Apr 16 01:55:34.804301 kernel: Linux version 6.12.81-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 14.3.1_p20250801 p4) 14.3.1 20250801, GNU ld (Gentoo 2.45 p3) 2.45.0) #1 SMP PREEMPT_DYNAMIC Wed Apr 15 22:42:31 -00 2026
Apr 16 01:55:34.804321 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=77543e762ca6dfab934d20db249242a5a42c379ee71c92e3322ad9c526730ae8
Apr 16 01:55:34.804329 kernel: BIOS-provided physical RAM map:
Apr 16 01:55:34.804335 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable
Apr 16 01:55:34.804339 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved
Apr 16 01:55:34.804343 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000044fdfff] usable
Apr 16 01:55:34.804349 kernel: BIOS-e820: [mem 0x00000000044fe000-0x00000000048fdfff] reserved
Apr 16 01:55:34.804354 kernel: BIOS-e820: [mem 0x00000000048fe000-0x000000003ff1efff] usable
Apr 16 01:55:34.804359 kernel: BIOS-e820: [mem 0x000000003ff1f000-0x000000003ffc8fff] reserved
Apr 16 01:55:34.804365 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data
Apr 16 01:55:34.804369 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS
Apr 16 01:55:34.804374 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable
Apr 16 01:55:34.804378 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable
Apr 16 01:55:34.804383 kernel: printk: legacy bootconsole [earlyser0] enabled
Apr 16 01:55:34.804389 kernel: NX (Execute Disable) protection: active
Apr 16 01:55:34.804395 kernel: APIC: Static calls initialized
Apr 16 01:55:34.804400 kernel: efi: EFI v2.7 by Microsoft
Apr 16 01:55:34.804405 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff88000 SMBIOS 3.0=0x3ff86000 MEMATTR=0x3ea93018 RNG=0x3ffd2018 
Apr 16 01:55:34.804410 kernel: random: crng init done
Apr 16 01:55:34.804415 kernel: secureboot: Secure boot disabled
Apr 16 01:55:34.804420 kernel: SMBIOS 3.1.0 present.
Apr 16 01:55:34.804425 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 01/08/2026
Apr 16 01:55:34.804429 kernel: DMI: Memory slots populated: 2/2
Apr 16 01:55:34.804434 kernel: Hypervisor detected: Microsoft Hyper-V
Apr 16 01:55:34.804439 kernel: Hyper-V: privilege flags low 0xae7f, high 0x3b8030, hints 0x9e4e24, misc 0xe0bed7b2
Apr 16 01:55:34.804445 kernel: Hyper-V: Nested features: 0x3e0101
Apr 16 01:55:34.804450 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40
Apr 16 01:55:34.804455 kernel: Hyper-V: Using hypercall for remote TLB flush
Apr 16 01:55:34.804460 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns
Apr 16 01:55:34.804465 kernel: clocksource: hyperv_clocksource_msr: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns
Apr 16 01:55:34.804469 kernel: tsc: Detected 2300.000 MHz processor
Apr 16 01:55:34.804474 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
Apr 16 01:55:34.804480 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable
Apr 16 01:55:34.804486 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x10000000000
Apr 16 01:55:34.804493 kernel: MTRR map: 4 entries (2 fixed + 2 variable; max 18), built from 8 variable MTRRs
Apr 16 01:55:34.804498 kernel: x86/PAT: Configuration [0-7]: WB  WC  UC- UC  WB  WP  UC- WT  
Apr 16 01:55:34.804504 kernel: e820: update [mem 0x48000000-0xffffffff] usable ==> reserved
Apr 16 01:55:34.804509 kernel: last_pfn = 0x40000 max_arch_pfn = 0x10000000000
Apr 16 01:55:34.804514 kernel: Using GB pages for direct mapping
Apr 16 01:55:34.804519 kernel: ACPI: Early table checksum verification disabled
Apr 16 01:55:34.804528 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL)
Apr 16 01:55:34.804533 kernel: ACPI: XSDT 0x000000003FFF90E8 00005C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001)
Apr 16 01:55:34.804539 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001)
Apr 16 01:55:34.804544 kernel: ACPI: DSDT 0x000000003FFD6000 01E22B (v02 MSFTVM DSDT01   00000001 INTL 20230628)
Apr 16 01:55:34.804549 kernel: ACPI: FACS 0x000000003FFFE000 000040
Apr 16 01:55:34.804555 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001)
Apr 16 01:55:34.804562 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001)
Apr 16 01:55:34.804567 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001)
Apr 16 01:55:34.804572 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v05 HVLITE HVLITETB 00000000 MSHV 00000000)
Apr 16 01:55:34.804578 kernel: ACPI: SRAT 0x000000003FFD4000 0000A0 (v03 HVLITE HVLITETB 00000000 MSHV 00000000)
Apr 16 01:55:34.804583 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001)
Apr 16 01:55:34.804588 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113]
Apr 16 01:55:34.804595 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff422a]
Apr 16 01:55:34.804636 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f]
Apr 16 01:55:34.804645 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063]
Apr 16 01:55:34.804653 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f]
Apr 16 01:55:34.804662 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027]
Apr 16 01:55:34.804671 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057]
Apr 16 01:55:34.804680 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd409f]
Apr 16 01:55:34.804690 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037]
Apr 16 01:55:34.804698 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff]
Apr 16 01:55:34.804707 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff]
Apr 16 01:55:34.804717 kernel: NUMA: Node 0 [mem 0x00001000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00001000-0x2bfffffff]
Apr 16 01:55:34.804725 kernel: NODE_DATA(0) allocated [mem 0x2bfff8dc0-0x2bfffffff]
Apr 16 01:55:34.804734 kernel: Zone ranges:
Apr 16 01:55:34.804742 kernel:   DMA      [mem 0x0000000000001000-0x0000000000ffffff]
Apr 16 01:55:34.804753 kernel:   DMA32    [mem 0x0000000001000000-0x00000000ffffffff]
Apr 16 01:55:34.804762 kernel:   Normal   [mem 0x0000000100000000-0x00000002bfffffff]
Apr 16 01:55:34.804770 kernel:   Device   empty
Apr 16 01:55:34.804779 kernel: Movable zone start for each node
Apr 16 01:55:34.804787 kernel: Early memory node ranges
Apr 16 01:55:34.804796 kernel:   node   0: [mem 0x0000000000001000-0x000000000009ffff]
Apr 16 01:55:34.804805 kernel:   node   0: [mem 0x0000000000100000-0x00000000044fdfff]
Apr 16 01:55:34.804816 kernel:   node   0: [mem 0x00000000048fe000-0x000000003ff1efff]
Apr 16 01:55:34.804825 kernel:   node   0: [mem 0x000000003ffff000-0x000000003fffffff]
Apr 16 01:55:34.804833 kernel:   node   0: [mem 0x0000000100000000-0x00000002bfffffff]
Apr 16 01:55:34.804846 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff]
Apr 16 01:55:34.804855 kernel: On node 0, zone DMA: 1 pages in unavailable ranges
Apr 16 01:55:34.804863 kernel: On node 0, zone DMA: 96 pages in unavailable ranges
Apr 16 01:55:34.804872 kernel: On node 0, zone DMA32: 1024 pages in unavailable ranges
Apr 16 01:55:34.804881 kernel: On node 0, zone DMA32: 224 pages in unavailable ranges
Apr 16 01:55:34.804889 kernel: ACPI: PM-Timer IO Port: 0x408
Apr 16 01:55:34.804897 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1])
Apr 16 01:55:34.804905 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23
Apr 16 01:55:34.804914 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
Apr 16 01:55:34.804922 kernel: ACPI: Using ACPI (MADT) for SMP configuration information
Apr 16 01:55:34.804929 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200
Apr 16 01:55:34.804937 kernel: TSC deadline timer available
Apr 16 01:55:34.804948 kernel: CPU topo: Max. logical packages:   1
Apr 16 01:55:34.804955 kernel: CPU topo: Max. logical dies:       1
Apr 16 01:55:34.804963 kernel: CPU topo: Max. dies per package:   1
Apr 16 01:55:34.804971 kernel: CPU topo: Max. threads per core:   2
Apr 16 01:55:34.804979 kernel: CPU topo: Num. cores per package:     1
Apr 16 01:55:34.804988 kernel: CPU topo: Num. threads per package:   2
Apr 16 01:55:34.804996 kernel: CPU topo: Allowing 2 present CPUs plus 0 hotplug CPUs
Apr 16 01:55:34.805006 kernel: [mem 0x40000000-0xffffffff] available for PCI devices
Apr 16 01:55:34.805014 kernel: Booting paravirtualized kernel on Hyper-V
Apr 16 01:55:34.805024 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns
Apr 16 01:55:34.805033 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1
Apr 16 01:55:34.805042 kernel: percpu: Embedded 60 pages/cpu s207448 r8192 d30120 u1048576
Apr 16 01:55:34.805052 kernel: pcpu-alloc: s207448 r8192 d30120 u1048576 alloc=1*2097152
Apr 16 01:55:34.805060 kernel: pcpu-alloc: [0] 0 1 
Apr 16 01:55:34.805069 kernel: Hyper-V: PV spinlocks enabled
Apr 16 01:55:34.805077 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear)
Apr 16 01:55:34.805087 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=77543e762ca6dfab934d20db249242a5a42c379ee71c92e3322ad9c526730ae8
Apr 16 01:55:34.805097 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear)
Apr 16 01:55:34.805105 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear)
Apr 16 01:55:34.805114 kernel: Fallback order for Node 0: 0 
Apr 16 01:55:34.805123 kernel: Built 1 zonelists, mobility grouping on.  Total pages: 2095807
Apr 16 01:55:34.805131 kernel: Policy zone: Normal
Apr 16 01:55:34.805140 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off
Apr 16 01:55:34.805149 kernel: software IO TLB: area num 2.
Apr 16 01:55:34.805158 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Apr 16 01:55:34.805167 kernel: ftrace: allocating 40157 entries in 157 pages
Apr 16 01:55:34.805176 kernel: ftrace: allocated 157 pages with 5 groups
Apr 16 01:55:34.805184 kernel: Dynamic Preempt: voluntary
Apr 16 01:55:34.805194 kernel: rcu: Preemptible hierarchical RCU implementation.
Apr 16 01:55:34.805203 kernel: rcu:         RCU event tracing is enabled.
Apr 16 01:55:34.805218 kernel: rcu:         RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2.
Apr 16 01:55:34.805230 kernel:         Trampoline variant of Tasks RCU enabled.
Apr 16 01:55:34.805239 kernel:         Rude variant of Tasks RCU enabled.
Apr 16 01:55:34.805249 kernel:         Tracing variant of Tasks RCU enabled.
Apr 16 01:55:34.805259 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies.
Apr 16 01:55:34.805268 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
Apr 16 01:55:34.805277 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
Apr 16 01:55:34.805287 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
Apr 16 01:55:34.805296 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
Apr 16 01:55:34.805306 kernel: Using NULL legacy PIC
Apr 16 01:55:34.805315 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0
Apr 16 01:55:34.805327 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention.
Apr 16 01:55:34.805336 kernel: Console: colour dummy device 80x25
Apr 16 01:55:34.805345 kernel: printk: legacy console [tty1] enabled
Apr 16 01:55:34.805354 kernel: printk: legacy console [ttyS0] enabled
Apr 16 01:55:34.805362 kernel: printk: legacy bootconsole [earlyser0] disabled
Apr 16 01:55:34.805371 kernel: ACPI: Core revision 20240827
Apr 16 01:55:34.805381 kernel: Failed to register legacy timer interrupt
Apr 16 01:55:34.805392 kernel: APIC: Switch to symmetric I/O mode setup
Apr 16 01:55:34.805401 kernel: x2apic enabled
Apr 16 01:55:34.805411 kernel: APIC: Switched APIC routing to: physical x2apic
Apr 16 01:55:34.805420 kernel: Hyper-V: Host Build 10.0.26100.1536-1-0
Apr 16 01:55:34.805429 kernel: Hyper-V: enabling crash_kexec_post_notifiers
Apr 16 01:55:34.805437 kernel: Hyper-V: Disabling IBT because of Hyper-V bug
Apr 16 01:55:34.805447 kernel: Hyper-V: Using IPI hypercalls
Apr 16 01:55:34.805458 kernel: APIC: send_IPI() replaced with hv_send_ipi()
Apr 16 01:55:34.805468 kernel: APIC: send_IPI_mask() replaced with hv_send_ipi_mask()
Apr 16 01:55:34.805477 kernel: APIC: send_IPI_mask_allbutself() replaced with hv_send_ipi_mask_allbutself()
Apr 16 01:55:34.805486 kernel: APIC: send_IPI_allbutself() replaced with hv_send_ipi_allbutself()
Apr 16 01:55:34.805496 kernel: APIC: send_IPI_all() replaced with hv_send_ipi_all()
Apr 16 01:55:34.805504 kernel: APIC: send_IPI_self() replaced with hv_send_ipi_self()
Apr 16 01:55:34.805513 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns
Apr 16 01:55:34.805525 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 4600.00 BogoMIPS (lpj=2300000)
Apr 16 01:55:34.805535 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated
Apr 16 01:55:34.805544 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0
Apr 16 01:55:34.805553 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0
Apr 16 01:55:34.805562 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
Apr 16 01:55:34.805571 kernel: Spectre V2 : Mitigation: Retpolines
Apr 16 01:55:34.805579 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT
Apr 16 01:55:34.805588 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible!
Apr 16 01:55:34.805629 kernel: RETBleed: Vulnerable
Apr 16 01:55:34.805640 kernel: Speculative Store Bypass: Vulnerable
Apr 16 01:55:34.805649 kernel: active return thunk: its_return_thunk
Apr 16 01:55:34.805658 kernel: ITS: Mitigation: Aligned branch/return thunks
Apr 16 01:55:34.805666 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
Apr 16 01:55:34.805674 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
Apr 16 01:55:34.805683 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
Apr 16 01:55:34.805692 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask'
Apr 16 01:55:34.805701 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256'
Apr 16 01:55:34.805710 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256'
Apr 16 01:55:34.805722 kernel: x86/fpu: Supporting XSAVE feature 0x800: 'Control-flow User registers'
Apr 16 01:55:34.805730 kernel: x86/fpu: Supporting XSAVE feature 0x20000: 'AMX Tile config'
Apr 16 01:55:34.805739 kernel: x86/fpu: Supporting XSAVE feature 0x40000: 'AMX Tile data'
Apr 16 01:55:34.805747 kernel: x86/fpu: xstate_offset[2]:  576, xstate_sizes[2]:  256
Apr 16 01:55:34.805755 kernel: x86/fpu: xstate_offset[5]:  832, xstate_sizes[5]:   64
Apr 16 01:55:34.805763 kernel: x86/fpu: xstate_offset[6]:  896, xstate_sizes[6]:  512
Apr 16 01:55:34.805772 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024
Apr 16 01:55:34.805780 kernel: x86/fpu: xstate_offset[11]: 2432, xstate_sizes[11]:   16
Apr 16 01:55:34.805789 kernel: x86/fpu: xstate_offset[17]: 2496, xstate_sizes[17]:   64
Apr 16 01:55:34.805798 kernel: x86/fpu: xstate_offset[18]: 2560, xstate_sizes[18]: 8192
Apr 16 01:55:34.805808 kernel: x86/fpu: Enabled xstate features 0x608e7, context size is 10752 bytes, using 'compacted' format.
Apr 16 01:55:34.805818 kernel: Freeing SMP alternatives memory: 32K
Apr 16 01:55:34.805827 kernel: pid_max: default: 32768 minimum: 301
Apr 16 01:55:34.805835 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima
Apr 16 01:55:34.805843 kernel: landlock: Up and running.
Apr 16 01:55:34.805852 kernel: SELinux:  Initializing.
Apr 16 01:55:34.805861 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
Apr 16 01:55:34.805870 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
Apr 16 01:55:34.805879 kernel: smpboot: CPU0: Intel INTEL(R) XEON(R) PLATINUM 8573C (family: 0x6, model: 0xcf, stepping: 0x2)
Apr 16 01:55:34.805889 kernel: Performance Events: unsupported p6 CPU model 207 no PMU driver, software events only.
Apr 16 01:55:34.805898 kernel: signal: max sigframe size: 11952
Apr 16 01:55:34.805908 kernel: rcu: Hierarchical SRCU implementation.
Apr 16 01:55:34.805917 kernel: rcu:         Max phase no-delay instances is 400.
Apr 16 01:55:34.805926 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level
Apr 16 01:55:34.805936 kernel: NMI watchdog: Perf NMI watchdog permanently disabled
Apr 16 01:55:34.805945 kernel: smp: Bringing up secondary CPUs ...
Apr 16 01:55:34.805955 kernel: smpboot: x86: Booting SMP configuration:
Apr 16 01:55:34.805964 kernel: .... node  #0, CPUs:      #1
Apr 16 01:55:34.805973 kernel: smp: Brought up 1 node, 2 CPUs
Apr 16 01:55:34.805984 kernel: smpboot: Total of 2 processors activated (9200.00 BogoMIPS)
Apr 16 01:55:34.805993 kernel: Memory: 8058964K/8383228K available (14336K kernel code, 2453K rwdata, 31656K rodata, 15552K init, 2472K bss, 318040K reserved, 0K cma-reserved)
Apr 16 01:55:34.806002 kernel: devtmpfs: initialized
Apr 16 01:55:34.806012 kernel: x86/mm: Memory block size: 128MB
Apr 16 01:55:34.806022 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes)
Apr 16 01:55:34.806031 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns
Apr 16 01:55:34.806043 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear)
Apr 16 01:55:34.806052 kernel: pinctrl core: initialized pinctrl subsystem
Apr 16 01:55:34.806061 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family
Apr 16 01:55:34.806070 kernel: audit: initializing netlink subsys (disabled)
Apr 16 01:55:34.806079 kernel: audit: type=2000 audit(1776304531.073:1): state=initialized audit_enabled=0 res=1
Apr 16 01:55:34.806088 kernel: thermal_sys: Registered thermal governor 'step_wise'
Apr 16 01:55:34.806098 kernel: thermal_sys: Registered thermal governor 'user_space'
Apr 16 01:55:34.806107 kernel: cpuidle: using governor menu
Apr 16 01:55:34.806119 kernel: efi: Freeing EFI boot services memory: 34436K
Apr 16 01:55:34.806127 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
Apr 16 01:55:34.806136 kernel: dca service started, version 1.12.1
Apr 16 01:55:34.806145 kernel: e820: reserve RAM buffer [mem 0x044fe000-0x07ffffff]
Apr 16 01:55:34.806154 kernel: e820: reserve RAM buffer [mem 0x3ff1f000-0x3fffffff]
Apr 16 01:55:34.806163 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible.
Apr 16 01:55:34.806173 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
Apr 16 01:55:34.806184 kernel: HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page
Apr 16 01:55:34.806194 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
Apr 16 01:55:34.806203 kernel: HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page
Apr 16 01:55:34.806212 kernel: ACPI: Added _OSI(Module Device)
Apr 16 01:55:34.806221 kernel: ACPI: Added _OSI(Processor Device)
Apr 16 01:55:34.806230 kernel: ACPI: Added _OSI(Processor Aggregator Device)
Apr 16 01:55:34.806239 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded
Apr 16 01:55:34.806250 kernel: ACPI: Interpreter enabled
Apr 16 01:55:34.806260 kernel: ACPI: PM: (supports S0 S5)
Apr 16 01:55:34.806269 kernel: ACPI: Using IOAPIC for interrupt routing
Apr 16 01:55:34.806279 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
Apr 16 01:55:34.806288 kernel: PCI: Ignoring E820 reservations for host bridge windows
Apr 16 01:55:34.806297 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F
Apr 16 01:55:34.806305 kernel: iommu: Default domain type: Translated
Apr 16 01:55:34.806316 kernel: iommu: DMA domain TLB invalidation policy: lazy mode
Apr 16 01:55:34.806326 kernel: efivars: Registered efivars operations
Apr 16 01:55:34.806335 kernel: PCI: Using ACPI for IRQ routing
Apr 16 01:55:34.806345 kernel: PCI: System does not support PCI
Apr 16 01:55:34.806354 kernel: vgaarb: loaded
Apr 16 01:55:34.806363 kernel: clocksource: Switched to clocksource tsc-early
Apr 16 01:55:34.806372 kernel: VFS: Disk quotas dquot_6.6.0
Apr 16 01:55:34.806383 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
Apr 16 01:55:34.806392 kernel: pnp: PnP ACPI init
Apr 16 01:55:34.806400 kernel: pnp: PnP ACPI: found 3 devices
Apr 16 01:55:34.806409 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
Apr 16 01:55:34.806418 kernel: NET: Registered PF_INET protocol family
Apr 16 01:55:34.806428 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear)
Apr 16 01:55:34.806437 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear)
Apr 16 01:55:34.806449 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
Apr 16 01:55:34.806458 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear)
Apr 16 01:55:34.806467 kernel: TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear)
Apr 16 01:55:34.806476 kernel: TCP: Hash tables configured (established 65536 bind 65536)
Apr 16 01:55:34.806485 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear)
Apr 16 01:55:34.806493 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear)
Apr 16 01:55:34.806503 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family
Apr 16 01:55:34.806514 kernel: NET: Registered PF_XDP protocol family
Apr 16 01:55:34.806524 kernel: PCI: CLS 0 bytes, default 64
Apr 16 01:55:34.806533 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
Apr 16 01:55:34.806543 kernel: software IO TLB: mapped [mem 0x000000003a99d000-0x000000003e99d000] (64MB)
Apr 16 01:55:34.806552 kernel: RAPL PMU: API unit is 2^-32 Joules, 1 fixed counters, 10737418240 ms ovfl timer
Apr 16 01:55:34.806561 kernel: RAPL PMU: hw unit of domain psys 2^-0 Joules
Apr 16 01:55:34.806570 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns
Apr 16 01:55:34.806582 kernel: clocksource: Switched to clocksource tsc
Apr 16 01:55:34.806591 kernel: Initialise system trusted keyrings
Apr 16 01:55:34.806612 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0
Apr 16 01:55:34.806622 kernel: Key type asymmetric registered
Apr 16 01:55:34.806631 kernel: Asymmetric key parser 'x509' registered
Apr 16 01:55:34.806640 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250)
Apr 16 01:55:34.806649 kernel: io scheduler mq-deadline registered
Apr 16 01:55:34.806661 kernel: io scheduler kyber registered
Apr 16 01:55:34.806671 kernel: io scheduler bfq registered
Apr 16 01:55:34.806680 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00
Apr 16 01:55:34.806690 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
Apr 16 01:55:34.806699 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
Apr 16 01:55:34.806709 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A
Apr 16 01:55:34.806717 kernel: serial8250: ttyS2 at I/O 0x3e8 (irq = 4, base_baud = 115200) is a 16550A
Apr 16 01:55:34.806728 kernel: i8042: PNP: No PS/2 controller found.
Apr 16 01:55:34.806886 kernel: rtc_cmos 00:02: registered as rtc0
Apr 16 01:55:34.806987 kernel: rtc_cmos 00:02: setting system clock to 2026-04-16T01:55:32 UTC (1776304532)
Apr 16 01:55:34.807085 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram
Apr 16 01:55:34.807097 kernel: intel_pstate: Intel P-state driver initializing
Apr 16 01:55:34.807107 kernel: efifb: probing for efifb
Apr 16 01:55:34.807118 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k
Apr 16 01:55:34.807128 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1
Apr 16 01:55:34.807137 kernel: efifb: scrolling: redraw
Apr 16 01:55:34.807146 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0
Apr 16 01:55:34.807155 kernel: Console: switching to colour frame buffer device 128x48
Apr 16 01:55:34.807165 kernel: fb0: EFI VGA frame buffer device
Apr 16 01:55:34.807175 kernel: pstore: Using crash dump compression: deflate
Apr 16 01:55:34.807186 kernel: pstore: Registered efi_pstore as persistent store backend
Apr 16 01:55:34.807196 kernel: NET: Registered PF_INET6 protocol family
Apr 16 01:55:34.807205 kernel: Segment Routing with IPv6
Apr 16 01:55:34.807213 kernel: In-situ OAM (IOAM) with IPv6
Apr 16 01:55:34.807222 kernel: NET: Registered PF_PACKET protocol family
Apr 16 01:55:34.807231 kernel: Key type dns_resolver registered
Apr 16 01:55:34.807241 kernel: IPI shorthand broadcast: enabled
Apr 16 01:55:34.807251 kernel: sched_clock: Marking stable (1956004267, 90421379)->(2366136137, -319710491)
Apr 16 01:55:34.807262 kernel: registered taskstats version 1
Apr 16 01:55:34.807272 kernel: Loading compiled-in X.509 certificates
Apr 16 01:55:34.807281 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.81-flatcar: f8ebc6dc0c1ddf001c3efae625d5df2d67ab1aa4'
Apr 16 01:55:34.807290 kernel: Demotion targets for Node 0: null
Apr 16 01:55:34.807298 kernel: Key type .fscrypt registered
Apr 16 01:55:34.807307 kernel: Key type fscrypt-provisioning registered
Apr 16 01:55:34.807317 kernel: ima: No TPM chip found, activating TPM-bypass!
Apr 16 01:55:34.807328 kernel: ima: Allocated hash algorithm: sha1
Apr 16 01:55:34.807338 kernel: ima: No architecture policies found
Apr 16 01:55:34.807347 kernel: clk: Disabling unused clocks
Apr 16 01:55:34.807356 kernel: Freeing unused kernel image (initmem) memory: 15552K
Apr 16 01:55:34.807365 kernel: Write protecting the kernel read-only data: 47104k
Apr 16 01:55:34.807374 kernel: Freeing unused kernel image (rodata/data gap) memory: 1112K
Apr 16 01:55:34.807383 kernel: Run /init as init process
Apr 16 01:55:34.807394 kernel:   with arguments:
Apr 16 01:55:34.807403 kernel:     /init
Apr 16 01:55:34.807413 kernel:   with environment:
Apr 16 01:55:34.807422 kernel:     HOME=/
Apr 16 01:55:34.807431 kernel:     TERM=linux
Apr 16 01:55:34.807439 kernel: hv_vmbus: Vmbus version:5.3
Apr 16 01:55:34.807448 kernel: pps_core: LinuxPPS API ver. 1 registered
Apr 16 01:55:34.807457 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
Apr 16 01:55:34.807469 kernel: PTP clock support registered
Apr 16 01:55:34.807478 kernel: SCSI subsystem initialized
Apr 16 01:55:34.807488 kernel: hv_utils: Registering HyperV Utility Driver
Apr 16 01:55:34.807497 kernel: hv_vmbus: registering driver hv_utils
Apr 16 01:55:34.807506 kernel: hv_utils: Shutdown IC version 3.2
Apr 16 01:55:34.807515 kernel: hv_utils: Heartbeat IC version 3.0
Apr 16 01:55:34.807523 kernel: hv_utils: TimeSync IC version 4.0
Apr 16 01:55:34.807534 kernel: hv_vmbus: registering driver hv_pci
Apr 16 01:55:34.807687 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI VMBus probing: Using version 0x10004
Apr 16 01:55:34.807800 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI host bridge to bus c05b:00
Apr 16 01:55:34.807924 kernel: pci_bus c05b:00: root bus resource [mem 0xfc0000000-0xfc007ffff window]
Apr 16 01:55:34.808036 kernel: pci_bus c05b:00: No busn resource found for root bus, will use [bus 00-ff]
Apr 16 01:55:34.808176 kernel: pci c05b:00:00.0: [1414:00a9] type 00 class 0x010802 PCIe Endpoint
Apr 16 01:55:34.808300 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit]
Apr 16 01:55:34.808414 kernel: pci_bus c05b:00: busn_res: [bus 00-ff] end is updated to 00
Apr 16 01:55:34.808535 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit]: assigned
Apr 16 01:55:34.808546 kernel: hv_vmbus: registering driver hv_storvsc
Apr 16 01:55:34.808696 kernel: scsi host0: storvsc_host_t
Apr 16 01:55:34.808832 kernel: scsi 0:0:0:2: CD-ROM            Msft     Virtual DVD-ROM  1.0  PQ: 0 ANSI: 5
Apr 16 01:55:34.808846 kernel: hid: raw HID events driver (C) Jiri Kosina
Apr 16 01:55:34.808857 kernel: hv_vmbus: registering driver hid_hyperv
Apr 16 01:55:34.808868 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0
Apr 16 01:55:34.808985 kernel: hid-hyperv 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on 
Apr 16 01:55:34.809001 kernel: hv_vmbus: registering driver hyperv_keyboard
Apr 16 01:55:34.809012 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1
Apr 16 01:55:34.809120 kernel: nvme nvme0: pci function c05b:00:00.0
Apr 16 01:55:34.809251 kernel: nvme c05b:00:00.0: enabling device (0000 -> 0002)
Apr 16 01:55:34.809344 kernel: nvme nvme0: 2/0/0 default/read/poll queues
Apr 16 01:55:34.809358 kernel:  nvme0n1: p1 p2 p3 p4 p6 p7 p9
Apr 16 01:55:34.809481 kernel: sr 0:0:0:2: [sr0] scsi-1 drive
Apr 16 01:55:34.809493 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20
Apr 16 01:55:34.809651 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0
Apr 16 01:55:34.809665 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log.
Apr 16 01:55:34.809676 kernel: device-mapper: uevent: version 1.0.3
Apr 16 01:55:34.809687 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev
Apr 16 01:55:34.809711 kernel: device-mapper: verity: sha256 using shash "sha256-generic"
Apr 16 01:55:34.809724 kernel: raid6: avx512x4 gen() 43809 MB/s
Apr 16 01:55:34.809735 kernel: raid6: avx512x2 gen() 42902 MB/s
Apr 16 01:55:34.809745 kernel: raid6: avx512x1 gen() 26327 MB/s
Apr 16 01:55:34.809756 kernel: raid6: avx2x4   gen() 35474 MB/s
Apr 16 01:55:34.809765 kernel: raid6: avx2x2   gen() 37129 MB/s
Apr 16 01:55:34.809775 kernel: raid6: avx2x1   gen() 31189 MB/s
Apr 16 01:55:34.809787 kernel: raid6: using algorithm avx512x4 gen() 43809 MB/s
Apr 16 01:55:34.809796 kernel: raid6: .... xor() 7951 MB/s, rmw enabled
Apr 16 01:55:34.809806 kernel: raid6: using avx512x2 recovery algorithm
Apr 16 01:55:34.809817 kernel: xor: automatically using best checksumming function   avx       
Apr 16 01:55:34.809828 kernel: Btrfs loaded, zoned=no, fsverity=no
Apr 16 01:55:34.809838 kernel: BTRFS: device fsid cb32c290-133d-48ac-ad81-425208fd1af7 devid 1 transid 32 /dev/mapper/usr (254:0) scanned by mount (958)
Apr 16 01:55:34.809849 kernel: BTRFS info (device dm-0): first mount of filesystem cb32c290-133d-48ac-ad81-425208fd1af7
Apr 16 01:55:34.809861 kernel: BTRFS info (device dm-0): using crc32c (crc32c-intel) checksum algorithm
Apr 16 01:55:34.809871 kernel: BTRFS info (device dm-0 state E): enabling ssd optimizations
Apr 16 01:55:34.809881 kernel: BTRFS info (device dm-0 state E): disabling log replay at mount time
Apr 16 01:55:34.809890 kernel: BTRFS info (device dm-0 state E): enabling free space tree
Apr 16 01:55:34.809901 kernel: loop: module loaded
Apr 16 01:55:34.809911 kernel: loop0: detected capacity change from 0 to 100560
Apr 16 01:55:34.809921 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher
Apr 16 01:55:34.809935 systemd[1]: Successfully made /usr/ read-only.
Apr 16 01:55:34.809949 systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE)
Apr 16 01:55:34.809960 systemd[1]: Detected virtualization microsoft.
Apr 16 01:55:34.809970 systemd[1]: Detected architecture x86-64.
Apr 16 01:55:34.809980 systemd[1]: Running in initrd.
Apr 16 01:55:34.809990 systemd[1]: No hostname configured, using default hostname.
Apr 16 01:55:34.810004 systemd[1]: Hostname set to <localhost>.
Apr 16 01:55:34.810014 systemd[1]: Initializing machine ID from random generator.
Apr 16 01:55:34.810025 systemd[1]: Queued start job for default target initrd.target.
