s=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.008635] audit: type=1130 audit(1773280899.001:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.012828] audit: type=1131 audit(1773280899.001:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.018884] audit: type=1130 audit(1773280899.011:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.027136] audit: type=1131 audit(1773280899.011:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.033452] audit: type=1130 audit(1773280899.025:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.071130] audit: type=1130 audit(1773280899.062:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.080468] audit: type=1130 audit(1773280899.069:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 25.521729] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 25.539095] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/03/12 02:01:45Z: Amazon SSM Agent v3.3.0.0 is running 2026/03/12 02:01:45Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/03/12 02:01:45Z: OsVersion: 4593.1.0 [!p]104[?7h This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:01:48 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:01:48 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: [ 37.284672] kauditd_printk_skb: 11 callbacks suppressed [ 37.284677] audit: type=1305 audit(1773280915.029:245): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 37.287960] audit: type=1300 audit(1773280915.029:245): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff3c11bc80 a2=420 a3=0 items=0 ppid=2291 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 37.292548] audit: type=1327 audit(1773280915.029:245): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 37.294430] audit: type=1130 audit(1773280915.032:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 37.297414] audit: type=1131 audit(1773280915.032:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 37.300294] audit: type=1106 audit(1773280915.036:248): pid=2285 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 37.303536] audit: type=1104 audit(1773280915.037:249): pid=2285 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 37.373544] audit: type=1106 audit(1773280915.117:250): pid=2280 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 37.380817] audit: type=1104 audit(1773280915.118:251): pid=2280 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 37.386277] audit: type=1131 audit(1773280915.120:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.19.182:22-20.161.92.111:38756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.854743] Initializing XFRM netlink socket This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:01:59 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:01:59 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: [ 42.766460] kauditd_printk_skb: 132 callbacks suppressed [ 42.766464] audit: type=1130 audit(1773280920.510:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.849406] audit: type=1131 audit(1773280920.593:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 53.455205] audit: type=1130 audit(1773280931.199:305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.556114] audit: type=1131 audit(1773280931.300:306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 56.768515] audit: type=1131 audit(1773280934.513:307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.784530] audit: type=1334 audit(1773280934.529:308): prog-id=66 op=UNLOAD [ 56.848469] audit: type=1130 audit(1773280934.592:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.852979] audit: type=1131 audit(1773280934.592:310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.054876] zram_generator::config[2856]: No configuration found. [ 57.372844] audit: type=1334 audit(1773280935.115:311): prog-id=70 op=LOAD [ 57.375476] audit: type=1334 audit(1773280935.115:312): prog-id=53 op=UNLOAD [ 57.379104] audit: type=1334 audit(1773280935.115:313): prog-id=71 op=LOAD [ 57.381374] audit: type=1334 audit(1773280935.115:314): prog-id=72 op=LOAD [ 58.468474] kauditd_printk_skb: 62 callbacks suppressed [ 58.468478] audit: type=1325 audit(1773280936.212:361): table=filter:50 family=2 entries=1 op=nft_register_rule pid=2948 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 58.473463] audit: type=1300 audit(1773280936.212:361): arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe9706ec80 a2=0 a3=0 items=0 ppid=2919 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 58.482233] audit: type=1327 audit(1773280936.212:361): proctitle=69707461626C6573002D770035002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F380000002D2D737263003132372E [ 58.490541] audit: type=1325 audit(1773280936.235:362): table=mangle:51 family=2 entries=1 op=nft_register_chain pid=2950 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 58.494127] audit: type=1300 audit(1773280936.235:362): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc4da0bd50 a2=0 a3=0 items=0 ppid=2919 