34 audit(1769489235.162:307): prog-id=56 op=UNLOAD [ 69.070195] audit: type=1334 audit(1769489235.162:308): prog-id=70 op=LOAD [ 69.073521] audit: type=1334 audit(1769489235.162:309): prog-id=71 op=LOAD [ 69.078049] audit: type=1334 audit(1769489235.163:310): prog-id=57 op=UNLOAD [ 73.082875] kauditd_printk_skb: 36 callbacks suppressed [ 73.082881] audit: type=1325 audit(1769489239.182:347): table=mangle:42 family=10 entries=2 op=nft_register_chain pid=2873 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 73.089252] audit: type=1300 audit(1769489239.182:347): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc169f990 a2=0 a3=0 items=0 ppid=2856 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.097119] audit: type=1327 audit(1769489239.182:347): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 73.102570] audit: type=1325 audit(1769489239.188:348): table=mangle:43 family=2 entries=2 op=nft_register_chain pid=2874 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 73.106190] audit: type=1300 audit(1769489239.188:348): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdb9b2ec0 a2=0 a3=0 items=0 ppid=2856 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.116530] audit: type=1327 audit(1769489239.188:348): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 73.120086] audit: type=1325 audit(1769489239.195:349): table=filter:44 family=2 entries=1 op=nft_register_chain pid=2875 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 73.124597] audit: type=1300 audit(1769489239.195:349): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff4d56f30 a2=0 a3=0 items=0 ppid=2856 pid=2875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.134481] audit: type=1327 audit(1769489239.195:349): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 73.138187] audit: type=1325 audit(1769489239.200:350): table=mangle:45 family=10 entries=1 op=nft_register_chain pid=2876 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 81.364227] zram_generator::config[3372]: No configuration found. [ 82.041984] kauditd_printk_skb: 158 callbacks suppressed [ 82.041991] audit: type=1131 audit(1769489248.140:407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 82.050041] audit: type=1334 audit(1769489248.148:408): prog-id=119 op=LOAD [ 82.051972] audit: type=1334 audit(1769489248.148:409): prog-id=80 op=UNLOAD [ 82.053879] audit: type=1334 audit(1769489248.152:410): prog-id=120 op=LOAD [ 82.055748] audit: type=1334 audit(1769489248.152:411): prog-id=72 op=UNLOAD [ 82.057525] audit: type=1334 audit(1769489248.156:412): prog-id=121 op=LOAD [ 82.059415] audit: type=1334 audit(1769489248.156:413): prog-id=69 op=UNLOAD [ 82.061386] audit: type=1334 audit(1769489248.158:414): prog-id=122 op=LOAD [ 82.063305] audit: type=1334 audit(1769489248.158:415): prog-id=123 op=LOAD [ 82.065233] audit: type=1334 audit(1769489248.158:416): prog-id=70 op=UNLOAD [ 88.091564] kauditd_printk_skb: 37 callbacks suppressed [ 88.091569] audit: type=1106 audit(1769489254.190:454): pid=2257 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 88.098750] audit: type=1104 audit(1769489254.190:455): pid=2257 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 88.182902] audit: type=1106 audit(1769489254.279:456): pid=2252 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 88.194693] audit: type=1104 audit(1769489254.279:457): pid=2252 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 88.202922] audit: type=1131 audit(1769489254.296:458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.23.191:22-68.220.241.50:50384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 90.122947] audit: type=1334 audit(1769489256.221:459): prog-id=139 op=LOAD [ 90.126494] audit: type=1334 audit(1769489256.224:460): prog-id=140 op=LOAD [ 90.129422] audit: type=1300 audit(1769489256.224:460): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000186180 a2=98 a3=0 items=0 ppid=3519 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.136951] audit: type=1327 audit(1769489256.224:460): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861663566336338396165396531636133663562663736666231643230 [ 90.143244] audit: type=1334 audit(1769489256.224:461): prog-id=140 op=UNLOAD [ 104.575925] kauditd_printk_skb: 229 callbacks suppressed [ 104.575932] audit: type=1334 audit(1769489270.674:539): prog-id=157 op=LOAD [ 104.580499] audit: type=1334 audit(1769489270.677:540): prog-id=158 op=LOAD [ 104.582551] audit: type=1300 audit(1769489270.677:540): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000106180 a2=98 a3=0 items=0 ppid=3519 pid=3838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.590768] audit: type=1327 audit(1769489270.677:540): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730666530633431623761303630636263653161623966623862323232 [ 104.597078] audit: type=1334 audit(1769489270.677:541): prog-id=158 op=UNLOAD [ 104.599511] audit: type=1300 audit(1769489270.677:541): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3519 pid=3838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.607851] audit: type=1327 audit(1769489270.677:541): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730666530633431623761303630636263653161623966623862323232 [ 104.614584] audit: type=1334 audit(1769489270.678:542): prog-id=159 op=LOAD [ 104.617532] audit: type=1300 audit(1769489270.678:542): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001063e8 a2=98 a3=0 items=0 ppid=3519 pid=3838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.625783] audit: type=1327 audit(1769489270.678:542): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730666530633431623761303630636263653161623966623862323232 [ 109.731699] kauditd_printk_skb: 100 callbacks suppressed [ 109.731704] audit: