evice - /dev/ttyS0... [ 15.456574] systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). [ 15.458296] systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. [ 15.459941] systemd[1]: Stopped target initrd-switch-root.target - Switch Root. [ 15.461476] systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. [ 15.463001] systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. [ 15.464619] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. [ 15.466405] systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. [ 15.468135] systemd[1]: Reached target remote-fs.target - Remote File Systems. [ 15.469655] systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. [ 15.471705] systemd[1]: Reached target slices.target - Slice Units. [ 15.473103] systemd[1]: Reached target swap.target - Swaps. [ 15.474397] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. [ 15.477628] systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. [ 15.480125] systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. [ 15.483133] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 15.485999] systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. [ 15.488150] systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. [ 15.491099] systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. [ 15.494247] systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. [ 15.498436] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 15.500525] systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. [ 15.503079] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 15.507527] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 15.511966] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 15.516365] systemd[1]: Mounting media.mount - External Media Directory... [ 15.518066] systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 15.522115] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 15.527975] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 15.539960] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 15.541659] systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). [ 15.544669] systemd[1]: Reached target machines.target - Containers. [ 15.547993] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 15.549877] systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. [ 15.556010] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 15.560171] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 15.568597] systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... [ 15.574014] systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... [ 15.576767] systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... [ 15.583080] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 15.587333] systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... [ 15.589104] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 15.591717] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 15.591791] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 15.594780] systemd[1]: systemd-fsck-usr.service: Deactivated successfully. [ 15.595974] systemd[1]: Stopped systemd-fsck-usr.service. [ 15.597295] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). [ 15.605614] systemd[1]: Starting systemd-journald.service - Journal Service... [ 15.611440] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 15.615698] systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... [ 15.624107] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 15.635009] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 15.639272] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 15.644366] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 15.647451] systemd-journald[1433]: Collecting audit messages is enabled. [ 15.650548] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 15.652708] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 15.655380] systemd[1]: Mounted media.mount - External Media Directory. [ 15.656974] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 15.659690] systemd[1]: Started systemd-journald.service - Journal Service. [ 15.698211] fuse: init (API version 7.41) [ 15.732996] systemd-journald[1433]: Received client request to flush runtime journal. [ 15.819336] loop1: detected capacity change from 0 to 73176 [ 15.906405] ACPI: bus type drm_connector registered [ 16.173719] loop2: detected capacity change from 0 to 224512 [ 16.225230] kauditd_printk_skb: 104 callbacks suppressed [ 16.225233] audit: type=1130 audit(1769214876.219:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.278296] loop3: detected capacity change from 0 to 111560 [ 16.307868] audit: type=1130 audit(1769214876.301:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.607397] audit: type=1130 audit(1769214876.601:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.611407] audit: type=1334 audit(1769214876.601:150): prog-id=8 op=UNLOAD [ 16.611444] audit: type=1334 audit(1769214876.601:151): prog-id=7 op=UNLOAD [ 16.611479] audit: type=1334 audit(1769214876.601:152): prog-id=28 op=LOAD [ 16.611506] audit: type=1334 audit(1769214876.601:153): prog-id=29 op=LOAD [ 