauth] Jan 27 05:33:24.175000 audit[5152]: USER_ERR pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@336-10.128.0.99:22-34.106.250.139:59740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.182943 systemd[1]: Started sshd@336-10.128.0.99:22-34.106.250.139:59740.service - OpenSSH per-connection server daemon (34.106.250.139:59740). Jan 27 05:33:24.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@337-10.128.0.99:22-34.106.250.139:59752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.189778 systemd[1]: Started sshd@337-10.128.0.99:22-34.106.250.139:59752.service - OpenSSH per-connection server daemon (34.106.250.139:59752). Jan 27 05:33:24.195433 sshd[5151]: Invalid user from 34.106.250.139 port 59668 Jan 27 05:33:24.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@338-10.128.0.99:22-34.106.250.139:59724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.196740 systemd[1]: Started sshd@338-10.128.0.99:22-34.106.250.139:59724.service - OpenSSH per-connection server daemon (34.106.250.139:59724). Jan 27 05:33:24.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@331-10.128.0.99:22-34.106.250.139:59670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.214184 systemd[1]: sshd@331-10.128.0.99:22-34.106.250.139:59670.service: Deactivated successfully. Jan 27 05:33:24.222000 audit[5153]: USER_ERR pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.225618 sshd[5153]: Connection closed by authenticating user root 34.106.250.139 port 59682 [preauth] Jan 27 05:33:24.230144 systemd[1]: sshd@332-10.128.0.99:22-34.106.250.139:59682.service: Deactivated successfully. Jan 27 05:33:24.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@332-10.128.0.99:22-34.106.250.139:59682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@339-10.128.0.99:22-34.106.250.139:59760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.283528 systemd[1]: Started sshd@339-10.128.0.99:22-34.106.250.139:59760.service - OpenSSH per-connection server daemon (34.106.250.139:59760). Jan 27 05:33:24.347276 sshd[5151]: Connection closed by invalid user 34.106.250.139 port 59668 [preauth] Jan 27 05:33:24.347000 audit[5151]: USER_ERR pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.356438 sshd[5174]: Invalid user test from 34.106.250.139 port 59700 Jan 27 05:33:24.374432 sshd[5175]: Invalid user guest from 34.106.250.139 port 59712 Jan 27 05:33:24.376542 systemd[1]: sshd@330-10.128.0.99:22-34.106.250.139:59668.service: Deactivated successfully. Jan 27 05:33:24.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@330-10.128.0.99:22-34.106.250.139:59668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.400698 sshd[5176]: Invalid user admin from 34.106.250.139 port 59688 Jan 27 05:33:24.461060 systemd[1]: Started sshd@340-10.128.0.99:22-34.106.250.139:59772.service - OpenSSH per-connection server daemon (34.106.250.139:59772). Jan 27 05:33:24.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@340-10.128.0.99:22-34.106.250.139:59772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.470142 sshd[5174]: Connection closed by invalid user test 34.106.250.139 port 59700 [preauth] Jan 27 05:33:24.488000 audit[5174]: USER_ERR pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.503235 sshd[5175]: Connection closed by invalid user guest 34.106.250.139 port 59712 [preauth] Jan 27 05:33:24.514360 systemd[1]: Started sshd@341-10.128.0.99:22-34.106.250.139:59778.service - OpenSSH per-connection server daemon (34.106.250.139:59778). Jan 27 05:33:24.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@341-10.128.0.99:22-34.106.250.139:59778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.525000 audit[5175]: USER_ERR pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.534219 systemd[1]: sshd@333-10.128.0.99:22-34.106.250.139:59700.service: Deactivated successfully. Jan 27 05:33:24.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@333-10.128.0.99:22-34.106.250.139:59700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.564362 systemd[1]: sshd@334-10.128.0.99:22-34.106.250.139:59712.service: Deactivated successfully. Jan 27 05:33:24.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@334-10.128.0.99:22-34.106.250.139:59712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.588518 sshd[5176]: Connection closed by invalid user admin 34.106.250.139 port 59688 [preauth] Jan 27 05:33:24.587000 audit[5176]: USER_ERR pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:24.599370 systemd[1]: Started sshd@342-10.128.0.99:22-34.106.250.139:59782.service - OpenSSH per-connection server daemon (34.106.250.139:59782). Jan 27 05:33:24.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@342-10.128.0.99:22-34.106.250.139:59782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.645244 systemd[1]: sshd@335-10.128.0.99:22-34.106.250.139:59688.service: Deactivated successfully. Jan 27 05:33:24.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@335-10.128.0.99:22-34.106.250.139:59688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:24.934432 sshd[5200]: Invalid user info from 34.106.250.139 port 59724 Jan 27 05:33:25.005623 sshd[5198]: Connection closed by authenticating user adm 34.106.250.139 port 59740 [preauth] Jan 27 05:33:25.010165 systemd[1]: Started sshd@343-10.128.0.99:22-34.106.250.139:52014.service - OpenSSH per-connection server daemon (34.106.250.139:52014). Jan 27 05:33:25.