type=1334 audit(1769489275.829:583): prog-id=180 op=LOAD [ 109.734831] audit: type=1300 audit(1769489275.829:583): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdbc86e98 a2=74 a3=0 items=0 ppid=4027 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.741288] audit: type=1327 audit(1769489275.829:583): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 109.743572] audit: type=1334 audit(1769489275.833:584): prog-id=180 op=UNLOAD [ 109.745248] audit: type=1300 audit(1769489275.833:584): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffa95fbf10 a2=74 a3=0 items=0 ppid=4027 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.751620] audit: type=1327 audit(1769489275.833:584): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 109.753938] audit: type=1334 audit(1769489275.833:585): prog-id=181 op=LOAD [ 109.755529] audit: type=1300 audit(1769489275.833:585): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdbc85ed8 a2=90 a3=2 items=0 ppid=4027 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.762323] audit: type=1327 audit(1769489275.833:585): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 109.764763] audit: type=1334 audit(1769489275.853:586): prog-id=181 op=UNLOAD [ 116.882118] NET: Registered PF_ALG protocol family [ 116.891124] kauditd_printk_skb: 5682 callbacks suppressed [ 116.891130] audit: type=1334 audit(1769489282.989:2481): prog-id=1130 op=LOAD [ 116.894260] audit: type=1300 audit(1769489282.989:2481): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffff6229448 a2=74 a3=d items=0 ppid=4205 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.900590] audit: type=1327 audit(1769489282.989:2481): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 116.905540] audit: type=1334 audit(1769489282.989:2482): prog-id=1130 op=UNLOAD [ 116.907226] audit: type=1300 audit(1769489282.989:2482): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff89339f50 a2=74 a3=d items=0 ppid=4205 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.913509] audit: type=1327 audit(1769489282.989:2482): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 116.918734] audit: type=1334 audit(1769489282.989:2483): prog-id=1131 op=LOAD [ 116.920352] audit: type=1300 audit(1769489282.989:2483): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffff6229428 a2=80 a3=0 items=0 ppid=4205 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.927868] audit: type=1327 audit(1769489282.989:2483): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 116.933230] audit: type=1334 audit(1769489282.991:2484): prog-id=1131 op=UNLOAD This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:03 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:03 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:04 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:04 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:05 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:05 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: [ 119.168237] eth0: renamed from tmp61744 [ 119.177507] eth0: renamed from tmp9a80e This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:06 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:06 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:07 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:07 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:08 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:48:08 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: [ 128.514357] kauditd_printk_skb: 323 callbacks suppressed [ 128.514363] audit: type=1334 audit(1769489294.613:2592): prog-id=1168 op=LOAD [ 128.518690] audit: type=1300 audit(1769489294.613:2592): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc85ff498 a2=74 a3=11 items=0 ppid=4027 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 128.525535] audit: type=1327 audit(1769489294.613:2592): proctitle=74630066696C746572007265706C61636500646576006C786335636363303339616666333400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333030385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 128.530916] audit: type=1334 audit(1769489294.613:2593): prog-id=1168 op=UNLOAD [ 128.533681] audit: type=1300 audit(1769489294.613:2593): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff7f79ef50 a2=74 a3=11 items=0 ppid=4027 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 128.540498] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.541925] audit: type=1327 audit(1769489294.613:2593): proctitle=74630066696C746572007265706C61636500646576006C786335636363303339616666333400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333030385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 128.547106] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 128.548578] audit: type=1334 audit(1769489294.613:2594): prog-id=1169 op=LOAD [ 128.550106] audit: type=1300 audit(1769489294.613:2594): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc85ff478 a2=80 a3=0 items=0 ppid=4027 pid=4570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 142.874382] kauditd_printk_skb: 468 callbacks suppressed [ 142.874389] audit: type=1130 audit(1769489308.973:2753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.23.191:22-68.220.241.50:58230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 143.370107] audit: type=1101 audit(1769489309.469:2754): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.378551] audit: type=1103 audit(1769489309.477:2755): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.384679] audit: type=1006 audit(1769489309.478:2756): pid=4746 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 143.388559] audit: type=1300 audit(1769489309.478:2756): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe6154f00 a2=3 a3=0 items=0 