16.656735] loop4: detected capacity change from 0 to 50784 [ 16.829153] audit: type=1130 audit(1769214876.822:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.835871] audit: type=1334 audit(1769214876.823:155): prog-id=30 op=LOAD [ 16.902743] audit: type=1130 audit(1769214876.896:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 16.995355] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 16.999317] mousedev: PS/2 mouse device common for all mice [ 17.001675] ACPI: button: Power Button [PWRF] [ 17.004351] loop5: detected capacity change from 0 to 73176 [ 17.006048] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 17.014571] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 17.019981] ACPI: button: Sleep Button [SLPF] [ 17.026919] loop6: detected capacity change from 0 to 224512 [ 17.057839] loop7: detected capacity change from 0 to 111560 [ 17.083161] loop1: detected capacity change from 0 to 50784 [ 17.248434] zram_generator::config[1616]: No configuration found. [ 17.880825] zram_generator::config[1799]: No configuration found. [ 21.720903] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 21.773668] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/01/24 00:34:44Z: Amazon SSM Agent v3.3.0.0 is running 2026/01/24 00:34:44Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/01/24 00:34:44Z: OsVersion: 4593.0.0 [!p]104[?7h This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:34:46 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:34:46 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: [ 33.358185] kauditd_printk_skb: 85 callbacks suppressed [ 33.358189] audit: type=1305 audit(1769214894.432:240): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 33.360795] audit: type=1300 audit(1769214894.432:240): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe1b422fe0 a2=420 a3=0 items=0 ppid=2284 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 33.364962] audit: type=1327 audit(1769214894.432:240): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 33.366723] audit: type=1130 audit(1769214894.438:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 33.369669] audit: type=1131 audit(1769214894.438:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 33.372594] audit: type=1106 audit(1769214894.440:243): pid=2278 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 33.375844] audit: type=1104 audit(1769214894.441:244): pid=2278 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 33.445829] audit: type=1106 audit(1769214894.519:245): pid=2273 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 33.451992] audit: type=1104 audit(1769214894.520:246): pid=2273 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 33.456218] audit: type=1131 audit(1769214894.524:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.70:22-20.161.92.111:60174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 36.924661] Initializing XFRM netlink socket This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:34:59 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:34:59 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: [ 48.002859] kauditd_printk_skb: 134 callbacks suppressed [ 48.002862] audit: type=1130 audit(1769214909.076:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.094860] audit: type=1131 audit(1769214909.168:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 52.608528] audit: type=1131 audit(1769214913.681:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.621912] audit: type=1334 audit(1769214913.696:303): prog-id=66 op=UNLOAD [ 53.748967] audit: type=1130 audit(1769214914.823:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.755258] audit: type=1131 audit(1769214914.823:305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.918471] zram_generator::config[2839]: No configuration found. [ 54.272434] audit: type=1334 audit(1769214915.344:306): prog-id=70 op=LOAD [ 54.273620] audit: type=1334 audit(1769214915.344:307): prog-id=48 op=UNLOAD [ 54.275855] audit: type=1334 audit(1769214915.344:308): prog-id=71 op=LOAD [ 54.277850] audit: type=1334 audit(1769214915.344:309): prog-id=72 op=LOAD [ 54.279852] audit: type=1334 audit(1769214915.344:310): prog-id=49 op=UNLOAD [ 54.281853] audit: type=1334 audit(1769214915.344:311): prog-id=50 op=UNLOAD [ 54.283073] audit: type=1334 audit(1769214915.346:312): prog-id=73 op=LOAD [ 54.284486] audit: type=1334 audit(1769214915.346:313): prog-id=69 op=UNLOAD [ 68.346201] zram_generator::config[3402]: No configuration found. [ 68.713023] kauditd_printk_skb: 202 callbacks suppressed [ 68.713027] audit: type=1131 audit(1769214929.786:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.722883] audit: type=1334 audit(1769214929.796:409): prog-id=120 op=LOAD [ 68.724870] audit: type=1334 audit(1769214929.796:410): prog-id=82 op=UNLOAD [ 68.726876] audit: type=1334 audit(1769214929.796:411): prog-id=121 op=LOAD [ 68.728235] audit: type=1334 audit(1769214929.796:412): prog-id=122 op=LOAD [ 68.729526] audit: type=1334 audit(1769214929.796:413): prog-id=83 op=UNLOAD [ 68.730683] audit: type=1334 audit(1769214929.796:414): prog-id=84 op=UNLOAD [ 68.733675] audit: type=1334 audit(1769214929.796:415): prog-id=123 op=LOAD [ 68.735124] audit: type=1334 audit(1769214929.798:416): prog-id=124 op=LOAD [ 68.736610] audit: type=1334 audit(1769214929.798:417): prog-id=80 op=UNLOAD [ 76.159411] kauditd_printk_skb: 32 callbacks suppressed [ 76.159415] audit: type=1334 audit(1769214937.233:450): prog-id=140 op=LOAD [ 76.162205] audit: type=1334 audit(1769214937.234:451): prog-id=141 op=LOAD [ 76.163494] audit: type=1300 audit(1769214937.234:451): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.168830] audit: type=1327 audit(1769214937.234:451): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164613231623936326265336337653238356233383364366163613131 [ 76.174410] audit: type=1334 audit(1769214937.234:452): prog-id=141 op=UNLOAD [ 76.177542] audit: type=1300 audit(1769214937.234:452): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.184853] audit: type=1327 audit(1769214937.234:452): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164613231623936326265336337653238356233383364366163613131 [ 76.190610] audit: type=1334 audit(1769214937.236:453): prog-id=142 op=LOAD [ 76.192501] audit: type=1300 audit(1769214937.236:453): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.198157] audit: type=1327 audit(1769214937.236:453): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164613231623936326265336337653238356233383364366163613131 [ 81.292868] kauditd_printk_skb: 71 callbacks suppressed [ 81.292872] audit: type=1325 audit(1769214942.366:479): table=mangle:54 family=2 entries=1 op=nft_register_chain pid=3704 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 81.297750] audit: type=1300 audit(1769214942.366:479): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe1790a160 a2=0 a3=7ffe1790a14c items=0 ppid=3611 pid=3704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.304115] audit: type=1327 audit(1769214942.366:479): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 81.307323] audit: type=1325 audit(1769214942.379:480): table=mangle:55 family=10 entries=1 op=nft_register_chain pid=3706 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 81.310521] audit: type=1300 audit(1769214942.379:480): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7c95e500 a2=0 a3=7ffd7c95e4ec items=0 ppid=3611 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.316918] audit: type=1327 audit(1769214942.379:480): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 81.320111] audit: type=1325 audit(1769214942.382:481): table=nat:56 family=10 entries=1 op=nft_register_chain pid=3707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 81.323284] audit: type=1300 audit(1769214942.382:481): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde2e369a0 a2=0 a3=7ffde2e3698c items=0 ppid=3611 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.329161] audit: type=1327 audit(1769214942.382:481): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 81.332018] audit: type=1325 audit(1769214942.384:482): table=filter:57 family=10 entries=1 op=nft_register_chain pid=3708 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 111.199970] kauditd_printk_skb: 143 callbacks suppressed [ 111.199981] audit: type=1334 audit(1769214972.274:530): prog-id=153 op=UNLOAD [ 111.205736] audit: type=1334 audit(1769214972.274:531): prog-id=157 op=UNLOAD [ 111.659580] audit: type=1334 audit(1769214972.733:532): prog-id=158 op=LOAD [ 111.661208] audit: type=1334 audit(1769214972.734:533): prog-id=159 op=LOAD [ 111.662595] audit: type=1300 audit(1769214972.734:533): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3549 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.668624] audit: type=1327 audit(1769214972.734:533): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437396531633435386261396431383233343364313831636232393738 [ 111.674099] audit: type=1334 audit(1769214972.734:534): prog-id=159 op=UNLOAD [ 111.675779] audit: type=1300 audit(1769214972.734:534): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3549 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.686127] audit: type=1327 audit(1769214972.734:534): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437396531633435386261396431383233343364313831636232393738 [ 111.691257] audit: type=1334 audit(1769214972.734:535): prog-id=160 op=LOAD [ 116.232765] kauditd_printk_skb: 19 callbacks suppressed [ 116.232769] audit: type=1325 audit(1769214977.306:545): table=filter:105 family=2 entries=15 op=nft_register_rule pid=3906 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.240987] audit: type=1300 audit(1769214977.306:545): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc0189d750 a2=0 a3=7ffc0189d73c items=0 ppid=3611 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.248872] audit: type=1327 audit(1769214977.306:545): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.251771] audit: type=1325 audit(1769214977.323:546): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3906 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.255844] audit: type=1300 audit(1769214977.323:546): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc0189d750 a2=0 a3=0 items=0 