pid=2950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 58.500800] audit: type=1327 audit(1773280936.235:362): proctitle=69707461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 [ 58.505583] audit: type=1325 audit(1773280936.241:363): table=nat:52 family=2 entries=1 op=nft_register_chain pid=2951 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 58.508994] audit: type=1300 audit(1773280936.241:363): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff93665270 a2=0 a3=0 items=0 ppid=2919 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 58.519339] audit: type=1327 audit(1773280936.241:363): proctitle=69707461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 [ 58.522211] audit: type=1325 audit(1773280936.244:364): table=filter:53 family=2 entries=1 op=nft_register_chain pid=2952 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 64.453844] zram_generator::config[3245]: No configuration found. [ 64.829319] kauditd_printk_skb: 134 callbacks suppressed [ 64.829323] audit: type=1131 audit(1773280942.573:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.839234] audit: type=1334 audit(1773280942.583:414): prog-id=120 op=LOAD [ 64.841652] audit: type=1334 audit(1773280942.586:415): prog-id=80 op=UNLOAD [ 64.844652] audit: type=1334 audit(1773280942.589:416): prog-id=121 op=LOAD [ 64.846733] audit: type=1334 audit(1773280942.589:417): prog-id=74 op=UNLOAD [ 64.849047] audit: type=1334 audit(1773280942.589:418): prog-id=122 op=LOAD [ 64.851605] audit: type=1334 audit(1773280942.589:419): prog-id=123 op=LOAD [ 64.853810] audit: type=1334 audit(1773280942.589:420): prog-id=75 op=UNLOAD [ 64.856265] audit: type=1334 audit(1773280942.589:421): prog-id=76 op=UNLOAD [ 64.858604] audit: type=1334 audit(1773280942.596:422): prog-id=124 op=LOAD [ 70.131696] kauditd_printk_skb: 37 callbacks suppressed [ 70.131699] audit: type=1106 audit(1773280947.876:460): pid=2324 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 70.137615] audit: type=1104 audit(1773280947.880:461): pid=2324 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 70.220680] audit: type=1106 audit(1773280947.965:462): pid=2319 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 70.228391] audit: type=1104 audit(1773280947.965:463): pid=2319 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 70.234638] audit: type=1131 audit(1773280947.968:464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.19.182:22-20.161.92.111:38768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.145468] audit: type=1334 audit(1773280948.889:465): prog-id=140 op=LOAD [ 71.147465] audit: type=1334 audit(1773280948.891:466): prog-id=141 op=LOAD [ 71.149631] audit: type=1300 audit(1773280948.891:466): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3399 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.157216] audit: type=1327 audit(1773280948.891:466): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761666538656339363464653832626639376165666264386164343064 [ 71.164057] audit: type=1334 audit(1773280948.891:467): prog-id=141 op=UNLOAD [ 99.551215] kauditd_printk_skb: 251 callbacks suppressed [ 99.551218] audit: type=1334 audit(1773280977.295:553): prog-id=163 op=LOAD [ 99.554683] audit: type=1334 audit(1773280977.299:554): prog-id=164 op=LOAD [ 99.556570] audit: type=1300 audit(1773280977.299:554): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3399 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.562019] audit: type=1327 audit(1773280977.299:554): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663234376435383365633033383065306564306436353436356233 [ 99.567835] audit: type=1334 audit(1773280977.299:555): prog-id=164 op=UNLOAD [ 99.569495] audit: type=1300 audit(1773280977.299:555): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3399 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.576138] audit: type=1327 audit(1773280977.299:555): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663234376435383365633033383065306564306436353436356233 [ 99.582471] audit: type=1334 audit(1773280977.299:556): prog-id=165 op=LOAD [ 99.584194] audit: type=1300 audit(1773280977.299:556): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=3399 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.592513] audit: type=1327 audit(1773280977.299:556): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663234376435383365633033383065306564306436353436356233 [ 108.139726] kauditd_printk_skb: 100 callbacks suppressed [ 108.139730] audit: type=1334 audit(1773280985.884:597): prog-id=186 op=LOAD [ 108.142074] audit: type=1300 audit(1773280985.884:597): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc23966470 a2=74 a3=7ffc23966470 items=0 ppid=4138 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.147547] audit: type=1327 audit(1773280985.884:597): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.149609] audit: type=1334 audit(1773280985.884:598): prog-id=186 op=UNLOAD [ 108.150985] audit: type=1300 