ppid=1 pid=4746 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.395005] audit: type=1327 audit(1769489309.478:2756): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 143.415494] audit: type=1105 audit(1769489309.514:2757): pid=4746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.426051] audit: type=1103 audit(1769489309.525:2758): pid=4752 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.808549] audit: type=1106 audit(1769489309.906:2759): pid=4746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 143.817712] audit: type=1104 audit(1769489309.906:2760): pid=4746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 148.914079] kauditd_printk_skb: 1 callbacks suppressed [ 148.914085] audit: type=1130 audit(1769489315.013:2762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.23.191:22-68.220.241.50:47888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.412536] audit: type=1101 audit(1769489315.512:2763): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 149.420257] audit: type=1103 audit(1769489315.519:2764): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 149.425901] audit: type=1006 audit(1769489315.519:2765): pid=4766 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 149.429533] audit: type=1300 audit(1769489315.519:2765): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff2be3310 a2=3 a3=0 items=0 ppid=1 pid=4766 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.436274] audit: type=1327 audit(1769489315.519:2765): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 149.456130] audit: type=1105 audit(1769489315.555:2766): pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 149.463872] audit: type=1103 audit(1769489315.563:2767): pid=4770 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 149.828846] audit: type=1106 audit(1769489315.928:2768): pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 149.836882] audit: type=1104 audit(1769489315.928:2769): pid=4766 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 154.915354] kauditd_printk_skb: 1 callbacks suppressed [ 154.915360] audit: type=1130 audit(1769489321.014:2771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.23.191:22-68.220.241.50:47892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.386124] audit: type=1101 audit(1769489321.485:2772): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 155.393358] audit: type=1103 audit(1769489321.492:2773): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 155.399932] audit: type=1006 audit(1769489321.492:2774): pid=4788 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 155.403392] audit: type=1300 audit(1769489321.492:2774): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcabc50a0 a2=3 a3=0 items=0 ppid=1 pid=4788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.409950] audit: type=1327 audit(1769489321.492:2774): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 155.428756] audit: type=1105 audit(1769489321.528:2775): pid=4788 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 155.436631] audit: type=1103 audit(1769489321.536:2776): pid=4792 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 155.760431] audit: type=1106 audit(1769489321.859:2777): pid=4788 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 155.769728] audit: type=1104 audit(1769489321.860:2778): pid=4788 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 160.860412] kauditd_printk_skb: 1 callbacks suppressed [ 160.860419] audit: type=1130 audit(1769489326.959:2780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.23.191:22-68.220.241.50:47500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.361500] audit: type=1101 audit(1769489327.460:2781): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.369890] audit: type=1103 audit(1769489327.469:2782): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.375757] audit: type=1006 audit(1769489327.473:2783): pid=4805 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 161.380367] audit: type=1300 audit(1769489327.473:2783): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdbfaa4d0 a2=3 a3=0 items=0 ppid=1 pid=4805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.388174] audit: type=1327 audit(1769489327.473:2783): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.415596] audit: type=1105 audit(1769489327.515:2784): pid=4805 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.423573] audit: type=1103 audit(1769489327.515:2785): pid=4809 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.752487] audit: type=1106 audit(1769489327.851:2786): pid=4805 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 161.760936] audit: type=1104 audit(1769489327.851:2787): pid=4805 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 168.945510] kauditd_printk_skb: 23 callbacks suppressed [ 168.945516] audit: type=1130 audit(1769489335.044:2807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.23.191:22-68.220.241.50:36516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.416203] audit: type=1101 audit(1769489335.515:2808): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 169.425277] audit: type=1103 audit(1769489335.524:2809): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 169.431063] audit: type=1006 audit(1769489335.525:2810): pid=4853 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 169.435312] audit: type=1300 audit(1769489335.525:2810): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdd6a7710 a2=3 a3=0 items=0 ppid=1 pid=4853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.443701] audit: type=1327 audit(1769489335.525:2810): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 169.467496] audit: type=1105 audit(1769489335.566:2811): pid=4853 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 