Apr 16 01:55:34.810038 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr.
Apr 16 01:55:34.810048 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch.
Apr 16 01:55:34.810058 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch.
Apr 16 01:55:34.810072 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM...
Apr 16 01:55:34.810083 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM...
Apr 16 01:55:34.810095 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT...
Apr 16 01:55:34.810106 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A...
Apr 16 01:55:34.810119 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre).
Apr 16 01:55:34.810129 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes.
Apr 16 01:55:34.810139 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System.
Apr 16 01:55:34.810150 systemd[1]: Reached target paths.target - Path Units.
Apr 16 01:55:34.810162 systemd[1]: Reached target slices.target - Slice Units.
Apr 16 01:55:34.810174 systemd[1]: Reached target swap.target - Swaps.
Apr 16 01:55:34.810187 systemd[1]: Reached target timers.target - Timer Units.
Apr 16 01:55:34.810197 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket.
Apr 16 01:55:34.810208 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket.
Apr 16 01:55:34.810220 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket.
Apr 16 01:55:34.810230 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log).
Apr 16 01:55:34.810240 systemd[1]: Listening on systemd-journald.socket - Journal Sockets.
Apr 16 01:55:34.810250 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket.
Apr 16 01:55:34.810263 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket.
Apr 16 01:55:34.810274 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket.
Apr 16 01:55:34.810285 systemd[1]: Reached target sockets.target - Socket Units.
Apr 16 01:55:34.810297 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments was skipped because no trigger condition checks were met.
Apr 16 01:55:34.810307 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup...
Apr 16 01:55:34.810318 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes...
Apr 16 01:55:34.810328 systemd[1]: Finished network-cleanup.service - Network Cleanup.
Apr 16 01:55:34.810341 systemd[1]: systemd-battery-check.service - Check battery level during early boot was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/class/power_supply).
Apr 16 01:55:34.810353 systemd[1]: Starting systemd-fsck-usr.service...
Apr 16 01:55:34.810364 systemd[1]: Starting systemd-journald.service - Journal Service...
Apr 16 01:55:34.810375 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules...
Apr 16 01:55:34.810389 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup...
Apr 16 01:55:34.810413 systemd-journald[1095]: Collecting audit messages is enabled.
Apr 16 01:55:34.810439 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup.
Apr 16 01:55:34.810453 kernel: audit: type=1130 audit(1776304534.805:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.810465 systemd-journald[1095]: Journal started
Apr 16 01:55:34.810489 systemd-journald[1095]: Runtime Journal (/run/log/journal/55ad36821ba5463598a260bc6b74ffbd) is 8M, max 158.5M, 150.5M free.
Apr 16 01:55:34.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.816109 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes.
Apr 16 01:55:34.820612 kernel: audit: type=1130 audit(1776304534.815:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.820639 systemd[1]: Started systemd-journald.service - Journal Service.
Apr 16 01:55:34.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.825848 systemd[1]: Finished systemd-fsck-usr.service.
Apr 16 01:55:34.833684 kernel: audit: type=1130 audit(1776304534.822:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.833705 kernel: audit: type=1130 audit(1776304534.828:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.834732 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully...
Apr 16 01:55:34.843881 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories...
Apr 16 01:55:34.866615 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
Apr 16 01:55:34.878382 systemd-modules-load[1096]: Inserted module 'br_netfilter'
Apr 16 01:55:34.878948 kernel: Bridge firewalling registered
Apr 16 01:55:34.881464 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules.
Apr 16 01:55:34.886413 kernel: audit: type=1130 audit(1776304534.880:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.887717 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables...
Apr 16 01:55:34.894718 systemd-tmpfiles[1106]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring.
Apr 16 01:55:34.897753 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully.
Apr 16 01:55:34.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.908782 kernel: audit: type=1130 audit(1776304534.903:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.908335 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup.
Apr 16 01:55:34.916663 kernel: audit: type=1130 audit(1776304534.910:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.912803 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories.
Apr 16 01:55:34.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.921270 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables.
Apr 16 01:55:34.928710 kernel: audit: type=1130 audit(1776304534.915:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.928733 kernel: audit: type=1130 audit(1776304534.920:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.926908 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters...
Apr 16 01:55:34.931000 audit: BPF prog-id=6 op=LOAD
Apr 16 01:55:34.940037 systemd[1]: Starting systemd-resolved.service - Network Name Resolution...
Apr 16 01:55:34.946724 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev...
Apr 16 01:55:34.962038 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters.
Apr 16 01:55:34.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.966671 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev.
Apr 16 01:55:34.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:34.972710 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook...
Apr 16 01:55:35.001893 dracut-cmdline[1134]: dracut-109
Apr 16 01:55:35.005221 dracut-cmdline[1134]: Using kernel command line parameters:  SYSTEMD_SULOGIN_FORCE=1   rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=77543e762ca6dfab934d20db249242a5a42c379ee71c92e3322ad9c526730ae8
Apr 16 01:55:35.033617 systemd-resolved[1119]: Positive Trust Anchors:
Apr 16 01:55:35.035290 systemd-resolved[1119]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
Apr 16 01:55:35.035296 systemd-resolved[1119]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
Apr 16 01:55:35.035335 systemd-resolved[1119]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
Apr 16 01:55:35.095046 systemd-resolved[1119]: Defaulting to hostname 'linux'.
Apr 16 01:55:35.101441 systemd[1]: Started systemd-resolved.service - Network Name Resolution.
Apr 16 01:55:35.106704 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups.
Apr 16 01:55:35.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.126626 kernel: Loading iSCSI transport class v2.0-870.
Apr 16 01:55:35.155626 kernel: iscsi: registered transport (tcp)
Apr 16 01:55:35.183896 kernel: iscsi: registered transport (qla4xxx)
Apr 16 01:55:35.183940 kernel: QLogic iSCSI HBA Driver
Apr 16 01:55:35.210328 systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line...
Apr 16 01:55:35.227002 systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line.
Apr 16 01:55:35.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.228957 systemd[1]: Reached target network-pre.target - Preparation for Network.
Apr 16 01:55:35.264026 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook.
Apr 16 01:55:35.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.267734 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook...
Apr 16 01:55:35.270665 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline...
Apr 16 01:55:35.299523 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook.
Apr 16 01:55:35.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.303000 audit: BPF prog-id=7 op=LOAD
Apr 16 01:55:35.303000 audit: BPF prog-id=8 op=LOAD
Apr 16 01:55:35.305401 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files...
Apr 16 01:55:35.334582 systemd-udevd[1371]: Using default interface naming scheme 'v257'.
Apr 16 01:55:35.346480 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files.
Apr 16 01:55:35.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.353691 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook...
Apr 16 01:55:35.376021 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline.
Apr 16 01:55:35.378720 dracut-pre-trigger[1446]: rd.md=0: removing MD RAID activation
Apr 16 01:55:35.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.384000 audit: BPF prog-id=9 op=LOAD
Apr 16 01:55:35.386745 systemd[1]: Starting systemd-networkd.service - Network Configuration...
Apr 16 01:55:35.406157 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook.
Apr 16 01:55:35.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.412716 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices...
Apr 16 01:55:35.436330 systemd-networkd[1482]: lo: Link UP
Apr 16 01:55:35.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.436817 systemd-networkd[1482]: lo: Gained carrier
Apr 16 01:55:35.437260 systemd[1]: Started systemd-networkd.service - Network Configuration.
Apr 16 01:55:35.439319 systemd[1]: Reached target network.target - Network.
Apr 16 01:55:35.465268 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices.
Apr 16 01:55:35.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.471071 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook...
Apr 16 01:55:35.530726 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#227 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001
Apr 16 01:55:35.554621 kernel: cryptd: max_cpu_qlen set to 1000
Apr 16 01:55:35.557242 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
Apr 16 01:55:35.557347 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup.
Apr 16 01:55:35.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.561212 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup...
Apr 16 01:55:35.567869 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup...
Apr 16 01:55:35.580621 kernel: hv_vmbus: registering driver hv_netvsc
Apr 16 01:55:35.596201 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
Apr 16 01:55:35.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.596279 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup.
Apr 16 01:55:35.607177 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup...
Apr 16 01:55:35.611145 kernel: AES CTR mode by8 optimization enabled
Apr 16 01:55:35.620682 kernel: nvme nvme0: using unchecked data buffer
Apr 16 01:55:35.639445 systemd-networkd[1482]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network
Apr 16 01:55:35.639453 systemd-networkd[1482]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network.
Apr 16 01:55:35.640201 systemd-networkd[1482]: eth0: Link UP
Apr 16 01:55:35.640347 systemd-networkd[1482]: eth0: Gained carrier
Apr 16 01:55:35.640359 systemd-networkd[1482]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network
Apr 16 01:55:35.654005 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup.
Apr 16 01:55:35.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.693730 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - MSFT NVMe Accelerator v1.0 USR-A.
Apr 16 01:55:35.696716 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary...
Apr 16 01:55:35.721879 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - MSFT NVMe Accelerator v1.0 ROOT.
Apr 16 01:55:35.741885 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - MSFT NVMe Accelerator v1.0 EFI-SYSTEM.
Apr 16 01:55:35.757772 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM.
Apr 16 01:55:35.785253 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook.
Apr 16 01:55:35.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:35.786957 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems.
Apr 16 01:55:35.796275 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes.
Apr 16 01:55:35.799705 systemd[1]: Reached target remote-fs.target - Remote File Systems.
Apr 16 01:55:35.812143 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook...
Apr 16 01:55:35.857346 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook.
Apr 16 01:55:35.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:36.871293 disk-uuid[1655]: Warning: The kernel is still using the old partition table.
Apr 16 01:55:36.871293 disk-uuid[1655]: The new table will be used at the next reboot or after you
Apr 16 01:55:36.871293 disk-uuid[1655]: run partprobe(8) or kpartx(8)
Apr 16 01:55:36.871293 disk-uuid[1655]: The operation has completed successfully.
Apr 16 01:55:36.877691 systemd[1]: disk-uuid.service: Deactivated successfully.
Apr 16 01:55:36.892555 kernel: kauditd_printk_skb: 21 callbacks suppressed
Apr 16 01:55:36.892582 kernel: audit: type=1130 audit(1776304536.880:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:36.892610 kernel: audit: type=1131 audit(1776304536.880:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:36.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:36.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:36.877781 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary.
Apr 16 01:55:36.885017 systemd[1]: Starting ignition-setup.service - Ignition (setup)...
Apr 16 01:55:36.923619 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 (259:5) scanned by mount (1695)
Apr 16 01:55:36.923656 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem f94f8bc0-847f-4977-8849-2f7b329ee95c
Apr 16 01:55:36.926201 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm
Apr 16 01:55:36.936036 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations
Apr 16 01:55:36.936081 kernel: BTRFS info (device nvme0n1p6): turning on async discard
Apr 16 01:55:36.938169 kernel: BTRFS info (device nvme0n1p6): enabling free space tree
Apr 16 01:55:36.944620 kernel: BTRFS info (device nvme0n1p6): last unmount of filesystem f94f8bc0-847f-4977-8849-2f7b329ee95c
Apr 16 01:55:36.945189 systemd[1]: Finished ignition-setup.service - Ignition (setup).
Apr 16 01:55:36.951229 kernel: audit: type=1130 audit(1776304536.945:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:36.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:36.950055 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)...
Apr 16 01:55:37.326588 ignition[1714]: Ignition 2.24.0
Apr 16 01:55:37.326614 ignition[1714]: Stage: fetch-offline
Apr 16 01:55:37.326853 ignition[1714]: no configs at "/usr/lib/ignition/base.d"
Apr 16 01:55:37.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:37.329636 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline).
Apr 16 01:55:37.341739 kernel: audit: type=1130 audit(1776304537.332:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:37.326863 ignition[1714]: no config dir at "/usr/lib/ignition/base.platform.d/azure"
Apr 16 01:55:37.339260 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)...
Apr 16 01:55:37.326977 ignition[1714]: parsed url from cmdline: ""
Apr 16 01:55:37.326980 ignition[1714]: no config URL provided
Apr 16 01:55:37.327035 ignition[1714]: reading system config file "/usr/lib/ignition/user.ign"
Apr 16 01:55:37.327042 ignition[1714]: no config at "/usr/lib/ignition/user.ign"
Apr 16 01:55:37.327047 ignition[1714]: failed to fetch config: resource requires networking
Apr 16 01:55:37.327251 ignition[1714]: Ignition finished successfully
Apr 16 01:55:37.369103 ignition[1720]: Ignition 2.24.0
Apr 16 01:55:37.369114 ignition[1720]: Stage: fetch
Apr 16 01:55:37.369313 ignition[1720]: no configs at "/usr/lib/ignition/base.d"
Apr 16 01:55:37.369320 ignition[1720]: no config dir at "/usr/lib/ignition/base.platform.d/azure"
Apr 16 01:55:37.369391 ignition[1720]: parsed url from cmdline: ""
Apr 16 01:55:37.369393 ignition[1720]: no config URL provided
Apr 16 01:55:37.369398 ignition[1720]: reading system config file "/usr/lib/ignition/user.ign"
Apr 16 01:55:37.369403 ignition[1720]: no config at "/usr/lib/ignition/user.ign"
Apr 16 01:55:37.369426 ignition[1720]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1
Apr 16 01:55:37.369589 ignition[1720]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable
Apr 16 01:55:37.569731 systemd-networkd[1482]: eth0: Gained IPv6LL
Apr 16 01:55:37.570896 ignition[1720]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #2
Apr 16 01:55:37.571068 ignition[1720]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable
Apr 16 01:55:37.971985 ignition[1720]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #3
Apr 16 01:55:37.972167 ignition[1720]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable
Apr 16 01:55:38.772258 ignition[1720]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #4
Apr 16 01:55:38.772420 ignition[1720]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable
Apr 16 01:55:40.372668 ignition[1720]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #5
Apr 16 01:55:40.372837 ignition[1720]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable
Apr 16 01:55:41.533389 kernel: hv_netvsc f8615163-0000-1000-2000-000d3ab897d2 eth0: VF slot 1 added
Apr 16 01:55:42.538104 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI VMBus probing: Using version 0x10004
Apr 16 01:55:42.538344 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI host bridge to bus 7870:00
Apr 16 01:55:42.541093 kernel: pci_bus 7870:00: root bus resource [mem 0xfc2000000-0xfc4007fff window]
Apr 16 01:55:42.542581 kernel: pci_bus 7870:00: No busn resource found for root bus, will use [bus 00-ff]
Apr 16 01:55:42.547764 kernel: pci 7870:00:00.0: [1414:00ba] type 00 class 0x020000 PCIe Endpoint
Apr 16 01:55:42.550751 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref]
Apr 16 01:55:42.555662 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref]
Apr 16 01:55:42.555729 kernel: pci 7870:00:00.0: enabling Extended Tags
Apr 16 01:55:42.571441 kernel: pci_bus 7870:00: busn_res: [bus 00-ff] end is updated to 00
Apr 16 01:55:42.571631 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref]: assigned
Apr 16 01:55:42.574815 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref]: assigned
Apr 16 01:55:42.627679 kernel: mana 7870:00:00.0: enabling device (0000 -> 0002)
Apr 16 01:55:42.637630 kernel: mana 7870:00:00.0: Microsoft Azure Network Adapter protocol version: 0.1.1
Apr 16 01:55:42.640797 kernel: hv_netvsc f8615163-0000-1000-2000-000d3ab897d2 eth0: VF registering: eth1
Apr 16 01:55:42.640969 kernel: mana 7870:00:00.0 eth1: joined to eth0
Apr 16 01:55:42.646455 systemd-networkd[1482]: eth1: Interface name change detected, renamed to enP30832s1.
Apr 16 01:55:42.650870 kernel: mana 7870:00:00.0 enP30832s1: renamed from eth1
Apr 16 01:55:42.748650 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16
Apr 16 01:55:42.752822 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64
Apr 16 01:55:42.753050 kernel: hv_netvsc f8615163-0000-1000-2000-000d3ab897d2 eth0: Data path switched to VF: enP30832s1
Apr 16 01:55:42.753400 systemd-networkd[1482]: enP30832s1: Link UP
Apr 16 01:55:42.754483 systemd-networkd[1482]: enP30832s1: Gained carrier
Apr 16 01:55:43.572998 ignition[1720]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #6
Apr 16 01:55:43.573172 ignition[1720]: GET error: Get "http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text": dial tcp 169.254.169.254:80: connect: network is unreachable
Apr 16 01:55:43.648646 systemd-networkd[1482]: eth0: DHCPv4 address 10.0.0.12/24, gateway 10.0.0.1 acquired from 168.63.129.16
Apr 16 01:55:48.577817 ignition[1720]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #7
Apr 16 01:55:48.657064 ignition[1720]: GET result: OK
Apr 16 01:55:48.657109 ignition[1720]: config has been read from IMDS userdata
Apr 16 01:55:48.657121 ignition[1720]: parsing config with SHA512: dbd4e61efe878058feee8a3764a4eb7988b6354d0036ca1dfe9eb37f681fbe11fdd52c03b9449b4d78427e3811ca306f7f1034ffaac8dac1b1041738c4b12ba7
Apr 16 01:55:48.664096 unknown[1720]: fetched base config from "system"
Apr 16 01:55:48.664244 unknown[1720]: fetched base config from "system"
Apr 16 01:55:48.664249 unknown[1720]: fetched user config from "azure"
Apr 16 01:55:48.666708 ignition[1720]: fetch: fetch complete
Apr 16 01:55:48.666713 ignition[1720]: fetch: fetch passed
Apr 16 01:55:48.666754 ignition[1720]: Ignition finished successfully
Apr 16 01:55:48.676855 kernel: audit: type=1130 audit(1776304548.670:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.671368 systemd[1]: Finished ignition-fetch.service - Ignition (fetch).
Apr 16 01:55:48.678258 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)...
Apr 16 01:55:48.705870 ignition[1734]: Ignition 2.24.0
Apr 16 01:55:48.705881 ignition[1734]: Stage: kargs
Apr 16 01:55:48.706087 ignition[1734]: no configs at "/usr/lib/ignition/base.d"
Apr 16 01:55:48.714694 kernel: audit: type=1130 audit(1776304548.708:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.708697 systemd[1]: Finished ignition-kargs.service - Ignition (kargs).
Apr 16 01:55:48.706095 ignition[1734]: no config dir at "/usr/lib/ignition/base.platform.d/azure"
Apr 16 01:55:48.714797 systemd[1]: Starting ignition-disks.service - Ignition (disks)...
Apr 16 01:55:48.706633 ignition[1734]: kargs: kargs passed
Apr 16 01:55:48.706667 ignition[1734]: Ignition finished successfully
Apr 16 01:55:48.739334 ignition[1740]: Ignition 2.24.0
Apr 16 01:55:48.739344 ignition[1740]: Stage: disks
Apr 16 01:55:48.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.741454 systemd[1]: Finished ignition-disks.service - Ignition (disks).
Apr 16 01:55:48.750204 kernel: audit: type=1130 audit(1776304548.742:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.739545 ignition[1740]: no configs at "/usr/lib/ignition/base.d"
Apr 16 01:55:48.744756 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device.
Apr 16 01:55:48.739553 ignition[1740]: no config dir at "/usr/lib/ignition/base.platform.d/azure"
Apr 16 01:55:48.751322 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems.
Apr 16 01:55:48.740103 ignition[1740]: disks: disks passed
Apr 16 01:55:48.751353 systemd[1]: Reached target local-fs.target - Local File Systems.
Apr 16 01:55:48.740134 ignition[1740]: Ignition finished successfully
Apr 16 01:55:48.751441 systemd[1]: Reached target sysinit.target - System Initialization.
Apr 16 01:55:48.751461 systemd[1]: Reached target basic.target - Basic System.
Apr 16 01:55:48.753413 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT...
Apr 16 01:55:48.798195 systemd-fsck[1748]: ROOT: clean, 15/6361680 files, 408771/6359552 blocks
Apr 16 01:55:48.802202 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT.
Apr 16 01:55:48.810468 kernel: audit: type=1130 audit(1776304548.800:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:48.808372 systemd[1]: Mounting sysroot.mount - /sysroot...
Apr 16 01:55:48.955620 kernel: EXT4-fs (nvme0n1p9): mounted filesystem 0d93cd40-5f29-4019-b3ef-7d3300f309d5 r/w with ordered data mode. Quota mode: none.
Apr 16 01:55:48.955857 systemd[1]: Mounted sysroot.mount - /sysroot.
Apr 16 01:55:48.956828 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System.
Apr 16 01:55:48.964777 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem...
Apr 16 01:55:48.966807 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr...
Apr 16 01:55:48.982016 systemd[1]: Starting flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent...
Apr 16 01:55:48.982509 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot).
Apr 16 01:55:48.982539 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup.
Apr 16 01:55:48.983708 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr.
Apr 16 01:55:48.984974 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup...
Apr 16 01:55:49.011634 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 (259:5) scanned by mount (1758)
Apr 16 01:55:49.011777 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem f94f8bc0-847f-4977-8849-2f7b329ee95c
Apr 16 01:55:49.013825 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm
Apr 16 01:55:49.019889 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations
Apr 16 01:55:49.019928 kernel: BTRFS info (device nvme0n1p6): turning on async discard
Apr 16 01:55:49.022296 kernel: BTRFS info (device nvme0n1p6): enabling free space tree
Apr 16 01:55:49.023407 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem.
Apr 16 01:55:49.193883 coreos-metadata[1760]: Apr 16 01:55:49.193 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1
Apr 16 01:55:49.196483 coreos-metadata[1760]: Apr 16 01:55:49.195 INFO Fetch successful
Apr 16 01:55:49.198004 coreos-metadata[1760]: Apr 16 01:55:49.197 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1
Apr 16 01:55:49.205706 coreos-metadata[1760]: Apr 16 01:55:49.205 INFO Fetch successful
Apr 16 01:55:49.213103 coreos-metadata[1760]: Apr 16 01:55:49.213 INFO wrote hostname ci-4593.1.0-n-f0244e4323 to /sysroot/etc/hostname
Apr 16 01:55:49.216016 systemd[1]: Finished flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent.
Apr 16 01:55:49.226683 kernel: audit: type=1130 audit(1776304549.214:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.526387 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup.
Apr 16 01:55:49.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.531687 systemd[1]: Starting ignition-mount.service - Ignition (mount)...
Apr 16 01:55:49.537080 kernel: audit: type=1130 audit(1776304549.528:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.542737 systemd[1]: Starting sysroot-boot.service - /sysroot/boot...
Apr 16 01:55:49.553741 systemd[1]: sysroot-oem.mount: Deactivated successfully.
Apr 16 01:55:49.555358 kernel: BTRFS info (device nvme0n1p6): last unmount of filesystem f94f8bc0-847f-4977-8849-2f7b329ee95c
Apr 16 01:55:49.577762 ignition[1866]: INFO     : Ignition 2.24.0
Apr 16 01:55:49.579016 ignition[1866]: INFO     : Stage: mount
Apr 16 01:55:49.581701 ignition[1866]: INFO     : no configs at "/usr/lib/ignition/base.d"
Apr 16 01:55:49.581701 ignition[1866]: INFO     : no config dir at "/usr/lib/ignition/base.platform.d/azure"
Apr 16 01:55:49.581701 ignition[1866]: INFO     : mount: mount passed
Apr 16 01:55:49.581701 ignition[1866]: INFO     : Ignition finished successfully
Apr 16 01:55:49.599088 kernel: audit: type=1130 audit(1776304549.581:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.599110 kernel: audit: type=1130 audit(1776304549.586:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:49.579937 systemd[1]: Finished sysroot-boot.service - /sysroot/boot.
Apr 16 01:55:49.583225 systemd[1]: Finished ignition-mount.service - Ignition (mount).
Apr 16 01:55:49.590690 systemd[1]: Starting ignition-files.service - Ignition (files)...
Apr 16 01:55:49.957344 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem...
Apr 16 01:55:49.980617 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 (259:5) scanned by mount (1877)
Apr 16 01:55:49.982943 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem f94f8bc0-847f-4977-8849-2f7b329ee95c
Apr 16 01:55:49.982985 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm
Apr 16 01:55:49.988786 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations
Apr 16 01:55:49.988833 kernel: BTRFS info (device nvme0n1p6): turning on async discard
Apr 16 01:55:49.989918 kernel: BTRFS info (device nvme0n1p6): enabling free space tree
Apr 16 01:55:49.991587 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem.
Apr 16 01:55:50.014720 ignition[1894]: INFO     : Ignition 2.24.0
Apr 16 01:55:50.014720 ignition[1894]: INFO     : Stage: files
Apr 16 01:55:50.017755 ignition[1894]: INFO     : no configs at "/usr/lib/ignition/base.d"
Apr 16 01:55:50.017755 ignition[1894]: INFO     : no config dir at "/usr/lib/ignition/base.platform.d/azure"
Apr 16 01:55:50.017755 ignition[1894]: DEBUG    : files: compiled without relabeling support, skipping
Apr 16 01:55:50.028079 ignition[1894]: INFO     : files: ensureUsers: op(1): [started]  creating or modifying user "core"
Apr 16 01:55:50.028079 ignition[1894]: DEBUG    : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core"
Apr 16 01:55:50.039134 ignition[1894]: INFO     : files: ensureUsers: op(1): [finished] creating or modifying user "core"
Apr 16 01:55:50.042933 ignition[1894]: INFO     : files: ensureUsers: op(2): [started]  adding ssh keys to user "core"
Apr 16 01:55:50.042933 ignition[1894]: INFO     : files: ensureUsers: op(2): [finished] adding ssh keys to user "core"
Apr 16 01:55:50.042933 ignition[1894]: INFO     : files: createFilesystemsFiles: createFiles: op(3): [started]  writing file "/sysroot/etc/flatcar/update.conf"
Apr 16 01:55:50.042933 ignition[1894]: INFO     : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf"
Apr 16 01:55:50.042933 ignition[1894]: INFO     : files: op(4): [started]  processing unit "etcd-member.service"
Apr 16 01:55:50.041382 unknown[1894]: wrote ssh authorized keys file for user: core
Apr 16 01:55:50.058148 ignition[1894]: INFO     : files: op(4): op(5): [started]  writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf"
Apr 16 01:55:50.061757 ignition[1894]: INFO     : files: op(4): op(5): [finished] writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf"
Apr 16 01:55:50.061757 ignition[1894]: INFO     : files: op(4): [finished] processing unit "etcd-member.service"
Apr 16 01:55:50.061757 ignition[1894]: INFO     : files: op(6): [started]  setting preset to enabled for "etcd-member.service"
Apr 16 01:55:50.061757 ignition[1894]: INFO     : files: op(6): [finished] setting preset to enabled for "etcd-member.service"
Apr 16 01:55:50.061757 ignition[1894]: INFO     : files: createResultFile: createFiles: op(7): [started]  writing file "/sysroot/etc/.ignition-result.json"
Apr 16 01:55:50.061757 ignition[1894]: INFO     : files: createResultFile: createFiles: op(7): [finished] writing file "/sysroot/etc/.ignition-result.json"
Apr 16 01:55:50.061757 ignition[1894]: INFO     : files: files passed
Apr 16 01:55:50.061757 ignition[1894]: INFO     : Ignition finished successfully
Apr 16 01:55:50.079985 kernel: audit: type=1130 audit(1776304550.064:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.064584 systemd[1]: Finished ignition-files.service - Ignition (files).
Apr 16 01:55:50.070104 systemd[1]: Starting ignition-quench.service - Ignition (record completion)...
Apr 16 01:55:50.074776 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion...
Apr 16 01:55:50.102686 systemd[1]: ignition-quench.service: Deactivated successfully.
Apr 16 01:55:50.104218 systemd[1]: Finished ignition-quench.service - Ignition (record completion).
Apr 16 01:55:50.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.111647 kernel: audit: type=1130 audit(1776304550.106:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.114225 initrd-setup-root-after-ignition[1925]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory
Apr 16 01:55:50.114225 initrd-setup-root-after-ignition[1925]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory
Apr 16 01:55:50.119178 initrd-setup-root-after-ignition[1929]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory
Apr 16 01:55:50.122091 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion.
Apr 16 01:55:50.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.124256 systemd[1]: Reached target ignition-complete.target - Ignition Complete.
Apr 16 01:55:50.128708 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root...
Apr 16 01:55:50.171912 systemd[1]: initrd-parse-etc.service: Deactivated successfully.
Apr 16 01:55:50.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.172000 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root.
Apr 16 01:55:50.174929 systemd[1]: Reached target initrd-fs.target - Initrd File Systems.
Apr 16 01:55:50.179675 systemd[1]: Reached target initrd.target - Initrd Default Target.
Apr 16 01:55:50.182794 systemd[1]: dracut-mount.service - dracut mount hook was skipped because no trigger condition checks were met.
Apr 16 01:55:50.183454 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook...
Apr 16 01:55:50.207013 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook.
Apr 16 01:55:50.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.211538 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons...
Apr 16 01:55:50.229082 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr.
Apr 16 01:55:50.229294 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups.
Apr 16 01:55:50.234727 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes.
Apr 16 01:55:50.235172 systemd[1]: Stopped target timers.target - Timer Units.
Apr 16 01:55:50.241043 systemd[1]: dracut-pre-pivot.service: Deactivated successfully.
Apr 16 01:55:50.241150 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook.
Apr 16 01:55:50.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.247377 systemd[1]: Stopped target initrd.target - Initrd Default Target.
Apr 16 01:55:50.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.248159 systemd[1]: Stopped target basic.target - Basic System.
Apr 16 01:55:50.248391 systemd[1]: Stopped target ignition-complete.target - Ignition Complete.
Apr 16 01:55:50.248743 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup.
Apr 16 01:55:50.249075 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device.
Apr 16 01:55:50.249418 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System.
Apr 16 01:55:50.249997 systemd[1]: Stopped target remote-fs.target - Remote File Systems.
Apr 16 01:55:50.250074 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems.
Apr 16 01:55:50.250244 systemd[1]: Stopped target sysinit.target - System Initialization.
Apr 16 01:55:50.250479 systemd[1]: Stopped target local-fs.target - Local File Systems.
Apr 16 01:55:50.250692 systemd[1]: Stopped target swap.target - Swaps.
Apr 16 01:55:50.251203 systemd[1]: dracut-pre-mount.service: Deactivated successfully.
Apr 16 01:55:50.251300 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook.
Apr 16 01:55:50.252054 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes.
Apr 16 01:55:50.252306 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre).
Apr 16 01:55:50.252562 systemd[1]: clevis-luks-askpass.path: Deactivated successfully.
Apr 16 01:55:50.253995 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch.
Apr 16 01:55:50.285852 systemd[1]: dracut-initqueue.service: Deactivated successfully.
Apr 16 01:55:50.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.288969 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook.
Apr 16 01:55:50.296157 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully.
Apr 16 01:55:50.297675 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion.
Apr 16 01:55:50.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.301801 systemd[1]: ignition-files.service: Deactivated successfully.
Apr 16 01:55:50.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.301915 systemd[1]: Stopped ignition-files.service - Ignition (files).
Apr 16 01:55:50.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.305757 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully.
Apr 16 01:55:50.305859 systemd[1]: Stopped flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent.
Apr 16 01:55:50.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.311790 systemd[1]: Stopping ignition-mount.service - Ignition (mount)...
Apr 16 01:55:50.316698 systemd[1]: kmod-static-nodes.service: Deactivated successfully.
Apr 16 01:55:50.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.316831 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes.
Apr 16 01:55:50.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.320505 systemd[1]: Stopping sysroot-boot.service - /sysroot/boot...
Apr 16 01:55:50.325651 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully.
Apr 16 01:55:50.325776 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories.
Apr 16 01:55:50.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.328330 systemd[1]: systemd-udev-trigger.service: Deactivated successfully.
Apr 16 01:55:50.328445 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices.
Apr 16 01:55:50.353407 ignition[1949]: INFO     : Ignition 2.24.0
Apr 16 01:55:50.353407 ignition[1949]: INFO     : Stage: umount
Apr 16 01:55:50.353407 ignition[1949]: INFO     : no configs at "/usr/lib/ignition/base.d"
Apr 16 01:55:50.353407 ignition[1949]: INFO     : no config dir at "/usr/lib/ignition/base.platform.d/azure"
Apr 16 01:55:50.353407 ignition[1949]: INFO     : umount: umount passed
Apr 16 01:55:50.353407 ignition[1949]: INFO     : Ignition finished successfully
Apr 16 01:55:50.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.336418 systemd[1]: dracut-pre-trigger.service: Deactivated successfully.