ppid=3611 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.262571] audit: type=1327 audit(1769214977.323:546): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.285096] audit: type=1325 audit(1769214977.359:547): table=filter:107 family=2 entries=16 op=nft_register_rule pid=3908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.288402] audit: type=1300 audit(1769214977.359:547): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffef5b8ee00 a2=0 a3=7ffef5b8edec items=0 ppid=3611 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.295237] audit: type=1327 audit(1769214977.359:547): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.298851] audit: type=1325 audit(1769214977.370:548): table=nat:108 family=2 entries=12 op=nft_register_rule pid=3908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.306159] kauditd_printk_skb: 14 callbacks suppressed [ 121.306171] audit: type=1325 audit(1769214982.380:553): table=filter:113 family=2 entries=19 op=nft_register_rule pid=3914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.311909] audit: type=1300 audit(1769214982.380:553): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd72414ef0 a2=0 a3=7ffd72414edc items=0 ppid=3611 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.320896] audit: type=1327 audit(1769214982.380:553): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 121.325213] audit: type=1325 audit(1769214982.398:554): table=nat:114 family=2 entries=12 op=nft_register_rule pid=3914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.329701] audit: type=1300 audit(1769214982.398:554): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd72414ef0 a2=0 a3=0 items=0 ppid=3611 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.337745] audit: type=1327 audit(1769214982.398:554): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 122.342553] audit: type=1325 audit(1769214983.416:555): table=filter:115 family=2 entries=21 op=nft_register_rule pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 122.348910] audit: type=1300 audit(1769214983.416:555): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdd6b7b230 a2=0 a3=7ffdd6b7b21c items=0 ppid=3611 pid=3916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.357830] audit: type=1327 audit(1769214983.416:555): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 122.365832] audit: type=1325 audit(1769214983.439:556): table=nat:116 family=2 entries=12 op=nft_register_rule pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.611672] kauditd_printk_skb: 74 callbacks suppressed [ 126.611675] audit: type=1325 audit(1769214987.685:583): table=filter:119 family=2 entries=21 op=nft_register_rule pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.616116] audit: type=1300 audit(1769214987.685:583): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe8e6e61f0 a2=0 a3=7ffe8e6e61dc items=0 ppid=3611 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.622026] audit: type=1327 audit(1769214987.685:583): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 126.624727] audit: type=1325 audit(1769214987.696:584): table=nat:120 family=2 entries=19 op=nft_register_chain pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.627637] audit: type=1300 audit(1769214987.696:584): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe8e6e61f0 a2=0 a3=7ffe8e6e61dc items=0 ppid=3611 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.633566] audit: type=1327 audit(1769214987.696:584): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 127.508732] audit: type=1334 audit(1769214988.582:585): prog-id=178 op=LOAD [ 127.510290] audit: type=1300 audit(1769214988.582:585): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0488 a2=98 a3=0 items=0 ppid=4018 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.516461] audit: type=1327 audit(1769214988.582:585): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166326164383632636630303130663136663132393037393061396231 [ 127.524393] audit: type=1334 audit(1769214988.582:586): prog-id=179 op=LOAD [ 135.944262] kauditd_printk_skb: 12 callbacks suppressed [ 135.944266] audit: type=1334 audit(1769214997.018:591): prog-id=181 op=LOAD [ 135.947081] audit: type=1300 audit(1769214997.018:591): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000138488 a2=98 a3=0 items=0 ppid=4018 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.953477] audit: type=1327 audit(1769214997.018:591): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231646161613436303239386565666330613662316535353730393137 [ 135.962897] audit: type=1334 audit(1769214997.018:592): prog-id=182 op=LOAD [ 135.964501] audit: type=1300 audit(1769214997.018:592): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c000138218 a2=98 a3=0 items=0 ppid=4018 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.973040] audit: type=1327 audit(1769214997.018:592): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231646161613436303239386565666330613662316535353730393137 [ 135.979199] audit: type=1334 audit(1769214997.018:593): prog-id=182 op=UNLOAD [ 135.980966] audit: type=1300 audit(1769214997.018:593): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4018 