audit(1773280985.884:598): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffc23966470 a2=74 a3=7ffc23966470 items=0 ppid=4138 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.156409] audit: type=1327 audit(1773280985.884:598): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.158424] audit: type=1334 audit(1773280985.884:599): prog-id=187 op=LOAD [ 108.159647] audit: type=1300 audit(1773280985.884:599): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc239654f0 a2=90 a3=2 items=0 ppid=4138 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.164935] audit: type=1327 audit(1773280985.884:599): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.166881] audit: type=1334 audit(1773280985.884:600): prog-id=187 op=UNLOAD This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:10 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:10 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:11 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:11 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: [ 113.854092] NET: Registered PF_ALG protocol family [ 113.859510] kauditd_printk_skb: 5660 callbacks suppressed [ 113.859514] audit: type=1334 audit(1773280991.603:2472): prog-id=1131 op=LOAD [ 113.862099] audit: type=1300 audit(1773280991.603:2472): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff10dd3f90 a2=74 a3=7fff10dd3f90 items=0 ppid=4261 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.867750] audit: type=1327 audit(1773280991.603:2472): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 113.872169] audit: type=1334 audit(1773280991.604:2473): prog-id=1131 op=UNLOAD [ 113.873699] audit: type=1300 audit(1773280991.604:2473): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fff10dd3f90 a2=74 a3=7fff10dd3f90 items=0 ppid=4261 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.884002] audit: type=1327 audit(1773280991.604:2473): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 113.888298] audit: type=1334 audit(1773280991.604:2474): prog-id=1132 op=LOAD [ 113.890009] audit: type=1300 audit(1773280991.604:2474): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff10dd3f20 a2=80 a3=0 items=0 ppid=4261 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.896021] audit: type=1327 audit(1773280991.604:2474): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 113.900711] audit: type=1334 audit(1773280991.604:2475): prog-id=1132 op=UNLOAD This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:12 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:12 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: [ 115.328950] eth0: renamed from tmp04a20 [ 115.346224] eth0: renamed from tmpe56f4 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:14 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:14 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:15 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:15 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:16 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:03:16 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: [ 119.502229] kauditd_printk_skb: 323 callbacks suppressed [ 119.502235] audit: type=1334 audit(1773280997.246:2583): prog-id=1169 op=LOAD [ 119.506463] audit: type=1300 audit(1773280997.246:2583): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd8ce50fe0 a2=74 a3=7ffd8ce50fe0 items=0 ppid=4138 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.514341] audit: type=1327 audit(1773280997.246:2583): proctitle=74630066696C746572007265706C61636500646576006C786362616435326362316130343700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313034375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 119.521471] audit: type=1334 audit(1773280997.249:2584): prog-id=1169 op=UNLOAD [ 119.522858] audit: type=1300 audit(1773280997.249:2584): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd8ce50fe0 a2=74 a3=7ffd8ce50fe0 items=0 ppid=4138 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.530101] audit: type=1327 audit(1773280997.249:2584): proctitle=74630066696C746572007265706C61636500646576006C786362616435326362316130343700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313034375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 119.535118] audit: type=1334 audit(1773280997.249:2585): prog-id=1170 op=LOAD [ 119.536792] audit: type=1300 audit(1773280997.249:2585): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd8ce50f70 a2=80 a3=0 items=0 ppid=4138 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.543266] audit: type=1327 audit(1773280997.249:2585): proctitle=74630066696C746572007265706C61636500646576006C786362616435326362316130343700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313034375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 119.550458] audit: type=1334 audit(1773280997.249:2586): prog-id=1170 op=UNLOAD [ 126.439066] kauditd_printk_skb: 479 callbacks suppressed [ 126.439070] audit: type=1130 