Apr 16 01:55:50.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.336592 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook.
Apr 16 01:55:50.353529 systemd[1]: initrd-cleanup.service: Deactivated successfully.
Apr 16 01:55:50.354647 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons.
Apr 16 01:55:50.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.360444 systemd[1]: ignition-mount.service: Deactivated successfully.
Apr 16 01:55:50.360523 systemd[1]: Stopped ignition-mount.service - Ignition (mount).
Apr 16 01:55:50.365335 systemd[1]: ignition-disks.service: Deactivated successfully.
Apr 16 01:55:50.365381 systemd[1]: Stopped ignition-disks.service - Ignition (disks).
Apr 16 01:55:50.371236 systemd[1]: ignition-kargs.service: Deactivated successfully.
Apr 16 01:55:50.371274 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs).
Apr 16 01:55:50.380140 systemd[1]: ignition-fetch.service: Deactivated successfully.
Apr 16 01:55:50.380188 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch).
Apr 16 01:55:50.382992 systemd[1]: Stopped target network.target - Network.
Apr 16 01:55:50.385636 systemd[1]: ignition-fetch-offline.service: Deactivated successfully.
Apr 16 01:55:50.385688 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline).
Apr 16 01:55:50.390741 systemd[1]: Stopped target paths.target - Path Units.
Apr 16 01:55:50.404258 systemd[1]: systemd-ask-password-console.path: Deactivated successfully.
Apr 16 01:55:50.407641 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch.
Apr 16 01:55:50.408130 systemd[1]: Stopped target slices.target - Slice Units.
Apr 16 01:55:50.408156 systemd[1]: Stopped target sockets.target - Socket Units.
Apr 16 01:55:50.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.408208 systemd[1]: iscsid.socket: Deactivated successfully.
Apr 16 01:55:50.408241 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket.
Apr 16 01:55:50.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.408497 systemd[1]: iscsiuio.socket: Deactivated successfully.
Apr 16 01:55:50.408523 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket.
Apr 16 01:55:50.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.415960 systemd[1]: systemd-journald-audit.socket: Deactivated successfully.
Apr 16 01:55:50.446000 audit: BPF prog-id=9 op=UNLOAD
Apr 16 01:55:50.447000 audit: BPF prog-id=6 op=UNLOAD
Apr 16 01:55:50.415983 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket.
Apr 16 01:55:50.418659 systemd[1]: ignition-setup.service: Deactivated successfully.
Apr 16 01:55:50.418702 systemd[1]: Stopped ignition-setup.service - Ignition (setup).
Apr 16 01:55:50.422678 systemd[1]: ignition-setup-pre.service: Deactivated successfully.
Apr 16 01:55:50.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.422717 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup.
Apr 16 01:55:50.423051 systemd[1]: Stopping systemd-networkd.service - Network Configuration...
Apr 16 01:55:50.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.423512 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution...
Apr 16 01:55:50.424398 systemd[1]: sysroot-boot.mount: Deactivated successfully.
Apr 16 01:55:50.424898 systemd[1]: sysroot-boot.service: Deactivated successfully.
Apr 16 01:55:50.424977 systemd[1]: Stopped sysroot-boot.service - /sysroot/boot.
Apr 16 01:55:50.425448 systemd[1]: initrd-setup-root.service: Deactivated successfully.
Apr 16 01:55:50.425528 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup.
Apr 16 01:55:50.432159 systemd[1]: systemd-networkd.service: Deactivated successfully.
Apr 16 01:55:50.432244 systemd[1]: Stopped systemd-networkd.service - Network Configuration.
Apr 16 01:55:50.441967 systemd[1]: systemd-resolved.service: Deactivated successfully.
Apr 16 01:55:50.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.442045 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution.
Apr 16 01:55:50.447823 systemd[1]: Stopped target network-pre.target - Preparation for Network.
Apr 16 01:55:50.501082 kernel: hv_netvsc f8615163-0000-1000-2000-000d3ab897d2 eth0: Data path switched from VF: enP30832s1
Apr 16 01:55:50.501980 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64
Apr 16 01:55:50.449502 systemd[1]: systemd-networkd.socket: Deactivated successfully.
Apr 16 01:55:50.449668 systemd[1]: Closed systemd-networkd.socket - Network Service Netlink Socket.
Apr 16 01:55:50.453308 systemd[1]: Stopping network-cleanup.service - Network Cleanup...
Apr 16 01:55:50.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.457884 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully.
Apr 16 01:55:50.457941 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline.
Apr 16 01:55:50.458238 systemd[1]: systemd-sysctl.service: Deactivated successfully.
Apr 16 01:55:50.458273 systemd[1]: Stopped systemd-sysctl.service - Apply Kernel Variables.
Apr 16 01:55:50.458818 systemd[1]: systemd-modules-load.service: Deactivated successfully.
Apr 16 01:55:50.458851 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules.
Apr 16 01:55:50.466496 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files...
Apr 16 01:55:50.485318 systemd[1]: systemd-udevd.service: Deactivated successfully.
Apr 16 01:55:50.485470 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files.
Apr 16 01:55:50.491922 systemd[1]: systemd-udevd-control.socket: Deactivated successfully.
Apr 16 01:55:50.491980 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket.
Apr 16 01:55:50.502278 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully.
Apr 16 01:55:50.502318 systemd[1]: Closed systemd-udevd-kernel.socket - udev Kernel Socket.
Apr 16 01:55:50.505021 systemd[1]: dracut-pre-udev.service: Deactivated successfully.
Apr 16 01:55:50.505252 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook.
Apr 16 01:55:50.511739 systemd[1]: dracut-cmdline.service: Deactivated successfully.
Apr 16 01:55:50.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.513065 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook.
Apr 16 01:55:50.537708 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully.
Apr 16 01:55:50.539254 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters.
Apr 16 01:55:50.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.543568 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database...
Apr 16 01:55:50.546115 systemd[1]: systemd-network-generator.service: Deactivated successfully.
Apr 16 01:55:50.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.547858 systemd[1]: Stopped systemd-network-generator.service - Generate network units from Kernel command line.
Apr 16 01:55:50.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.552197 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully.
Apr 16 01:55:50.552242 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev.
Apr 16 01:55:50.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.554218 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
Apr 16 01:55:50.554261 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup.
Apr 16 01:55:50.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.561863 systemd[1]: network-cleanup.service: Deactivated successfully.
Apr 16 01:55:50.561952 systemd[1]: Stopped network-cleanup.service - Network Cleanup.
Apr 16 01:55:50.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:50.567202 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully.
Apr 16 01:55:50.567265 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database.
Apr 16 01:55:50.572798 systemd[1]: Reached target initrd-switch-root.target - Switch Root.
Apr 16 01:55:50.577521 systemd[1]: Starting initrd-switch-root.service - Switch Root...
Apr 16 01:55:50.589031 systemd[1]: Switching root.
Apr 16 01:55:50.634510 systemd-journald[1095]: Journal stopped
Apr 16 01:55:52.331907 systemd-journald[1095]: Received SIGTERM from PID 1 (systemd).
Apr 16 01:55:52.331940 kernel: SELinux:  policy capability network_peer_controls=1
Apr 16 01:55:52.331958 kernel: SELinux:  policy capability open_perms=1
Apr 16 01:55:52.331968 kernel: SELinux:  policy capability extended_socket_class=1
Apr 16 01:55:52.331979 kernel: SELinux:  policy capability always_check_network=0
Apr 16 01:55:52.331991 kernel: SELinux:  policy capability cgroup_seclabel=1
Apr 16 01:55:52.332003 kernel: SELinux:  policy capability nnp_nosuid_transition=1
Apr 16 01:55:52.332015 kernel: SELinux:  policy capability genfs_seclabel_symlinks=0
Apr 16 01:55:52.332030 kernel: SELinux:  policy capability ioctl_skip_cloexec=0
Apr 16 01:55:52.332041 kernel: SELinux:  policy capability userspace_initial_context=0
Apr 16 01:55:52.332057 systemd[1]: Successfully loaded SELinux policy in 94.414ms.
Apr 16 01:55:52.332070 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 3.879ms.
Apr 16 01:55:52.332085 systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE)
Apr 16 01:55:52.332097 systemd[1]: Detected virtualization microsoft.
Apr 16 01:55:52.332109 systemd[1]: Detected architecture x86-64.
Apr 16 01:55:52.332121 systemd[1]: Detected first boot.
Apr 16 01:55:52.332135 systemd[1]: Hostname set to <ci-4593.1.0-n-f0244e4323>.
Apr 16 01:55:52.332152 systemd[1]: Initializing machine ID from random generator.
Apr 16 01:55:52.332166 zram_generator::config[1992]: No configuration found.
Apr 16 01:55:52.332179 kernel: Guest personality initialized and is inactive
Apr 16 01:55:52.332196 kernel: VMCI host device registered (name=vmci, major=10, minor=259)
Apr 16 01:55:52.332208 kernel: Initialized host personality
Apr 16 01:55:52.332221 kernel: NET: Registered PF_VSOCK protocol family
Apr 16 01:55:52.332233 systemd[1]: Populated /etc with preset unit settings.
Apr 16 01:55:52.332251 systemd[1]: initrd-switch-root.service: Deactivated successfully.
Apr 16 01:55:52.332264 systemd[1]: Stopped initrd-switch-root.service - Switch Root.
Apr 16 01:55:52.332277 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1.
Apr 16 01:55:52.332297 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config.
Apr 16 01:55:52.332309 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run.
Apr 16 01:55:52.332320 systemd[1]: Created slice system-getty.slice - Slice /system/getty.
Apr 16 01:55:52.332337 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe.
Apr 16 01:55:52.332347 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty.
Apr 16 01:55:52.332357 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit.
Apr 16 01:55:52.332367 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck.
Apr 16 01:55:52.332376 systemd[1]: Created slice user.slice - User and Session Slice.
Apr 16 01:55:52.332385 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch.
Apr 16 01:55:52.332396 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch.
Apr 16 01:55:52.332406 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch.
Apr 16 01:55:52.332415 systemd[1]: Set up automount boot.automount - Boot partition Automount Point.
Apr 16 01:55:52.332425 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point.
Apr 16 01:55:52.332438 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM...
Apr 16 01:55:52.332449 systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0...
Apr 16 01:55:52.332460 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre).
Apr 16 01:55:52.332471 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes.
Apr 16 01:55:52.332482 systemd[1]: Stopped target initrd-switch-root.target - Switch Root.
Apr 16 01:55:52.332493 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems.
Apr 16 01:55:52.332505 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System.
Apr 16 01:55:52.332515 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes.
Apr 16 01:55:52.332525 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes.
Apr 16 01:55:52.332537 systemd[1]: Reached target remote-fs.target - Remote File Systems.
Apr 16 01:55:52.332548 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes.
Apr 16 01:55:52.332559 systemd[1]: Reached target slices.target - Slice Units.
Apr 16 01:55:52.332570 systemd[1]: Reached target swap.target - Swaps.
Apr 16 01:55:52.332581 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes.
Apr 16 01:55:52.332591 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket.
Apr 16 01:55:52.332627 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption.
Apr 16 01:55:52.332639 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket.
Apr 16 01:55:52.332650 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket.
Apr 16 01:55:52.332661 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket.
Apr 16 01:55:52.332673 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket.
Apr 16 01:55:52.332683 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket.
Apr 16 01:55:52.332694 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket.
Apr 16 01:55:52.332705 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket.
Apr 16 01:55:52.332716 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket.
Apr 16 01:55:52.332728 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System...
Apr 16 01:55:52.332738 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System...
Apr 16 01:55:52.332750 systemd[1]: Mounting media.mount - External Media Directory...
Apr 16 01:55:52.332761 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen).
Apr 16 01:55:52.332771 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System...
Apr 16 01:55:52.332783 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System...
Apr 16 01:55:52.332794 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp...
Apr 16 01:55:52.332806 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw).
Apr 16 01:55:52.332818 systemd[1]: Reached target machines.target - Containers.
Apr 16 01:55:52.332830 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files...
Apr 16 01:55:52.332840 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met.
Apr 16 01:55:52.332851 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes...
Apr 16 01:55:52.332862 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs...
Apr 16 01:55:52.332873 systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod...
Apr 16 01:55:52.332884 systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm...
Apr 16 01:55:52.332897 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore...
Apr 16 01:55:52.332907 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse...
Apr 16 01:55:52.332917 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop...
Apr 16 01:55:52.332928 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf).
Apr 16 01:55:52.332939 systemd[1]: systemd-fsck-root.service: Deactivated successfully.
Apr 16 01:55:52.332950 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device.
Apr 16 01:55:52.332961 systemd[1]: systemd-fsck-usr.service: Deactivated successfully.
Apr 16 01:55:52.332974 systemd[1]: Stopped systemd-fsck-usr.service.
Apr 16 01:55:52.332984 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67).
Apr 16 01:55:52.332995 systemd[1]: Starting systemd-journald.service - Journal Service...
Apr 16 01:55:52.333005 kernel: fuse: init (API version 7.41)
Apr 16 01:55:52.333016 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules...
Apr 16 01:55:52.333027 systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line...
Apr 16 01:55:52.333040 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems...
Apr 16 01:55:52.333052 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials...
Apr 16 01:55:52.333062 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices...
Apr 16 01:55:52.333073 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen).
Apr 16 01:55:52.333083 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System.
Apr 16 01:55:52.333095 kernel: ACPI: bus type drm_connector registered
Apr 16 01:55:52.333105 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System.
Apr 16 01:55:52.333118 systemd[1]: Mounted media.mount - External Media Directory.
Apr 16 01:55:52.333129 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System.
Apr 16 01:55:52.333139 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System.
Apr 16 01:55:52.333150 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp.
Apr 16 01:55:52.333175 systemd-journald[2077]: Collecting audit messages is enabled.
Apr 16 01:55:52.333202 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes.
Apr 16 01:55:52.333213 systemd-journald[2077]: Journal started
Apr 16 01:55:52.333236 systemd-journald[2077]: Runtime Journal (/run/log/journal/01189526b1c646318a402b8f81c8aba9) is 8M, max 158.5M, 150.5M free.
Apr 16 01:55:52.016000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1
Apr 16 01:55:52.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.211000 audit: BPF prog-id=14 op=UNLOAD
Apr 16 01:55:52.211000 audit: BPF prog-id=13 op=UNLOAD
Apr 16 01:55:52.212000 audit: BPF prog-id=15 op=LOAD
Apr 16 01:55:52.212000 audit: BPF prog-id=16 op=LOAD
Apr 16 01:55:52.212000 audit: BPF prog-id=17 op=LOAD
Apr 16 01:55:52.327000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1
Apr 16 01:55:52.327000 audit[2077]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffebace01c0 a2=4000 a3=0 items=0 ppid=1 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null)
Apr 16 01:55:52.327000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald"
Apr 16 01:55:51.776956 systemd[1]: Queued start job for default target multi-user.target.
Apr 16 01:55:51.782234 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device - /dev/nvme0n1p6.
Apr 16 01:55:51.782557 systemd[1]: systemd-journald.service: Deactivated successfully.
Apr 16 01:55:52.341518 systemd[1]: Started systemd-journald.service - Journal Service.
Apr 16 01:55:52.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.343223 systemd[1]: modprobe@configfs.service: Deactivated successfully.
Apr 16 01:55:52.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.344833 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs.
Apr 16 01:55:52.347475 systemd[1]: modprobe@dm_mod.service: Deactivated successfully.
Apr 16 01:55:52.347634 systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod.
Apr 16 01:55:52.350326 systemd[1]: modprobe@drm.service: Deactivated successfully.
Apr 16 01:55:52.350471 systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm.
Apr 16 01:55:52.352767 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully.
Apr 16 01:55:52.352915 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore.
Apr 16 01:55:52.355803 systemd[1]: modprobe@fuse.service: Deactivated successfully.
Apr 16 01:55:52.355952 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse.
Apr 16 01:55:52.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.360026 systemd[1]: modprobe@loop.service: Deactivated successfully.
Apr 16 01:55:52.360194 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop.
Apr 16 01:55:52.362632 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules.
Apr 16 01:55:52.365465 systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line.
Apr 16 01:55:52.369139 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems.
Apr 16 01:55:52.372499 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials.
Apr 16 01:55:52.388312 systemd[1]: Reached target network-pre.target - Preparation for Network.
Apr 16 01:55:52.392447 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket.
Apr 16 01:55:52.395696 systemd[1]: remount-root.service - Remount Root File System was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/).
Apr 16 01:55:52.395724 systemd[1]: Reached target local-fs.target - Local File Systems.
Apr 16 01:55:52.397751 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management.
Apr 16 01:55:52.400095 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met.
Apr 16 01:55:52.400218 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met.
Apr 16 01:55:52.400995 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database...
Apr 16 01:55:52.404713 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage...
Apr 16 01:55:52.408717 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore).
Apr 16 01:55:52.409851 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed...
Apr 16 01:55:52.412127 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met.
Apr 16 01:55:52.417307 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables...
Apr 16 01:55:52.420511 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/...
Apr 16 01:55:52.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.423393 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices.
Apr 16 01:55:52.428978 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files.
Apr 16 01:55:52.433086 systemd-journald[2077]: Time spent on flushing to /var/log/journal/01189526b1c646318a402b8f81c8aba9 is 48.367ms for 1109 entries.
Apr 16 01:55:52.433086 systemd-journald[2077]: System Journal (/var/log/journal/01189526b1c646318a402b8f81c8aba9) is 8M, max 2.2G, 2.2G free.
Apr 16 01:55:52.506534 systemd-journald[2077]: Received client request to flush runtime journal.
Apr 16 01:55:52.506572 kernel: loop1: detected capacity change from 0 to 25512
Apr 16 01:55:52.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.435074 systemd[1]: Starting systemd-sysusers.service - Create System Users...
Apr 16 01:55:52.438117 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed.
Apr 16 01:55:52.442118 systemd[1]: Reached target first-boot-complete.target - First Boot Complete.
Apr 16 01:55:52.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.449509 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk...
Apr 16 01:55:52.471967 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables.
Apr 16 01:55:52.508850 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage.
Apr 16 01:55:52.567773 systemd[1]: Finished systemd-sysusers.service - Create System Users.
Apr 16 01:55:52.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.568000 audit: BPF prog-id=18 op=LOAD
Apr 16 01:55:52.568000 audit: BPF prog-id=19 op=LOAD
Apr 16 01:55:52.568000 audit: BPF prog-id=20 op=LOAD
Apr 16 01:55:52.570247 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer...
Apr 16 01:55:52.574000 audit: BPF prog-id=21 op=LOAD
Apr 16 01:55:52.578736 systemd[1]: Starting systemd-resolved.service - Network Name Resolution...
Apr 16 01:55:52.585000 audit: BPF prog-id=22 op=LOAD
Apr 16 01:55:52.585000 audit: BPF prog-id=23 op=LOAD
Apr 16 01:55:52.585000 audit: BPF prog-id=24 op=LOAD
Apr 16 01:55:52.593000 audit: BPF prog-id=25 op=LOAD
Apr 16 01:55:52.593000 audit: BPF prog-id=26 op=LOAD
Apr 16 01:55:52.593000 audit: BPF prog-id=27 op=LOAD
Apr 16 01:55:52.581758 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev...
Apr 16 01:55:52.589786 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager...
Apr 16 01:55:52.596778 systemd[1]: Starting systemd-userdbd.service - User Database Manager...
Apr 16 01:55:52.648351 systemd-nsresourced[2149]: Not setting up BPF subsystem, as functionality has been disabled at compile time.
Apr 16 01:55:52.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.649275 systemd-tmpfiles[2148]: ACLs are not supported, ignoring.
Apr 16 01:55:52.649286 systemd-tmpfiles[2148]: ACLs are not supported, ignoring.
Apr 16 01:55:52.651827 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager.
Apr 16 01:55:52.654960 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev.
Apr 16 01:55:52.668438 systemd[1]: Started systemd-userdbd.service - User Database Manager.
Apr 16 01:55:52.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.678119 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk.
Apr 16 01:55:52.729623 kernel: loop2: detected capacity change from 0 to 111560
Apr 16 01:55:52.770393 systemd-oomd[2146]: No swap; memory pressure usage will be degraded
Apr 16 01:55:52.773149 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer.
Apr 16 01:55:52.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.783709 systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
Apr 16 01:55:52.785498 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System...
Apr 16 01:55:52.790685 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System...
Apr 16 01:55:52.802826 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System.
Apr 16 01:55:52.805155 systemd-resolved[2147]: Positive Trust Anchors:
Apr 16 01:55:52.805273 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System.
Apr 16 01:55:52.806769 systemd-resolved[2147]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
Apr 16 01:55:52.807247 systemd-resolved[2147]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
Apr 16 01:55:52.808510 systemd-resolved[2147]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
Apr 16 01:55:52.855824 systemd-resolved[2147]: Using system hostname 'ci-4593.1.0-n-f0244e4323'.
Apr 16 01:55:52.856833 systemd[1]: Started systemd-resolved.service - Network Name Resolution.
Apr 16 01:55:52.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.858126 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups.
Apr 16 01:55:52.883617 kernel: loop3: detected capacity change from 0 to 50784
Apr 16 01:55:52.984509 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database.
Apr 16 01:55:52.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:52.987000 audit: BPF prog-id=8 op=UNLOAD
Apr 16 01:55:52.987000 audit: BPF prog-id=7 op=UNLOAD
Apr 16 01:55:52.987000 audit: BPF prog-id=28 op=LOAD
Apr 16 01:55:52.987000 audit: BPF prog-id=29 op=LOAD
Apr 16 01:55:52.990094 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files...
Apr 16 01:55:53.020339 systemd-udevd[2176]: Using default interface naming scheme 'v257'.
Apr 16 01:55:53.024625 kernel: loop4: detected capacity change from 0 to 25512
Apr 16 01:55:53.037644 kernel: loop5: detected capacity change from 0 to 111560
Apr 16 01:55:53.048665 kernel: loop6: detected capacity change from 0 to 50784
Apr 16 01:55:53.065535 (sd-merge)[2178]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'oem-azure.raw'.
Apr 16 01:55:53.068454 (sd-merge)[2178]: Merged extensions into '/usr'.
Apr 16 01:55:53.071350 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/.
Apr 16 01:55:53.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.074546 systemd[1]: Starting ensure-sysext.service...
Apr 16 01:55:53.082741 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories...
Apr 16 01:55:53.106725 systemd[1]: Reload requested from client PID 2180 ('systemctl') (unit ensure-sysext.service)...
Apr 16 01:55:53.106751 systemd[1]: Reloading...
Apr 16 01:55:53.211659 zram_generator::config[2238]: No configuration found.
Apr 16 01:55:53.263019 systemd-tmpfiles[2181]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring.
Apr 16 01:55:53.263815 systemd-tmpfiles[2181]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring.
Apr 16 01:55:53.264304 systemd-tmpfiles[2181]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring.
Apr 16 01:55:53.265403 systemd-tmpfiles[2181]: ACLs are not supported, ignoring.
Apr 16 01:55:53.265449 systemd-tmpfiles[2181]: ACLs are not supported, ignoring.
Apr 16 01:55:53.271804 kernel: hv_vmbus: registering driver hyperv_fb
Apr 16 01:55:53.273643 kernel: hv_vmbus: registering driver hv_balloon
Apr 16 01:55:53.278679 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0
Apr 16 01:55:53.292790 kernel: hyperv_fb: Synthvid Version major 3, minor 5
Apr 16 01:55:53.296630 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608
Apr 16 01:55:53.297991 kernel: Console: switching to colour dummy device 80x25
Apr 16 01:55:53.309654 kernel: Console: switching to colour frame buffer device 128x48
Apr 16 01:55:53.328617 kernel: mousedev: PS/2 mouse device common for all mice
Apr 16 01:55:53.476625 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#255 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001
Apr 16 01:55:53.501008 systemd[1]: Condition check resulted in dev-ttyS0.device - /dev/ttyS0 being skipped.
Apr 16 01:55:53.501285 systemd[1]: Reloading finished in 394 ms.
Apr 16 01:55:53.524144 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files.
Apr 16 01:55:53.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.533000 audit: BPF prog-id=30 op=LOAD
Apr 16 01:55:53.533000 audit: BPF prog-id=15 op=UNLOAD
Apr 16 01:55:53.533000 audit: BPF prog-id=31 op=LOAD
Apr 16 01:55:53.533000 audit: BPF prog-id=32 op=LOAD
Apr 16 01:55:53.533000 audit: BPF prog-id=16 op=UNLOAD
Apr 16 01:55:53.533000 audit: BPF prog-id=17 op=UNLOAD
Apr 16 01:55:53.534000 audit: BPF prog-id=33 op=LOAD
Apr 16 01:55:53.534000 audit: BPF prog-id=21 op=UNLOAD
Apr 16 01:55:53.535000 audit: BPF prog-id=34 op=LOAD
Apr 16 01:55:53.535000 audit: BPF prog-id=18 op=UNLOAD
Apr 16 01:55:53.535000 audit: BPF prog-id=35 op=LOAD
Apr 16 01:55:53.535000 audit: BPF prog-id=36 op=LOAD
Apr 16 01:55:53.535000 audit: BPF prog-id=19 op=UNLOAD
Apr 16 01:55:53.535000 audit: BPF prog-id=20 op=UNLOAD
Apr 16 01:55:53.535000 audit: BPF prog-id=37 op=LOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=25 op=UNLOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=38 op=LOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=39 op=LOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=26 op=UNLOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=27 op=UNLOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=40 op=LOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=41 op=LOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=28 op=UNLOAD
Apr 16 01:55:53.536000 audit: BPF prog-id=29 op=UNLOAD
Apr 16 01:55:53.537000 audit: BPF prog-id=42 op=LOAD
Apr 16 01:55:53.547000 audit: BPF prog-id=22 op=UNLOAD
Apr 16 01:55:53.547000 audit: BPF prog-id=43 op=LOAD
Apr 16 01:55:53.547000 audit: BPF prog-id=44 op=LOAD
Apr 16 01:55:53.547000 audit: BPF prog-id=23 op=UNLOAD
Apr 16 01:55:53.547000 audit: BPF prog-id=24 op=UNLOAD
Apr 16 01:55:53.568833 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen).
Apr 16 01:55:53.569201 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met.
Apr 16 01:55:53.571819 systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod...
Apr 16 01:55:53.576998 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore...
Apr 16 01:55:53.581806 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop...
Apr 16 01:55:53.583883 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met.
Apr 16 01:55:53.584046 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met.
Apr 16 01:55:53.584146 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67).
Apr 16 01:55:53.583000 audit: BPF prog-id=45 op=LOAD
Apr 16 01:55:53.586925 systemd[1]: Starting systemd-networkd.service - Network Configuration...
Apr 16 01:55:53.591681 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup...
Apr 16 01:55:53.593759 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen).
Apr 16 01:55:53.603536 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen).
Apr 16 01:55:53.605903 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met.
Apr 16 01:55:53.608333 systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm...
Apr 16 01:55:53.611769 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met.
Apr 16 01:55:53.611992 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met.
Apr 16 01:55:53.612127 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67).
Apr 16 01:55:53.612354 systemd[1]: Reached target time-set.target - System Time Set.
Apr 16 01:55:53.615283 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen).
Apr 16 01:55:53.618582 systemd[1]: modprobe@dm_mod.service: Deactivated successfully.
Apr 16 01:55:53.618798 systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod.
Apr 16 01:55:53.619233 systemd-tmpfiles[2181]: Detected autofs mount point /boot during canonicalization of boot.
Apr 16 01:55:53.619240 systemd-tmpfiles[2181]: Skipping /boot
Apr 16 01:55:53.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.637667 systemd[1]: Finished ensure-sysext.service.
Apr 16 01:55:53.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.640720 systemd[1]: modprobe@drm.service: Deactivated successfully.
Apr 16 01:55:53.640910 systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm.
Apr 16 01:55:53.663289 systemd-tmpfiles[2181]: Detected autofs mount point /boot during canonicalization of boot.
Apr 16 01:55:53.663373 systemd-tmpfiles[2181]: Skipping /boot
Apr 16 01:55:53.669065 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully.
Apr 16 01:55:53.669272 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore.
Apr 16 01:55:53.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.676733 kernel: kauditd_printk_skb: 153 callbacks suppressed
Apr 16 01:55:53.676780 kernel: audit: type=1130 audit(1776304553.671:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.677008 systemd[1]: modprobe@loop.service: Deactivated successfully.
Apr 16 01:55:53.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.681005 kernel: audit: type=1131 audit(1776304553.675:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.680674 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop.
Apr 16 01:55:53.687317 kernel: audit: type=1130 audit(1776304553.680:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.687363 kernel: audit: type=1131 audit(1776304553.680:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.687944 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories.
Apr 16 01:55:53.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.694627 kernel: audit: type=1130 audit(1776304553.689:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.696160 systemd[1]: Starting audit-rules.service - Load Audit Rules...
Apr 16 01:55:53.700746 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs...
Apr 16 01:55:53.704794 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache...
Apr 16 01:55:53.710762 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog...
Apr 16 01:55:53.712883 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore).
Apr 16 01:55:53.712936 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met.
Apr 16 01:55:53.717348 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP...
Apr 16 01:55:53.908367 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
Apr 16 01:55:53.908613 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup.
Apr 16 01:55:53.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.914342 kernel: audit: type=1130 audit(1776304553.909:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.914562 kernel: audit: type=1131 audit(1776304553.909:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.917727 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup...
Apr 16 01:55:53.972109 kernel: audit: type=1127 audit(1776304553.960:204): pid=2348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.960000 audit[2348]: SYSTEM_BOOT pid=2348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.973795 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP.
Apr 16 01:55:53.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:53.979630 kernel: audit: type=1130 audit(1776304553.974:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:54.038621 kernel: kvm_intel: Using Hyper-V Enlightened VMCS
Apr 16 01:55:54.108857 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM.
Apr 16 01:55:54.114046 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM...
Apr 16 01:55:54.116750 systemd-networkd[2331]: lo: Link UP
Apr 16 01:55:54.116756 systemd-networkd[2331]: lo: Gained carrier
Apr 16 01:55:54.118269 systemd[1]: Started systemd-networkd.service - Network Configuration.
Apr 16 01:55:54.118394 systemd[1]: Reached target network.target - Network.
Apr 16 01:55:54.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:54.126643 kernel: audit: type=1130 audit(1776304554.116:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:54.126706 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16
Apr 16 01:55:54.123751 systemd-networkd[2331]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network
Apr 16 01:55:54.123755 systemd-networkd[2331]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network.
Apr 16 01:55:54.125209 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd...
Apr 16 01:55:54.134984 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64
Apr 16 01:55:54.135239 kernel: hv_netvsc f8615163-0000-1000-2000-000d3ab897d2 eth0: Data path switched to VF: enP30832s1
Apr 16 01:55:54.136125 systemd-networkd[2331]: enP30832s1: Link UP
Apr 16 01:55:54.136226 systemd-networkd[2331]: eth0: Link UP
Apr 16 01:55:54.136230 systemd-networkd[2331]: eth0: Gained carrier
Apr 16 01:55:54.136244 systemd-networkd[2331]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network
Apr 16 01:55:54.137144 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Configured...
Apr 16 01:55:54.142353 systemd-networkd[2331]: enP30832s1: Gained carrier
Apr 16 01:55:54.155652 systemd-networkd[2331]: eth0: DHCPv4 address 10.0.0.12/24, gateway 10.0.0.1 acquired from 168.63.129.16
Apr 16 01:55:54.315332 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd.
Apr 16 01:55:54.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:54.322553 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog.
Apr 16 01:55:54.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:54.359286 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM.
Apr 16 01:55:54.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:55:54.825000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1
Apr 16 01:55:54.825000 audit[2392]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcaf3340e0 a2=420 a3=0 items=0 ppid=2344 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null)
Apr 16 01:55:54.825000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
Apr 16 01:55:54.827829 augenrules[2392]: No rules
Apr 16 01:55:54.828293 systemd[1]: audit-rules.service: Deactivated successfully.
