n [SLPF] [ 18.530389] mousedev: PS/2 mouse device common for all mice [ 18.706381] loop5: detected capacity change from 0 to 73176 [ 18.727513] loop6: detected capacity change from 0 to 50784 [ 18.747309] loop7: detected capacity change from 0 to 219192 [ 18.779698] loop1: detected capacity change from 0 to 111560 [ 18.957647] zram_generator::config[1569]: No configuration found. [ 19.467342] zram_generator::config[1706]: No configuration found. [ 23.449426] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 23.481698] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/03/12 02:02:44Z: Amazon SSM Agent v3.3.0.0 is running 2026/03/12 02:02:44Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/03/12 02:02:44Z: OsVersion: 4593.1.0 [!p]104[?7h This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:02:47 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:02:47 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: [ 34.636702] kauditd_printk_skb: 145 callbacks suppressed [ 34.636706] audit: type=1305 audit(1773280973.654:239): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 34.639600] audit: type=1300 audit(1773280973.654:239): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd8f279e90 a2=420 a3=0 items=0 ppid=2195 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 34.643851] audit: type=1327 audit(1773280973.654:239): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 34.645807] audit: type=1130 audit(1773280973.657:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.648707] audit: type=1131 audit(1773280973.657:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.651709] audit: type=1106 audit(1773280973.661:242): pid=2189 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 34.655047] audit: type=1104 audit(1773280973.661:243): pid=2189 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 34.731115] audit: type=1106 audit(1773280973.748:244): pid=2184 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 34.737590] audit: type=1104 audit(1773280973.749:245): pid=2184 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 34.743135] audit: type=1131 audit(1773280973.751:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.26.194:22-20.161.92.111:49574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 38.057083] Initializing XFRM netlink socket This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:02:58 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:02:58 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: [ 40.561145] kauditd_printk_skb: 132 callbacks suppressed [ 40.561149] audit: type=1130 audit(1773280979.579:297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.626001] audit: type=1131 audit(1773280979.643:298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 51.107444] audit: type=1130 audit(1773280990.125:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 51.219994] audit: type=1131 audit(1773280990.237:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 53.285521] audit: type=1130 audit(1773280992.303:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.294119] audit: type=1131 audit(1773280992.303:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.477528] zram_generator::config[2755]: No configuration found. [ 53.792118] audit: type=1334 audit(1773280992.807:303): prog-id=70 op=LOAD [ 53.793473] audit: type=1334 audit(1773280992.807:304): prog-id=60 op=UNLOAD [ 53.799151] audit: type=1334 audit(1773280992.807:305): prog-id=71 op=LOAD [ 53.800497] audit: type=1334 audit(1773280992.807:306): prog-id=72 op=LOAD [ 53.803125] audit: type=1334 audit(1773280992.807:307): prog-id=61 op=UNLOAD [ 53.805941] audit: type=1334 audit(1773280992.807:308): prog-id=62 op=UNLOAD [ 56.350021] kauditd_printk_skb: 146 callbacks suppressed [ 56.350025] audit: type=1334 audit(1773280995.367:389): prog-id=108 op=LOAD [ 56.354238] audit: type=1334 audit(1773280995.371:390): prog-id=109 op=LOAD [ 56.355586] audit: type=1300 audit(1773280995.371:390): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=2883 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 56.362982] audit: type=1327 audit(1773280995.371:390): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666538316233353061626261623834353839383435616361663737 [ 56.368721] audit: type=1334 audit(1773280995.372:391): prog-id=109 op=UNLOAD [ 56.375571] audit: type=1300 audit(1773280995.372:391): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2883 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 56.385679] audit: type=1327 audit(1773280995.372:391): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666538316233353061626261623834353839383435616361663737 [ 56.391725] audit: type=1334 audit(1773280995.379:392): prog-id=110 op=LOAD [ 56.393651] audit: type=1300 audit(1773280995.379:392): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=2883 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 56.399804] audit: type=1327 audit(1773280995.379:392): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666538316233353061626261623834353839383435616361663737 [ 63.221940] zram_generator::config[3157]: No configuration found. [ 63.566851] kauditd_printk_skb: 56 callbacks suppressed [ 63.566855] audit: type=1131 audit(1773281002.584:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.577113] audit: type=1334 audit(1773281002.593:414): prog-id=123 op=LOAD [ 63.578386] audit: type=1334 audit(1773281002.593:415): prog-id=82 op=UNLOAD [ 63.578960] audit: type=1334 audit(1773281002.596:416): prog-id=124 op=LOAD [ 63.589110] audit: type=1334 audit(1773281002.605:417): prog-id=70 op=UNLOAD [ 63.590552] audit: type=1334 audit(1773281002.605:418): prog-id=125 op=LOAD [ 63.591989] audit: type=1334 audit(1773281002.605:419): prog-id=126 op=LOAD [ 63.593495] audit: type=1334 audit(1773281002.605:420): prog-id=71 op=UNLOAD [ 63.594892] audit: type=1334 audit(1773281002.605:421): prog-id=72 op=UNLOAD [ 63.596433] audit: type=1334 audit(1773281002.606:422): prog-id=127 op=LOAD [ 68.597552] kauditd_printk_skb: 37 callbacks suppressed [ 68.597556] audit: type=1106 audit(1773281007.615:460): pid=2228 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 68.603149] audit: type=1104 audit(1773281007.617:461): pid=2228 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 68.683492] audit: type=1106 audit(1773281007.701:462): pid=2223 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 68.689991] audit: type=1104 audit(1773281007.701:463): pid=2223 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 68.694954] audit: type=1131 audit(1773281007.703:464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.194:22-20.161.92.111:49586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.792199] audit: type=1334 audit(1773281010.810:465): prog-id=143 op=LOAD [ 71.794611] audit: type=1334 audit(1773281010.810:466): prog-id=144 op=LOAD [ 71.796194] audit: type=1300 audit(1773281010.810:466): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0238 a2=98 a3=0 items=0 ppid=3486 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.802313] audit: type=1327 audit(1773281010.810:466): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234376130623366383561616166613532303537333336313737633564 [ 71.808201] audit: type=1334 audit(1773281010.810:467): prog-id=144 op=UNLOAD [ 76.208056] kauditd_printk_skb: 76 callbacks suppressed [ 76.208060] audit: type=1325 audit(1773281015.225:494): table=mangle:54 family=2 entries=1 op=nft_register_chain pid=3685 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 76.216029] audit: type=1300 audit(1773281015.225:494): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd661a4d50 a2=0 a3=7ffd661a4d3c items=0 ppid=3582 pid=3685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.222877] audit: type=1327 audit(1773281015.225:494): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 76.226793] audit: type=1325 audit(1773281015.233:495): table=mangle:55 family=10 entries=1 op=nft_register_chain pid=3687 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 76.233759] audit: type=1300 audit(1773281015.233:495): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc8eee3520 a2=0 a3=7ffc8eee350c items=0 ppid=3582 pid=3687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.240305] audit: type=1327 audit(1773281015.233:495): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 76.243564] audit: type=1325 audit(1773281015.233:496): table=nat:56 family=2 entries=1 op=nft_register_chain pid=3688 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 76.247334] audit: type=1300 audit(1773281015.233:496): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc031f5360 a2=0 a3=7ffc031f534c items=0 ppid=3582 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.254333] audit: type=1327 audit(1773281015.233:496): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 76.258529] audit: type=1325 audit(1773281015.236:497): table=filter:57 family=2 entries=1 op=nft_register_chain pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 82.532935] kauditd_printk_skb: 143 callbacks suppressed [ 82.532940] audit: type=1334 audit(1773281021.550:545): prog-id=161 op=LOAD [ 82.536820] audit: type=1334 audit(1773281021.554:546): prog-id=162 op=LOAD [ 82.538329] audit: type=1300 audit(1773281021.554:546): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3486 pid=3808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.543522] audit: type=1327 audit(1773281021.554:546): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261613863336537376438343466373564376333316663393139616532 [ 82.549184] audit: type=1334 audit(1773281021.554:547): prog-id=162 op=UNLOAD [ 82.550631] audit: type=1300 audit(1773281021.554:547): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3486 pid=3808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.556265] audit: type=1327 audit(1773281021.554:547): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261613863336537376438343466373564376333316663393139616532 [ 82.563193] audit: type=1334 audit(1773281021.554:548): prog-id=163 op=LOAD [ 82.564627] audit: type=1300 audit(1773281021.554:548): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3486 pid=3808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.570563] audit: type=1327 audit(1773281021.554:548): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261613863336537376438343466373564376333316663393139616532 [ 92.236364] kauditd_printk_skb: 122 callbacks suppressed [ 92.236368] audit: type=1334 audit(1773281031.254:597): prog-id=189 op=LOAD [ 92.238644] audit: type=1300 audit(1773281031.254:597): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc655acde0 