audit(1773281004.183:2754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.19.182:22-20.161.92.111:44046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 126.920784] audit: type=1101 audit(1773281004.665:2755): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 126.926736] audit: type=1103 audit(1773281004.670:2756): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 126.932178] audit: type=1006 audit(1773281004.670:2757): pid=4821 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 126.935346] audit: type=1300 audit(1773281004.670:2757): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdcb775bd0 a2=3 a3=0 items=0 ppid=1 pid=4821 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.940686] audit: type=1327 audit(1773281004.670:2757): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 126.955072] audit: type=1105 audit(1773281004.699:2758): pid=4821 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 126.962388] audit: type=1103 audit(1773281004.706:2759): pid=4825 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 127.378924] audit: type=1106 audit(1773281005.123:2760): pid=4821 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 127.391488] audit: type=1104 audit(1773281005.123:2761): pid=4821 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 131.962185] kauditd_printk_skb: 1 callbacks suppressed [ 131.962189] audit: type=1325 audit(1773281009.706:2763): table=filter:157 family=2 entries=11 op=nft_register_rule pid=4838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.968010] audit: type=1300 audit(1773281009.706:2763): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc8ab864d0 a2=0 a3=7ffc8ab864bc items=0 ppid=3550 pid=4838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.974322] audit: type=1327 audit(1773281009.706:2763): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 131.978945] audit: type=1325 audit(1773281009.723:2764): table=nat:158 family=2 entries=33 op=nft_register_chain pid=4838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.981826] audit: type=1300 audit(1773281009.723:2764): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffc8ab864d0 a2=0 a3=7ffc8ab864bc items=0 ppid=3550 pid=4838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.988557] audit: type=1327 audit(1773281009.723:2764): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 132.470745] audit: type=1130 audit(1773281010.215:2765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.19.182:22-20.161.92.111:57500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 132.915118] audit: type=1101 audit(1773281010.659:2766): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 132.921418] audit: type=1103 audit(1773281010.661:2767): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 132.927226] audit: type=1006 audit(1773281010.661:2768): pid=4840 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 138.322565] kauditd_printk_skb: 13 callbacks suppressed [ 138.322568] audit: type=1130 audit(1773281016.067:2776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.19.182:22-20.161.92.111:57516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.763657] audit: type=1101 audit(1773281016.508:2777): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 138.769942] audit: type=1103 audit(1773281016.510:2778): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 138.775557] audit: type=1006 audit(1773281016.510:2779): pid=4864 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 138.778776] audit: type=1300 audit(1773281016.510:2779): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffed4e0c960 a2=3 a3=0 items=0 ppid=1 pid=4864 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.785020] audit: type=1327 audit(1773281016.510:2779): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 138.793099] audit: type=1105 audit(1773281016.537:2780): pid=4864 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 138.799888] audit: type=1103 audit(1773281016.540:2781): pid=4868 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 139.088433] audit: type=1106 audit(1773281016.832:2782): pid=4864 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 139.095160] audit: type=1104 audit(1773281016.832:2783): pid=4864 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 145.978361] kauditd_printk_skb: 23 callbacks suppressed [ 145.978365] audit: type=1130 audit(1773281023.722:2803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.19.182:22-20.161.92.111:42742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 146.413765] audit: type=1101 audit(1773281024.158:2804): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 146.419973] audit: type=1103 audit(1773281024.159:2805): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 146.426083] audit: type=1006 audit(1773281024.160:2806): pid=4912 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 146.429580] audit: type=1300 audit(1773281024.160:2806): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd5e073370 a2=3 a3=0 items=0 