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.986855] audit: type=1327 audit(1769214997.018:593): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231646161613436303239386565666330613662316535353730393137 [ 135.992887] audit: type=1334 audit(1769214997.018:594): prog-id=181 op=UNLOAD [ 145.474058] kauditd_printk_skb: 6 callbacks suppressed [ 145.474061] audit: type=1334 audit(1769215006.547:597): prog-id=184 op=LOAD [ 145.477180] audit: type=1300 audit(1769215006.547:597): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001ea488 a2=98 a3=0 items=0 ppid=4018 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.482360] audit: type=1327 audit(1769215006.547:597): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666363066353666383532643466653537373962363562313732323837 [ 145.487744] audit: type=1334 audit(1769215006.548:598): prog-id=185 op=LOAD [ 145.490038] audit: type=1300 audit(1769215006.548:598): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001ea218 a2=98 a3=0 items=0 ppid=4018 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.495244] audit: type=1327 audit(1769215006.548:598): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666363066353666383532643466653537373962363562313732323837 [ 145.500634] audit: type=1334 audit(1769215006.548:599): prog-id=185 op=UNLOAD [ 145.502152] audit: type=1300 audit(1769215006.548:599): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4018 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.507557] audit: type=1327 audit(1769215006.548:599): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666363066353666383532643466653537373962363562313732323837 [ 145.513867] audit: type=1334 audit(1769215006.548:600): prog-id=184 op=UNLOAD [ 146.058989] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 146.060440] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:50 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:50 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:52 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:52 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: [ 152.523809] kauditd_printk_skb: 203 callbacks suppressed [ 152.523813] audit: type=1325 audit(1769215013.582:668): table=filter:125 family=2 entries=46 op=nft_register_chain pid=4910 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 152.528162] audit: type=1300 audit(1769215013.582:668): arch=c000003e syscall=46 success=yes exit=27020 a0=3 a1=7fffcf75cb00 a2=0 a3=7fffcf75caec items=0 ppid=4660 pid=4910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.537359] audit: type=1327 audit(1769215013.582:668): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 153.007655] audit: type=1325 audit(1769215014.081:669): table=filter:126 family=2 entries=63 op=nft_register_chain pid=4944 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 153.012828] audit: type=1300 audit(1769215014.081:669): arch=c000003e syscall=46 success=yes exit=37048 a0=3 a1=7fff5f246320 a2=0 a3=7fff5f24630c items=0 ppid=4660 pid=4944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.023819] audit: type=1327 audit(1769215014.081:669): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 153.104588] audit: type=1325 audit(1769215014.178:670): table=filter:127 family=2 entries=40 op=nft_register_chain pid=5033 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 153.110553] audit: type=1300 audit(1769215014.178:670): arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7ffd4e95c6b0 a2=0 a3=7ffd4e95c69c items=0 ppid=4660 pid=5033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.123558] audit: type=1327 audit(1769215014.178:670): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 153.161718] audit: type=1334 audit(1769215014.235:671): prog-id=218 op=LOAD This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:56 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:56 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:57 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:57 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:58 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:58 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:59 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:36:59 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: [ 158.147651] kauditd_printk_skb: 258 callbacks suppressed [ 158.147654] audit: type=1325 audit(1769215019.221:764): table=filter:141 family=2 entries=17 op=nft_register_rule pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.151537] audit: type=1300 audit(1769215019.221:764): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffb4c07bd0 a2=0 a3=7fffb4c07bbc items=0 ppid=3611 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.156808] audit: type=1327 audit(1769215019.221:764): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 158.159376] audit: type=1325 audit(1769215019.226:765): table=nat:142 family=2 entries=35 op=nft_register_chain pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.162471] audit: type=1300 audit(1769215019.226:765): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffb4c07bd0 a2=0 