Apr 16 01:55:54.828726 systemd[1]: Finished audit-rules.service - Load Audit Rules.
Apr 16 01:55:55.066913 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup.
Apr 16 01:55:55.297782 systemd-networkd[2331]: eth0: Gained IPv6LL
Apr 16 01:55:55.300027 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Configured.
Apr 16 01:55:55.302832 systemd[1]: Reached target network-online.target - Network is Online.
Apr 16 01:55:56.411187 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs.
Apr 16 01:55:56.412863 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt).
Apr 16 01:56:07.015431 ldconfig[2346]: /sbin/ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start.
Apr 16 01:56:07.164993 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache.
Apr 16 01:56:07.169113 systemd[1]: Starting systemd-update-done.service - Update is Completed...
Apr 16 01:56:07.185594 systemd[1]: Finished systemd-update-done.service - Update is Completed.
Apr 16 01:56:07.187275 systemd[1]: Reached target sysinit.target - System Initialization.
Apr 16 01:56:07.189871 systemd[1]: Started motdgen.path - Watch for update engine configuration changes.
Apr 16 01:56:07.191292 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data.
Apr 16 01:56:07.192922 systemd[1]: Started google-oslogin-cache.timer - NSS cache refresh timer.
Apr 16 01:56:07.195767 systemd[1]: Started logrotate.timer - Daily rotation of log files.
Apr 16 01:56:07.197052 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information..
Apr 16 01:56:07.198432 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update.
Apr 16 01:56:07.201751 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update.
Apr 16 01:56:07.204648 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories.
Apr 16 01:56:07.207651 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate).
Apr 16 01:56:07.207695 systemd[1]: Reached target paths.target - Path Units.
Apr 16 01:56:07.210654 systemd[1]: Reached target timers.target - Timer Units.
Apr 16 01:56:07.218532 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket.
Apr 16 01:56:07.222527 systemd[1]: Starting docker.socket - Docker Socket for the API...
Apr 16 01:56:07.227143 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local).
Apr 16 01:56:07.230757 systemd[1]: Listening on sshd-vsock.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_VSOCK).
Apr 16 01:56:07.233660 systemd[1]: Reached target ssh-access.target - SSH Access Available.
Apr 16 01:56:07.244011 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket.
Apr 16 01:56:07.247901 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket.
Apr 16 01:56:07.252170 systemd[1]: Listening on docker.socket - Docker Socket for the API.
Apr 16 01:56:07.255407 systemd[1]: Reached target sockets.target - Socket Units.
Apr 16 01:56:07.256687 systemd[1]: Reached target basic.target - Basic System.
Apr 16 01:56:07.259716 systemd[1]: addon-config@oem.service - Configure Addon /oem was skipped because no trigger condition checks were met.
Apr 16 01:56:07.259743 systemd[1]: addon-run@oem.service - Run Addon /oem was skipped because no trigger condition checks were met.
Apr 16 01:56:07.306697 systemd[1]: Starting chronyd.service - NTP client/server...
Apr 16 01:56:07.311696 systemd[1]: Starting containerd.service - containerd container runtime...
Apr 16 01:56:07.316523 systemd[1]: Starting coreos-metadata.service - Flatcar Metadata Agent...
Apr 16 01:56:07.319480 systemd[1]: Starting dbus.service - D-Bus System Message Bus...
Apr 16 01:56:07.325822 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown...
Apr 16 01:56:07.330829 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit...
Apr 16 01:56:07.336793 systemd[1]: Starting extend-filesystems.service - Extend Filesystems...
Apr 16 01:56:07.340699 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS was skipped because of an unmet condition check (ConditionPathExists=/oem/bin/flatcar-setup-environment).
Apr 16 01:56:07.343724 systemd[1]: Starting google-oslogin-cache.service - NSS cache refresh...
Apr 16 01:56:07.345748 systemd[1]: hv_fcopy_uio_daemon.service - Hyper-V FCOPY UIO daemon was skipped because of an unmet condition check (ConditionPathExists=/sys/bus/vmbus/devices/eb765408-105f-49b6-b4aa-c123b64d17d4/uio).
Apr 16 01:56:07.349934 systemd[1]: Started hv_kvp_daemon.service - Hyper-V KVP daemon.
Apr 16 01:56:07.353627 systemd[1]: hv_vss_daemon.service - Hyper-V VSS daemon was skipped because of an unmet condition check (ConditionPathExists=/dev/vmbus/hv_vss).
Apr 16 01:56:07.356063 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd...
Apr 16 01:56:07.360077 systemd[1]: Starting nvidia.service - NVIDIA Configure Service...
Apr 16 01:56:07.363620 jq[2414]: false
Apr 16 01:56:07.366739 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline...
Apr 16 01:56:07.372643 KVP[2417]: KVP starting; pid is:2417
Apr 16 01:56:07.373738 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys...
Apr 16 01:56:07.379244 KVP[2417]: KVP LIC Version: 3.1
Apr 16 01:56:07.379622 kernel: hv_utils: KVP IC version 4.0
Apr 16 01:56:07.381215 systemd[1]: Starting systemd-logind.service - User Login Management...
Apr 16 01:56:07.383712 systemd[1]: tcsd.service - TCG Core Services Daemon was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0).
Apr 16 01:56:07.385844 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details.
Apr 16 01:56:07.386786 systemd[1]: Starting update-engine.service - Update Engine...
Apr 16 01:56:07.395435 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition...
Apr 16 01:56:07.399634 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown.
Apr 16 01:56:07.402075 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'.
Apr 16 01:56:07.402292 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped.
Apr 16 01:56:07.408202 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully.
Apr 16 01:56:07.408846 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline.
Apr 16 01:56:07.413966 jq[2429]: true
Apr 16 01:56:07.425773 jq[2440]: true
Apr 16 01:56:07.475877 extend-filesystems[2415]: Found /dev/nvme0n1p6
Apr 16 01:56:07.480814 systemd[1]: motdgen.service: Deactivated successfully.
Apr 16 01:56:07.484739 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd.
Apr 16 01:56:07.521972 chronyd[2406]: chronyd version 4.8 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER -SIGND +NTS +SECHASH +IPV6 -DEBUG)
Apr 16 01:56:07.773512 google_oslogin_nss_cache[2416]: oslogin_cache_refresh[2416]: Refreshing passwd entry cache
Apr 16 01:56:07.773477 oslogin_cache_refresh[2416]: Refreshing passwd entry cache
Apr 16 01:56:07.784059 google_oslogin_nss_cache[2416]: oslogin_cache_refresh[2416]: Failure getting users, quitting
Apr 16 01:56:07.784059 google_oslogin_nss_cache[2416]: oslogin_cache_refresh[2416]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak.
Apr 16 01:56:07.784047 oslogin_cache_refresh[2416]: Failure getting users, quitting
Apr 16 01:56:07.784187 google_oslogin_nss_cache[2416]: oslogin_cache_refresh[2416]: Refreshing group entry cache
Apr 16 01:56:07.784062 oslogin_cache_refresh[2416]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak.
Apr 16 01:56:07.784102 oslogin_cache_refresh[2416]: Refreshing group entry cache
Apr 16 01:56:07.793475 google_oslogin_nss_cache[2416]: oslogin_cache_refresh[2416]: Failure getting groups, quitting
Apr 16 01:56:07.793475 google_oslogin_nss_cache[2416]: oslogin_cache_refresh[2416]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak.
Apr 16 01:56:07.793464 oslogin_cache_refresh[2416]: Failure getting groups, quitting
Apr 16 01:56:07.793473 oslogin_cache_refresh[2416]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak.
Apr 16 01:56:07.794712 systemd[1]: google-oslogin-cache.service: Deactivated successfully.
Apr 16 01:56:07.794954 systemd[1]: Finished google-oslogin-cache.service - NSS cache refresh.
Apr 16 01:56:07.912450 chronyd[2406]: Timezone right/UTC failed leap second check, ignoring
Apr 16 01:56:07.912632 chronyd[2406]: Loaded seccomp filter (level 2)
Apr 16 01:56:07.912795 systemd[1]: Started chronyd.service - NTP client/server.
Apr 16 01:56:07.965940 update_engine[2428]: I20260416 01:56:07.965871  2428 main.cc:92] Flatcar Update Engine starting
Apr 16 01:56:08.017142 extend-filesystems[2415]: Found /dev/nvme0n1p9
Apr 16 01:56:08.027530 systemd[1]: Finished nvidia.service - NVIDIA Configure Service.
Apr 16 01:56:08.664184 update_engine[2428]: I20260416 01:56:08.509017  2428 update_check_scheduler.cc:74] Next update check in 5m13s
Apr 16 01:56:08.505594 dbus-daemon[2409]: [system] SELinux support is enabled
Apr 16 01:56:08.664407 extend-filesystems[2415]: Checking size of /dev/nvme0n1p9
Apr 16 01:56:08.664407 extend-filesystems[2415]: Resized partition /dev/nvme0n1p9
Apr 16 01:56:08.064230 systemd-logind[2426]: New seat seat0.
Apr 16 01:56:08.673648 extend-filesystems[2490]: resize2fs 1.47.3 (8-Jul-2025)
Apr 16 01:56:08.505827 systemd[1]: Started dbus.service - D-Bus System Message Bus.
Apr 16 01:56:08.617531 systemd-logind[2426]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Apr 16 01:56:08.619645 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/oem/cloud-config.yml was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml).
Apr 16 01:56:08.619688 systemd[1]: Reached target system-config.target - Load system-provided cloud configs.
Apr 16 01:56:08.622874 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url).
Apr 16 01:56:08.622893 systemd[1]: Reached target user-config.target - Load user-provided cloud configs.
Apr 16 01:56:08.631783 systemd[1]: Started systemd-logind.service - User Login Management.
Apr 16 01:56:08.640853 systemd[1]: Started update-engine.service - Update Engine.
Apr 16 01:56:08.650833 systemd[1]: Started locksmithd.service - Cluster reboot manager.
Apr 16 01:56:08.682447 coreos-metadata[2408]: Apr 16 01:56:08.682 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1
Apr 16 01:56:08.689048 coreos-metadata[2408]: Apr 16 01:56:08.689 INFO Fetch successful
Apr 16 01:56:08.689048 coreos-metadata[2408]: Apr 16 01:56:08.689 INFO Fetching http://168.63.129.16/machine/?comp=goalstate: Attempt #1
Apr 16 01:56:08.692636 coreos-metadata[2408]: Apr 16 01:56:08.692 INFO Fetch successful
Apr 16 01:56:08.693989 coreos-metadata[2408]: Apr 16 01:56:08.693 INFO Fetching http://168.63.129.16/machine/cfcf45ee-3fd7-465e-9ad0-a02773735103/359394f1%2D8f15%2D4d12%2Db871%2D21e2336a5152.%5Fci%2D4593.1.0%2Dn%2Df0244e4323?comp=config&type=sharedConfig&incarnation=1: Attempt #1
Apr 16 01:56:08.694039 coreos-metadata[2408]: Apr 16 01:56:08.693 INFO Fetch successful
Apr 16 01:56:08.694039 coreos-metadata[2408]: Apr 16 01:56:08.694 INFO Fetching http://169.254.169.254/metadata/instance/compute/vmSize?api-version=2017-08-01&format=text: Attempt #1
Apr 16 01:56:08.704364 coreos-metadata[2408]: Apr 16 01:56:08.704 INFO Fetch successful
Apr 16 01:56:08.729136 systemd[1]: Finished coreos-metadata.service - Flatcar Metadata Agent.
Apr 16 01:56:08.732163 systemd[1]: Starting etcd-member.service - etcd (System Application Container)...
Apr 16 01:56:08.733665 systemd[1]: packet-phone-home.service - Report Success to Packet was skipped because no trigger condition checks were met.
Apr 16 01:56:08.737867 (-wrapper)[2511]: etcd-member.service: Referenced but unset environment variable evaluates to an empty string: ETCD_OPTS
Apr 16 01:56:10.189609 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 6359552 to 6376955 blocks
Apr 16 01:56:10.189698 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 6376955
Apr 16 01:56:09.767897 locksmithd[2504]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot"
Apr 16 01:56:10.215175 extend-filesystems[2490]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required
Apr 16 01:56:10.215175 extend-filesystems[2490]: old_desc_blocks = 4, new_desc_blocks = 4
Apr 16 01:56:10.215175 extend-filesystems[2490]: The filesystem on /dev/nvme0n1p9 is now 6376955 (4k) blocks long.
Apr 16 01:56:10.307410 extend-filesystems[2415]: Resized filesystem in /dev/nvme0n1p9
Apr 16 01:56:10.217442 systemd[1]: extend-filesystems.service: Deactivated successfully.
Apr 16 01:56:10.309863 containerd[2462]: time="2026-04-16T01:56:10Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8
Apr 16 01:56:10.309863 containerd[2462]: time="2026-04-16T01:56:10.309314791Z" level=info msg="starting containerd" revision=fcd43222d6b07379a4be9786bda52438f0dd16a1 version=v2.1.5
Apr 16 01:56:10.217711 systemd[1]: Finished extend-filesystems.service - Extend Filesystems.
Apr 16 01:56:10.312674 sshd_keygen[2473]: ssh-keygen: generating new host keys: RSA ECDSA ED25519
Apr 16 01:56:10.318211 bash[2460]: Updated "/home/core/.ssh/authorized_keys"
Apr 16 01:56:10.320902 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition.
Apr 16 01:56:10.325321 systemd[1]: sshkeys.service was skipped because no trigger condition checks were met.
Apr 16 01:56:10.327871 containerd[2462]: time="2026-04-16T01:56:10.327841497Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="10.457µs"
Apr 16 01:56:10.328305 containerd[2462]: time="2026-04-16T01:56:10.328281351Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1
Apr 16 01:56:10.328383 containerd[2462]: time="2026-04-16T01:56:10.328373752Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1
Apr 16 01:56:10.328423 containerd[2462]: time="2026-04-16T01:56:10.328415612Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1
Apr 16 01:56:10.328560 containerd[2462]: time="2026-04-16T01:56:10.328551675Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1
Apr 16 01:56:10.328664 containerd[2462]: time="2026-04-16T01:56:10.328594561Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1
Apr 16 01:56:10.328771 containerd[2462]: time="2026-04-16T01:56:10.328757478Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1
Apr 16 01:56:10.328927 containerd[2462]: time="2026-04-16T01:56:10.328914459Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329167 containerd[2462]: time="2026-04-16T01:56:10.329150630Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329208 containerd[2462]: time="2026-04-16T01:56:10.329200163Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329246 containerd[2462]: time="2026-04-16T01:56:10.329237301Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329279 containerd[2462]: time="2026-04-16T01:56:10.329272980Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329449 containerd[2462]: time="2026-04-16T01:56:10.329436184Z" level=info msg="skip loading plugin" error="EROFS unsupported, please `modprobe erofs`: skip plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329495 containerd[2462]: time="2026-04-16T01:56:10.329486276Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329645 containerd[2462]: time="2026-04-16T01:56:10.329633091Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329856 containerd[2462]: time="2026-04-16T01:56:10.329842944Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329915 containerd[2462]: time="2026-04-16T01:56:10.329905112Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1
Apr 16 01:56:10.329952 containerd[2462]: time="2026-04-16T01:56:10.329944716Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1
Apr 16 01:56:10.330013 containerd[2462]: time="2026-04-16T01:56:10.330005572Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1
Apr 16 01:56:10.330320 containerd[2462]: time="2026-04-16T01:56:10.330305859Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1
Apr 16 01:56:10.330403 containerd[2462]: time="2026-04-16T01:56:10.330395165Z" level=info msg="metadata content store policy set" policy=shared
Apr 16 01:56:10.338031 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys.
Apr 16 01:56:10.342041 systemd[1]: Starting issuegen.service - Generate /run/issue...
Apr 16 01:56:10.347807 systemd[1]: Starting waagent.service - Microsoft Azure Linux Agent...
Apr 16 01:56:10.356716 systemd[1]: issuegen.service: Deactivated successfully.
Apr 16 01:56:10.356898 systemd[1]: Finished issuegen.service - Generate /run/issue.
Apr 16 01:56:10.359455 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions...
Apr 16 01:56:10.378583 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions.
Apr 16 01:56:10.382788 systemd[1]: Started getty@tty1.service - Getty on tty1.
Apr 16 01:56:10.387147 systemd[1]: Started serial-getty@ttyS0.service - Serial Getty on ttyS0.
Apr 16 01:56:10.390877 systemd[1]: Reached target getty.target - Login Prompts.
Apr 16 01:56:10.411261 containerd[2462]: time="2026-04-16T01:56:10.411219774Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1
Apr 16 01:56:10.411383 containerd[2462]: time="2026-04-16T01:56:10.411337377Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411452269Z" level=info msg="skip loading plugin" error="could not find mkfs.erofs: exec: \"mkfs.erofs\": executable file not found in $PATH: skip plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411463003Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411472469Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411481569Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411491103Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411499198Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411518751Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411527747Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411535373Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411542366Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411548833Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1
Apr 16 01:56:10.411611 containerd[2462]: time="2026-04-16T01:56:10.411562861Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2
Apr 16 01:56:10.411834 containerd[2462]: time="2026-04-16T01:56:10.411819773Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1
Apr 16 01:56:10.411878 containerd[2462]: time="2026-04-16T01:56:10.411870702Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1
Apr 16 01:56:10.411908 containerd[2462]: time="2026-04-16T01:56:10.411903581Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411934107Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411942298Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411948456Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411957633Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411964179Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411971743Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411979633Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.411986225Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.412001483Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.412035177Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\""
Apr 16 01:56:10.412071 containerd[2462]: time="2026-04-16T01:56:10.412056773Z" level=info msg="Start snapshots syncer"
Apr 16 01:56:10.412266 containerd[2462]: time="2026-04-16T01:56:10.412214530Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1
Apr 16 01:56:10.412506 containerd[2462]: time="2026-04-16T01:56:10.412487913Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}"
Apr 16 01:56:10.412675 containerd[2462]: time="2026-04-16T01:56:10.412632228Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1
Apr 16 01:56:10.412714 containerd[2462]: time="2026-04-16T01:56:10.412707867Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412817302Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412835653Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412844845Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412851978Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412860658Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412868058Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412875372Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412882254Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1
Apr 16 01:56:10.412907 containerd[2462]: time="2026-04-16T01:56:10.412889582Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1
Apr 16 01:56:10.413082 containerd[2462]: time="2026-04-16T01:56:10.413031732Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1
Apr 16 01:56:10.413082 containerd[2462]: time="2026-04-16T01:56:10.413043462Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1
Apr 16 01:56:10.413082 containerd[2462]: time="2026-04-16T01:56:10.413049096Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1
Apr 16 01:56:10.413082 containerd[2462]: time="2026-04-16T01:56:10.413055647Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1
Apr 16 01:56:10.413082 containerd[2462]: time="2026-04-16T01:56:10.413060700Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1
Apr 16 01:56:10.413082 containerd[2462]: time="2026-04-16T01:56:10.413066525Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1
Apr 16 01:56:10.413257 containerd[2462]: time="2026-04-16T01:56:10.413073673Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1
Apr 16 01:56:10.413257 containerd[2462]: time="2026-04-16T01:56:10.413198621Z" level=info msg="runtime interface created"
Apr 16 01:56:10.413257 containerd[2462]: time="2026-04-16T01:56:10.413202501Z" level=info msg="created NRI interface"
Apr 16 01:56:10.413257 containerd[2462]: time="2026-04-16T01:56:10.413208178Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1
Apr 16 01:56:10.413257 containerd[2462]: time="2026-04-16T01:56:10.413217895Z" level=info msg="Connect containerd service"
Apr 16 01:56:10.413257 containerd[2462]: time="2026-04-16T01:56:10.413237410Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this"
Apr 16 01:56:10.414051 containerd[2462]: time="2026-04-16T01:56:10.413885182Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config"
Apr 16 01:56:10.419206 systemd[1]: Started waagent.service - Microsoft Azure Linux Agent.
Apr 16 01:56:10.581270 containerd[2462]: time="2026-04-16T01:56:10.581208925Z" level=info msg="Start subscribing containerd event"
Apr 16 01:56:10.581387 containerd[2462]: time="2026-04-16T01:56:10.581360893Z" level=info msg="Start recovering state"
Apr 16 01:56:10.581470 containerd[2462]: time="2026-04-16T01:56:10.581398232Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc
Apr 16 01:56:10.581559 containerd[2462]: time="2026-04-16T01:56:10.581496288Z" level=info msg="Start event monitor"
Apr 16 01:56:10.581619 containerd[2462]: time="2026-04-16T01:56:10.581592955Z" level=info msg="Start cni network conf syncer for default"
Apr 16 01:56:10.581649 containerd[2462]: time="2026-04-16T01:56:10.581642729Z" level=info msg="Start streaming server"
Apr 16 01:56:10.581668 containerd[2462]: time="2026-04-16T01:56:10.581655849Z" level=info msg="Registered namespace \"k8s.io\" with NRI"
Apr 16 01:56:10.581668 containerd[2462]: time="2026-04-16T01:56:10.581664075Z" level=info msg="runtime interface starting up..."
Apr 16 01:56:10.581711 containerd[2462]: time="2026-04-16T01:56:10.581670690Z" level=info msg="starting plugins..."
Apr 16 01:56:10.581711 containerd[2462]: time="2026-04-16T01:56:10.581684469Z" level=info msg="Synchronizing NRI (plugin) with current runtime state"
Apr 16 01:56:10.581759 containerd[2462]: time="2026-04-16T01:56:10.581575866Z" level=info msg=serving... address=/run/containerd/containerd.sock
Apr 16 01:56:10.582645 containerd[2462]: time="2026-04-16T01:56:10.581809415Z" level=info msg="containerd successfully booted in 0.353086s"
Apr 16 01:56:10.581906 systemd[1]: Started containerd.service - containerd container runtime.
Apr 16 01:56:10.586808 systemd[1]: Starting docker.service - Docker Application Container Engine...
Apr 16 01:56:10.595845 (dockerd)[2571]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU
Apr 16 01:56:11.182633 waagent[2560]: 2026-04-16T01:56:11.181822Z INFO Daemon Daemon Azure Linux Agent Version: 2.12.0.4
Apr 16 01:56:11.184630 waagent[2560]: 2026-04-16T01:56:11.184541Z INFO Daemon Daemon OS: flatcar 4593.1.0
Apr 16 01:56:11.187086 waagent[2560]: 2026-04-16T01:56:11.187035Z INFO Daemon Daemon Python: 3.12.11
Apr 16 01:56:11.189198 waagent[2560]: 2026-04-16T01:56:11.189082Z INFO Daemon Daemon Run daemon
Apr 16 01:56:11.190900 waagent[2560]: 2026-04-16T01:56:11.190860Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='4593.1.0'
Apr 16 01:56:11.195224 waagent[2560]: 2026-04-16T01:56:11.195180Z INFO Daemon Daemon Using waagent for provisioning
Apr 16 01:56:11.199395 waagent[2560]: 2026-04-16T01:56:11.196829Z INFO Daemon Daemon Activate resource disk
Apr 16 01:56:11.199395 waagent[2560]: 2026-04-16T01:56:11.198245Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb
Apr 16 01:56:11.215626 waagent[2560]: 2026-04-16T01:56:11.203239Z INFO Daemon Daemon Found device: None
Apr 16 01:56:11.215626 waagent[2560]: 2026-04-16T01:56:11.204999Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology
Apr 16 01:56:11.215626 waagent[2560]: 2026-04-16T01:56:11.207595Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0
Apr 16 01:56:11.215626 waagent[2560]: 2026-04-16T01:56:11.211763Z INFO Daemon Daemon Clean protocol and wireserver endpoint
Apr 16 01:56:11.215626 waagent[2560]: 2026-04-16T01:56:11.213983Z INFO Daemon Daemon Running default provisioning handler
Apr 16 01:56:11.230430 waagent[2560]: 2026-04-16T01:56:11.230379Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 4.
Apr 16 01:56:11.235317 waagent[2560]: 2026-04-16T01:56:11.234818Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service'
Apr 16 01:56:11.238757 waagent[2560]: 2026-04-16T01:56:11.238711Z INFO Daemon Daemon cloud-init is enabled: False
Apr 16 01:56:11.240326 dockerd[2571]: time="2026-04-16T01:56:11.240105581Z" level=info msg="Starting up"
Apr 16 01:56:11.240691 waagent[2560]: 2026-04-16T01:56:11.240645Z INFO Daemon Daemon Copying ovf-env.xml
Apr 16 01:56:11.242427 dockerd[2571]: time="2026-04-16T01:56:11.241883910Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider"
Apr 16 01:56:11.252630 dockerd[2571]: time="2026-04-16T01:56:11.252584280Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s
Apr 16 01:56:11.285782 waagent[2560]: 2026-04-16T01:56:11.285741Z INFO Daemon Daemon Successfully mounted dvd
Apr 16 01:56:11.305067 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully.
Apr 16 01:56:11.305791 waagent[2560]: 2026-04-16T01:56:11.305753Z INFO Daemon Daemon Detect protocol endpoint
Apr 16 01:56:11.308711 waagent[2560]: 2026-04-16T01:56:11.308667Z INFO Daemon Daemon Clean protocol and wireserver endpoint
Apr 16 01:56:11.310266 waagent[2560]: 2026-04-16T01:56:11.310229Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler
Apr 16 01:56:11.312001 waagent[2560]: 2026-04-16T01:56:11.311956Z INFO Daemon Daemon Test for route to 168.63.129.16
Apr 16 01:56:11.314777 waagent[2560]: 2026-04-16T01:56:11.314735Z INFO Daemon Daemon Route to 168.63.129.16 exists
Apr 16 01:56:11.316374 waagent[2560]: 2026-04-16T01:56:11.315992Z INFO Daemon Daemon Wire server endpoint:168.63.129.16
Apr 16 01:56:11.337139 waagent[2560]: 2026-04-16T01:56:11.337106Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05
Apr 16 01:56:11.339477 waagent[2560]: 2026-04-16T01:56:11.339439Z INFO Daemon Daemon Wire protocol version:2012-11-30
Apr 16 01:56:11.341484 waagent[2560]: 2026-04-16T01:56:11.341433Z INFO Daemon Daemon Server preferred version:2015-04-05
Apr 16 01:56:11.368481 dockerd[2571]: time="2026-04-16T01:56:11.368449796Z" level=info msg="Loading containers: start."
Apr 16 01:56:11.391629 kernel: Initializing XFRM netlink socket
Apr 16 01:56:11.419226 waagent[2560]: 2026-04-16T01:56:11.419168Z INFO Daemon Daemon Initializing goal state during protocol detection
Apr 16 01:56:11.422712 waagent[2560]: 2026-04-16T01:56:11.422661Z INFO Daemon Daemon Forcing an update of the goal state.
Apr 16 01:56:11.429167 waagent[2560]: 2026-04-16T01:56:11.429130Z INFO Daemon Fetched a new incarnation for the WireServer goal state [incarnation 1]
Apr 16 01:56:11.452637 waagent[2560]: 2026-04-16T01:56:11.452557Z INFO Daemon Daemon HostGAPlugin version: 1.0.8.179
Apr 16 01:56:11.457159 waagent[2560]: 2026-04-16T01:56:11.457116Z INFO Daemon
Apr 16 01:56:11.460827 waagent[2560]: 2026-04-16T01:56:11.460781Z INFO Daemon Fetched new vmSettings [HostGAPlugin correlation ID: 31939507-9906-40aa-9720-318cdb2e0628 eTag: 361718445519434412 source: Fabric]
Apr 16 01:56:11.464917 waagent[2560]: 2026-04-16T01:56:11.464876Z INFO Daemon The vmSettings originated via Fabric; will ignore them.
Apr 16 01:56:11.466696 waagent[2560]: 2026-04-16T01:56:11.466662Z INFO Daemon
Apr 16 01:56:11.470287 waagent[2560]: 2026-04-16T01:56:11.468693Z INFO Daemon Fetching full goal state from the WireServer [incarnation 1]
Apr 16 01:56:11.474495 waagent[2560]: 2026-04-16T01:56:11.474466Z INFO Daemon Daemon Downloading artifacts profile blob
Apr 16 01:56:11.561976 waagent[2560]: 2026-04-16T01:56:11.561936Z INFO Daemon Downloaded certificate {'thumbprint': '9F5B451AFF70C96898FCA0971A8ED19D46CC450A', 'hasPrivateKey': True}
Apr 16 01:56:11.567053 waagent[2560]: 2026-04-16T01:56:11.567006Z INFO Daemon Fetch goal state completed
Apr 16 01:56:11.576891 waagent[2560]: 2026-04-16T01:56:11.576830Z INFO Daemon Daemon Starting provisioning
Apr 16 01:56:11.579742 waagent[2560]: 2026-04-16T01:56:11.579694Z INFO Daemon Daemon Handle ovf-env.xml.
Apr 16 01:56:11.582732 waagent[2560]: 2026-04-16T01:56:11.582687Z INFO Daemon Daemon Set hostname [ci-4593.1.0-n-f0244e4323]
Apr 16 01:56:11.590853 waagent[2560]: 2026-04-16T01:56:11.590815Z INFO Daemon Daemon Publish hostname [ci-4593.1.0-n-f0244e4323]
Apr 16 01:56:11.593014 waagent[2560]: 2026-04-16T01:56:11.592971Z INFO Daemon Daemon Examine /proc/net/route for primary interface
Apr 16 01:56:11.595853 waagent[2560]: 2026-04-16T01:56:11.595813Z INFO Daemon Daemon Primary interface is [eth0]
Apr 16 01:56:11.607780 systemd-networkd[2331]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network
Apr 16 01:56:11.607788 systemd-networkd[2331]: eth0: Reconfiguring with /usr/lib/systemd/network/zz-default.network.
Apr 16 01:56:11.607845 systemd-networkd[2331]: eth0: DHCP lease lost
Apr 16 01:56:11.618241 waagent[2560]: 2026-04-16T01:56:11.617407Z INFO Daemon Daemon Create user account if not exists
Apr 16 01:56:11.619014 waagent[2560]: 2026-04-16T01:56:11.618974Z INFO Daemon Daemon User core already exists, skip useradd
Apr 16 01:56:11.621090 waagent[2560]: 2026-04-16T01:56:11.620665Z INFO Daemon Daemon Configure sudoer
Apr 16 01:56:11.623970 waagent[2560]: 2026-04-16T01:56:11.622896Z INFO Daemon Daemon Configure sshd
Apr 16 01:56:11.625655 systemd-networkd[2331]: eth0: DHCPv4 address 10.0.0.12/24, gateway 10.0.0.1 acquired from 168.63.129.16
Apr 16 01:56:11.626131 waagent[2560]: 2026-04-16T01:56:11.626088Z INFO Daemon Daemon Added a configuration snippet disabling SSH password-based authentication methods. It also configures SSH client probing to keep connections alive.
Apr 16 01:56:11.630590 waagent[2560]: 2026-04-16T01:56:11.630536Z INFO Daemon Daemon Deploy ssh public key.
Apr 16 01:56:11.730146 systemd-networkd[2331]: docker0: Link UP
Apr 16 01:56:11.744702 dockerd[2571]: time="2026-04-16T01:56:11.744672275Z" level=info msg="Loading containers: done."
Apr 16 01:56:11.770033 dockerd[2571]: time="2026-04-16T01:56:11.769998188Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2
Apr 16 01:56:11.770145 dockerd[2571]: time="2026-04-16T01:56:11.770074770Z" level=info msg="Docker daemon" commit=6430e49a55babd9b8f4d08e70ecb2b68900770fe containerd-snapshotter=false storage-driver=overlay2 version=28.0.4
Apr 16 01:56:11.770174 dockerd[2571]: time="2026-04-16T01:56:11.770144306Z" level=info msg="Initializing buildkit"
Apr 16 01:56:11.825439 dockerd[2571]: time="2026-04-16T01:56:11.825404321Z" level=info msg="Completed buildkit initialization"
Apr 16 01:56:11.828211 dockerd[2571]: time="2026-04-16T01:56:11.828174340Z" level=info msg="Daemon has completed initialization"
Apr 16 01:56:11.828286 dockerd[2571]: time="2026-04-16T01:56:11.828216842Z" level=info msg="API listen on /run/docker.sock"
Apr 16 01:56:11.828728 systemd[1]: Started docker.service - Docker Application Container Engine.