a2=74 a3=7ffc655acde0 items=0 ppid=4034 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.244148] audit: type=1327 audit(1773281031.254:597): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.246245] audit: type=1334 audit(1773281031.254:598): prog-id=189 op=UNLOAD [ 92.247515] audit: type=1300 audit(1773281031.254:598): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffc655acde0 a2=74 a3=7ffc655acde0 items=0 ppid=4034 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.252936] audit: type=1327 audit(1773281031.254:598): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.255104] audit: type=1334 audit(1773281031.254:599): prog-id=190 op=LOAD [ 92.256373] audit: type=1300 audit(1773281031.254:599): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc655abe60 a2=90 a3=2 items=0 ppid=4034 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.261666] audit: type=1327 audit(1773281031.254:599): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.263821] audit: type=1334 audit(1773281031.254:600): prog-id=190 op=UNLOAD This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:03:55 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:03:55 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:03:56 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:03:56 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:03:57 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:03:57 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: [ 100.425681] NET: Registered PF_ALG protocol family [ 100.431786] kauditd_printk_skb: 5660 callbacks suppressed [ 100.431789] audit: type=1334 audit(1773281039.449:2487): prog-id=1134 op=LOAD [ 100.434659] audit: type=1300 audit(1773281039.449:2487): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc8fcb27c0 a2=74 a3=7ffc8fcb27c0 items=0 ppid=4160 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 100.439986] audit: type=1327 audit(1773281039.449:2487): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 100.445225] audit: type=1334 audit(1773281039.449:2488): prog-id=1134 op=UNLOAD [ 100.446508] audit: type=1300 audit(1773281039.449:2488): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc8fcb27c0 a2=74 a3=7ffc8fcb27c0 items=0 ppid=4160 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 100.452094] audit: type=1327 audit(1773281039.449:2488): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 100.456489] audit: type=1334 audit(1773281039.449:2489): prog-id=1135 op=LOAD [ 100.457838] audit: type=1300 audit(1773281039.449:2489): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc8fcb2750 a2=80 a3=0 items=0 ppid=4160 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 100.463446] audit: type=1327 audit(1773281039.449:2489): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 100.469136] audit: type=1334 audit(1773281039.449:2490): prog-id=1135 op=UNLOAD [ 102.209392] eth0: renamed from tmp1cde7 [ 102.532363] eth0: renamed from tmpe76c8 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:04:03 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:04:03 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:04:04 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:04:04 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: [ 106.494884] kauditd_printk_skb: 323 callbacks suppressed [ 106.494888] audit: type=1334 audit(1773281045.512:2598): prog-id=1172 op=LOAD [ 106.498725] audit: type=1300 audit(1773281045.512:2598): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe54773160 a2=74 a3=7ffe54773160 items=0 ppid=4034 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 106.504226] audit: type=1327 audit(1773281045.512:2598): proctitle=74630066696C746572007265706C61636500646576006C786366306663663739626437373700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323737375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 106.508375] audit: type=1334 audit(1773281045.512:2599): prog-id=1172 op=UNLOAD [ 106.509527] audit: type=1300 audit(1773281045.512:2599): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe54773160 a2=74 a3=7ffe54773160 items=0 ppid=4034 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 106.516130] audit: type=1327 audit(1773281045.512:2599): proctitle=74630066696C746572007265706C61636500646576006C786366306663663739626437373700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323737375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 106.520421] audit: type=1334 audit(1773281045.512:2600): prog-id=1173 op=LOAD [ 106.521658] audit: type=1300 audit(1773281045.512:2600): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe547730f0 a2=80 a3=0 items=0 ppid=4034 pid=4540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 106.526753] audit: type=1327 audit(1773281045.512:2600): proctitle=74630066696C746572007265706C61636500646576006C786366306663663739626437373700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323737375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 106.530955] audit: type=1334 audit(1773281045.512:2601): prog-id=1173 op=UNLOAD [ 118.400305] kauditd_printk_skb: 468 callbacks suppressed [ 118.400310] audit: type=1325 audit(1773281057.418:2760): table=filter:157 family=2 entries=11 op=nft_register_rule pid=4711 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 