a3=7fffb4c07bbc items=0 ppid=3611 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.162657] audit: type=1327 audit(1769215019.226:765): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:37:00 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:37:00 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:37:01 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 This is ip-172-31-20-70 (Linux x86_64 6.12.66-flatcar) 00:37:01 SSH host key: SHA256:brp/VMJKGjSGaaGRD/ch59c+KHVAyxAn5oTzqA5kFwg (RSA) SSH host key: SHA256:DMiL1owpHmSY9RXQNlBGJQA0A8MZsI1KGhhNDeUiN2w (ED25519) SSH host key: SHA256:4O8CsAkc/hFFgg88qqhOXX79V5FTRgBrdeepsubpSMs (ECDSA) eth0: 172.31.20.70 fe80::4d1:45ff:fec1:5f47 ip-172-31-20-70 login: [ 163.222478] audit: type=1130 audit(1769215024.296:766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.70:22-20.161.92.111:52682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.772353] audit: type=1101 audit(1769215024.846:767): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.778890] audit: type=1103 audit(1769215024.848:768): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.784568] audit: type=1006 audit(1769215024.848:769): pid=5547 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 163.787752] audit: type=1300 audit(1769215024.848:769): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffb5e3ba30 a2=3 a3=0 items=0 ppid=1 pid=5547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.793734] audit: type=1327 audit(1769215024.848:769): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 163.812468] audit: type=1105 audit(1769215024.886:770): pid=5547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.818976] audit: type=1103 audit(1769215024.888:771): pid=5551 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.913558] audit: type=1106 audit(1769215025.987:772): pid=5547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.920542] audit: type=1104 audit(1769215025.987:773): pid=5547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 169.990754] kauditd_printk_skb: 7 callbacks suppressed [ 169.990759] audit: type=1130 audit(1769215031.064:777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.70:22-20.161.92.111:52696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.443005] audit: type=1101 audit(1769215031.517:778): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.448325] audit: type=1103 audit(1769215031.518:779): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.454951] audit: type=1006 audit(1769215031.518:780): pid=5577 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 170.459165] audit: type=1300 audit(1769215031.518:780): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffefdff5d80 a2=3 a3=0 items=0 ppid=1 pid=5577 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.465460] audit: type=1327 audit(1769215031.518:780): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.473141] audit: type=1105 audit(1769215031.547:781): pid=5577 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.481230] audit: type=1103 audit(1769215031.555:782): pid=5581 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.820636] audit: type=1106 audit(1769215031.892:783): pid=5577 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.826871] audit: type=1104 audit(1769215031.893:784): pid=5577 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.919414] kauditd_printk_skb: 1 callbacks suppressed [ 175.919417] audit: type=1130 audit(1769215036.993:786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.70:22-20.161.92.111:44910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.388961] audit: type=1101 audit(1769215037.463:787): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.395519] audit: type=1103 audit(1769215037.464:788): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.400591] audit: type=1006 audit(1769215037.464:789): pid=5596 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 176.403426] audit: type=1300 audit(1769215037.464:789): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff311cf850 a2=3 a3=0 items=0 ppid=1 pid=5596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.408972] audit: type=1327 audit(1769215037.464:789): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 176.429517] audit: type=1105 audit(1769215037.502:790): pid=5596 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.443928] audit: type=1103 audit(1769215037.512:791): pid=5600 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.758016] audit: type=1106 audit(1769215037.832:792): pid=5596 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.765678] audit: type=1104 audit(1769215037.832:793): pid=5596 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 183.848477] kauditd_printk_skb: 23 callbacks suppressed [ 183.848481] audit: type=1130 audit(1769215044.922:813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.70:22-20.161.92.111:52662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.403811] audit: type=1101 audit(1769215045.477:814): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.410483] audit: type=1103 audit(1769215045.484:815): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.416202] audit: type=1006 audit(1769215045.484:816): pid=5676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 184.419469] audit: type=1300 audit(1769215045.484:816): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc990aee60 a2=3 a3=0 items=0 ppid=1 pid=5676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.425518] audit: type=1327 audit(1769215045.484:816): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.445157] audit: type=1105 audit(1769215045.519:817): pid=5676 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.454228] audit: type=1103 audit(1769215045.528:818): pid=5680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.873203] audit: type=1106 audit(1769215045.946:819): pid=5676 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.880717] audit: type=1104 audit(1769215045.947:820): pid=5676 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 188.931188] kauditd_printk_skb: 46 callbacks suppressed [ 188.931192] audit: type=1130 audit(1769215050.005:853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.70:22-20.161.92.111:52686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.377758] audit: type=1101 audit(1769215050.451:854): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.386256] audit: type=1103 audit(1769215050.451:855): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.400420] audit: type=1006 audit(1769215050.454:856): pid=5743 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 189.407816] audit: type=1300 audit(1769215050.454:856): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeac2c4770 a2=3 a3=0 items=0 ppid=1 pid=5743 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.416808] audit: type=1327 audit(1769215050.454:856): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 189.420920] audit: type=1105 audit(1769215050.495:857): pid=5743 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.427771] audit: type=1103 audit(1769215050.501:858): pid=5755 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.693647] audit: type=1106 audit(1769215050.767:859): pid=5743 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.700225] audit: type=1104 audit(1769215050.767:860): pid=5743 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 194.243860] kauditd_printk_skb: 1 callbacks suppressed [ 194.243863] audit: type=1325 audit(1769215055.317:862): table=filter:149 family=2 entries=26 op=nft_register_rule pid=5767 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 194.247989] audit: type=1300 audit(1769215055.317:862): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc911a81e0 a2=0 a3=7ffc911a81cc items=0 ppid=3611 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.254893] audit: type=1327 audit(1769215055.317:862): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 194.257655] audit: type=1325 audit(1769215055.323:863): table=nat:150 family=2 entries=104 op=nft_register_chain pid=5767 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 194.260646] audit: type=1300 audit(1769215055.323:863): arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffc911a81e0 a2=0 a3=7ffc911a81cc items=0 ppid=3611 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.270023] audit: type=1327 audit(1769215055.323:863): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 194.779940] audit: type=1130 audit(1769215055.853:864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.70:22-20.161.92.111:43244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.226478] audit: type=1101 audit(1769215056.300:865): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 195.232870] audit: type=1103 audit(1769215056.303:866): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 195.238685] audit: type=1006 audit(1769215056.303:867): pid=5769 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 200.623791] kauditd_printk_skb: 7 callbacks suppressed [ 200.623795] audit: type=1130 audit(1769215061.697:873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.70:22-20.161.92.111:43256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.077487] audit: type=1101 audit(1769215062.151:874): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 201.082952] audit: type=1103 audit(1769215062.152:875): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 201.088046] audit: type=1006 audit(1769215062.153:876): pid=5788 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 201.091364] audit: type=1300 audit(1769215062.153:876): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffccab5e2e0 a2=3 a3=0 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.096983] audit: type=1327 audit(1769215062.153:876): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 201.103065] audit: type=1105 audit(1769215062.177:877): pid=5788 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 201.110314] audit: type=1103 audit(1769215062.180:878): pid=5792 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 201.382935] audit: type=1106 audit(1769215062.457:879): pid=5788 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 201.389967] audit: type=1104 audit(1769215062.457:880): pid=5788 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success'