Apr 16 01:56:11.830582 etcd-wrapper[2519]: Error response from daemon: No such container: etcd-member
Apr 16 01:56:11.841739 etcd-wrapper[2787]: Error response from daemon: No such container: etcd-member
Apr 16 01:56:11.881629 etcd-wrapper[2805]: Unable to find image 'quay.io/coreos/etcd:v3.5.24' locally
Apr 16 01:56:12.700571 waagent[2560]: 2026-04-16T01:56:12.700253Z INFO Daemon Daemon Provisioning complete
Apr 16 01:56:12.758539 waagent[2560]: 2026-04-16T01:56:12.758480Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping
Apr 16 01:56:12.761736 waagent[2560]: 2026-04-16T01:56:12.761693Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions.
Apr 16 01:56:12.765706 waagent[2560]: 2026-04-16T01:56:12.765673Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.12.0.4 is the most current agent
Apr 16 01:56:12.881057 waagent[2812]: 2026-04-16T01:56:12.880993Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.4)
Apr 16 01:56:12.881341 waagent[2812]: 2026-04-16T01:56:12.881097Z INFO ExtHandler ExtHandler OS: flatcar 4593.1.0
Apr 16 01:56:12.881341 waagent[2812]: 2026-04-16T01:56:12.881150Z INFO ExtHandler ExtHandler Python: 3.12.11
Apr 16 01:56:12.881341 waagent[2812]: 2026-04-16T01:56:12.881192Z INFO ExtHandler ExtHandler CPU Arch: x86_64
Apr 16 01:56:12.896098 waagent[2812]: 2026-04-16T01:56:12.896056Z INFO ExtHandler ExtHandler Distro: flatcar-4593.1.0; OSUtil: FlatcarUtil; AgentService: waagent; Python: 3.12.11; Arch: x86_64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.22.0;
Apr 16 01:56:12.896239 waagent[2812]: 2026-04-16T01:56:12.896215Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file
Apr 16 01:56:12.896304 waagent[2812]: 2026-04-16T01:56:12.896270Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16
Apr 16 01:56:12.903017 waagent[2812]: 2026-04-16T01:56:12.902967Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1]
Apr 16 01:56:12.917843 waagent[2812]: 2026-04-16T01:56:12.917814Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.179
Apr 16 01:56:12.918187 waagent[2812]: 2026-04-16T01:56:12.918158Z INFO ExtHandler
Apr 16 01:56:12.918239 waagent[2812]: 2026-04-16T01:56:12.918221Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 6a6542f3-449e-4bca-9c85-f9e3c4585a48 eTag: 361718445519434412 source: Fabric]
Apr 16 01:56:12.918454 waagent[2812]: 2026-04-16T01:56:12.918430Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them.
Apr 16 01:56:12.918869 waagent[2812]: 2026-04-16T01:56:12.918835Z INFO ExtHandler
Apr 16 01:56:12.918922 waagent[2812]: 2026-04-16T01:56:12.918892Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1]
Apr 16 01:56:12.921747 waagent[2812]: 2026-04-16T01:56:12.921720Z INFO ExtHandler ExtHandler Downloading artifacts profile blob
Apr 16 01:56:12.981512 waagent[2812]: 2026-04-16T01:56:12.981434Z INFO ExtHandler Downloaded certificate {'thumbprint': '9F5B451AFF70C96898FCA0971A8ED19D46CC450A', 'hasPrivateKey': True}
Apr 16 01:56:12.981857 waagent[2812]: 2026-04-16T01:56:12.981823Z INFO ExtHandler Fetch goal state completed
Apr 16 01:56:12.996236 waagent[2812]: 2026-04-16T01:56:12.996190Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.5.5 27 Jan 2026 (Library: OpenSSL 3.5.5 27 Jan 2026)
Apr 16 01:56:13.001515 etcd-wrapper[2805]: v3.5.24: Pulling from coreos/etcd
Apr 16 01:56:13.001825 waagent[2812]: 2026-04-16T01:56:13.001238Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.4 running as process 2812
Apr 16 01:56:13.001825 waagent[2812]: 2026-04-16T01:56:13.001370Z INFO ExtHandler ExtHandler ******** AutoUpdate.Enabled is set to False, not processing the operation ********
Apr 16 01:56:13.001825 waagent[2812]: 2026-04-16T01:56:13.001718Z INFO ExtHandler ExtHandler ******** AutoUpdate.UpdateToLatestVersion is set to False, not processing the operation ********
Apr 16 01:56:13.002912 waagent[2812]: 2026-04-16T01:56:13.002874Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '4593.1.0', '', 'Flatcar Container Linux by Kinvolk']
Apr 16 01:56:13.003215 waagent[2812]: 2026-04-16T01:56:13.003176Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '4593.1.0', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported
Apr 16 01:56:13.003315 waagent[2812]: 2026-04-16T01:56:13.003291Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False
Apr 16 01:56:13.005511 waagent[2812]: 2026-04-16T01:56:13.005480Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules
Apr 16 01:56:13.006916 waagent[2812]: 2026-04-16T01:56:13.006879Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service
Apr 16 01:56:13.007044 waagent[2812]: 2026-04-16T01:56:13.007022Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup
Apr 16 01:56:13.012629 waagent[2812]: 2026-04-16T01:56:13.012245Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now
Apr 16 01:56:13.018098 systemd[1]: Reload requested from client PID 2827 ('systemctl') (unit waagent.service)...
Apr 16 01:56:13.018111 systemd[1]: Reloading...
Apr 16 01:56:13.096635 zram_generator::config[2866]: No configuration found.
Apr 16 01:56:13.268996 systemd[1]: Reloading finished in 250 ms.
Apr 16 01:56:13.282639 waagent[2812]: 2026-04-16T01:56:13.282202Z INFO ExtHandler ExtHandler Successfully added and enabled the waagent-network-setup.service
Apr 16 01:56:13.282639 waagent[2812]: 2026-04-16T01:56:13.282341Z INFO ExtHandler ExtHandler Persistent firewall rules setup successfully
Apr 16 01:56:13.286596 waagent[2812]: 2026-04-16T01:56:13.286545Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up.
Apr 16 01:56:13.286854 waagent[2812]: 2026-04-16T01:56:13.286824Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True]
Apr 16 01:56:13.287421 waagent[2812]: 2026-04-16T01:56:13.287386Z INFO ExtHandler ExtHandler Starting env monitor service.
Apr 16 01:56:13.287702 waagent[2812]: 2026-04-16T01:56:13.287661Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file
Apr 16 01:56:13.287758 waagent[2812]: 2026-04-16T01:56:13.287733Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16
Apr 16 01:56:13.287966 waagent[2812]: 2026-04-16T01:56:13.287940Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled.
Apr 16 01:56:13.288107 waagent[2812]: 2026-04-16T01:56:13.288085Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route:
Apr 16 01:56:13.288107 waagent[2812]: Iface        Destination        Gateway         Flags        RefCnt        Use        Metric        Mask                MTU        Window        IRTT
Apr 16 01:56:13.288107 waagent[2812]: eth0        00000000        0100000A        0003        0        0        1024        00000000        0        0        0
Apr 16 01:56:13.288107 waagent[2812]: eth0        0000000A        00000000        0001        0        0        1024        00FFFFFF        0        0        0
Apr 16 01:56:13.288107 waagent[2812]: eth0        0100000A        00000000        0005        0        0        1024        FFFFFFFF        0        0        0
Apr 16 01:56:13.288107 waagent[2812]: eth0        10813FA8        0100000A        0007        0        0        1024        FFFFFFFF        0        0        0
Apr 16 01:56:13.288107 waagent[2812]: eth0        FEA9FEA9        0100000A        0007        0        0        1024        FFFFFFFF        0        0        0
Apr 16 01:56:13.288107 waagent[2812]: docker0        000011AC        00000000        0001        0        0        0        0000FFFF        0        0        0
Apr 16 01:56:13.288497 waagent[2812]: 2026-04-16T01:56:13.288465Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file
Apr 16 01:56:13.288572 waagent[2812]: 2026-04-16T01:56:13.288533Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16
Apr 16 01:56:13.288707 waagent[2812]: 2026-04-16T01:56:13.288682Z INFO EnvHandler ExtHandler Configure routes
Apr 16 01:56:13.288819 waagent[2812]: 2026-04-16T01:56:13.288740Z INFO EnvHandler ExtHandler Gateway:None
Apr 16 01:56:13.288819 waagent[2812]: 2026-04-16T01:56:13.288779Z INFO EnvHandler ExtHandler Routes:None
Apr 16 01:56:13.289073 waagent[2812]: 2026-04-16T01:56:13.289047Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service.
Apr 16 01:56:13.289299 waagent[2812]: 2026-04-16T01:56:13.289253Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread
Apr 16 01:56:13.289337 waagent[2812]: 2026-04-16T01:56:13.289306Z INFO ExtHandler ExtHandler Start Extension Telemetry service.
Apr 16 01:56:13.289564 waagent[2812]: 2026-04-16T01:56:13.289537Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True
Apr 16 01:56:13.289707 waagent[2812]: 2026-04-16T01:56:13.289685Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread
Apr 16 01:56:13.289882 waagent[2812]: 2026-04-16T01:56:13.289851Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status.
Apr 16 01:56:13.298666 waagent[2812]: 2026-04-16T01:56:13.298494Z INFO ExtHandler ExtHandler
Apr 16 01:56:13.298666 waagent[2812]: 2026-04-16T01:56:13.298561Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 6fe6ea41-d841-4ec5-9cb2-49efd988de8c correlation d36c2cf7-9252-43d2-a190-a0710b6683bd created: 2026-04-16T01:55:15.741425Z]
Apr 16 01:56:13.299037 waagent[2812]: 2026-04-16T01:56:13.299016Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything.
Apr 16 01:56:13.299621 waagent[2812]: 2026-04-16T01:56:13.299583Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 1 ms]
Apr 16 01:56:13.318153 waagent[2812]: 2026-04-16T01:56:13.317836Z INFO MonitorHandler ExtHandler Network interfaces:
Apr 16 01:56:13.318153 waagent[2812]: Executing ['ip', '-a', '-o', 'link']:
Apr 16 01:56:13.318153 waagent[2812]: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
Apr 16 01:56:13.318153 waagent[2812]: 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\    link/ether 00:0d:3a:b8:97:d2 brd ff:ff:ff:ff:ff:ff\    alias Network Device\    altname enx000d3ab897d2
Apr 16 01:56:13.318153 waagent[2812]: 3: enP30832s1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\    link/ether 00:0d:3a:b8:97:d2 brd ff:ff:ff:ff:ff:ff\    altname enP30832p0s0
Apr 16 01:56:13.318153 waagent[2812]: 4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default \    link/ether d6:d8:a7:8f:8a:7c brd ff:ff:ff:ff:ff:ff
Apr 16 01:56:13.318153 waagent[2812]: Executing ['ip', '-4', '-a', '-o', 'address']:
Apr 16 01:56:13.318153 waagent[2812]: 1: lo    inet 127.0.0.1/8 scope host lo\       valid_lft forever preferred_lft forever
Apr 16 01:56:13.318153 waagent[2812]: 2: eth0    inet 10.0.0.12/24 metric 1024 brd 10.0.0.255 scope global eth0\       valid_lft forever preferred_lft forever
Apr 16 01:56:13.318153 waagent[2812]: 4: docker0    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0\       valid_lft forever preferred_lft forever
Apr 16 01:56:13.318153 waagent[2812]: Executing ['ip', '-6', '-a', '-o', 'address']:
Apr 16 01:56:13.318153 waagent[2812]: 1: lo    inet6 ::1/128 scope host noprefixroute \       valid_lft forever preferred_lft forever
Apr 16 01:56:13.318153 waagent[2812]: 2: eth0    inet6 fe80::20d:3aff:feb8:97d2/64 scope link proto kernel_ll \       valid_lft forever preferred_lft forever
Apr 16 01:56:13.339866 waagent[2812]: 2026-04-16T01:56:13.339825Z WARNING ExtHandler ExtHandler Failed to get firewall packets: 'iptables -w -t security -L OUTPUT --zero OUTPUT -nxv' failed: 2 (iptables v1.8.11 (nf_tables): Illegal option `--numeric' with this command
Apr 16 01:56:13.339866 waagent[2812]: Try `iptables -h' or 'iptables --help' for more information.)
Apr 16 01:56:13.340153 waagent[2812]: 2026-04-16T01:56:13.340126Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.4 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 109DA133-52EE-42B9-BB8D-ABF00561E772;DroppedPackets: -1;UpdateGSErrors: 0;AutoUpdate: 0;UpdateMode: SelfUpdate;]
Apr 16 01:56:13.351619 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#10 cmd 0x4a status: scsi 0x0 srb 0x20 hv 0xc0000001
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 804c8aba2cc6: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 2ae710cd8bfe: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: d462aa345367: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 0f8b424aa0b9: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: d557676654e5: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: c8022d07192e: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: d858cbc252ad: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 1069fc2daed1: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: b40161cd83fc: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 5318d93a3a65: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 307c1adadb60: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 49a553fa7ab9: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 9cde5f0af3dd: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: b9581a18c15b: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 95c11f3cd524: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: ed40c9b2e219: Pulling fs layer
Apr 16 01:56:13.392252 etcd-wrapper[2805]: d557676654e5: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: c8022d07192e: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: d858cbc252ad: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 1069fc2daed1: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: b40161cd83fc: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 5318d93a3a65: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 307c1adadb60: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 49a553fa7ab9: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 9cde5f0af3dd: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: b9581a18c15b: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: 95c11f3cd524: Waiting
Apr 16 01:56:13.392252 etcd-wrapper[2805]: ed40c9b2e219: Waiting
Apr 16 01:56:13.392862 etcd-wrapper[2805]: 0f8b424aa0b9: Waiting
Apr 16 01:56:13.622883 waagent[2812]: 2026-04-16T01:56:13.622784Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric:
Apr 16 01:56:13.622883 waagent[2812]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
Apr 16 01:56:13.622883 waagent[2812]:     pkts      bytes target     prot opt in     out     source               destination
Apr 16 01:56:13.622883 waagent[2812]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
Apr 16 01:56:13.622883 waagent[2812]:     pkts      bytes target     prot opt in     out     source               destination
Apr 16 01:56:13.622883 waagent[2812]: Chain OUTPUT (policy ACCEPT 5 packets, 320 bytes)
Apr 16 01:56:13.622883 waagent[2812]:     pkts      bytes target     prot opt in     out     source               destination
Apr 16 01:56:13.622883 waagent[2812]:        0        0 ACCEPT     tcp  --  *      *       0.0.0.0/0            168.63.129.16        tcp dpt:53
Apr 16 01:56:13.622883 waagent[2812]:        0        0 ACCEPT     tcp  --  *      *       0.0.0.0/0            168.63.129.16        owner UID match 0
Apr 16 01:56:13.622883 waagent[2812]:        0        0 DROP       tcp  --  *      *       0.0.0.0/0            168.63.129.16        ctstate INVALID,NEW
Apr 16 01:56:13.625832 waagent[2812]: 2026-04-16T01:56:13.625777Z INFO EnvHandler ExtHandler Current Firewall rules:
Apr 16 01:56:13.625832 waagent[2812]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
Apr 16 01:56:13.625832 waagent[2812]:     pkts      bytes target     prot opt in     out     source               destination
Apr 16 01:56:13.625832 waagent[2812]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
Apr 16 01:56:13.625832 waagent[2812]:     pkts      bytes target     prot opt in     out     source               destination
Apr 16 01:56:13.625832 waagent[2812]: Chain OUTPUT (policy ACCEPT 5 packets, 320 bytes)
Apr 16 01:56:13.625832 waagent[2812]:     pkts      bytes target     prot opt in     out     source               destination
Apr 16 01:56:13.625832 waagent[2812]:        0        0 ACCEPT     tcp  --  *      *       0.0.0.0/0            168.63.129.16        tcp dpt:53
Apr 16 01:56:13.625832 waagent[2812]:        0        0 ACCEPT     tcp  --  *      *       0.0.0.0/0            168.63.129.16        owner UID match 0
Apr 16 01:56:13.625832 waagent[2812]:        0        0 DROP       tcp  --  *      *       0.0.0.0/0            168.63.129.16        ctstate INVALID,NEW
Apr 16 01:56:13.689548 etcd-wrapper[2805]: 804c8aba2cc6: Verifying Checksum
Apr 16 01:56:13.691741 etcd-wrapper[2805]: d462aa345367: Verifying Checksum
Apr 16 01:56:13.691828 etcd-wrapper[2805]: d462aa345367: Download complete
Apr 16 01:56:13.692447 etcd-wrapper[2805]: 2ae710cd8bfe: Verifying Checksum
Apr 16 01:56:13.692501 etcd-wrapper[2805]: 2ae710cd8bfe: Download complete
Apr 16 01:56:13.748028 etcd-wrapper[2805]: 804c8aba2cc6: Pull complete
Apr 16 01:56:13.776256 systemd[1]: var-lib-docker-overlay2-7de20f575c9c099ce7f37ebfe8672945ec6d31350a91602513447a9cd58ea722-merged.mount: Deactivated successfully.
Apr 16 01:56:13.829185 etcd-wrapper[2805]: 2ae710cd8bfe: Pull complete
Apr 16 01:56:13.965190 etcd-wrapper[2805]: c8022d07192e: Verifying Checksum
Apr 16 01:56:13.965190 etcd-wrapper[2805]: c8022d07192e: Download complete
Apr 16 01:56:13.980589 etcd-wrapper[2805]: 0f8b424aa0b9: Verifying Checksum
Apr 16 01:56:13.980589 etcd-wrapper[2805]: 0f8b424aa0b9: Download complete
Apr 16 01:56:14.006333 etcd-wrapper[2805]: d557676654e5: Verifying Checksum
Apr 16 01:56:14.006333 etcd-wrapper[2805]: d557676654e5: Download complete
Apr 16 01:56:14.099283 systemd[1]: var-lib-docker-overlay2-60ed76c68e8b8e2778403841a8003dd150510aaed712644e2d3e3ed1526eb5a2-merged.mount: Deactivated successfully.
Apr 16 01:56:14.235007 etcd-wrapper[2805]: d462aa345367: Pull complete
Apr 16 01:56:14.242787 etcd-wrapper[2805]: d858cbc252ad: Download complete
Apr 16 01:56:14.265943 etcd-wrapper[2805]: 1069fc2daed1: Verifying Checksum
Apr 16 01:56:14.270146 etcd-wrapper[2805]: 1069fc2daed1: Download complete
Apr 16 01:56:14.293425 etcd-wrapper[2805]: b40161cd83fc: Download complete
Apr 16 01:56:14.300079 etcd-wrapper[2805]: 0f8b424aa0b9: Pull complete
Apr 16 01:56:14.364250 etcd-wrapper[2805]: d557676654e5: Pull complete
Apr 16 01:56:14.420756 etcd-wrapper[2805]: c8022d07192e: Pull complete
Apr 16 01:56:14.475855 etcd-wrapper[2805]: d858cbc252ad: Pull complete
Apr 16 01:56:14.527801 etcd-wrapper[2805]: 5318d93a3a65: Verifying Checksum
Apr 16 01:56:14.527801 etcd-wrapper[2805]: 5318d93a3a65: Download complete
Apr 16 01:56:14.533353 etcd-wrapper[2805]: 1069fc2daed1: Pull complete
Apr 16 01:56:14.581413 etcd-wrapper[2805]: 307c1adadb60: Verifying Checksum
Apr 16 01:56:14.581989 etcd-wrapper[2805]: 307c1adadb60: Download complete
Apr 16 01:56:14.591258 etcd-wrapper[2805]: 49a553fa7ab9: Verifying Checksum
Apr 16 01:56:14.591258 etcd-wrapper[2805]: 49a553fa7ab9: Download complete
Apr 16 01:56:14.610968 etcd-wrapper[2805]: b40161cd83fc: Pull complete
Apr 16 01:56:14.675424 etcd-wrapper[2805]: 5318d93a3a65: Pull complete
Apr 16 01:56:14.731126 etcd-wrapper[2805]: 307c1adadb60: Pull complete
Apr 16 01:56:14.773865 systemd[1]: var-lib-docker-overlay2-81de172ca3166da86462f272757bbdca98ed7755aa60f1f2cac1878d35a54d0c-merged.mount: Deactivated successfully.
Apr 16 01:56:14.811458 etcd-wrapper[2805]: 9cde5f0af3dd: Verifying Checksum
Apr 16 01:56:14.811670 etcd-wrapper[2805]: 9cde5f0af3dd: Download complete
Apr 16 01:56:14.844143 etcd-wrapper[2805]: 95c11f3cd524: Verifying Checksum
Apr 16 01:56:14.844143 etcd-wrapper[2805]: 95c11f3cd524: Download complete
Apr 16 01:56:14.848011 etcd-wrapper[2805]: b9581a18c15b: Verifying Checksum
Apr 16 01:56:14.848011 etcd-wrapper[2805]: b9581a18c15b: Download complete
Apr 16 01:56:14.929052 systemd[1]: var-lib-docker-overlay2-4c3d1b752b2ffe5f18da9b3d22481c51d3cc777356b2d71b91b06e47f0c5d224-merged.mount: Deactivated successfully.
Apr 16 01:56:15.055366 etcd-wrapper[2805]: ed40c9b2e219: Verifying Checksum
Apr 16 01:56:15.055366 etcd-wrapper[2805]: ed40c9b2e219: Download complete
Apr 16 01:56:15.157062 etcd-wrapper[2805]: 49a553fa7ab9: Pull complete
Apr 16 01:56:15.310266 systemd[1]: var-lib-docker-overlay2-5be45296d3a2d7dc75e53881163539db634ef9ebf9cccb6989b7e37fef157c17-merged.mount: Deactivated successfully.
Apr 16 01:56:15.489177 etcd-wrapper[2805]: 9cde5f0af3dd: Pull complete
Apr 16 01:56:15.548552 login[2550]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0)
Apr 16 01:56:15.558903 systemd[1]: Created slice user-500.slice - User Slice of UID 500.
Apr 16 01:56:15.561413 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500...
Apr 16 01:56:15.568391 systemd-logind[2426]: New session 1 of user core.
Apr 16 01:56:15.586905 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500.
Apr 16 01:56:15.589826 systemd[1]: Starting user@500.service - User Manager for UID 500...
Apr 16 01:56:15.605276 (systemd)[3031]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:15.608645 systemd-logind[2426]: New session 2 of user core.
Apr 16 01:56:15.745460 login[2551]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0)
Apr 16 01:56:15.750225 systemd-logind[2426]: New session 3 of user core.
Apr 16 01:56:15.755946 systemd[3031]: Queued start job for default target default.target.
Apr 16 01:56:15.765897 systemd[3031]: Created slice app.slice - User Application Slice.
Apr 16 01:56:15.765931 systemd[3031]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories.
Apr 16 01:56:15.765945 systemd[3031]: Reached target paths.target - Paths.
Apr 16 01:56:15.765986 systemd[3031]: Reached target timers.target - Timers.
Apr 16 01:56:15.767012 systemd[3031]: Starting dbus.socket - D-Bus User Message Bus Socket...
Apr 16 01:56:15.767813 systemd[3031]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories...
Apr 16 01:56:15.780326 systemd[3031]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories.
Apr 16 01:56:15.781301 systemd[3031]: Listening on dbus.socket - D-Bus User Message Bus Socket.
Apr 16 01:56:15.781391 systemd[3031]: Reached target sockets.target - Sockets.
Apr 16 01:56:15.781425 systemd[3031]: Reached target basic.target - Basic System.
Apr 16 01:56:15.781453 systemd[3031]: Reached target default.target - Main User Target.
Apr 16 01:56:15.781476 systemd[3031]: Startup finished in 167ms.
Apr 16 01:56:15.781573 systemd[1]: Started user@500.service - User Manager for UID 500.
Apr 16 01:56:15.786763 systemd[1]: Started session-1.scope - Session 1 of User core.
Apr 16 01:56:15.787566 systemd[1]: Started session-3.scope - Session 3 of User core.
Apr 16 01:56:15.790593 login[2551]: pam_lastlog(login:session): file /var/log/lastlog is locked/write, retrying
Apr 16 01:56:15.820487 etcd-wrapper[2805]: b9581a18c15b: Pull complete
Apr 16 01:56:15.849812 systemd[1]: var-lib-docker-overlay2-b9ae1c3442669500f374e45f58f6d98ce1f398a7b0ebddd2a52be47cbc83b499-merged.mount: Deactivated successfully.
Apr 16 01:56:15.903859 etcd-wrapper[2805]: 95c11f3cd524: Pull complete
Apr 16 01:56:15.944737 systemd[1]: var-lib-docker-overlay2-16e090ac6ec54fb982ba73671075500c755a44c1c20cf576292f40ce152b2e5f-merged.mount: Deactivated successfully.
Apr 16 01:56:15.978625 etcd-wrapper[2805]: ed40c9b2e219: Pull complete
Apr 16 01:56:16.005569 etcd-wrapper[2805]: Digest: sha256:a193bdd3c1d1d11de961b6600231b2b3b4c4e092848dbb7d4c0e03b709ac7594
Apr 16 01:56:16.016590 etcd-wrapper[2805]: Status: Downloaded newer image for quay.io/coreos/etcd:v3.5.24
Apr 16 01:56:16.162199 containerd[2462]: time="2026-04-16T01:56:16.161359436Z" level=info msg="connecting to shim a4e349ac441804e723b40cd339877273a18c7a0d8fc60af4efbeb502f38e7850" address="unix:///run/containerd/s/f410b6eea20459eea7acd1087241ceb2764a7e244663d910144162c1e6c7bebd" namespace=moby protocol=ttrpc version=3
Apr 16 01:56:16.180774 systemd[1]: Started docker-a4e349ac441804e723b40cd339877273a18c7a0d8fc60af4efbeb502f38e7850.scope - libcontainer container a4e349ac441804e723b40cd339877273a18c7a0d8fc60af4efbeb502f38e7850.
Apr 16 01:56:16.259688 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.258261Z","caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_DATA_DIR","variable-value":"/var/lib/etcd"}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.258405Z","caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_NAME","variable-value":"01189526b1c646318a402b8f81c8aba9"}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:56:16.258431Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_URL=quay.io/coreos/etcd"}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:56:16.258438Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_TAG=v3.5.24"}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:56:16.258443Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_USER=etcd"}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:56:16.258447Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_SSL_DIR=/etc/ssl/certs"}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:56:16.258467Z","caller":"embed/config.go:689","msg":"Running http and grpc server on single port. This is not recommended for production."}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.258490Z","caller":"etcdmain/etcd.go:73","msg":"Running: ","args":["/usr/local/bin/etcd","--listen-client-urls=http://0.0.0.0:2379","--advertise-client-urls=http://10.0.0.12:2379"]}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:56:16.258563Z","caller":"embed/config.go:689","msg":"Running http and grpc server on single port. This is not recommended for production."}
Apr 16 01:56:16.260018 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.258571Z","caller":"embed/etcd.go:140","msg":"configuring peer listeners","listen-peer-urls":["http://localhost:2380"]}
Apr 16 01:56:16.261785 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.261643Z","caller":"embed/etcd.go:148","msg":"configuring client listeners","listen-client-urls":["http://0.0.0.0:2379"]}
Apr 16 01:56:16.261970 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.261728Z","caller":"embed/etcd.go:323","msg":"starting an etcd server","etcd-version":"3.5.24","git-sha":"e72f3c2","go-version":"go1.24.9","go-os":"linux","go-arch":"amd64","max-cpu-set":2,"max-cpu-available":2,"member-initialized":false,"name":"01189526b1c646318a402b8f81c8aba9","data-dir":"/var/lib/etcd","wal-dir":"","wal-dir-dedicated":"","member-dir":"/var/lib/etcd/member","force-new-cluster":false,"heartbeat-interval":"100ms","election-timeout":"1s","initial-election-tick-advance":true,"snapshot-count":100000,"max-wals":5,"max-snapshots":5,"snapshot-catchup-entries":5000,"initial-advertise-peer-urls":["http://localhost:2380"],"listen-peer-urls":["http://localhost:2380"],"advertise-client-urls":["http://10.0.0.12:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[],"cors":["*"],"host-whitelist":["*"],"initial-cluster":"01189526b1c646318a402b8f81c8aba9=http://localhost:2380","initial-cluster-state":"new","initial-cluster-token":"etcd-cluster","quota-backend-bytes":2147483648,"max-request-bytes":1572864,"max-concurrent-streams":4294967295,"pre-vote":true,"initial-corrupt-check":false,"corrupt-check-time-interval":"0s","compact-check-time-enabled":false,"compact-check-time-interval":"1m0s","auto-compaction-mode":"periodic","auto-compaction-retention":"0s","auto-compaction-interval":"0s","discovery-url":"","discovery-proxy":"","downgrade-check-interval":"5s"}
Apr 16 01:56:16.268647 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.268474Z","caller":"etcdserver/backend.go:81","msg":"opened backend db","path":"/var/lib/etcd/member/snap/db","took":"6.508714ms"}
Apr 16 01:56:16.279873 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.279665Z","caller":"etcdserver/raft.go:507","msg":"starting local member","local-member-id":"8e9e05c52164694d","cluster-id":"cdf818194e3a8c32"}
Apr 16 01:56:16.279873 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.279710Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=()"}
Apr 16 01:56:16.279873 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.279734Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became follower at term 0"}
Apr 16 01:56:16.280046 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.279749Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"newRaft 8e9e05c52164694d [peers: [], term: 0, commit: 0, applied: 0, lastindex: 0, lastterm: 0]"}
Apr 16 01:56:16.280046 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.279757Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became follower at term 1"}
Apr 16 01:56:16.280046 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.279786Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=(10276657743932975437)"}
Apr 16 01:56:16.288875 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:56:16.288712Z","caller":"auth/store.go:1241","msg":"simple token is not cryptographically signed"}
Apr 16 01:56:16.291807 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.291642Z","caller":"mvcc/kvstore.go:425","msg":"kvstore restored","current-rev":1}
Apr 16 01:56:16.291928 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.291676Z","caller":"etcdserver/server.go:628","msg":"restore consistentIndex","index":0}
Apr 16 01:56:16.294530 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.294407Z","caller":"etcdserver/quota.go:94","msg":"enabled backend quota with default value","quota-name":"v3-applier","quota-size-bytes":2147483648,"quota-size":"2.1 GB"}
Apr 16 01:56:16.297743 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.297650Z","caller":"etcdserver/server.go:875","msg":"starting etcd server","local-member-id":"8e9e05c52164694d","local-server-version":"3.5.24","cluster-version":"to_be_decided"}
Apr 16 01:56:16.298057 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.297942Z","caller":"v3rpc/health.go:61","msg":"grpc service status changed","service":"","status":"SERVING"}
Apr 16 01:56:16.299172 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.299034Z","caller":"embed/etcd.go:292","msg":"now serving peer/client/metrics","local-member-id":"8e9e05c52164694d","initial-advertise-peer-urls":["http://localhost:2380"],"listen-peer-urls":["http://localhost:2380"],"advertise-client-urls":["http://10.0.0.12:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[]}
Apr 16 01:56:16.299260 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.299137Z","caller":"embed/etcd.go:633","msg":"serving peer traffic","address":"127.0.0.1:2380"}
Apr 16 01:56:16.299336 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.299280Z","caller":"embed/etcd.go:603","msg":"cmux::serve","address":"127.0.0.1:2380"}
Apr 16 01:56:16.299555 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.299399Z","caller":"etcdserver/server.go:759","msg":"started as single-node; fast-forwarding election ticks","local-member-id":"8e9e05c52164694d","forward-ticks":9,"forward-duration":"900ms","election-ticks":10,"election-timeout":"1s"}
Apr 16 01:56:16.299555 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.299422Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/snap","suffix":"snap.db","max":5,"interval":"30s"}
Apr 16 01:56:16.299555 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.299465Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/snap","suffix":"snap","max":5,"interval":"30s"}
Apr 16 01:56:16.299555 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.299472Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/wal","suffix":"wal","max":5,"interval":"30s"}
Apr 16 01:56:16.309830 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.309732Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d switched to configuration voters=(10276657743932975437)"}
Apr 16 01:56:16.309933 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.309873Z","caller":"membership/cluster.go:421","msg":"added member","cluster-id":"cdf818194e3a8c32","local-member-id":"8e9e05c52164694d","added-peer-id":"8e9e05c52164694d","added-peer-peer-urls":["http://localhost:2380"],"added-peer-is-learner":false}
Apr 16 01:56:16.580232 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.579932Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d is starting a new election at term 1"}
Apr 16 01:56:16.580232 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.579968Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became pre-candidate at term 1"}
Apr 16 01:56:16.580232 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.580002Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d received MsgPreVoteResp from 8e9e05c52164694d at term 1"}
Apr 16 01:56:16.580409 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.580013Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became candidate at term 2"}
Apr 16 01:56:16.580409 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.580024Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d received MsgVoteResp from 8e9e05c52164694d at term 2"}
Apr 16 01:56:16.580409 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.580032Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"8e9e05c52164694d became leader at term 2"}
Apr 16 01:56:16.580409 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.580039Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"raft.node: 8e9e05c52164694d elected leader 8e9e05c52164694d at term 2"}
Apr 16 01:56:16.584822 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.584563Z","caller":"etcdserver/server.go:2711","msg":"setting up initial cluster version using v2 API","cluster-version":"3.5"}
Apr 16 01:56:16.584822 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.584556Z","caller":"etcdserver/server.go:2158","msg":"published local member to cluster through raft","local-member-id":"8e9e05c52164694d","local-member-attributes":"{Name:01189526b1c646318a402b8f81c8aba9 ClientURLs:[http://10.0.0.12:2379]}","request-path":"/0/members/8e9e05c52164694d/attributes","cluster-id":"cdf818194e3a8c32","publish-timeout":"7s"}
Apr 16 01:56:16.585017 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.584726Z","caller":"embed/serve.go:124","msg":"ready to serve client requests"}
Apr 16 01:56:16.585695 systemd[1]: Started etcd-member.service - etcd (System Application Container).