118.404688] audit: type=1300 audit(1773281057.418:2760): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd88c486e0 a2=0 a3=7ffd88c486cc items=0 ppid=3582 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.411700] audit: type=1327 audit(1773281057.418:2760): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 118.416208] audit: type=1325 audit(1773281057.433:2761): table=nat:158 family=2 entries=33 op=nft_register_chain pid=4711 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 118.418960] audit: type=1300 audit(1773281057.433:2761): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffd88c486e0 a2=0 a3=7ffd88c486cc items=0 ppid=3582 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.424748] audit: type=1327 audit(1773281057.433:2761): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 118.855455] audit: type=1130 audit(1773281057.873:2762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.194:22-20.161.92.111:58758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 119.351861] audit: type=1101 audit(1773281058.369:2763): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 119.358182] audit: type=1103 audit(1773281058.372:2764): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 119.363822] audit: type=1006 audit(1773281058.372:2765): pid=4713 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 125.317664] kauditd_printk_skb: 13 callbacks suppressed [ 125.317668] audit: type=1130 audit(1773281064.335:2773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.194:22-20.161.92.111:34884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 125.756620] audit: type=1101 audit(1773281064.774:2774): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 125.763922] audit: type=1103 audit(1773281064.774:2775): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 125.769409] audit: type=1006 audit(1773281064.774:2776): pid=4742 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 125.772617] audit: type=1300 audit(1773281064.774:2776): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff8ace36e0 a2=3 a3=0 items=0 ppid=1 pid=4742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.778141] audit: type=1327 audit(1773281064.774:2776): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 125.788355] audit: type=1105 audit(1773281064.806:2777): pid=4742 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 125.795747] audit: type=1103 audit(1773281064.813:2778): pid=4746 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 126.081127] audit: type=1106 audit(1773281065.098:2779): pid=4742 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 126.088737] audit: type=1104 audit(1773281065.099:2780): pid=4742 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 131.171501] kauditd_printk_skb: 1 callbacks suppressed [ 131.171505] audit: type=1130 audit(1773281070.189:2782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.194:22-20.161.92.111:59496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.612510] audit: type=1101 audit(1773281070.630:2783): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 131.619433] audit: type=1103 audit(1773281070.632:2784): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 131.625255] audit: type=1006 audit(1773281070.632:2785): pid=4759 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 131.628418] audit: type=1300 audit(1773281070.632:2785): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe69f7f780 a2=3 a3=0 items=0 ppid=1 pid=4759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.635297] audit: type=1327 audit(1773281070.632:2785): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 131.641455] audit: type=1105 audit(1773281070.659:2786): pid=4759 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 131.648417] audit: type=1103 audit(1773281070.662:2787): pid=4763 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 131.929138] audit: type=1106 audit(1773281070.946:2788): pid=4759 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 131.935536] audit: type=1104 audit(1773281070.946:2789): pid=4759 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 137.013115] kauditd_printk_skb: 1 callbacks suppressed [ 137.013119] audit: type=1130 audit(1773281076.030:2791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.26.194:22-20.161.92.111:59504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 137.454196] audit: type=1101 audit(1773281076.472:2792): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 137.460490] audit: type=1103 audit(1773281076.474:2793): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 137.465706] audit: type=1006 audit(1773281076.474:2794): pid=4778 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 137.468998] audit: type=1300 audit(1773281076.474:2794): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcfebf8fd0 a2=3 a3=0 items=0 ppid=1 pid=4778 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.475117] audit: type=1327 audit(1773281076.474:2794): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 137.483119] audit: type=1105 audit(1773281076.500:2795): pid=4778 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 137.489999] audit: type=1103 audit(1773281076.503:2796): pid=4782 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 137.770328] audit: type=1106 