ppid=1 pid=4912 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.435473] audit: type=1327 audit(1773281024.160:2806): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 146.442997] audit: type=1105 audit(1773281024.187:2807): pid=4912 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 146.449758] audit: type=1103 audit(1773281024.192:2808): pid=4916 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 146.766332] audit: type=1106 audit(1773281024.510:2809): pid=4912 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 146.774923] audit: type=1104 audit(1773281024.511:2810): pid=4912 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 151.825005] kauditd_printk_skb: 1 callbacks suppressed [ 151.825009] audit: type=1130 audit(1773281029.569:2812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.19.182:22-20.161.92.111:42752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.291936] audit: type=1101 audit(1773281030.036:2813): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 152.298458] audit: type=1103 audit(1773281030.039:2814): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 152.304898] audit: type=1006 audit(1773281030.040:2815): pid=4931 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 152.308186] audit: type=1300 audit(1773281030.040:2815): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe30e66310 a2=3 a3=0 items=0 ppid=1 pid=4931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.314205] audit: type=1327 audit(1773281030.040:2815): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 152.321892] audit: type=1105 audit(1773281030.066:2816): pid=4931 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 152.328746] audit: type=1103 audit(1773281030.069:2817): pid=4935 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 152.627786] audit: type=1106 audit(1773281030.370:2818): pid=4931 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 152.635156] audit: type=1104 audit(1773281030.370:2819): pid=4931 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 157.221553] kauditd_printk_skb: 13 callbacks suppressed [ 157.221557] audit: type=1101 audit(1773281034.966:2831): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 157.229147] audit: type=1103 audit(1773281034.968:2832): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 157.235047] audit: type=1006 audit(1773281034.968:2833): pid=4961 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 157.238406] audit: type=1300 audit(1773281034.968:2833): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff0dfc16c0 a2=3 a3=0 items=0 ppid=1 pid=4961 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.244607] audit: type=1327 audit(1773281034.968:2833): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 157.251551] audit: type=1105 audit(1773281034.996:2834): pid=4961 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 157.258375] audit: type=1103 audit(1773281034.998:2835): pid=4965 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 158.194768] audit: type=1325 audit(1773281035.938:2836): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4975 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.198674] audit: type=1300 audit(1773281035.938:2836): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff3a9e7a70 a2=0 a3=7fff3a9e7a5c items=0 ppid=3550 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.208816] audit: type=1327 audit(1773281035.938:2836): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 164.709323] kauditd_printk_skb: 34 callbacks suppressed [ 164.709328] audit: type=1325 audit(1773281042.453:2861): table=filter:165 family=2 entries=20 op=nft_register_rule pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 164.713820] audit: type=1300 audit(1773281042.453:2861): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd23d4efc0 a2=0 a3=7ffd23d4efac items=0 ppid=3550 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.721170] audit: type=1327 audit(1773281042.453:2861): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 164.723700] audit: type=1325 audit(1773281042.460:2862): table=nat:166 family=2 entries=102 op=nft_register_chain pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 164.726746] audit: type=1300 audit(1773281042.460:2862): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffd23d4efc0 a2=0 a3=7ffd23d4efac items=0 ppid=3550 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.732725] audit: type=1327 audit(1773281042.460:2862): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 165.269472] audit: type=1130 audit(1773281043.013:2863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.19.182:22-20.161.92.111:50690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.734761] audit: type=1101 audit(1773281043.479:2864): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 165.741948] audit: type=1103 audit(1773281043.481:2865): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 165.747800] audit: type=1006 audit(1773281043.481:2866): pid=5015 