Apr 16 01:56:16.586330 systemd[1]: Reached target multi-user.target - Multi-User System.
Apr 16 01:56:16.586834 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.585032Z","caller":"etcdmain/main.go:44","msg":"notifying init daemon"}
Apr 16 01:56:16.586834 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.585202Z","caller":"etcdmain/main.go:50","msg":"successfully notified init daemon"}
Apr 16 01:56:16.586834 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.585502Z","caller":"v3rpc/health.go:61","msg":"grpc service status changed","service":"","status":"SERVING"}
Apr 16 01:56:16.586834 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.585849Z","caller":"embed/serve.go:210","msg":"serving client traffic insecurely; this is strongly discouraged!","traffic":"grpc+http","address":"[::]:2379"}
Apr 16 01:56:16.586667 systemd[1]: Startup finished in 3.250s (kernel) + 16.507s (initrd) + 25.774s (userspace) = 45.532s.
Apr 16 01:56:16.591847 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.591699Z","caller":"membership/cluster.go:587","msg":"set initial cluster version","cluster-id":"cdf818194e3a8c32","local-member-id":"8e9e05c52164694d","cluster-version":"3.5"}
Apr 16 01:56:16.591992 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.591803Z","caller":"api/capability.go:75","msg":"enabled capabilities for version","cluster-version":"3.5"}
Apr 16 01:56:16.592116 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:56:16.591971Z","caller":"etcdserver/server.go:2735","msg":"cluster version is updated","cluster-version":"3.5"}
Apr 16 01:56:31.692755 chronyd[2406]: Selected source PHC0
Apr 16 01:56:32.104898 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd.
Apr 16 01:56:32.106152 systemd[1]: Started sshd@0-10.0.0.12:22-20.229.252.112:36162.service - OpenSSH per-connection server daemon (20.229.252.112:36162).
Apr 16 01:56:32.271637 sshd[3134]: Accepted publickey for core from 20.229.252.112 port 36162 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:32.272453 sshd-session[3134]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:32.276682 systemd-logind[2426]: New session 4 of user core.
Apr 16 01:56:32.281788 systemd[1]: Started session-4.scope - Session 4 of User core.
Apr 16 01:56:32.353183 systemd[1]: Started sshd@1-10.0.0.12:22-20.229.252.112:36172.service - OpenSSH per-connection server daemon (20.229.252.112:36172).
Apr 16 01:56:32.464911 sshd[3141]: Accepted publickey for core from 20.229.252.112 port 36172 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:32.465996 sshd-session[3141]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:32.469988 systemd-logind[2426]: New session 5 of user core.
Apr 16 01:56:32.474757 systemd[1]: Started session-5.scope - Session 5 of User core.
Apr 16 01:56:32.514137 sshd[3145]: Connection closed by 20.229.252.112 port 36172
Apr 16 01:56:32.514483 sshd-session[3141]: pam_unix(sshd:session): session closed for user core
Apr 16 01:56:32.517649 systemd-logind[2426]: Session 5 logged out. Waiting for processes to exit.
Apr 16 01:56:32.517699 systemd[1]: sshd@1-10.0.0.12:22-20.229.252.112:36172.service: Deactivated successfully.
Apr 16 01:56:32.519164 systemd[1]: session-5.scope: Deactivated successfully.
Apr 16 01:56:32.520358 systemd-logind[2426]: Removed session 5.
Apr 16 01:56:32.536887 systemd[1]: Started sshd@2-10.0.0.12:22-20.229.252.112:36182.service - OpenSSH per-connection server daemon (20.229.252.112:36182).
Apr 16 01:56:32.643507 sshd[3151]: Accepted publickey for core from 20.229.252.112 port 36182 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:32.643976 sshd-session[3151]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:32.647673 systemd-logind[2426]: New session 6 of user core.
Apr 16 01:56:32.653753 systemd[1]: Started session-6.scope - Session 6 of User core.
Apr 16 01:56:32.689640 sshd[3155]: Connection closed by 20.229.252.112 port 36182
Apr 16 01:56:32.690725 sshd-session[3151]: pam_unix(sshd:session): session closed for user core
Apr 16 01:56:32.693358 systemd[1]: sshd@2-10.0.0.12:22-20.229.252.112:36182.service: Deactivated successfully.
Apr 16 01:56:32.694724 systemd[1]: session-6.scope: Deactivated successfully.
Apr 16 01:56:32.695384 systemd-logind[2426]: Session 6 logged out. Waiting for processes to exit.
Apr 16 01:56:32.696413 systemd-logind[2426]: Removed session 6.
Apr 16 01:56:32.712914 systemd[1]: Started sshd@3-10.0.0.12:22-20.229.252.112:36196.service - OpenSSH per-connection server daemon (20.229.252.112:36196).
Apr 16 01:56:32.824129 sshd[3162]: Accepted publickey for core from 20.229.252.112 port 36196 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:32.825011 sshd-session[3162]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:32.828882 systemd-logind[2426]: New session 7 of user core.
Apr 16 01:56:32.834753 systemd[1]: Started session-7.scope - Session 7 of User core.
Apr 16 01:56:32.873695 sshd[3166]: Connection closed by 20.229.252.112 port 36196
Apr 16 01:56:32.874721 sshd-session[3162]: pam_unix(sshd:session): session closed for user core
Apr 16 01:56:32.876805 systemd[1]: sshd@3-10.0.0.12:22-20.229.252.112:36196.service: Deactivated successfully.
Apr 16 01:56:32.877957 systemd[1]: session-7.scope: Deactivated successfully.
Apr 16 01:56:32.879219 systemd-logind[2426]: Session 7 logged out. Waiting for processes to exit.
Apr 16 01:56:32.879967 systemd-logind[2426]: Removed session 7.
Apr 16 01:56:32.900728 systemd[1]: Started sshd@4-10.0.0.12:22-20.229.252.112:36202.service - OpenSSH per-connection server daemon (20.229.252.112:36202).
Apr 16 01:56:33.013057 sshd[3172]: Accepted publickey for core from 20.229.252.112 port 36202 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:33.013982 sshd-session[3172]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:33.017649 systemd-logind[2426]: New session 8 of user core.
Apr 16 01:56:33.026741 systemd[1]: Started session-8.scope - Session 8 of User core.
Apr 16 01:56:33.096263 sudo[3177]:     core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1
Apr 16 01:56:33.096479 sudo[3177]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500)
Apr 16 01:56:33.114297 sudo[3177]: pam_unix(sudo:session): session closed for user root
Apr 16 01:56:33.130049 sshd[3176]: Connection closed by 20.229.252.112 port 36202
Apr 16 01:56:33.131520 sshd-session[3172]: pam_unix(sshd:session): session closed for user core
Apr 16 01:56:33.134462 systemd-logind[2426]: Session 8 logged out. Waiting for processes to exit.
Apr 16 01:56:33.134693 systemd[1]: sshd@4-10.0.0.12:22-20.229.252.112:36202.service: Deactivated successfully.
Apr 16 01:56:33.136074 systemd[1]: session-8.scope: Deactivated successfully.
Apr 16 01:56:33.137329 systemd-logind[2426]: Removed session 8.
Apr 16 01:56:33.160163 systemd[1]: Started sshd@5-10.0.0.12:22-20.229.252.112:36204.service - OpenSSH per-connection server daemon (20.229.252.112:36204).
Apr 16 01:56:33.272740 sshd[3184]: Accepted publickey for core from 20.229.252.112 port 36204 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:33.273589 sshd-session[3184]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:33.276843 systemd-logind[2426]: New session 9 of user core.
Apr 16 01:56:33.284705 systemd[1]: Started session-9.scope - Session 9 of User core.
Apr 16 01:56:33.308671 sudo[3190]:     core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules
Apr 16 01:56:33.308889 sudo[3190]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500)
Apr 16 01:56:33.310078 sudo[3190]: pam_unix(sudo:session): session closed for user root
Apr 16 01:56:33.314787 sudo[3189]:     core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules
Apr 16 01:56:33.314998 sudo[3189]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500)
Apr 16 01:56:33.320858 systemd[1]: Starting audit-rules.service - Load Audit Rules...
Apr 16 01:56:33.353242 kernel: kauditd_printk_skb: 6 callbacks suppressed
Apr 16 01:56:33.353302 kernel: audit: type=1305 audit(1776304593.349:211): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1
Apr 16 01:56:33.349000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1
Apr 16 01:56:33.353501 augenrules[3214]: No rules
Apr 16 01:56:33.349000 audit[3214]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8594c7e0 a2=420 a3=0 items=0 ppid=3195 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null)
Apr 16 01:56:33.356245 systemd[1]: audit-rules.service: Deactivated successfully.
Apr 16 01:56:33.349000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
Apr 16 01:56:33.357384 systemd[1]: Finished audit-rules.service - Load Audit Rules.
Apr 16 01:56:33.358130 kernel: audit: type=1300 audit(1776304593.349:211): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8594c7e0 a2=420 a3=0 items=0 ppid=3195 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null)
Apr 16 01:56:33.358173 kernel: audit: type=1327 audit(1776304593.349:211): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
Apr 16 01:56:33.361755 kernel: audit: type=1130 audit(1776304593.357:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.361158 sudo[3189]: pam_unix(sudo:session): session closed for user root
Apr 16 01:56:33.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.360000 audit[3189]: USER_END pid=3189 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.366400 kernel: audit: type=1131 audit(1776304593.357:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.366480 kernel: audit: type=1106 audit(1776304593.360:214): pid=3189 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.366507 kernel: audit: type=1104 audit(1776304593.360:215): pid=3189 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.360000 audit[3189]: CRED_DISP pid=3189 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.376607 sshd[3188]: Connection closed by 20.229.252.112 port 36204
Apr 16 01:56:33.376903 sshd-session[3184]: pam_unix(sshd:session): session closed for user core
Apr 16 01:56:33.377000 audit[3184]: USER_END pid=3184 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.380794 systemd[1]: sshd@5-10.0.0.12:22-20.229.252.112:36204.service: Deactivated successfully.
Apr 16 01:56:33.382246 systemd[1]: session-9.scope: Deactivated successfully.
Apr 16 01:56:33.384624 systemd-logind[2426]: Session 9 logged out. Waiting for processes to exit.
Apr 16 01:56:33.377000 audit[3184]: CRED_DISP pid=3184 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.385469 systemd-logind[2426]: Removed session 9.
Apr 16 01:56:33.389151 kernel: audit: type=1106 audit(1776304593.377:216): pid=3184 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.389188 kernel: audit: type=1104 audit(1776304593.377:217): pid=3184 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.12:22-20.229.252.112:36204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.392683 kernel: audit: type=1131 audit(1776304593.377:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.12:22-20.229.252.112:36204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.12:22-20.229.252.112:36218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.407107 systemd[1]: Started sshd@6-10.0.0.12:22-20.229.252.112:36218.service - OpenSSH per-connection server daemon (20.229.252.112:36218).
Apr 16 01:56:33.514000 audit[3223]: USER_ACCT pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.515438 sshd[3223]: Accepted publickey for core from 20.229.252.112 port 36218 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:33.515000 audit[3223]: CRED_ACQ pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.515000 audit[3223]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc3f305590 a2=3 a3=0 items=0 ppid=1 pid=3223 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null)
Apr 16 01:56:33.515000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D
Apr 16 01:56:33.516368 sshd-session[3223]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:33.520372 systemd-logind[2426]: New session 10 of user core.
Apr 16 01:56:33.526769 systemd[1]: Started session-10.scope - Session 10 of User core.
Apr 16 01:56:33.528000 audit[3223]: USER_START pid=3223 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.529000 audit[3227]: CRED_ACQ pid=3227 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.562078 sshd[3227]: Connection closed by 20.229.252.112 port 36218
Apr 16 01:56:33.562733 sshd-session[3223]: pam_unix(sshd:session): session closed for user core
Apr 16 01:56:33.562000 audit[3223]: USER_END pid=3223 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.563000 audit[3223]: CRED_DISP pid=3223 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.565505 systemd[1]: sshd@6-10.0.0.12:22-20.229.252.112:36218.service: Deactivated successfully.
Apr 16 01:56:33.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.12:22-20.229.252.112:36218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.566915 systemd[1]: session-10.scope: Deactivated successfully.
Apr 16 01:56:33.568002 systemd-logind[2426]: Session 10 logged out. Waiting for processes to exit.
Apr 16 01:56:33.568640 systemd-logind[2426]: Removed session 10.
Apr 16 01:56:33.587047 systemd[1]: Started sshd@7-10.0.0.12:22-20.229.252.112:36234.service - OpenSSH per-connection server daemon (20.229.252.112:36234).
Apr 16 01:56:33.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.12:22-20.229.252.112:36234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.698000 audit[3233]: USER_ACCT pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.698910 sshd[3233]: Accepted publickey for core from 20.229.252.112 port 36234 ssh2: RSA SHA256:bFR8/5YBH9c4x2GEvRU9NrmcmT1S6Yqtg5Aulk6+wqQ
Apr 16 01:56:33.698000 audit[3233]: CRED_ACQ pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.699000 audit[3233]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe76cf1930 a2=3 a3=0 items=0 ppid=1 pid=3233 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null)
Apr 16 01:56:33.699000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D
Apr 16 01:56:33.700109 sshd-session[3233]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0)
Apr 16 01:56:33.703646 systemd-logind[2426]: New session 11 of user core.
Apr 16 01:56:33.714792 systemd[1]: Started session-11.scope - Session 11 of User core.
Apr 16 01:56:33.716000 audit[3233]: USER_START pid=3233 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.717000 audit[3237]: CRED_ACQ pid=3237 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.866888 sshd[3237]: Connection closed by 20.229.252.112 port 36234
Apr 16 01:56:33.867226 sshd-session[3233]: pam_unix(sshd:session): session closed for user core
Apr 16 01:56:33.867000 audit[3233]: USER_END pid=3233 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.867000 audit[3233]: CRED_DISP pid=3233 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'
Apr 16 01:56:33.869738 systemd[1]: sshd@7-10.0.0.12:22-20.229.252.112:36234.service: Deactivated successfully.
Apr 16 01:56:33.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.12:22-20.229.252.112:36234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:33.871052 systemd[1]: session-11.scope: Deactivated successfully.
Apr 16 01:56:33.872432 systemd-logind[2426]: Session 11 logged out. Waiting for processes to exit.
Apr 16 01:56:33.873074 systemd-logind[2426]: Removed session 11.
Apr 16 01:56:35.143300 systemd[1]: Started sshd@8-10.0.0.12:22-185.217.1.246:50597.service - OpenSSH per-connection server daemon (185.217.1.246:50597).
Apr 16 01:56:35.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.12:22-185.217.1.246:50597 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:35.851145 sshd[3249]: Invalid user 0 from 185.217.1.246 port 50597
Apr 16 01:56:35.946043 sshd[3249]: Disconnecting invalid user 0 185.217.1.246 port 50597: Change of username or service not allowed: (0,ssh-connection) -> (ftp,ssh-connection) [preauth]
Apr 16 01:56:35.945000 audit[3249]: USER_ERR pid=3249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:35.947966 systemd[1]: sshd@8-10.0.0.12:22-185.217.1.246:50597.service: Deactivated successfully.
Apr 16 01:56:35.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.12:22-185.217.1.246:50597 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:36.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.12:22-185.217.1.246:37995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:36.160152 systemd[1]: Started sshd@9-10.0.0.12:22-185.217.1.246:37995.service - OpenSSH per-connection server daemon (185.217.1.246:37995).
Apr 16 01:56:36.909183 sshd[3255]: Invalid user ftp from 185.217.1.246 port 37995
Apr 16 01:56:38.622545 sshd[3255]: maximum authentication attempts exceeded for invalid user ftp from 185.217.1.246 port 37995 ssh2 [preauth]
Apr 16 01:56:38.622545 sshd[3255]: Disconnecting invalid user ftp 185.217.1.246 port 37995: Too many authentication failures [preauth]
Apr 16 01:56:38.627834 kernel: kauditd_printk_skb: 26 callbacks suppressed
Apr 16 01:56:38.627873 kernel: audit: type=1109 audit(1776304598.622:241): pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:38.622000 audit[3255]: USER_ERR pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:38.624099 systemd[1]: sshd@9-10.0.0.12:22-185.217.1.246:37995.service: Deactivated successfully.
Apr 16 01:56:38.631759 kernel: audit: type=1131 audit(1776304598.623:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.12:22-185.217.1.246:37995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:38.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.12:22-185.217.1.246:37995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:38.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.12:22-185.217.1.246:54190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:38.811127 systemd[1]: Started sshd@10-10.0.0.12:22-185.217.1.246:54190.service - OpenSSH per-connection server daemon (185.217.1.246:54190).
Apr 16 01:56:38.816623 kernel: audit: type=1130 audit(1776304598.810:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.12:22-185.217.1.246:54190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:39.718546 sshd[3261]: Invalid user ftp from 185.217.1.246 port 54190
Apr 16 01:56:39.756717 sshd[3261]: Disconnecting invalid user ftp 185.217.1.246 port 54190: Change of username or service not allowed: (ftp,ssh-connection) -> (mary,ssh-connection) [preauth]
Apr 16 01:56:39.756000 audit[3261]: USER_ERR pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:39.758339 systemd[1]: sshd@10-10.0.0.12:22-185.217.1.246:54190.service: Deactivated successfully.
Apr 16 01:56:39.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.12:22-185.217.1.246:54190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:39.766136 kernel: audit: type=1109 audit(1776304599.756:244): pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:39.766167 kernel: audit: type=1131 audit(1776304599.757:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.12:22-185.217.1.246:54190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:39.830978 systemd[1]: Started sshd@11-10.0.0.12:22-185.217.1.246:57510.service - OpenSSH per-connection server daemon (185.217.1.246:57510).
Apr 16 01:56:39.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.12:22-185.217.1.246:57510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:39.838768 kernel: audit: type=1130 audit(1776304599.830:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.12:22-185.217.1.246:57510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:40.104659 sshd[3267]: Invalid user mary from 185.217.1.246 port 57510
Apr 16 01:56:40.143629 sshd[3267]: Disconnecting invalid user mary 185.217.1.246 port 57510: Change of username or service not allowed: (mary,ssh-connection) -> (website,ssh-connection) [preauth]
Apr 16 01:56:40.143000 audit[3267]: USER_ERR pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:40.145922 systemd[1]: sshd@11-10.0.0.12:22-185.217.1.246:57510.service: Deactivated successfully.
Apr 16 01:56:40.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.12:22-185.217.1.246:57510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:40.153435 kernel: audit: type=1109 audit(1776304600.143:247): pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:40.153491 kernel: audit: type=1131 audit(1776304600.143:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.12:22-185.217.1.246:57510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:40.230004 systemd[1]: Started sshd@12-10.0.0.12:22-185.217.1.246:37396.service - OpenSSH per-connection server daemon (185.217.1.246:37396).
Apr 16 01:56:40.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.12:22-185.217.1.246:37396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:40.237621 kernel: audit: type=1130 audit(1776304600.229:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.12:22-185.217.1.246:37396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:40.547059 sshd[3273]: Invalid user website from 185.217.1.246 port 37396
Apr 16 01:56:40.611148 sshd[3273]: Disconnecting invalid user website 185.217.1.246 port 37396: Change of username or service not allowed: (website,ssh-connection) -> (odoo17,ssh-connection) [preauth]
Apr 16 01:56:40.609000 audit[3273]: USER_ERR pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:40.614784 systemd[1]: sshd@12-10.0.0.12:22-185.217.1.246:37396.service: Deactivated successfully.
Apr 16 01:56:40.616661 kernel: audit: type=1109 audit(1776304600.609:250): pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:40.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.12:22-185.217.1.246:37396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:40.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.12:22-185.217.1.246:60109 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:40.690251 systemd[1]: Started sshd@13-10.0.0.12:22-185.217.1.246:60109.service - OpenSSH per-connection server daemon (185.217.1.246:60109).
Apr 16 01:56:40.962872 sshd[3279]: Invalid user odoo17 from 185.217.1.246 port 60109
Apr 16 01:56:40.998227 sshd[3279]: Disconnecting invalid user odoo17 185.217.1.246 port 60109: Change of username or service not allowed: (odoo17,ssh-connection) -> (yealink,ssh-connection) [preauth]
Apr 16 01:56:40.996000 audit[3279]: USER_ERR pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:40.999825 systemd[1]: sshd@13-10.0.0.12:22-185.217.1.246:60109.service: Deactivated successfully.
Apr 16 01:56:40.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.12:22-185.217.1.246:60109 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:41.424800 kernel: hv_balloon: Max. dynamic memory size: 8192 MB
Apr 16 01:56:41.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.12:22-185.217.1.246:24119 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:41.437213 systemd[1]: Started sshd@14-10.0.0.12:22-185.217.1.246:24119.service - OpenSSH per-connection server daemon (185.217.1.246:24119).
Apr 16 01:56:42.611221 sshd[3285]: Invalid user yealink from 185.217.1.246 port 24119
Apr 16 01:56:42.781641 sshd[3285]: Disconnecting invalid user yealink 185.217.1.246 port 24119: Change of username or service not allowed: (yealink,ssh-connection) -> (binance,ssh-connection) [preauth]
Apr 16 01:56:42.780000 audit[3285]: USER_ERR pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:42.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.12:22-185.217.1.246:24119 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:42.783391 systemd[1]: sshd@14-10.0.0.12:22-185.217.1.246:24119.service: Deactivated successfully.
Apr 16 01:56:43.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.12:22-185.217.1.246:53972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:43.068115 systemd[1]: Started sshd@15-10.0.0.12:22-185.217.1.246:53972.service - OpenSSH per-connection server daemon (185.217.1.246:53972).
Apr 16 01:56:43.441370 sshd[3291]: Invalid user binance from 185.217.1.246 port 53972
Apr 16 01:56:43.983420 sshd[3291]: Disconnecting invalid user binance 185.217.1.246 port 53972: Change of username or service not allowed: (binance,ssh-connection) -> (daniel,ssh-connection) [preauth]
Apr 16 01:56:43.982000 audit[3291]: USER_ERR pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:43.985461 kernel: kauditd_printk_skb: 8 callbacks suppressed
Apr 16 01:56:43.985535 kernel: audit: type=1109 audit(1776304603.982:259): pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:43.986340 systemd[1]: sshd@15-10.0.0.12:22-185.217.1.246:53972.service: Deactivated successfully.
Apr 16 01:56:43.994888 kernel: audit: type=1131 audit(1776304603.984:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.12:22-185.217.1.246:53972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:43.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.12:22-185.217.1.246:53972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:44.098158 systemd[1]: Started sshd@16-10.0.0.12:22-185.217.1.246:48367.service - OpenSSH per-connection server daemon (185.217.1.246:48367).
Apr 16 01:56:44.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.12:22-185.217.1.246:48367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:44.104629 kernel: audit: type=1130 audit(1776304604.096:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.12:22-185.217.1.246:48367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:44.587335 sshd[3297]: Invalid user daniel from 185.217.1.246 port 48367
Apr 16 01:56:44.623370 sshd[3297]: Disconnecting invalid user daniel 185.217.1.246 port 48367: Change of username or service not allowed: (daniel,ssh-connection) -> (marek,ssh-connection) [preauth]
Apr 16 01:56:44.622000 audit[3297]: USER_ERR pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:44.625016 systemd[1]: sshd@16-10.0.0.12:22-185.217.1.246:48367.service: Deactivated successfully.
Apr 16 01:56:44.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.12:22-185.217.1.246:48367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:44.633104 kernel: audit: type=1109 audit(1776304604.622:262): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:44.633140 kernel: audit: type=1131 audit(1776304604.622:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.12:22-185.217.1.246:48367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:44.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.12:22-185.217.1.246:8692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:44.728024 systemd[1]: Started sshd@17-10.0.0.12:22-185.217.1.246:8692.service - OpenSSH per-connection server daemon (185.217.1.246:8692).
Apr 16 01:56:44.734650 kernel: audit: type=1130 audit(1776304604.726:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.12:22-185.217.1.246:8692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:45.001295 sshd[3303]: Invalid user marek from 185.217.1.246 port 8692
Apr 16 01:56:45.037499 sshd[3303]: Disconnecting invalid user marek 185.217.1.246 port 8692: Change of username or service not allowed: (marek,ssh-connection) -> (netlink,ssh-connection) [preauth]
Apr 16 01:56:45.036000 audit[3303]: USER_ERR pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:45.042167 systemd[1]: sshd@17-10.0.0.12:22-185.217.1.246:8692.service: Deactivated successfully.
Apr 16 01:56:45.042628 kernel: audit: type=1109 audit(1776304605.036:265): pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:45.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.12:22-185.217.1.246:8692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:45.058651 kernel: audit: type=1131 audit(1776304605.041:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.12:22-185.217.1.246:8692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:45.112076 systemd[1]: Started sshd@18-10.0.0.12:22-185.217.1.246:42849.service - OpenSSH per-connection server daemon (185.217.1.246:42849).
Apr 16 01:56:45.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.12:22-185.217.1.246:42849 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:45.119664 kernel: audit: type=1130 audit(1776304605.110:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.12:22-185.217.1.246:42849 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:45.481261 sshd[3309]: Invalid user netlink from 185.217.1.246 port 42849
Apr 16 01:56:45.523231 sshd[3309]: Disconnecting invalid user netlink 185.217.1.246 port 42849: Change of username or service not allowed: (netlink,ssh-connection) -> (liuyu,ssh-connection) [preauth]
Apr 16 01:56:45.522000 audit[3309]: USER_ERR pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:45.528627 kernel: audit: type=1109 audit(1776304605.522:268): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:45.526975 systemd[1]: sshd@18-10.0.0.12:22-185.217.1.246:42849.service: Deactivated successfully.
Apr 16 01:56:45.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.12:22-185.217.1.246:42849 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:45.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.12:22-185.217.1.246:18275 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:45.657164 systemd[1]: Started sshd@19-10.0.0.12:22-185.217.1.246:18275.service - OpenSSH per-connection server daemon (185.217.1.246:18275).
Apr 16 01:56:46.146058 sshd[3315]: Invalid user liuyu from 185.217.1.246 port 18275
Apr 16 01:56:46.256099 sshd[3315]: Disconnecting invalid user liuyu 185.217.1.246 port 18275: Change of username or service not allowed: (liuyu,ssh-connection) -> (adm,ssh-connection) [preauth]
Apr 16 01:56:46.255000 audit[3315]: USER_ERR pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:46.258043 systemd[1]: sshd@19-10.0.0.12:22-185.217.1.246:18275.service: Deactivated successfully.
Apr 16 01:56:46.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.12:22-185.217.1.246:18275 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:47.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.12:22-185.217.1.246:25729 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:47.070328 systemd[1]: Started sshd@20-10.0.0.12:22-185.217.1.246:25729.service - OpenSSH per-connection server daemon (185.217.1.246:25729).
Apr 16 01:56:49.137992 sshd[3322]: Disconnecting authenticating user adm 185.217.1.246 port 25729: Change of username or service not allowed: (adm,ssh-connection) -> (dspace,ssh-connection) [preauth]
Apr 16 01:56:49.143631 kernel: kauditd_printk_skb: 5 callbacks suppressed
Apr 16 01:56:49.143713 kernel: audit: type=1109 audit(1776304609.137:274): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:49.137000 audit[3322]: USER_ERR pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:49.140525 systemd[1]: sshd@20-10.0.0.12:22-185.217.1.246:25729.service: Deactivated successfully.
Apr 16 01:56:49.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.12:22-185.217.1.246:25729 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:49.149273 kernel: audit: type=1131 audit(1776304609.140:275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.12:22-185.217.1.246:25729 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:49.304074 systemd[1]: Started sshd@21-10.0.0.12:22-185.217.1.246:39828.service - OpenSSH per-connection server daemon (185.217.1.246:39828).
Apr 16 01:56:49.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.12:22-185.217.1.246:39828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:49.311652 kernel: audit: type=1130 audit(1776304609.303:276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.12:22-185.217.1.246:39828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:49.934360 sshd[3328]: Invalid user dspace from 185.217.1.246 port 39828
Apr 16 01:56:50.017542 sshd[3328]: Disconnecting invalid user dspace 185.217.1.246 port 39828: Change of username or service not allowed: (dspace,ssh-connection) -> (frontend,ssh-connection) [preauth]
Apr 16 01:56:50.017000 audit[3328]: USER_ERR pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:50.022102 systemd[1]: sshd@21-10.0.0.12:22-185.217.1.246:39828.service: Deactivated successfully.
Apr 16 01:56:50.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.12:22-185.217.1.246:39828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.025358 kernel: audit: type=1109 audit(1776304610.017:277): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:50.025476 kernel: audit: type=1131 audit(1776304610.021:278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.12:22-185.217.1.246:39828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.12:22-185.217.1.246:20506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.103199 systemd[1]: Started sshd@22-10.0.0.12:22-185.217.1.246:20506.service - OpenSSH per-connection server daemon (185.217.1.246:20506).
Apr 16 01:56:50.108674 kernel: audit: type=1130 audit(1776304610.102:279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.12:22-185.217.1.246:20506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.379555 sshd[3334]: Invalid user frontend from 185.217.1.246 port 20506
Apr 16 01:56:50.415134 sshd[3334]: Disconnecting invalid user frontend 185.217.1.246 port 20506: Change of username or service not allowed: (frontend,ssh-connection) -> (prometheus,ssh-connection) [preauth]
Apr 16 01:56:50.414000 audit[3334]: USER_ERR pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:50.420257 systemd[1]: sshd@22-10.0.0.12:22-185.217.1.246:20506.service: Deactivated successfully.
Apr 16 01:56:50.420619 kernel: audit: type=1109 audit(1776304610.414:280): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:50.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.12:22-185.217.1.246:20506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.427824 kernel: audit: type=1131 audit(1776304610.419:281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.12:22-185.217.1.246:20506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.494968 systemd[1]: Started sshd@23-10.0.0.12:22-185.217.1.246:26906.service - OpenSSH per-connection server daemon (185.217.1.246:26906).
Apr 16 01:56:50.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.12:22-185.217.1.246:26906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.501624 kernel: audit: type=1130 audit(1776304610.494:282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.12:22-185.217.1.246:26906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.767522 sshd[3340]: Invalid user prometheus from 185.217.1.246 port 26906
Apr 16 01:56:50.805566 sshd[3340]: Disconnecting invalid user prometheus 185.217.1.246 port 26906: Change of username or service not allowed: (prometheus,ssh-connection) -> (deployuser,ssh-connection [preauth]
Apr 16 01:56:50.805000 audit[3340]: USER_ERR pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:50.811626 kernel: audit: type=1109 audit(1776304610.805:283): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:50.809714 systemd[1]: sshd@23-10.0.0.12:22-185.217.1.246:26906.service: Deactivated successfully.
Apr 16 01:56:50.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.12:22-185.217.1.246:26906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.12:22-185.217.1.246:18955 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:50.899989 systemd[1]: Started sshd@24-10.0.0.12:22-185.217.1.246:18955.service - OpenSSH per-connection server daemon (185.217.1.246:18955).