audit(1773281076.787:2797): pid=4778 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 137.777320] audit: type=1104 audit(1773281076.787:2798): pid=4778 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 144.645680] kauditd_printk_skb: 23 callbacks suppressed [ 144.645684] audit: type=1130 audit(1773281083.663:2818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.194:22-20.161.92.111:50890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.083040] audit: type=1101 audit(1773281084.100:2819): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 145.089132] audit: type=1103 audit(1773281084.103:2820): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 145.094605] audit: type=1006 audit(1773281084.103:2821): pid=4823 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 145.097785] audit: type=1300 audit(1773281084.103:2821): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd6bb83990 a2=3 a3=0 items=0 ppid=1 pid=4823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.103889] audit: type=1327 audit(1773281084.103:2821): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 145.115472] audit: type=1105 audit(1773281084.133:2822): pid=4823 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 145.122267] audit: type=1103 audit(1773281084.135:2823): pid=4827 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 145.391948] audit: type=1106 audit(1773281084.409:2824): pid=4823 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 145.399654] audit: type=1104 audit(1773281084.410:2825): pid=4823 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 150.482536] kauditd_printk_skb: 1 callbacks suppressed [ 150.482540] audit: type=1130 audit(1773281089.500:2827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.26.194:22-20.161.92.111:50904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.937145] audit: type=1101 audit(1773281089.955:2828): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 150.943320] audit: type=1103 audit(1773281089.957:2829): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 150.948791] audit: type=1006 audit(1773281089.957:2830): pid=4840 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 150.952048] audit: type=1300 audit(1773281089.957:2830): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffd8ff11f0 a2=3 a3=0 items=0 ppid=1 pid=4840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.958118] audit: type=1327 audit(1773281089.957:2830): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 150.969416] audit: type=1105 audit(1773281089.987:2831): pid=4840 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 150.976880] audit: type=1103 audit(1773281089.994:2832): pid=4844 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 151.273270] audit: type=1106 audit(1773281090.291:2833): pid=4840 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 151.280754] audit: type=1104 audit(1773281090.291:2834): pid=4840 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.865598] kauditd_printk_skb: 13 callbacks suppressed [ 155.865602] audit: type=1101 audit(1773281094.883:2846): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.872974] audit: type=1103 audit(1773281094.884:2847): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.880108] audit: type=1006 audit(1773281094.884:2848): pid=4871 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 155.883793] audit: type=1300 audit(1773281094.884:2848): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffedfe65ef0 a2=3 a3=0 items=0 ppid=1 pid=4871 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.889527] audit: type=1327 audit(1773281094.884:2848): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 155.895775] audit: type=1105 audit(1773281094.913:2849): pid=4871 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.902583] audit: type=1103 audit(1773281094.916:2850): pid=4875 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 156.948589] audit: type=1325 audit(1773281095.966:2851): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4885 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 156.951741] audit: type=1300 audit(1773281095.966:2851): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd13747c20 a2=0 a3=7ffd13747c0c items=0 ppid=3582 pid=4885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.957780] audit: type=1327 audit(1773281095.966:2851): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 163.619236] kauditd_printk_skb: 34 callbacks suppressed [ 163.619239] audit: type=1325 audit(1773281102.637:2876): table=filter:165 family=2 entries=20 op=nft_register_rule pid=4922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 163.623231] audit: type=1300 audit(1773281102.637:2876): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe09baa120 a2=0 a3=7ffe09baa10c items=0 ppid=3582 pid=4922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.629339] audit: type=1327 audit(1773281102.637:2876): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 163.632177] audit: type=1325 audit(1773281102.647:2877): table=nat:166 family=2 entries=102 op=nft_register_chain pid=4922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 163.635140] audit: type=1300 audit(1773281102.647:2877): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffe09baa120 a2=0 a3=7ffe09baa10c items=0 ppid=3582 