169.476286] audit: type=1103 audit(1769489335.575:2812): pid=4857 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 169.802225] audit: type=1106 audit(1769489335.901:2813): pid=4853 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 169.813697] audit: type=1104 audit(1769489335.901:2814): pid=4853 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 174.890340] kauditd_printk_skb: 1 callbacks suppressed [ 174.890345] audit: type=1130 audit(1769489340.989:2816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.23.191:22-68.220.241.50:36528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.358522] audit: type=1101 audit(1769489341.457:2817): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.366661] audit: type=1103 audit(1769489341.466:2818): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.372197] audit: type=1006 audit(1769489341.466:2819): pid=4869 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 175.376683] audit: type=1300 audit(1769489341.466:2819): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffed8cceb0 a2=3 a3=0 items=0 ppid=1 pid=4869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.383372] audit: type=1327 audit(1769489341.466:2819): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.402049] audit: type=1105 audit(1769489341.501:2820): pid=4869 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.410215] audit: type=1103 audit(1769489341.509:2821): pid=4873 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.726803] audit: type=1106 audit(1769489341.825:2822): pid=4869 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.736790] audit: type=1104 audit(1769489341.826:2823): pid=4869 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 180.820561] kauditd_printk_skb: 1 callbacks suppressed [ 180.820567] audit: type=1130 audit(1769489346.919:2825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.23.191:22-68.220.241.50:47390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.295391] audit: type=1101 audit(1769489347.394:2826): pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.304717] audit: type=1103 audit(1769489347.403:2827): pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.310745] audit: type=1006 audit(1769489347.403:2828): pid=4885 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 181.316044] audit: type=1300 audit(1769489347.403:2828): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc4246730 a2=3 a3=0 items=0 ppid=1 pid=4885 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.323257] audit: type=1327 audit(1769489347.403:2828): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 181.338184] audit: type=1105 audit(1769489347.437:2829): pid=4885 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.346288] audit: type=1103 audit(1769489347.445:2830): pid=4891 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.686773] audit: type=1106 audit(1769489347.783:2831): pid=4885 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 181.696342] audit: type=1104 audit(1769489347.784:2832): pid=4885 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.289005] kauditd_printk_skb: 47 callbacks suppressed [ 186.289011] audit: type=1101 audit(1769489352.388:2866): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.297488] audit: type=1103 audit(1769489352.396:2867): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.303173] audit: type=1006 audit(1769489352.396:2868): pid=4953 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 186.306943] audit: type=1300 audit(1769489352.396:2868): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff7c87c30 a2=3 a3=0 items=0 ppid=1 pid=4953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.314070] audit: type=1327 audit(1769489352.396:2868): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 186.341501] audit: type=1105 audit(1769489352.440:2869): pid=4953 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.350044] audit: type=1103 audit(1769489352.449:2870): pid=4957 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.683649] audit: type=1106 audit(1769489352.783:2871): pid=4953 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.693617] audit: type=1104 audit(1769489352.784:2872): pid=4953 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.700886] audit: type=1131 audit(1769489352.792:2873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.23.191:22-68.220.241.50:47430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.692574] audit: type=1325 audit(1769489357.791:2874): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4970 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 191.696146] audit: type=1300 audit(1769489357.791:2874): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd2bdce10 a2=0 a3=1 items=0 ppid=3655 pid=4970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.703115] audit: type=1327 audit(1769489357.791:2874): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 191.710224] audit: type=1325 audit(1769489357.808:2875): table=nat:162 family=2 entries=102 op=nft_register_chain pid=4970 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 191.713552] audit: type=1300 audit(1769489357.808:2875): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=ffffd2bdce10 a2=0 a3=1 items=0 ppid=3655 pid=4970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.720111] audit: type=1327 audit(1769489357.808:2875): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 191.777463] audit: type=1130 audit(1769489357.876:2876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.23.191:22-68.220.241.50:58410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.244371] audit: type=1101 audit(1769489358.343:2877): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.252201] audit: type=1103 