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 171.193825] kauditd_printk_skb: 7 callbacks suppressed [ 171.193829] audit: type=1130 audit(1773281048.938:2872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.19.182:22-20.161.92.111:50696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.652013] audit: type=1101 audit(1773281049.396:2873): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.658208] audit: type=1103 audit(1773281049.396:2874): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.663736] audit: type=1006 audit(1773281049.396:2875): pid=5031 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 171.666829] audit: type=1300 audit(1773281049.396:2875): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc98b19830 a2=3 a3=0 items=0 ppid=1 pid=5031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.673657] audit: type=1327 audit(1773281049.396:2875): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 171.687331] audit: type=1105 audit(1773281049.431:2876): pid=5031 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.696460] audit: type=1103 audit(1773281049.436:2877): pid=5035 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.982810] audit: type=1106 audit(1773281049.725:2878): pid=5031 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.989749] audit: type=1104 audit(1773281049.726:2879): pid=5031 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:04:13 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:04:13 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: [ 176.713337] kauditd_printk_skb: 17 callbacks suppressed [ 176.713341] audit: type=1106 audit(1773281054.457:2895): pid=5047 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.720886] audit: type=1104 audit(1773281054.458:2896): pid=5047 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.735207] audit: type=1131 audit(1773281054.479:2897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.19.182:22-20.161.92.111:50704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.799950] audit: type=1130 audit(1773281054.544:2898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.19.182:22-20.161.92.111:50316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.278380] audit: type=1101 audit(1773281055.022:2899): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 177.284772] audit: type=1103 audit(1773281055.024:2900): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 177.289988] audit: type=1006 audit(1773281055.024:2901): pid=5197 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 177.293281] audit: type=1300 audit(1773281055.024:2901): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdfc718cc0 a2=3 a3=0 items=0 ppid=1 pid=5197 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.299345] audit: type=1327 audit(1773281055.024:2901): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 177.315306] audit: type=1105 audit(1773281055.059:2902): pid=5197 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 182.176047] kauditd_printk_skb: 109 callbacks suppressed [ 182.176051] audit: type=1334 audit(1773281059.920:2956): prog-id=1285 op=LOAD [ 182.179775] audit: type=1334 audit(1773281059.923:2957): prog-id=1286 op=LOAD [ 182.182051] audit: type=1300 audit(1773281059.923:2957): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=5227 pid=5410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.188028] audit: type=1327 audit(1773281059.923:2957): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732306561333166313763383437613435306436386131663161353333 [ 182.194166] audit: type=1334 audit(1773281059.923:2958): prog-id=1286 op=UNLOAD [ 182.195958] audit: type=1300 audit(1773281059.923:2958): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5227 pid=5410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.202395] audit: type=1327 audit(1773281059.923:2958): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732306561333166313763383437613435306436386131663161353333 [ 182.209539] audit: type=1334 audit(1773281059.923:2959): prog-id=1287 op=LOAD [ 182.211136] audit: type=1300 audit(1773281059.923:2959): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=5227 pid=5410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.217177] audit: type=1327 audit(1773281059.923:2959): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732306561333166313763383437613435306436386131663161353333 [ 185.869163] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 187.787593] kauditd_printk_skb: 5712 callbacks suppressed [ 187.787597] audit: type=1334 audit(1773281065.532:4866): prog-id=2240 op=LOAD [ 187.790518] audit: type=1300 audit(1773281065.532:4866): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffb7020dd0 a2=74 a3=7fffb7020dd0 items=0 ppid=5613 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 187.796804] audit: type=1327 audit(1773281065.532:4866): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 187.801069] audit: type=1334 audit(1773281065.532:4867): prog-id=2240 