pid=4922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.641113] audit: type=1327 audit(1773281102.647:2877): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 164.060623] audit: type=1130 audit(1773281103.078:2878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.194:22-20.161.92.111:54786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.508719] audit: type=1101 audit(1773281103.526:2879): pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.514996] audit: type=1103 audit(1773281103.528:2880): pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.521321] audit: type=1006 audit(1773281103.528:2881): pid=4924 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 169.916042] kauditd_printk_skb: 7 callbacks suppressed [ 169.916046] audit: type=1130 audit(1773281108.933:2887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.194:22-20.161.92.111:54788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.390432] audit: type=1101 audit(1773281109.408:2888): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.396548] audit: type=1103 audit(1773281109.409:2889): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.402318] audit: type=1006 audit(1773281109.409:2890): pid=4942 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 170.405624] audit: type=1300 audit(1773281109.409:2890): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffff2a88d0 a2=3 a3=0 items=0 ppid=1 pid=4942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.411758] audit: type=1327 audit(1773281109.409:2890): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.420498] audit: type=1105 audit(1773281109.438:2891): pid=4942 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.427463] audit: type=1103 audit(1773281109.440:2892): pid=4946 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.699362] audit: type=1106 audit(1773281109.717:2893): pid=4942 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.707459] audit: type=1104 audit(1773281109.717:2894): pid=4942 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:05:13 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:05:13 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: [ 175.393955] kauditd_printk_skb: 17 callbacks suppressed [ 175.393960] audit: type=1106 audit(1773281114.411:2910): pid=4958 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.403008] audit: type=1104 audit(1773281114.412:2911): pid=4958 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.407775] audit: type=1131 audit(1773281114.415:2912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.26.194:22-20.161.92.111:54800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.484131] audit: type=1130 audit(1773281114.501:2913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.194:22-20.161.92.111:44682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.944207] audit: type=1101 audit(1773281114.962:2914): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.950182] audit: type=1103 audit(1773281114.962:2915): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.955556] audit: type=1006 audit(1773281114.962:2916): pid=5110 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 175.958591] audit: type=1300 audit(1773281114.962:2916): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffefaf18070 a2=3 a3=0 items=0 ppid=1 pid=5110 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.964408] audit: type=1327 audit(1773281114.962:2916): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.982641] audit: type=1105 audit(1773281115.000:2917): pid=5110 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 180.719394] kauditd_printk_skb: 109 callbacks suppressed [ 180.719398] audit: type=1334 audit(1773281119.737:2971): prog-id=1288 op=LOAD [ 180.722311] audit: type=1334 audit(1773281119.740:2972): prog-id=1289 op=LOAD [ 180.723776] audit: type=1300 audit(1773281119.740:2972): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a8238 a2=98 a3=0 items=0 ppid=5142 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.729492] audit: type=1327 audit(1773281119.740:2972): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665663233396433633433613461363261316164633136376532306162 [ 180.735301] audit: type=1334 audit(1773281119.740:2973): prog-id=1289 op=UNLOAD [ 180.737668] audit: type=1300 audit(1773281119.740:2973): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5142 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.743436] audit: type=1327 audit(1773281119.740:2973): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665663233396433633433613461363261316164633136376532306162 [ 180.749568] audit: type=1334 audit(1773281119.740:2974): prog-id=1290 op=LOAD [ 180.751222] audit: type=1300 audit(1773281119.740:2974): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a8488 a2=98 a3=0 items=0 ppid=5142 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.757289] audit: type=1327 audit(1773281119.740:2974): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665663233396433633433613461363261316164633136376532306162 [ 182.532792] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 185.730076] kauditd_printk_skb: 6104 callbacks suppressed [ 185.730080] audit: type=1325 audit(1773281124.747:5013): table=filter:265 family=2 entries=1 op=nft_unregister_chain pid=5882 