Apr 16 01:56:51.563343 sshd[3346]: Invalid user deployuser from 185.217.1.246 port 18955
Apr 16 01:56:51.672630 sshd[3346]: Disconnecting invalid user deployuser 185.217.1.246 port 18955: Change of username or service not allowed: (deployuser,ssh-connection) -> (telegram,ssh-connection) [preauth]
Apr 16 01:56:51.672000 audit[3346]: USER_ERR pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:51.674515 systemd[1]: sshd@24-10.0.0.12:22-185.217.1.246:18955.service: Deactivated successfully.
Apr 16 01:56:51.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.12:22-185.217.1.246:18955 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:51.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.12:22-185.217.1.246:64589 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:51.758955 systemd[1]: Started sshd@25-10.0.0.12:22-185.217.1.246:64589.service - OpenSSH per-connection server daemon (185.217.1.246:64589).
Apr 16 01:56:52.531578 sshd[3352]: Invalid user telegram from 185.217.1.246 port 64589
Apr 16 01:56:52.661143 sshd[3352]: Disconnecting invalid user telegram 185.217.1.246 port 64589: Change of username or service not allowed: (telegram,ssh-connection) -> (nobody,ssh-connection) [preauth]
Apr 16 01:56:52.660000 audit[3352]: USER_ERR pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:52.663144 systemd[1]: sshd@25-10.0.0.12:22-185.217.1.246:64589.service: Deactivated successfully.
Apr 16 01:56:52.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.12:22-185.217.1.246:64589 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:52.747007 systemd[1]: Started sshd@26-10.0.0.12:22-185.217.1.246:45632.service - OpenSSH per-connection server daemon (185.217.1.246:45632).
Apr 16 01:56:52.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.12:22-185.217.1.246:45632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:53.857637 sshd[3358]: Disconnecting authenticating user nobody 185.217.1.246 port 45632: Change of username or service not allowed: (nobody,ssh-connection) -> (terraform,ssh-connection) [preauth]
Apr 16 01:56:53.857000 audit[3358]: USER_ERR pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:53.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.12:22-185.217.1.246:45632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:53.859720 systemd[1]: sshd@26-10.0.0.12:22-185.217.1.246:45632.service: Deactivated successfully.
Apr 16 01:56:53.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.12:22-185.217.1.246:23348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:53.965124 systemd[1]: Started sshd@27-10.0.0.12:22-185.217.1.246:23348.service - OpenSSH per-connection server daemon (185.217.1.246:23348).
Apr 16 01:56:54.074914 update_engine[2428]: I20260416 01:56:54.074841  2428 update_attempter.cc:509] Updating boot flags...
Apr 16 01:56:54.985916 sshd[3364]: Invalid user terraform from 185.217.1.246 port 23348
Apr 16 01:56:55.037481 sshd[3364]: Disconnecting invalid user terraform 185.217.1.246 port 23348: Change of username or service not allowed: (terraform,ssh-connection) -> (a,ssh-connection) [preauth]
Apr 16 01:56:55.039535 kernel: kauditd_printk_skb: 11 callbacks suppressed
Apr 16 01:56:55.039786 kernel: audit: type=1109 audit(1776304615.037:295): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:55.037000 audit[3364]: USER_ERR pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:55.041272 systemd[1]: sshd@27-10.0.0.12:22-185.217.1.246:23348.service: Deactivated successfully.
Apr 16 01:56:55.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.12:22-185.217.1.246:23348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:55.046166 kernel: audit: type=1131 audit(1776304615.041:296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.12:22-185.217.1.246:23348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:55.110080 systemd[1]: Started sshd@28-10.0.0.12:22-185.217.1.246:11481.service - OpenSSH per-connection server daemon (185.217.1.246:11481).
Apr 16 01:56:55.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.12:22-185.217.1.246:11481 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:55.115625 kernel: audit: type=1130 audit(1776304615.109:297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.12:22-185.217.1.246:11481 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:56.004508 sshd[3393]: Invalid user a from 185.217.1.246 port 11481
Apr 16 01:56:56.133122 sshd[3393]: Disconnecting invalid user a 185.217.1.246 port 11481: Change of username or service not allowed: (a,ssh-connection) -> (support1,ssh-connection) [preauth]
Apr 16 01:56:56.132000 audit[3393]: USER_ERR pid=3393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:56.135029 systemd[1]: sshd@28-10.0.0.12:22-185.217.1.246:11481.service: Deactivated successfully.
Apr 16 01:56:56.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.12:22-185.217.1.246:11481 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:56.143542 kernel: audit: type=1109 audit(1776304616.132:298): pid=3393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:56.143585 kernel: audit: type=1131 audit(1776304616.134:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.12:22-185.217.1.246:11481 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:56.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.12:22-185.217.1.246:14983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:56.649198 systemd[1]: Started sshd@29-10.0.0.12:22-185.217.1.246:14983.service - OpenSSH per-connection server daemon (185.217.1.246:14983).
Apr 16 01:56:56.656714 kernel: audit: type=1130 audit(1776304616.648:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.12:22-185.217.1.246:14983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:57.069489 sshd[3399]: Invalid user support1 from 185.217.1.246 port 14983
Apr 16 01:56:57.344853 sshd[3399]: Disconnecting invalid user support1 185.217.1.246 port 14983: Change of username or service not allowed: (support1,ssh-connection) -> (uucp,ssh-connection) [preauth]
Apr 16 01:56:57.344000 audit[3399]: USER_ERR pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:57.349500 systemd[1]: sshd@29-10.0.0.12:22-185.217.1.246:14983.service: Deactivated successfully.
Apr 16 01:56:57.354004 kernel: audit: type=1109 audit(1776304617.344:301): pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:57.354080 kernel: audit: type=1131 audit(1776304617.349:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.12:22-185.217.1.246:14983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:57.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.12:22-185.217.1.246:14983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:59.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.0.0.12:22-185.217.1.246:20667 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:59.418315 systemd[1]: Started sshd@30-10.0.0.12:22-185.217.1.246:20667.service - OpenSSH per-connection server daemon (185.217.1.246:20667).
Apr 16 01:56:59.425661 kernel: audit: type=1130 audit(1776304619.417:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.0.0.12:22-185.217.1.246:20667 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:59.731510 sshd[3405]: Disconnecting authenticating user uucp 185.217.1.246 port 20667: Change of username or service not allowed: (uucp,ssh-connection) -> (dasusr1,ssh-connection) [preauth]
Apr 16 01:56:59.731000 audit[3405]: USER_ERR pid=3405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:59.735617 kernel: audit: type=1109 audit(1776304619.731:304): pid=3405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:56:59.735760 systemd[1]: sshd@30-10.0.0.12:22-185.217.1.246:20667.service: Deactivated successfully.
Apr 16 01:56:59.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-10.0.0.12:22-185.217.1.246:20667 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:59.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-10.0.0.12:22-185.217.1.246:30650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:56:59.813061 systemd[1]: Started sshd@31-10.0.0.12:22-185.217.1.246:30650.service - OpenSSH per-connection server daemon (185.217.1.246:30650).
Apr 16 01:57:00.105750 sshd[3411]: Invalid user dasusr1 from 185.217.1.246 port 30650
Apr 16 01:57:00.140369 sshd[3411]: Disconnecting invalid user dasusr1 185.217.1.246 port 30650: Change of username or service not allowed: (dasusr1,ssh-connection) -> (router,ssh-connection) [preauth]
Apr 16 01:57:00.142810 kernel: kauditd_printk_skb: 2 callbacks suppressed
Apr 16 01:57:00.142884 kernel: audit: type=1109 audit(1776304620.140:307): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:00.140000 audit[3411]: USER_ERR pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:00.143330 systemd[1]: sshd@31-10.0.0.12:22-185.217.1.246:30650.service: Deactivated successfully.
Apr 16 01:57:00.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-10.0.0.12:22-185.217.1.246:30650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:00.151582 kernel: audit: type=1131 audit(1776304620.141:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-10.0.0.12:22-185.217.1.246:30650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:00.220943 systemd[1]: Started sshd@32-10.0.0.12:22-185.217.1.246:44341.service - OpenSSH per-connection server daemon (185.217.1.246:44341).
Apr 16 01:57:00.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10.0.0.12:22-185.217.1.246:44341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:00.228772 kernel: audit: type=1130 audit(1776304620.220:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10.0.0.12:22-185.217.1.246:44341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:00.491454 sshd[3417]: Invalid user router from 185.217.1.246 port 44341
Apr 16 01:57:01.261513 sshd[3417]: Disconnecting invalid user router 185.217.1.246 port 44341: Change of username or service not allowed: (router,ssh-connection) -> (esroot,ssh-connection) [preauth]
Apr 16 01:57:01.261000 audit[3417]: USER_ERR pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:01.263759 systemd[1]: sshd@32-10.0.0.12:22-185.217.1.246:44341.service: Deactivated successfully.
Apr 16 01:57:01.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10.0.0.12:22-185.217.1.246:44341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:01.271227 kernel: audit: type=1109 audit(1776304621.261:310): pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:01.271270 kernel: audit: type=1131 audit(1776304621.261:311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-10.0.0.12:22-185.217.1.246:44341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:01.644304 systemd[1]: Started sshd@33-10.0.0.12:22-185.217.1.246:41155.service - OpenSSH per-connection server daemon (185.217.1.246:41155).
Apr 16 01:57:01.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-10.0.0.12:22-185.217.1.246:41155 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:01.650628 kernel: audit: type=1130 audit(1776304621.644:312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-10.0.0.12:22-185.217.1.246:41155 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:02.422102 sshd[3423]: Invalid user esroot from 185.217.1.246 port 41155
Apr 16 01:57:02.596341 sshd[3423]: Disconnecting invalid user esroot 185.217.1.246 port 41155: Change of username or service not allowed: (esroot,ssh-connection) -> (user7,ssh-connection) [preauth]
Apr 16 01:57:02.594000 audit[3423]: USER_ERR pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:02.599918 systemd[1]: sshd@33-10.0.0.12:22-185.217.1.246:41155.service: Deactivated successfully.
Apr 16 01:57:02.601631 kernel: audit: type=1109 audit(1776304622.594:313): pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:02.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-10.0.0.12:22-185.217.1.246:41155 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:02.606883 kernel: audit: type=1131 audit(1776304622.598:314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-10.0.0.12:22-185.217.1.246:41155 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:02.897216 systemd[1]: Started sshd@34-10.0.0.12:22-185.217.1.246:5339.service - OpenSSH per-connection server daemon (185.217.1.246:5339).
Apr 16 01:57:02.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-10.0.0.12:22-185.217.1.246:5339 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:02.903636 kernel: audit: type=1130 audit(1776304622.895:315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-10.0.0.12:22-185.217.1.246:5339 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:04.109618 sshd[3429]: Invalid user user7 from 185.217.1.246 port 5339
Apr 16 01:57:04.465070 sshd[3429]: Disconnecting invalid user user7 185.217.1.246 port 5339: Change of username or service not allowed: (user7,ssh-connection) -> (victor,ssh-connection) [preauth]
Apr 16 01:57:04.463000 audit[3429]: USER_ERR pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:04.466945 systemd[1]: sshd@34-10.0.0.12:22-185.217.1.246:5339.service: Deactivated successfully.
Apr 16 01:57:04.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-10.0.0.12:22-185.217.1.246:5339 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:04.471636 kernel: audit: type=1109 audit(1776304624.463:316): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:05.128236 systemd[1]: Started sshd@35-10.0.0.12:22-185.217.1.246:55508.service - OpenSSH per-connection server daemon (185.217.1.246:55508).
Apr 16 01:57:05.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-10.0.0.12:22-185.217.1.246:55508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:06.518999 sshd[3435]: Invalid user victor from 185.217.1.246 port 55508
Apr 16 01:57:06.731940 sshd[3435]: Disconnecting invalid user victor 185.217.1.246 port 55508: Change of username or service not allowed: (victor,ssh-connection) -> (autcom,ssh-connection) [preauth]
Apr 16 01:57:06.734885 kernel: kauditd_printk_skb: 2 callbacks suppressed
Apr 16 01:57:06.735255 kernel: audit: type=1109 audit(1776304626.730:319): pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:06.730000 audit[3435]: USER_ERR pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:06.737052 systemd[1]: sshd@35-10.0.0.12:22-185.217.1.246:55508.service: Deactivated successfully.
Apr 16 01:57:06.742821 kernel: audit: type=1131 audit(1776304626.736:320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-10.0.0.12:22-185.217.1.246:55508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:06.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-10.0.0.12:22-185.217.1.246:55508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:07.185333 systemd[1]: Started sshd@36-10.0.0.12:22-185.217.1.246:61375.service - OpenSSH per-connection server daemon (185.217.1.246:61375).
Apr 16 01:57:07.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-10.0.0.12:22-185.217.1.246:61375 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:07.191637 kernel: audit: type=1130 audit(1776304627.183:321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-10.0.0.12:22-185.217.1.246:61375 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:08.413369 sshd[3441]: Invalid user autcom from 185.217.1.246 port 61375
Apr 16 01:57:08.527632 sshd[3441]: Disconnecting invalid user autcom 185.217.1.246 port 61375: Change of username or service not allowed: (autcom,ssh-connection) -> (nc,ssh-connection) [preauth]
Apr 16 01:57:08.526000 audit[3441]: USER_ERR pid=3441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:08.529178 systemd[1]: sshd@36-10.0.0.12:22-185.217.1.246:61375.service: Deactivated successfully.
Apr 16 01:57:08.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-10.0.0.12:22-185.217.1.246:61375 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:08.537774 kernel: audit: type=1109 audit(1776304628.526:322): pid=3441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:08.537819 kernel: audit: type=1131 audit(1776304628.526:323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-10.0.0.12:22-185.217.1.246:61375 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:08.740242 systemd[1]: Started sshd@37-10.0.0.12:22-185.217.1.246:48361.service - OpenSSH per-connection server daemon (185.217.1.246:48361).
Apr 16 01:57:08.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-10.0.0.12:22-185.217.1.246:48361 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:08.747639 kernel: audit: type=1130 audit(1776304628.738:324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-10.0.0.12:22-185.217.1.246:48361 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:09.349036 sshd[3447]: Invalid user nc from 185.217.1.246 port 48361
Apr 16 01:57:09.448113 sshd[3447]: Disconnecting invalid user nc 185.217.1.246 port 48361: Change of username or service not allowed: (nc,ssh-connection) -> (ftpuser1,ssh-connection) [preauth]
Apr 16 01:57:09.446000 audit[3447]: USER_ERR pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:09.451969 systemd[1]: sshd@37-10.0.0.12:22-185.217.1.246:48361.service: Deactivated successfully.
Apr 16 01:57:09.453666 kernel: audit: type=1109 audit(1776304629.446:325): pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:09.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-10.0.0.12:22-185.217.1.246:48361 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:09.458683 kernel: audit: type=1131 audit(1776304629.450:326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-10.0.0.12:22-185.217.1.246:48361 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:09.689073 systemd[1]: Started sshd@38-10.0.0.12:22-185.217.1.246:42011.service - OpenSSH per-connection server daemon (185.217.1.246:42011).
Apr 16 01:57:09.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-10.0.0.12:22-185.217.1.246:42011 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:09.696713 kernel: audit: type=1130 audit(1776304629.688:327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-10.0.0.12:22-185.217.1.246:42011 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:10.067184 sshd[3453]: Invalid user ftpuser1 from 185.217.1.246 port 42011
Apr 16 01:57:10.105614 sshd[3453]: Disconnecting invalid user ftpuser1 185.217.1.246 port 42011: Change of username or service not allowed: (ftpuser1,ssh-connection) -> (kernel,ssh-connection) [preauth]
Apr 16 01:57:10.104000 audit[3453]: USER_ERR pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:10.110485 systemd[1]: sshd@38-10.0.0.12:22-185.217.1.246:42011.service: Deactivated successfully.
Apr 16 01:57:10.110628 kernel: audit: type=1109 audit(1776304630.104:328): pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:10.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-10.0.0.12:22-185.217.1.246:42011 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:10.183075 systemd[1]: Started sshd@39-10.0.0.12:22-185.217.1.246:57058.service - OpenSSH per-connection server daemon (185.217.1.246:57058).
Apr 16 01:57:10.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-10.0.0.12:22-185.217.1.246:57058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:10.465488 sshd[3459]: Invalid user kernel from 185.217.1.246 port 57058
Apr 16 01:57:10.503816 sshd[3459]: Disconnecting invalid user kernel 185.217.1.246 port 57058: Change of username or service not allowed: (kernel,ssh-connection) -> (es_user,ssh-connection) [preauth]
Apr 16 01:57:10.502000 audit[3459]: USER_ERR pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:10.505385 systemd[1]: sshd@39-10.0.0.12:22-185.217.1.246:57058.service: Deactivated successfully.
Apr 16 01:57:10.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-10.0.0.12:22-185.217.1.246:57058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:10.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-10.0.0.12:22-185.217.1.246:61054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:10.799205 systemd[1]: Started sshd@40-10.0.0.12:22-185.217.1.246:61054.service - OpenSSH per-connection server daemon (185.217.1.246:61054).
Apr 16 01:57:11.183203 sshd[3465]: Invalid user es_user from 185.217.1.246 port 61054
Apr 16 01:57:11.375301 sshd[3465]: Disconnecting invalid user es_user 185.217.1.246 port 61054: Change of username or service not allowed: (es_user,ssh-connection) -> (kubelet,ssh-connection) [preauth]
Apr 16 01:57:11.374000 audit[3465]: USER_ERR pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:11.377272 systemd[1]: sshd@40-10.0.0.12:22-185.217.1.246:61054.service: Deactivated successfully.
Apr 16 01:57:11.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-10.0.0.12:22-185.217.1.246:61054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:11.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-10.0.0.12:22-185.217.1.246:49563 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:11.614260 systemd[1]: Started sshd@41-10.0.0.12:22-185.217.1.246:49563.service - OpenSSH per-connection server daemon (185.217.1.246:49563).
Apr 16 01:57:12.746097 sshd[3471]: Invalid user kubelet from 185.217.1.246 port 49563
Apr 16 01:57:13.010037 sshd[3471]: Disconnecting invalid user kubelet 185.217.1.246 port 49563: Change of username or service not allowed: (kubelet,ssh-connection) -> (lenovo,ssh-connection) [preauth]
Apr 16 01:57:13.009000 audit[3471]: USER_ERR pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:13.017744 kernel: kauditd_printk_skb: 8 callbacks suppressed
Apr 16 01:57:13.017810 kernel: audit: type=1109 audit(1776304633.009:337): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:13.012068 systemd[1]: sshd@41-10.0.0.12:22-185.217.1.246:49563.service: Deactivated successfully.
Apr 16 01:57:13.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-10.0.0.12:22-185.217.1.246:49563 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:13.021344 kernel: audit: type=1131 audit(1776304633.011:338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-10.0.0.12:22-185.217.1.246:49563 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:13.357566 systemd[1]: Started sshd@42-10.0.0.12:22-185.217.1.246:32063.service - OpenSSH per-connection server daemon (185.217.1.246:32063).
Apr 16 01:57:13.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-10.0.0.12:22-185.217.1.246:32063 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:13.364648 kernel: audit: type=1130 audit(1776304633.357:339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-10.0.0.12:22-185.217.1.246:32063 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:13.846303 sshd[3477]: Invalid user lenovo from 185.217.1.246 port 32063
Apr 16 01:57:13.883125 sshd[3477]: Disconnecting invalid user lenovo 185.217.1.246 port 32063: Change of username or service not allowed: (lenovo,ssh-connection) -> (omsagent,ssh-connection) [preauth]
Apr 16 01:57:13.882000 audit[3477]: USER_ERR pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:13.886550 systemd[1]: sshd@42-10.0.0.12:22-185.217.1.246:32063.service: Deactivated successfully.
Apr 16 01:57:13.891555 kernel: audit: type=1109 audit(1776304633.882:340): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:13.891630 kernel: audit: type=1131 audit(1776304633.885:341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-10.0.0.12:22-185.217.1.246:32063 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:13.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-10.0.0.12:22-185.217.1.246:32063 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:13.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-10.0.0.12:22-185.217.1.246:25601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:13.967998 systemd[1]: Started sshd@43-10.0.0.12:22-185.217.1.246:25601.service - OpenSSH per-connection server daemon (185.217.1.246:25601).
Apr 16 01:57:13.974640 kernel: audit: type=1130 audit(1776304633.967:342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-10.0.0.12:22-185.217.1.246:25601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:14.235384 sshd[3483]: Invalid user omsagent from 185.217.1.246 port 25601
Apr 16 01:57:14.278145 sshd[3483]: Disconnecting invalid user omsagent 185.217.1.246 port 25601: Change of username or service not allowed: (omsagent,ssh-connection) -> (publicuser,ssh-connection) [preauth]
Apr 16 01:57:14.277000 audit[3483]: USER_ERR pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:14.281937 systemd[1]: sshd@43-10.0.0.12:22-185.217.1.246:25601.service: Deactivated successfully.
Apr 16 01:57:14.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-10.0.0.12:22-185.217.1.246:25601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:14.284899 kernel: audit: type=1109 audit(1776304634.277:343): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:14.285006 kernel: audit: type=1131 audit(1776304634.281:344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-10.0.0.12:22-185.217.1.246:25601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:14.416024 systemd[1]: Started sshd@44-10.0.0.12:22-185.217.1.246:10778.service - OpenSSH per-connection server daemon (185.217.1.246:10778).
Apr 16 01:57:14.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-10.0.0.12:22-185.217.1.246:10778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:14.421625 kernel: audit: type=1130 audit(1776304634.415:345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-10.0.0.12:22-185.217.1.246:10778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:14.967958 sshd[3489]: Invalid user publicuser from 185.217.1.246 port 10778
Apr 16 01:57:15.002995 sshd[3489]: Disconnecting invalid user publicuser 185.217.1.246 port 10778: Change of username or service not allowed: (publicuser,ssh-connection) -> (toto,ssh-connection) [preauth]
Apr 16 01:57:15.002000 audit[3489]: USER_ERR pid=3489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:15.004874 systemd[1]: sshd@44-10.0.0.12:22-185.217.1.246:10778.service: Deactivated successfully.
Apr 16 01:57:15.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-10.0.0.12:22-185.217.1.246:10778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:15.009618 kernel: audit: type=1109 audit(1776304635.002:346): pid=3489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:15.105045 systemd[1]: Started sshd@45-10.0.0.12:22-185.217.1.246:58061.service - OpenSSH per-connection server daemon (185.217.1.246:58061).
Apr 16 01:57:15.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-10.0.0.12:22-185.217.1.246:58061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:15.886880 sshd[3495]: Invalid user toto from 185.217.1.246 port 58061
Apr 16 01:57:15.922960 sshd[3495]: Disconnecting invalid user toto 185.217.1.246 port 58061: Change of username or service not allowed: (toto,ssh-connection) -> (centos,ssh-connection) [preauth]
Apr 16 01:57:15.922000 audit[3495]: USER_ERR pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:15.924781 systemd[1]: sshd@45-10.0.0.12:22-185.217.1.246:58061.service: Deactivated successfully.
Apr 16 01:57:15.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-10.0.0.12:22-185.217.1.246:58061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:16.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-10.0.0.12:22-185.217.1.246:30560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:16.246186 systemd[1]: Started sshd@46-10.0.0.12:22-185.217.1.246:30560.service - OpenSSH per-connection server daemon (185.217.1.246:30560).
Apr 16 01:57:16.894157 sshd[3501]: Invalid user centos from 185.217.1.246 port 30560
Apr 16 01:57:17.564296 sshd[3501]: Disconnecting invalid user centos 185.217.1.246 port 30560: Change of username or service not allowed: (centos,ssh-connection) -> (master,ssh-connection) [preauth]
Apr 16 01:57:17.563000 audit[3501]: USER_ERR pid=3501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:17.566049 systemd[1]: sshd@46-10.0.0.12:22-185.217.1.246:30560.service: Deactivated successfully.
Apr 16 01:57:17.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-10.0.0.12:22-185.217.1.246:30560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:19.088647 kernel: kauditd_printk_skb: 7 callbacks suppressed
Apr 16 01:57:19.088776 kernel: audit: type=1130 audit(1776304639.082:354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-10.0.0.12:22-185.217.1.246:48747 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:19.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-10.0.0.12:22-185.217.1.246:48747 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:19.083318 systemd[1]: Started sshd@47-10.0.0.12:22-185.217.1.246:48747.service - OpenSSH per-connection server daemon (185.217.1.246:48747).
Apr 16 01:57:19.708561 sshd[3507]: Invalid user master from 185.217.1.246 port 48747
Apr 16 01:57:19.938186 sshd[3507]: Disconnecting invalid user master 185.217.1.246 port 48747: Change of username or service not allowed: (master,ssh-connection) -> (raj,ssh-connection) [preauth]
Apr 16 01:57:19.938000 audit[3507]: USER_ERR pid=3507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:19.940785 systemd[1]: sshd@47-10.0.0.12:22-185.217.1.246:48747.service: Deactivated successfully.
Apr 16 01:57:19.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-10.0.0.12:22-185.217.1.246:48747 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:19.948379 kernel: audit: type=1109 audit(1776304639.938:355): pid=3507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:19.948424 kernel: audit: type=1131 audit(1776304639.940:356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-10.0.0.12:22-185.217.1.246:48747 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:20.012286 systemd[1]: Started sshd@48-10.0.0.12:22-185.217.1.246:57680.service - OpenSSH per-connection server daemon (185.217.1.246:57680).
Apr 16 01:57:20.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-10.0.0.12:22-185.217.1.246:57680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:20.018628 kernel: audit: type=1130 audit(1776304640.011:357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-10.0.0.12:22-185.217.1.246:57680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:20.290708 sshd[3513]: Invalid user raj from 185.217.1.246 port 57680
Apr 16 01:57:20.339705 sshd[3513]: Disconnecting invalid user raj 185.217.1.246 port 57680: Change of username or service not allowed: (raj,ssh-connection) -> (mina,ssh-connection) [preauth]
Apr 16 01:57:20.339000 audit[3513]: USER_ERR pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:20.342006 systemd[1]: sshd@48-10.0.0.12:22-185.217.1.246:57680.service: Deactivated successfully.
Apr 16 01:57:20.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-10.0.0.12:22-185.217.1.246:57680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:20.349855 kernel: audit: type=1109 audit(1776304640.339:358): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:20.349903 kernel: audit: type=1131 audit(1776304640.339:359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-10.0.0.12:22-185.217.1.246:57680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:20.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-10.0.0.12:22-185.217.1.246:31964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:20.443232 systemd[1]: Started sshd@49-10.0.0.12:22-185.217.1.246:31964.service - OpenSSH per-connection server daemon (185.217.1.246:31964).
Apr 16 01:57:20.450654 kernel: audit: type=1130 audit(1776304640.442:360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-10.0.0.12:22-185.217.1.246:31964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:21.107197 sshd[3519]: Invalid user mina from 185.217.1.246 port 31964
Apr 16 01:57:21.152143 sshd[3519]: Disconnecting invalid user mina 185.217.1.246 port 31964: Change of username or service not allowed: (mina,ssh-connection) -> (osmc,ssh-connection) [preauth]
Apr 16 01:57:21.151000 audit[3519]: USER_ERR pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:21.153616 systemd[1]: sshd@49-10.0.0.12:22-185.217.1.246:31964.service: Deactivated successfully.
Apr 16 01:57:21.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-10.0.0.12:22-185.217.1.246:31964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:21.160837 kernel: audit: type=1109 audit(1776304641.151:361): pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:21.160878 kernel: audit: type=1131 audit(1776304641.153:362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-10.0.0.12:22-185.217.1.246:31964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:21.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-10.0.0.12:22-185.217.1.246:58667 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:21.263040 systemd[1]: Started sshd@50-10.0.0.12:22-185.217.1.246:58667.service - OpenSSH per-connection server daemon (185.217.1.246:58667).
Apr 16 01:57:21.269627 kernel: audit: type=1130 audit(1776304641.262:363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-10.0.0.12:22-185.217.1.246:58667 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:22.132033 sshd[3525]: Invalid user osmc from 185.217.1.246 port 58667
Apr 16 01:57:22.379215 sshd[3525]: Disconnecting invalid user osmc 185.217.1.246 port 58667: Change of username or service not allowed: (osmc,ssh-connection) -> (eagle,ssh-connection) [preauth]
Apr 16 01:57:22.379000 audit[3525]: USER_ERR pid=3525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:22.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-10.0.0.12:22-185.217.1.246:58667 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:22.381362 systemd[1]: sshd@50-10.0.0.12:22-185.217.1.246:58667.service: Deactivated successfully.
Apr 16 01:57:22.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-10.0.0.12:22-185.217.1.246:12986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:22.610205 systemd[1]: Started sshd@51-10.0.0.12:22-185.217.1.246:12986.service - OpenSSH per-connection server daemon (185.217.1.246:12986).
Apr 16 01:57:23.334747 sshd[3531]: Invalid user eagle from 185.217.1.246 port 12986
Apr 16 01:57:23.462822 sshd[3531]: Disconnecting invalid user eagle 185.217.1.246 port 12986: Change of username or service not allowed: (eagle,ssh-connection) -> (test5,ssh-connection) [preauth]
Apr 16 01:57:23.462000 audit[3531]: USER_ERR pid=3531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:23.464815 systemd[1]: sshd@51-10.0.0.12:22-185.217.1.246:12986.service: Deactivated successfully.
Apr 16 01:57:23.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-10.0.0.12:22-185.217.1.246:12986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:24.664654 kernel: kauditd_printk_skb: 5 callbacks suppressed
Apr 16 01:57:24.664813 kernel: audit: type=1130 audit(1776304644.661:369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-10.0.0.12:22-185.217.1.246:45737 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:24.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-10.0.0.12:22-185.217.1.246:45737 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:24.662416 systemd[1]: Started sshd@52-10.0.0.12:22-185.217.1.246:45737.service - OpenSSH per-connection server daemon (185.217.1.246:45737).
Apr 16 01:57:25.701120 sshd[3537]: Invalid user test5 from 185.217.1.246 port 45737
Apr 16 01:57:25.780093 sshd[3537]: Disconnecting invalid user test5 185.217.1.246 port 45737: Change of username or service not allowed: (test5,ssh-connection) -> (tst,ssh-connection) [preauth]
Apr 16 01:57:25.778000 audit[3537]: USER_ERR pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:25.783935 systemd[1]: sshd@52-10.0.0.12:22-185.217.1.246:45737.service: Deactivated successfully.
Apr 16 01:57:25.785628 kernel: audit: type=1109 audit(1776304645.778:370): pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:25.785689 kernel: audit: type=1131 audit(1776304645.782:371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-10.0.0.12:22-185.217.1.246:45737 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:25.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-10.0.0.12:22-185.217.1.246:45737 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:25.895759 systemd[1]: Started sshd@53-10.0.0.12:22-185.217.1.246:61065.service - OpenSSH per-connection server daemon (185.217.1.246:61065).
Apr 16 01:57:25.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-10.0.0.12:22-185.217.1.246:61065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:25.902653 kernel: audit: type=1130 audit(1776304645.894:372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-10.0.0.12:22-185.217.1.246:61065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:26.444062 sshd[3543]: Invalid user tst from 185.217.1.246 port 61065
Apr 16 01:57:26.556052 sshd[3543]: Disconnecting invalid user tst 185.217.1.246 port 61065: Change of username or service not allowed: (tst,ssh-connection) -> (ubnt,ssh-connection) [preauth]
Apr 16 01:57:26.554000 audit[3543]: USER_ERR pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:26.557944 systemd[1]: sshd@53-10.0.0.12:22-185.217.1.246:61065.service: Deactivated successfully.
Apr 16 01:57:26.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-10.0.0.12:22-185.217.1.246:61065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:26.565309 kernel: audit: type=1109 audit(1776304646.554:373): pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:26.565353 kernel: audit: type=1131 audit(1776304646.554:374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-10.0.0.12:22-185.217.1.246:61065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:26.772053 systemd[1]: Started sshd@54-10.0.0.12:22-185.217.1.246:4815.service - OpenSSH per-connection server daemon (185.217.1.246:4815).
Apr 16 01:57:26.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-10.0.0.12:22-185.217.1.246:4815 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:26.778721 kernel: audit: type=1130 audit(1776304646.770:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-10.0.0.12:22-185.217.1.246:4815 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:27.367442 sshd[3549]: Invalid user ubnt from 185.217.1.246 port 4815
Apr 16 01:57:29.716936 sshd[3549]: maximum authentication attempts exceeded for invalid user ubnt from 185.217.1.246 port 4815 ssh2 [preauth]
Apr 16 01:57:29.716936 sshd[3549]: Disconnecting invalid user ubnt 185.217.1.246 port 4815: Too many authentication failures [preauth]
Apr 16 01:57:29.716000 audit[3549]: USER_ERR pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:29.720844 systemd[1]: sshd@54-10.0.0.12:22-185.217.1.246:4815.service: Deactivated successfully.