audit(1769489358.351:2878): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.257947] audit: type=1006 audit(1769489358.351:2879): pid=4972 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 197.724784] kauditd_printk_skb: 7 callbacks suppressed [ 197.724790] audit: type=1130 audit(1769489363.824:2885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.23.191:22-68.220.241.50:46744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.243412] audit: type=1101 audit(1769489364.342:2886): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.251522] audit: type=1103 audit(1769489364.350:2887): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.258329] audit: type=1006 audit(1769489364.350:2888): pid=4990 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 198.262008] audit: type=1300 audit(1769489364.350:2888): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff2517210 a2=3 a3=0 items=0 ppid=1 pid=4990 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.268746] audit: type=1327 audit(1769489364.350:2888): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 198.292606] audit: type=1105 audit(1769489364.392:2889): pid=4990 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.300776] audit: type=1103 audit(1769489364.400:2890): pid=4994 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.648731] audit: type=1106 audit(1769489364.748:2891): pid=4990 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.656076] audit: type=1104 audit(1769489364.748:2892): pid=4990 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 203.739490] kauditd_printk_skb: 1 callbacks suppressed [ 203.739496] audit: type=1130 audit(1769489369.837:2894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.23.191:22-68.220.241.50:46754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.218651] audit: type=1101 audit(1769489370.318:2895): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 204.226730] audit: type=1103 audit(1769489370.326:2896): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 204.232454] audit: type=1006 audit(1769489370.326:2897): pid=5008 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 204.235849] audit: type=1300 audit(1769489370.326:2897): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdea5f380 a2=3 a3=0 items=0 ppid=1 pid=5008 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.243356] audit: type=1327 audit(1769489370.326:2897): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.271884] audit: type=1105 audit(1769489370.371:2898): pid=5008 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 204.279921] audit: type=1103 audit(1769489370.379:2899): pid=5012 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 204.597745] audit: type=1106 audit(1769489370.695:2900): pid=5008 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 204.606917] audit: type=1104 audit(1769489370.695:2901): pid=5008 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:49:35 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:49:35 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: [ 210.131249] kauditd_printk_skb: 17 callbacks suppressed [ 210.131256] audit: type=1106 audit(1769489376.229:2917): pid=5024 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 210.140558] audit: type=1104 audit(1769489376.229:2918): pid=5024 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 210.150162] audit: type=1131 audit(1769489376.240:2919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.23.191:22-68.220.241.50:46768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.224362] audit: type=1130 audit(1769489376.323:2920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.23.191:22-68.220.241.50:60624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.690326] audit: type=1101 audit(1769489376.789:2921): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 210.696992] audit: type=1103 audit(1769489376.796:2922): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 210.702798] audit: type=1006 audit(1769489376.796:2923): pid=5172 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 210.706962] audit: type=1300 audit(1769489376.796:2923): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc846cd00 a2=3 a3=0 items=0 ppid=1 pid=5172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.714537] audit: type=1327 audit(1769489376.796:2923): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 210.743676] audit: type=1105 audit(1769489376.842:2924): pid=5172 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 215.960694] kauditd_printk_skb: 93 callbacks suppressed [ 215.960710] audit: type=1334 audit(1769489382.059:2972): prog-id=1281 op=LOAD [ 215.964600] audit: type=1300 audit(1769489382.059:2972): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001303e8 a2=98 a3=0 items=0 ppid=5203 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 215.971881] audit: type=1327 audit(1769489382.059:2972): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433313763656332623230343034376330613831383932633631353462 [ 215.978400] audit: type=1334 audit(1769489382.060:2973): prog-id=1282 op=LOAD [ 215.981795] audit: type=1300 audit(1769489382.060:2973): arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4000130168 a2=98 a3=0 items=0 ppid=5203 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 215.988705] audit: type=1327 audit(1769489382.060:2973): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433313763656332623230343034376330613831383932633631353462 [ 215.995356] audit: type=1334 audit(1769489382.063:2974): prog-id=1282 op=UNLOAD [ 215.997478] audit: type=1300 audit(1769489382.063:2974): arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=5203 pid=5350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.004817] audit: type=1327 