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 185.733871] audit: type=1300 audit(1773281124.747:5013): arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc95d35d60 a2=0 a3=7ffc95d35d4c items=0 ppid=5379 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 185.739470] audit: type=1327 audit(1773281124.747:5013): proctitle=69707461626C6573002D770035002D740066696C746572002D58004F4C445F43494C49554D5F494E505554 [ 185.747947] audit: type=1325 audit(1773281124.765:5014): table=filter:266 family=2 entries=1 op=nft_unregister_chain pid=5886 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 185.750757] audit: type=1300 audit(1773281124.765:5014): arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe81742170 a2=0 a3=7ffe8174215c items=0 ppid=5379 pid=5886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 185.756344] audit: type=1327 audit(1773281124.765:5014): proctitle=69707461626C6573002D770035002D740066696C746572002D58004F4C445F43494C49554D5F4F5554505554 [ 185.765682] audit: type=1325 audit(1773281124.783:5015): table=raw:267 family=2 entries=1 op=nft_unregister_chain pid=5890 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 185.768570] audit: type=1300 audit(1773281124.783:5015): arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe12bc4ea0 a2=0 a3=7ffe12bc4e8c items=0 ppid=5379 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 185.774299] audit: type=1327 audit(1773281124.783:5015): proctitle=69707461626C6573002D770035002D7400726177002D58004F4C445F43494C49554D5F4F55545055545F726177 [ 185.779692] audit: type=1325 audit(1773281124.797:5016): table=nat:268 family=2 entries=1 op=nft_unregister_chain pid=5894 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:05:27 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 This is ip-172-31-26-194 (Linux x86_64 6.12.74-flatcar) 02:05:27 SSH host key: SHA256:8lTd/lfzTuwKdXgyIS+Q7eUSPMjTK2ebdSrx4Z5SKRM (ECDSA) SSH host key: SHA256:BREWlqLQbpg2eGRQDMetkCfSJ0W5Bkz3Hs7o3rvbKh4 (ED25519) SSH host key: SHA256:y2doV023jcVCuhntIVDyamrPkFg4FYgvdH/Wee1O00o (RSA) eth0: 172.31.26.194 fe80::4a3:72ff:fe4e:5645 ip-172-31-26-194 login: [ 191.317382] kauditd_printk_skb: 460 callbacks suppressed [ 191.317387] audit: type=1334 audit(1773281130.335:5177): prog-id=2335 op=LOAD [ 191.320409] audit: type=1300 audit(1773281130.335:5177): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd59fbfb50 a2=74 a3=7ffd59fbfb50 items=0 ppid=5379 pid=6017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 191.326403] audit: type=1327 audit(1773281130.335:5177): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003535305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 191.331370] audit: type=1334 audit(1773281130.335:5178): prog-id=2335 op=UNLOAD [ 191.332880] audit: type=1300 audit(1773281130.335:5178): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd59fbfb50 a2=74 a3=7ffd59fbfb50 items=0 ppid=5379 pid=6017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 191.338050] audit: type=1327 audit(1773281130.335:5178): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003535305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 191.342005] audit: type=1334 audit(1773281130.335:5179): prog-id=2336 op=LOAD [ 191.343361] audit: type=1300 audit(1773281130.335:5179): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd59fbfae0 a2=80 a3=0 items=0 ppid=5379 pid=6017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 191.348494] audit: type=1327 audit(1773281130.335:5179): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003535305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 191.352529] audit: type=1334 audit(1773281130.335:5180): prog-id=2336 op=UNLOAD [ 207.335005] kauditd_printk_skb: 131 callbacks suppressed [ 207.335008] audit: type=1334 audit(1773281146.352:5228): prog-id=2359 op=LOAD [ 207.338217] audit: type=1334 audit(1773281146.352:5229): prog-id=98 op=UNLOAD [ 207.339747] audit: type=1334 audit(1773281146.355:5230): prog-id=108 op=UNLOAD [ 207.341421] audit: type=1334 audit(1773281146.355:5231): prog-id=112 op=UNLOAD [ 207.780630] audit: type=1334 audit(1773281146.798:5232): prog-id=2360 op=LOAD [ 207.783036] audit: type=1334 audit(1773281146.800:5233): prog-id=2361 op=LOAD [ 207.784856] audit: type=1300 audit(1773281146.800:5233): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=2883 pid=6065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.790063] audit: type=1327 audit(1773281146.800:5233): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339303835653063646435333038616261636131313066336333346335 [ 207.795370] audit: type=1334 audit(1773281146.800:5234): prog-id=2361 op=UNLOAD [ 207.797053] audit: type=1300 audit(1773281146.800:5234): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2883 pid=6065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 229.745392] kauditd_printk_skb: 42 callbacks suppressed [ 229.745396] audit: type=1106 audit(1773281168.763:5252): pid=2121 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 229.753651] audit: type=1104 audit(1773281168.763:5253): pid=2121 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 229.758681] audit: type=1131 audit(1773281168.768:5254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.26.194:22-20.161.92.111:48590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'