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@343-10.128.0.99:22-34.106.250.139:52014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.014137 systemd[1]: Started sshd@344-10.128.0.99:22-34.106.250.139:52042.service - OpenSSH per-connection server daemon (34.106.250.139:52042). Jan 27 05:33:25.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@344-10.128.0.99:22-34.106.250.139:52042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.019472 sshd[5200]: Connection closed by invalid user info 34.106.250.139 port 59724 [preauth] Jan 27 05:33:25.018000 audit[5200]: USER_ERR pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:25.021000 audit[5198]: USER_ERR pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:25.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@345-10.128.0.99:22-34.106.250.139:52030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.022914 systemd[1]: Started sshd@345-10.128.0.99:22-34.106.250.139:52030.service - OpenSSH per-connection server daemon (34.106.250.139:52030). Jan 27 05:33:25.025712 sshd[5199]: Invalid user mysql from 34.106.250.139 port 59752 Jan 27 05:33:25.031671 sshd[5206]: Invalid user postgres from 34.106.250.139 port 59760 Jan 27 05:33:25.036695 sshd[5212]: Invalid user user from 34.106.250.139 port 59772 Jan 27 05:33:25.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@338-10.128.0.99:22-34.106.250.139:59724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.044753 systemd[1]: sshd@338-10.128.0.99:22-34.106.250.139:59724.service: Deactivated successfully. Jan 27 05:33:25.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@336-10.128.0.99:22-34.106.250.139:59740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.049459 systemd[1]: sshd@336-10.128.0.99:22-34.106.250.139:59740.service: Deactivated successfully. Jan 27 05:33:25.082867 sshd[5214]: Invalid user administrator from 34.106.250.139 port 59778 Jan 27 05:33:25.104867 sshd[5222]: Invalid user oracle from 34.106.250.139 port 59782 Jan 27 05:33:25.136508 sshd[5206]: Connection closed by invalid user postgres 34.106.250.139 port 59760 [preauth] Jan 27 05:33:25.135000 audit[5206]: USER_ERR pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:25.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@339-10.128.0.99:22-34.106.250.139:59760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.175339 systemd[1]: sshd@339-10.128.0.99:22-34.106.250.139:59760.service: Deactivated successfully. Jan 27 05:33:25.176986 sshd[5199]: Connection closed by invalid user mysql 34.106.250.139 port 59752 [preauth] Jan 27 05:33:25.179000 audit[5199]: USER_ERR pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:25.199000 audit[5212]: USER_ERR pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:25.202907 sshd[5212]: Connection closed by invalid user user 34.106.250.139 port 59772 [preauth] Jan 27 05:33:25.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@337-10.128.0.99:22-34.106.250.139:59752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.223813 systemd[1]: sshd@337-10.128.0.99:22-34.106.250.139:59752.service: Deactivated successfully. Jan 27 05:33:25.231817 systemd[1]: sshd@340-10.128.0.99:22-34.106.250.139:59772.service: Deactivated successfully. Jan 27 05:33:25.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@340-10.128.0.99:22-34.106.250.139:59772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.255896 sshd[5222]: Connection closed by invalid user oracle 34.106.250.139 port 59782 [preauth] Jan 27 05:33:25.254000 audit[5222]: USER_ERR pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:25.256000 audit[5214]: USER_ERR pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=34.106.250.139 addr=34.106.250.139 terminal=ssh res=failed' Jan 27 05:33:25.258148 sshd[5214]: Connection closed by invalid user administrator 34.106.250.139 port 59778 [preauth] Jan 27 05:33:25.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@346-10.128.0.99:22-34.106.250.139:52044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.282972 systemd[1]: Started sshd@346-10.128.0.99:22-34.106.250.139:52044.service - OpenSSH per-connection server daemon (34.106.250.139:52044). Jan 27 05:33:25.296572 systemd[1]: Started sshd@347-10.128.0.99:22-34.106.250.139:52060.service - OpenSSH per-connection server daemon (34.106.250.139:52060). Jan 27 05:33:25.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@347-10.128.0.99:22-34.106.250.139:52060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.306304 systemd[1]: Started sshd@348-10.128.0.99:22-34.106.250.139:52072.service - OpenSSH per-connection server daemon (34.106.250.139:52072). Jan 27 05:33:25.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@348-10.128.0.99:22-34.106.250.139:52072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.310323 systemd[1]: Started sshd@349-10.128.0.99:22-34.106.250.139:52078.service - OpenSSH per-connection server daemon (34.106.250.139:52078). Jan 27 05:33:25.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@349-10.128.0.99:22-34.106.250.139:52078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@341-10.128.0.99:22-34.106.250.139:59778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 27 05:33:25.313438 systemd[1]: sshd@341-10.128.0.99:22-34.106.250.139:59778.service: Deactivated successfully. Jan 27 05:33:25.318243 systemd[1]: sshd@342-10.128.0.99:22-34.106.250.139:59782.service: Deactivated successfully. Jan 27 05:33:25.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@342-10.128.0.99:22-34.106.250.139:59782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'