op=UNLOAD [ 187.802506] audit: type=1300 audit(1773281065.532:4867): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fffb7020dd0 a2=74 a3=7fffb7020dd0 items=0 ppid=5613 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 187.808531] audit: type=1327 audit(1773281065.532:4867): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 187.813353] audit: type=1334 audit(1773281065.532:4868): prog-id=2241 op=LOAD [ 187.814797] audit: type=1300 audit(1773281065.532:4868): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffb7020d60 a2=80 a3=0 items=0 ppid=5613 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 187.820908] audit: type=1327 audit(1773281065.532:4868): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 187.825657] audit: type=1334 audit(1773281065.532:4869): prog-id=2241 op=UNLOAD This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:04:29 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 This is ip-172-31-19-182 (Linux x86_64 6.12.74-flatcar) 02:04:29 SSH host key: SHA256:7BKvOpnKBhGFRLaaEBt9SiOP4zuFwZdEwN7RMZNnS+0 (ECDSA) SSH host key: SHA256:XjjmAS4d4JcpxfxmK4Ip8NaECLCdlHCFLM0SqFTB8G8 (ED25519) SSH host key: SHA256:qWDpKxcF+thtsB/JD9SLumB3oVcTq0LGSEGfDqvwFMY (RSA) eth0: 172.31.19.182 fe80::434:7cff:fe60:db75 ip-172-31-19-182 login: [ 194.071904] kauditd_printk_skb: 560 callbacks suppressed [ 194.071908] audit: type=1334 audit(1773281071.816:5064): prog-id=2278 op=LOAD [ 194.074671] audit: type=1300 audit(1773281071.816:5064): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc45a6b920 a2=74 a3=7ffc45a6b920 items=0 ppid=5460 pid=6095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 194.081518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.082674] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 194.083969] audit: backlog limit exceeded [ 194.084833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.084939] audit: type=1327 audit(1773281071.816:5064): proctitle=74630066696C746572007265706C61636500646576006C786337333437663862306338303800696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323431335F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 194.085177] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 194.085179] audit: backlog limit exceeded [ 194.093423] audit: type=1334 audit(1773281071.816:5065): prog-id=2278 op=UNLOAD [ 209.223595] kauditd_printk_skb: 423 callbacks suppressed [ 209.223612] audit: type=1334 audit(1773281086.967:5211): prog-id=2356 op=LOAD [ 209.226530] audit: type=1334 audit(1773281086.968:5212): prog-id=92 op=UNLOAD [ 209.227927] audit: type=1334 audit(1773281086.968:5213): prog-id=105 op=UNLOAD [ 209.229575] audit: type=1334 audit(1773281086.968:5214): prog-id=109 op=UNLOAD [ 210.290175] audit: type=1334 audit(1773281088.034:5215): prog-id=2357 op=LOAD [ 210.291937] audit: type=1334 audit(1773281088.036:5216): prog-id=2358 op=LOAD [ 210.293564] audit: type=1300 audit(1773281088.036:5216): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000106238 a2=98 a3=0 items=0 ppid=2998 pid=6139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.299421] audit: type=1327 audit(1773281088.036:5216): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363735656664356138663066646430306565333531313830386664 [ 210.305194] audit: type=1334 audit(1773281088.036:5217): prog-id=2358 op=UNLOAD [ 210.306746] audit: type=1300 audit(1773281088.036:5217): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2998 pid=6139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.283029] kauditd_printk_skb: 20 callbacks suppressed [ 214.283033] audit: type=1334 audit(1773281092.027:5227): prog-id=2363 op=LOAD [ 214.285853] audit: type=1334 audit(1773281092.028:5228): prog-id=2364 op=LOAD [ 214.287312] audit: type=1300 audit(1773281092.028:5228): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0238 a2=98 a3=0 items=0 ppid=2982 pid=6184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.293275] audit: type=1327 audit(1773281092.028:5228): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439306332636565613466663765313338363731333431306337366161 [ 214.299341] audit: type=1334 audit(1773281092.028:5229): prog-id=2364 op=UNLOAD [ 214.301051] audit: type=1300 audit(1773281092.028:5229): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2982 pid=6184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.306833] audit: type=1327 audit(1773281092.028:5229): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439306332636565613466663765313338363731333431306337366161 [ 214.312676] audit: type=1334 audit(1773281092.028:5230): prog-id=2365 op=LOAD [ 214.319067] audit: type=1300 audit(1773281092.028:5230): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0488 a2=98 a3=0 items=0 ppid=2982 pid=6184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.325078] audit: type=1327 audit(1773281092.028:5230): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439306332636565613466663765313338363731333431306337366161