audit(1769489382.063:2974): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433313763656332623230343034376330613831383932633631353462 [ 216.014484] audit: type=1334 audit(1769489382.063:2975): prog-id=1281 op=UNLOAD [ 219.260325] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 221.888549] kauditd_printk_skb: 5728 callbacks suppressed [ 221.888555] audit: type=1334 audit(1769489387.987:4888): prog-id=2239 op=LOAD [ 221.891559] audit: type=1300 audit(1769489387.987:4888): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffcb11f438 a2=74 a3=d items=0 ppid=5563 pid=5659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 221.898078] audit: type=1327 audit(1769489387.987:4888): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 221.903394] audit: type=1334 audit(1769489387.987:4889): prog-id=2239 op=UNLOAD [ 221.905190] audit: type=1300 audit(1769489387.987:4889): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff92e2ff50 a2=74 a3=d items=0 ppid=5563 pid=5659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 221.911680] audit: type=1327 audit(1769489387.987:4889): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 221.916890] audit: type=1334 audit(1769489387.987:4890): prog-id=2240 op=LOAD [ 221.919513] audit: type=1300 audit(1769489387.987:4890): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffcb11f418 a2=80 a3=0 items=0 ppid=5563 pid=5659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 221.927031] audit: type=1327 audit(1769489387.987:4890): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 221.933089] audit: type=1334 audit(1769489387.987:4891): prog-id=2240 op=UNLOAD This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:49:53 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b This is ip-172-31-23-191 (Linux aarch64 6.12.66-flatcar) 04:49:53 SSH host key: SHA256:mwmKouNht5RYhX7+/pnkauVMJNIGZUb7rg6t1seNWQs (ECDSA) SSH host key: SHA256:w6kKoTeMm6/PuNOfU3VryXrpaIlXo7XXqW1MTJ2+zGQ (RSA) SSH host key: SHA256:7gZWYw9IDMsKKomxy1lxKqtjAE+wBNBCUphYZjdrZz0 (ED25519) eth0: 172.31.23.191 fe80::4b2:3cff:fe81:344b ip-172-31-23-191 login: [ 227.739477] kauditd_printk_skb: 422 callbacks suppressed [ 227.739483] audit: type=1334 audit(1769489393.838:5038): prog-id=2253 op=LOAD [ 227.744181] audit: type=1300 audit(1769489393.838:5038): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd9cd3138 a2=74 a3=10 items=0 ppid=5444 pid=6049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.753766] audit: type=1327 audit(1769489393.838:5038): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313239375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 227.761799] audit: type=1334 audit(1769489393.841:5039): prog-id=2253 op=UNLOAD [ 227.764673] audit: type=1300 audit(1769489393.841:5039): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffb9f20f50 a2=74 a3=10 items=0 ppid=5444 pid=6049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.771381] audit: type=1327 audit(1769489393.841:5039): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313239375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 227.780702] audit: type=1334 audit(1769489393.841:5040): prog-id=2254 op=LOAD [ 227.782736] audit: type=1300 audit(1769489393.841:5040): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd9cd3118 a2=80 a3=0 items=0 ppid=5444 pid=6049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.789914] audit: type=1327 audit(1769489393.841:5040): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313239375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 227.795374] audit: type=1334 audit(1769489393.842:5041): prog-id=2254 op=UNLOAD [ 234.424746] kauditd_printk_skb: 131 callbacks suppressed [ 234.424751] audit: type=1334 audit(1769489400.524:5089): prog-id=2277 op=LOAD [ 234.428867] audit: type=1334 audit(1769489400.524:5090): prog-id=2278 op=LOAD [ 234.430931] audit: type=1300 audit(1769489400.524:5090): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffff2c61718 a2=74 a3=11 items=0 ppid=5444 pid=6107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 234.437358] audit: type=1300 audit(1769489400.524:5089): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc8e308e8 a2=74 a3=11 items=0 ppid=5444 pid=6108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 234.443778] audit: type=1327 audit(1769489400.524:5090): proctitle=74630066696C746572007265706C61636500646576006C786335636363303339616666333400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333030385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 234.449639] audit: type=1327 audit(1769489400.524:5089): proctitle=74630066696C746572007265706C61636500646576006C786339613830326234323439363800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003837375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 234.454910] audit: type=1334 audit(1769489400.527:5091): prog-id=2278 op=UNLOAD [ 234.456727] audit: type=1334 audit(1769489400.527:5092): prog-id=2277 op=UNLOAD [ 234.458737] audit: type=1300 audit(1769489400.527:5091): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff9144ef50 a2=74 a3=11 items=0 ppid=5444 pid=6107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 234.465016] audit: type=1300 audit(1769489400.527:5092): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff98d69f50 a2=74 a3=11 items=0 ppid=5444 pid=6108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 245.716979] kauditd_printk_skb: 420 callbacks suppressed [ 245.716985] audit: type=1334 audit(1769489411.816:5235): prog-id=2355 op=LOAD [ 245.721243] audit: type=1334 audit(1769489411.816:5236): prog-id=99 op=UNLOAD [ 245.723149] audit: type=1334 audit(1769489411.820:5237): prog-id=109 op=UNLOAD [ 245.724963] audit: type=1334 audit(1769489411.820:5238): prog-id=113 op=UNLOAD