Apr 16 01:57:29.722647 kernel: audit: type=1109 audit(1776304649.716:376): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:29.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-10.0.0.12:22-185.217.1.246:4815 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:29.727661 kernel: audit: type=1131 audit(1776304649.719:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-10.0.0.12:22-185.217.1.246:4815 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:30.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-10.0.0.12:22-185.217.1.246:27783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:30.101315 systemd[1]: Started sshd@55-10.0.0.12:22-185.217.1.246:27783.service - OpenSSH per-connection server daemon (185.217.1.246:27783).
Apr 16 01:57:30.108677 kernel: audit: type=1130 audit(1776304650.099:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-10.0.0.12:22-185.217.1.246:27783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:30.446383 sshd[3555]: Invalid user ubnt from 185.217.1.246 port 27783
Apr 16 01:57:30.738065 sshd[3555]: Disconnecting invalid user ubnt 185.217.1.246 port 27783: Change of username or service not allowed: (ubnt,ssh-connection) -> (moth3r,ssh-connection) [preauth]
Apr 16 01:57:30.737000 audit[3555]: USER_ERR pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:30.740980 systemd[1]: sshd@55-10.0.0.12:22-185.217.1.246:27783.service: Deactivated successfully.
Apr 16 01:57:30.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-10.0.0.12:22-185.217.1.246:27783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:30.748277 kernel: audit: type=1109 audit(1776304650.737:379): pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:30.748318 kernel: audit: type=1131 audit(1776304650.739:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-10.0.0.12:22-185.217.1.246:27783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:30.828165 systemd[1]: Started sshd@56-10.0.0.12:22-185.217.1.246:13138.service - OpenSSH per-connection server daemon (185.217.1.246:13138).
Apr 16 01:57:30.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-10.0.0.12:22-185.217.1.246:13138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:30.835739 kernel: audit: type=1130 audit(1776304650.826:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-10.0.0.12:22-185.217.1.246:13138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:31.297916 sshd[3561]: Invalid user moth3r from 185.217.1.246 port 13138
Apr 16 01:57:31.495169 sshd[3561]: Disconnecting invalid user moth3r 185.217.1.246 port 13138: Change of username or service not allowed: (moth3r,ssh-connection) -> (juan,ssh-connection) [preauth]
Apr 16 01:57:31.494000 audit[3561]: USER_ERR pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:31.497220 systemd[1]: sshd@56-10.0.0.12:22-185.217.1.246:13138.service: Deactivated successfully.
Apr 16 01:57:31.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-10.0.0.12:22-185.217.1.246:13138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:31.504825 kernel: audit: type=1109 audit(1776304651.494:382): pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:31.504873 kernel: audit: type=1131 audit(1776304651.495:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-10.0.0.12:22-185.217.1.246:13138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:31.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-10.0.0.12:22-185.217.1.246:58913 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:31.607132 systemd[1]: Started sshd@57-10.0.0.12:22-185.217.1.246:58913.service - OpenSSH per-connection server daemon (185.217.1.246:58913).
Apr 16 01:57:31.613628 kernel: audit: type=1130 audit(1776304651.605:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-10.0.0.12:22-185.217.1.246:58913 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:32.419308 sshd[3567]: Invalid user juan from 185.217.1.246 port 58913
Apr 16 01:57:32.888182 sshd[3567]: Disconnecting invalid user juan 185.217.1.246 port 58913: Change of username or service not allowed: (juan,ssh-connection) -> (mika,ssh-connection) [preauth]
Apr 16 01:57:32.887000 audit[3567]: USER_ERR pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:32.890962 systemd[1]: sshd@57-10.0.0.12:22-185.217.1.246:58913.service: Deactivated successfully.
Apr 16 01:57:32.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-10.0.0.12:22-185.217.1.246:58913 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:32.895629 kernel: audit: type=1109 audit(1776304652.887:385): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:33.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-10.0.0.12:22-185.217.1.246:6827 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:33.567228 systemd[1]: Started sshd@58-10.0.0.12:22-185.217.1.246:6827.service - OpenSSH per-connection server daemon (185.217.1.246:6827).
Apr 16 01:57:35.027933 sshd[3573]: Invalid user mika from 185.217.1.246 port 6827
Apr 16 01:57:35.070478 sshd[3573]: Disconnecting invalid user mika 185.217.1.246 port 6827: Change of username or service not allowed: (mika,ssh-connection) -> (jrodrig,ssh-connection) [preauth]
Apr 16 01:57:35.077267 kernel: kauditd_printk_skb: 2 callbacks suppressed
Apr 16 01:57:35.077334 kernel: audit: type=1109 audit(1776304655.070:388): pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:35.077359 kernel: audit: type=1131 audit(1776304655.071:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-10.0.0.12:22-185.217.1.246:6827 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:35.070000 audit[3573]: USER_ERR pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:35.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-10.0.0.12:22-185.217.1.246:6827 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:35.073054 systemd[1]: sshd@58-10.0.0.12:22-185.217.1.246:6827.service: Deactivated successfully.
Apr 16 01:57:35.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-10.0.0.12:22-185.217.1.246:2283 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:35.159010 systemd[1]: Started sshd@59-10.0.0.12:22-185.217.1.246:2283.service - OpenSSH per-connection server daemon (185.217.1.246:2283).
Apr 16 01:57:35.165624 kernel: audit: type=1130 audit(1776304655.158:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-10.0.0.12:22-185.217.1.246:2283 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:35.779751 sshd[3579]: Invalid user jrodrig from 185.217.1.246 port 2283
Apr 16 01:57:35.817865 sshd[3579]: Disconnecting invalid user jrodrig 185.217.1.246 port 2283: Change of username or service not allowed: (jrodrig,ssh-connection) -> (admin2,ssh-connection) [preauth]
Apr 16 01:57:35.817000 audit[3579]: USER_ERR pid=3579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:35.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-10.0.0.12:22-185.217.1.246:2283 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:35.821951 systemd[1]: sshd@59-10.0.0.12:22-185.217.1.246:2283.service: Deactivated successfully.
Apr 16 01:57:35.825331 kernel: audit: type=1109 audit(1776304655.817:391): pid=3579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:35.825388 kernel: audit: type=1131 audit(1776304655.821:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-10.0.0.12:22-185.217.1.246:2283 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:35.899118 systemd[1]: Started sshd@60-10.0.0.12:22-185.217.1.246:16931.service - OpenSSH per-connection server daemon (185.217.1.246:16931).
Apr 16 01:57:35.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-10.0.0.12:22-185.217.1.246:16931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:35.904620 kernel: audit: type=1130 audit(1776304655.898:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-10.0.0.12:22-185.217.1.246:16931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:36.278024 sshd[3585]: Invalid user admin2 from 185.217.1.246 port 16931
Apr 16 01:57:36.445897 sshd[3585]: Disconnecting invalid user admin2 185.217.1.246 port 16931: Change of username or service not allowed: (admin2,ssh-connection) -> (intern,ssh-connection) [preauth]
Apr 16 01:57:36.445000 audit[3585]: USER_ERR pid=3585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:36.449941 systemd[1]: sshd@60-10.0.0.12:22-185.217.1.246:16931.service: Deactivated successfully.
Apr 16 01:57:36.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-10.0.0.12:22-185.217.1.246:16931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:36.453505 kernel: audit: type=1109 audit(1776304656.445:394): pid=3585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:36.453563 kernel: audit: type=1131 audit(1776304656.449:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-10.0.0.12:22-185.217.1.246:16931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:36.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-10.0.0.12:22-185.217.1.246:26294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:36.620087 systemd[1]: Started sshd@61-10.0.0.12:22-185.217.1.246:26294.service - OpenSSH per-connection server daemon (185.217.1.246:26294).
Apr 16 01:57:36.625624 kernel: audit: type=1130 audit(1776304656.619:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-10.0.0.12:22-185.217.1.246:26294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:37.279317 sshd[3591]: Invalid user intern from 185.217.1.246 port 26294
Apr 16 01:57:37.320449 sshd[3591]: Disconnecting invalid user intern 185.217.1.246 port 26294: Change of username or service not allowed: (intern,ssh-connection) -> (client,ssh-connection) [preauth]
Apr 16 01:57:37.320000 audit[3591]: USER_ERR pid=3591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:37.322243 systemd[1]: sshd@61-10.0.0.12:22-185.217.1.246:26294.service: Deactivated successfully.
Apr 16 01:57:37.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-10.0.0.12:22-185.217.1.246:26294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:37.327616 kernel: audit: type=1109 audit(1776304657.320:397): pid=3591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:37.699084 systemd[1]: Started sshd@62-10.0.0.12:22-185.217.1.246:54806.service - OpenSSH per-connection server daemon (185.217.1.246:54806).
Apr 16 01:57:37.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-10.0.0.12:22-185.217.1.246:54806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:39.568021 sshd[3597]: Invalid user client from 185.217.1.246 port 54806
Apr 16 01:57:41.248326 sshd[3597]: Disconnecting invalid user client 185.217.1.246 port 54806: Change of username or service not allowed: (client,ssh-connection) -> (tmax,ssh-connection) [preauth]
Apr 16 01:57:41.252094 kernel: kauditd_printk_skb: 2 callbacks suppressed
Apr 16 01:57:41.252377 kernel: audit: type=1109 audit(1776304661.248:400): pid=3597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:41.248000 audit[3597]: USER_ERR pid=3597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:41.253520 systemd[1]: sshd@62-10.0.0.12:22-185.217.1.246:54806.service: Deactivated successfully.
Apr 16 01:57:41.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-10.0.0.12:22-185.217.1.246:54806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:41.257190 kernel: audit: type=1131 audit(1776304661.252:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-10.0.0.12:22-185.217.1.246:54806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:41.483187 systemd[1]: Started sshd@63-10.0.0.12:22-185.217.1.246:3585.service - OpenSSH per-connection server daemon (185.217.1.246:3585).
Apr 16 01:57:41.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-10.0.0.12:22-185.217.1.246:3585 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:41.490726 kernel: audit: type=1130 audit(1776304661.482:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-10.0.0.12:22-185.217.1.246:3585 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:42.411480 sshd[3603]: Invalid user tmax from 185.217.1.246 port 3585
Apr 16 01:57:42.458976 sshd[3603]: Disconnecting invalid user tmax 185.217.1.246 port 3585: Change of username or service not allowed: (tmax,ssh-connection) -> (sophia,ssh-connection) [preauth]
Apr 16 01:57:42.458000 audit[3603]: USER_ERR pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:42.460268 systemd[1]: sshd@63-10.0.0.12:22-185.217.1.246:3585.service: Deactivated successfully.
Apr 16 01:57:42.465626 kernel: audit: type=1109 audit(1776304662.458:403): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:42.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-10.0.0.12:22-185.217.1.246:3585 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:42.470654 kernel: audit: type=1131 audit(1776304662.458:404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-10.0.0.12:22-185.217.1.246:3585 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:42.554882 systemd[1]: Started sshd@64-10.0.0.12:22-185.217.1.246:64615.service - OpenSSH per-connection server daemon (185.217.1.246:64615).
Apr 16 01:57:42.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-10.0.0.12:22-185.217.1.246:64615 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:42.560678 kernel: audit: type=1130 audit(1776304662.554:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-10.0.0.12:22-185.217.1.246:64615 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:43.264624 sshd[3609]: Invalid user sophia from 185.217.1.246 port 64615
Apr 16 01:57:44.923302 sshd[3609]: Disconnecting invalid user sophia 185.217.1.246 port 64615: Change of username or service not allowed: (sophia,ssh-connection) -> (oper,ssh-connection) [preauth]
Apr 16 01:57:44.922000 audit[3609]: USER_ERR pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:44.924976 systemd[1]: sshd@64-10.0.0.12:22-185.217.1.246:64615.service: Deactivated successfully.
Apr 16 01:57:44.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-10.0.0.12:22-185.217.1.246:64615 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:44.933482 kernel: audit: type=1109 audit(1776304664.922:406): pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:44.933526 kernel: audit: type=1131 audit(1776304664.924:407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-10.0.0.12:22-185.217.1.246:64615 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:46.389271 systemd[1]: Started sshd@65-10.0.0.12:22-185.217.1.246:35148.service - OpenSSH per-connection server daemon (185.217.1.246:35148).
Apr 16 01:57:46.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-10.0.0.12:22-185.217.1.246:35148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:46.396639 kernel: audit: type=1130 audit(1776304666.388:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-10.0.0.12:22-185.217.1.246:35148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:47.301551 sshd[3615]: Invalid user oper from 185.217.1.246 port 35148
Apr 16 01:57:47.535633 sshd[3615]: Disconnecting invalid user oper 185.217.1.246 port 35148: Change of username or service not allowed: (oper,ssh-connection) -> (report,ssh-connection) [preauth]
Apr 16 01:57:47.535000 audit[3615]: USER_ERR pid=3615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:47.537368 systemd[1]: sshd@65-10.0.0.12:22-185.217.1.246:35148.service: Deactivated successfully.
Apr 16 01:57:47.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-10.0.0.12:22-185.217.1.246:35148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:47.545645 kernel: audit: type=1109 audit(1776304667.535:409): pid=3615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:47.545699 kernel: audit: type=1131 audit(1776304667.535:410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-10.0.0.12:22-185.217.1.246:35148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:47.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-10.0.0.12:22-185.217.1.246:9170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:47.735113 systemd[1]: Started sshd@66-10.0.0.12:22-185.217.1.246:9170.service - OpenSSH per-connection server daemon (185.217.1.246:9170).
Apr 16 01:57:47.741710 kernel: audit: type=1130 audit(1776304667.734:411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-10.0.0.12:22-185.217.1.246:9170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:48.766137 sshd[3621]: Invalid user report from 185.217.1.246 port 9170
Apr 16 01:57:49.109497 sshd[3621]: Disconnecting invalid user report 185.217.1.246 port 9170: Change of username or service not allowed: (report,ssh-connection) -> (factory,ssh-connection) [preauth]
Apr 16 01:57:49.107000 audit[3621]: USER_ERR pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:49.113317 systemd[1]: sshd@66-10.0.0.12:22-185.217.1.246:9170.service: Deactivated successfully.
Apr 16 01:57:49.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-10.0.0.12:22-185.217.1.246:9170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:49.119123 kernel: audit: type=1109 audit(1776304669.107:412): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:49.119170 kernel: audit: type=1131 audit(1776304669.111:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-10.0.0.12:22-185.217.1.246:9170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:49.561392 systemd[1]: Started sshd@67-10.0.0.12:22-185.217.1.246:15443.service - OpenSSH per-connection server daemon (185.217.1.246:15443).
Apr 16 01:57:49.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-10.0.0.12:22-185.217.1.246:15443 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:49.568768 kernel: audit: type=1130 audit(1776304669.560:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-10.0.0.12:22-185.217.1.246:15443 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:49.899581 sshd[3627]: Invalid user factory from 185.217.1.246 port 15443
Apr 16 01:57:50.756281 sshd[3627]: Disconnecting invalid user factory 185.217.1.246 port 15443: Change of username or service not allowed: (factory,ssh-connection) -> (smart,ssh-connection) [preauth]
Apr 16 01:57:50.754000 audit[3627]: USER_ERR pid=3627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:50.758544 systemd[1]: sshd@67-10.0.0.12:22-185.217.1.246:15443.service: Deactivated successfully.
Apr 16 01:57:50.762632 kernel: audit: type=1109 audit(1776304670.754:415): pid=3627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:50.762711 kernel: audit: type=1131 audit(1776304670.757:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-10.0.0.12:22-185.217.1.246:15443 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:50.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-10.0.0.12:22-185.217.1.246:15443 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:51.201276 systemd[1]: Started sshd@68-10.0.0.12:22-185.217.1.246:40154.service - OpenSSH per-connection server daemon (185.217.1.246:40154).
Apr 16 01:57:51.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-10.0.0.12:22-185.217.1.246:40154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:51.208639 kernel: audit: type=1130 audit(1776304671.199:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-10.0.0.12:22-185.217.1.246:40154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:51.835576 sshd[3633]: Invalid user smart from 185.217.1.246 port 40154
Apr 16 01:57:51.925689 sshd[3633]: Disconnecting invalid user smart 185.217.1.246 port 40154: Change of username or service not allowed: (smart,ssh-connection) -> (vyos,ssh-connection) [preauth]
Apr 16 01:57:51.924000 audit[3633]: USER_ERR pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:51.927276 systemd[1]: sshd@68-10.0.0.12:22-185.217.1.246:40154.service: Deactivated successfully.
Apr 16 01:57:51.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-10.0.0.12:22-185.217.1.246:40154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:51.936722 kernel: audit: type=1109 audit(1776304671.924:418): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:51.936763 kernel: audit: type=1131 audit(1776304671.924:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-10.0.0.12:22-185.217.1.246:40154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:52.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-10.0.0.12:22-185.217.1.246:11227 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:52.335686 kernel: audit: type=1130 audit(1776304672.328:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-10.0.0.12:22-185.217.1.246:11227 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:52.330258 systemd[1]: Started sshd@69-10.0.0.12:22-185.217.1.246:11227.service - OpenSSH per-connection server daemon (185.217.1.246:11227).
Apr 16 01:57:52.941315 sshd[3639]: Invalid user vyos from 185.217.1.246 port 11227
Apr 16 01:57:53.177501 sshd[3639]: Disconnecting invalid user vyos 185.217.1.246 port 11227: Change of username or service not allowed: (vyos,ssh-connection) -> (administrator,ssh-connection) [preauth]
Apr 16 01:57:53.176000 audit[3639]: USER_ERR pid=3639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:53.179211 systemd[1]: sshd@69-10.0.0.12:22-185.217.1.246:11227.service: Deactivated successfully.
Apr 16 01:57:53.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-10.0.0.12:22-185.217.1.246:11227 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:53.190246 kernel: audit: type=1109 audit(1776304673.176:421): pid=3639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:53.190285 kernel: audit: type=1131 audit(1776304673.178:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-10.0.0.12:22-185.217.1.246:11227 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:53.338087 systemd[1]: Started sshd@70-10.0.0.12:22-185.217.1.246:44093.service - OpenSSH per-connection server daemon (185.217.1.246:44093).
Apr 16 01:57:53.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-10.0.0.12:22-185.217.1.246:44093 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:53.344622 kernel: audit: type=1130 audit(1776304673.336:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-10.0.0.12:22-185.217.1.246:44093 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:54.186659 sshd[3645]: Invalid user administrator from 185.217.1.246 port 44093
Apr 16 01:57:56.406469 sshd[3645]: maximum authentication attempts exceeded for invalid user administrator from 185.217.1.246 port 44093 ssh2 [preauth]
Apr 16 01:57:56.406469 sshd[3645]: Disconnecting invalid user administrator 185.217.1.246 port 44093: Too many authentication failures [preauth]
Apr 16 01:57:56.405000 audit[3645]: USER_ERR pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:56.409347 systemd[1]: sshd@70-10.0.0.12:22-185.217.1.246:44093.service: Deactivated successfully.
Apr 16 01:57:56.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-10.0.0.12:22-185.217.1.246:44093 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:56.416553 kernel: audit: type=1109 audit(1776304676.405:424): pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:56.416915 kernel: audit: type=1131 audit(1776304676.405:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-10.0.0.12:22-185.217.1.246:44093 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:56.692204 systemd[1]: Started sshd@71-10.0.0.12:22-185.217.1.246:20370.service - OpenSSH per-connection server daemon (185.217.1.246:20370).
Apr 16 01:57:56.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-10.0.0.12:22-185.217.1.246:20370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:56.698763 kernel: audit: type=1130 audit(1776304676.691:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-10.0.0.12:22-185.217.1.246:20370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:57.055036 sshd[3651]: Invalid user administrator from 185.217.1.246 port 20370
Apr 16 01:57:57.709631 sshd[3651]: Disconnecting invalid user administrator 185.217.1.246 port 20370: Change of username or service not allowed: (administrator,ssh-connection) -> (gang,ssh-connection) [preauth]
Apr 16 01:57:57.709000 audit[3651]: USER_ERR pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:57.714628 kernel: audit: type=1109 audit(1776304677.709:427): pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:57.714824 systemd[1]: sshd@71-10.0.0.12:22-185.217.1.246:20370.service: Deactivated successfully.
Apr 16 01:57:57.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-10.0.0.12:22-185.217.1.246:20370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:57.722648 kernel: audit: type=1131 audit(1776304677.714:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-10.0.0.12:22-185.217.1.246:20370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:58.680367 systemd[1]: Started sshd@72-10.0.0.12:22-185.217.1.246:22866.service - OpenSSH per-connection server daemon (185.217.1.246:22866).
Apr 16 01:57:58.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-10.0.0.12:22-185.217.1.246:22866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:58.687644 kernel: audit: type=1130 audit(1776304678.680:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-10.0.0.12:22-185.217.1.246:22866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:59.385241 sshd[3657]: Invalid user gang from 185.217.1.246 port 22866
Apr 16 01:57:59.467924 sshd[3657]: Disconnecting invalid user gang 185.217.1.246 port 22866: Change of username or service not allowed: (gang,ssh-connection) -> (finance,ssh-connection) [preauth]
Apr 16 01:57:59.467000 audit[3657]: USER_ERR pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:59.469573 systemd[1]: sshd@72-10.0.0.12:22-185.217.1.246:22866.service: Deactivated successfully.
Apr 16 01:57:59.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-10.0.0.12:22-185.217.1.246:22866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:59.477756 kernel: audit: type=1109 audit(1776304679.467:430): pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:57:59.477797 kernel: audit: type=1131 audit(1776304679.469:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-10.0.0.12:22-185.217.1.246:22866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:59.660189 systemd[1]: Started sshd@73-10.0.0.12:22-185.217.1.246:63941.service - OpenSSH per-connection server daemon (185.217.1.246:63941).
Apr 16 01:57:59.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-10.0.0.12:22-185.217.1.246:63941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:57:59.667667 kernel: audit: type=1130 audit(1776304679.659:432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-10.0.0.12:22-185.217.1.246:63941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:00.525475 sshd[3663]: Invalid user finance from 185.217.1.246 port 63941
Apr 16 01:58:00.576805 sshd[3663]: Disconnecting invalid user finance 185.217.1.246 port 63941: Change of username or service not allowed: (finance,ssh-connection) -> (root,ssh-connection) [preauth]
Apr 16 01:58:00.576000 audit[3663]: USER_ERR pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:00.578935 systemd[1]: sshd@73-10.0.0.12:22-185.217.1.246:63941.service: Deactivated successfully.
Apr 16 01:58:00.583626 kernel: audit: type=1109 audit(1776304680.576:433): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:00.583702 kernel: audit: type=1131 audit(1776304680.578:434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-10.0.0.12:22-185.217.1.246:63941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:00.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-10.0.0.12:22-185.217.1.246:63941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:00.650045 systemd[1]: Started sshd@74-10.0.0.12:22-185.217.1.246:58167.service - OpenSSH per-connection server daemon (185.217.1.246:58167).
Apr 16 01:58:00.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-10.0.0.12:22-185.217.1.246:58167 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:00.657657 kernel: audit: type=1130 audit(1776304680.649:435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-10.0.0.12:22-185.217.1.246:58167 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:01.985274 sshd[3669]: maximum authentication attempts exceeded for root from 185.217.1.246 port 58167 ssh2 [preauth]
Apr 16 01:58:01.985274 sshd[3669]: Disconnecting authenticating user root 185.217.1.246 port 58167: Too many authentication failures [preauth]
Apr 16 01:58:01.985000 audit[3669]: USER_ERR pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:01.988938 systemd[1]: sshd@74-10.0.0.12:22-185.217.1.246:58167.service: Deactivated successfully.
Apr 16 01:58:01.990719 kernel: audit: type=1109 audit(1776304681.985:436): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:01.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-10.0.0.12:22-185.217.1.246:58167 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:02.400402 systemd[1]: Started sshd@75-10.0.0.12:22-185.217.1.246:36082.service - OpenSSH per-connection server daemon (185.217.1.246:36082).
Apr 16 01:58:02.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-10.0.0.12:22-185.217.1.246:36082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:03.480703 sshd[3675]: maximum authentication attempts exceeded for root from 185.217.1.246 port 36082 ssh2 [preauth]
Apr 16 01:58:03.480703 sshd[3675]: Disconnecting authenticating user root 185.217.1.246 port 36082: Too many authentication failures [preauth]
Apr 16 01:58:03.485669 kernel: kauditd_printk_skb: 2 callbacks suppressed
Apr 16 01:58:03.485728 kernel: audit: type=1109 audit(1776304683.480:439): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:03.480000 audit[3675]: USER_ERR pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:03.483446 systemd[1]: sshd@75-10.0.0.12:22-185.217.1.246:36082.service: Deactivated successfully.
Apr 16 01:58:03.492254 kernel: audit: type=1131 audit(1776304683.483:440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-10.0.0.12:22-185.217.1.246:36082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:03.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-10.0.0.12:22-185.217.1.246:36082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:03.576230 systemd[1]: Started sshd@76-10.0.0.12:22-185.217.1.246:16477.service - OpenSSH per-connection server daemon (185.217.1.246:16477).
Apr 16 01:58:03.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-10.0.0.12:22-185.217.1.246:16477 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:03.583642 kernel: audit: type=1130 audit(1776304683.575:441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-10.0.0.12:22-185.217.1.246:16477 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:04.351347 sshd[3681]: maximum authentication attempts exceeded for root from 185.217.1.246 port 16477 ssh2 [preauth]
Apr 16 01:58:04.351347 sshd[3681]: Disconnecting authenticating user root 185.217.1.246 port 16477: Too many authentication failures [preauth]
Apr 16 01:58:04.351000 audit[3681]: USER_ERR pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:04.355780 systemd[1]: sshd@76-10.0.0.12:22-185.217.1.246:16477.service: Deactivated successfully.
Apr 16 01:58:04.360858 kernel: audit: type=1109 audit(1776304684.351:442): pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:04.360919 kernel: audit: type=1131 audit(1776304684.354:443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-10.0.0.12:22-185.217.1.246:16477 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:04.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-10.0.0.12:22-185.217.1.246:16477 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:04.448104 systemd[1]: Started sshd@77-10.0.0.12:22-185.217.1.246:25387.service - OpenSSH per-connection server daemon (185.217.1.246:25387).
Apr 16 01:58:04.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-10.0.0.12:22-185.217.1.246:25387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:04.454637 kernel: audit: type=1130 audit(1776304684.447:444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-10.0.0.12:22-185.217.1.246:25387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:05.002683 sshd[3687]: maximum authentication attempts exceeded for root from 185.217.1.246 port 25387 ssh2 [preauth]
Apr 16 01:58:05.002683 sshd[3687]: Disconnecting authenticating user root 185.217.1.246 port 25387: Too many authentication failures [preauth]
Apr 16 01:58:05.002000 audit[3687]: USER_ERR pid=3687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:05.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-10.0.0.12:22-185.217.1.246:25387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:05.007238 systemd[1]: sshd@77-10.0.0.12:22-185.217.1.246:25387.service: Deactivated successfully.
Apr 16 01:58:05.009908 kernel: audit: type=1109 audit(1776304685.002:445): pid=3687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:05.009946 kernel: audit: type=1131 audit(1776304685.005:446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-10.0.0.12:22-185.217.1.246:25387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:05.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-10.0.0.12:22-185.217.1.246:25487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:05.089064 systemd[1]: Started sshd@78-10.0.0.12:22-185.217.1.246:25487.service - OpenSSH per-connection server daemon (185.217.1.246:25487).
Apr 16 01:58:05.094629 kernel: audit: type=1130 audit(1776304685.088:447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-10.0.0.12:22-185.217.1.246:25487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:08.630864 sshd[3693]: maximum authentication attempts exceeded for root from 185.217.1.246 port 25487 ssh2 [preauth]
Apr 16 01:58:08.630864 sshd[3693]: Disconnecting authenticating user root 185.217.1.246 port 25487: Too many authentication failures [preauth]
Apr 16 01:58:08.630000 audit[3693]: USER_ERR pid=3693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:08.634922 systemd[1]: sshd@78-10.0.0.12:22-185.217.1.246:25487.service: Deactivated successfully.
Apr 16 01:58:08.636638 kernel: audit: type=1109 audit(1776304688.630:448): pid=3693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:08.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-10.0.0.12:22-185.217.1.246:25487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:08.641658 kernel: audit: type=1131 audit(1776304688.634:449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-10.0.0.12:22-185.217.1.246:25487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:08.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-10.0.0.12:22-185.217.1.246:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:08.925267 systemd[1]: Started sshd@79-10.0.0.12:22-185.217.1.246:34684.service - OpenSSH per-connection server daemon (185.217.1.246:34684).
Apr 16 01:58:08.931634 kernel: audit: type=1130 audit(1776304688.924:450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-10.0.0.12:22-185.217.1.246:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:09.916626 sshd[3699]: maximum authentication attempts exceeded for root from 185.217.1.246 port 34684 ssh2 [preauth]
Apr 16 01:58:09.916626 sshd[3699]: Disconnecting authenticating user root 185.217.1.246 port 34684: Too many authentication failures [preauth]
Apr 16 01:58:09.916000 audit[3699]: USER_ERR pid=3699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:09.921619 kernel: audit: type=1109 audit(1776304689.916:451): pid=3699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:09.920116 systemd[1]: sshd@79-10.0.0.12:22-185.217.1.246:34684.service: Deactivated successfully.
Apr 16 01:58:09.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-10.0.0.12:22-185.217.1.246:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:09.926882 kernel: audit: type=1131 audit(1776304689.919:452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-10.0.0.12:22-185.217.1.246:34684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:10.024076 systemd[1]: Started sshd@80-10.0.0.12:22-185.217.1.246:36095.service - OpenSSH per-connection server daemon (185.217.1.246:36095).
Apr 16 01:58:10.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-10.0.0.12:22-185.217.1.246:36095 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:10.029623 kernel: audit: type=1130 audit(1776304690.023:453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-10.0.0.12:22-185.217.1.246:36095 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:11.589564 sshd[3705]: maximum authentication attempts exceeded for root from 185.217.1.246 port 36095 ssh2 [preauth]
Apr 16 01:58:11.589564 sshd[3705]: Disconnecting authenticating user root 185.217.1.246 port 36095: Too many authentication failures [preauth]
Apr 16 01:58:11.588000 audit[3705]: USER_ERR pid=3705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:11.593906 systemd[1]: sshd@80-10.0.0.12:22-185.217.1.246:36095.service: Deactivated successfully.
Apr 16 01:58:11.598291 kernel: audit: type=1109 audit(1776304691.588:454): pid=3705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:11.598364 kernel: audit: type=1131 audit(1776304691.592:455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-10.0.0.12:22-185.217.1.246:36095 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:11.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-10.0.0.12:22-185.217.1.246:36095 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:12.730069 systemd[1]: Started sshd@81-10.0.0.12:22-185.217.1.246:31273.service - OpenSSH per-connection server daemon (185.217.1.246:31273).
Apr 16 01:58:12.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-10.0.0.12:22-185.217.1.246:31273 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:12.736626 kernel: audit: type=1130 audit(1776304692.728:456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-10.0.0.12:22-185.217.1.246:31273 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:13.629138 sshd[3711]: maximum authentication attempts exceeded for root from 185.217.1.246 port 31273 ssh2 [preauth]
Apr 16 01:58:13.629138 sshd[3711]: Disconnecting authenticating user root 185.217.1.246 port 31273: Too many authentication failures [preauth]
Apr 16 01:58:13.628000 audit[3711]: USER_ERR pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:13.633919 systemd[1]: sshd@81-10.0.0.12:22-185.217.1.246:31273.service: Deactivated successfully.
Apr 16 01:58:13.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-10.0.0.12:22-185.217.1.246:31273 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:13.637389 kernel: audit: type=1109 audit(1776304693.628:457): pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:13.637449 kernel: audit: type=1131 audit(1776304693.632:458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-10.0.0.12:22-185.217.1.246:31273 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:14.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-10.0.0.12:22-185.217.1.246:64268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:14.088170 systemd[1]: Started sshd@82-10.0.0.12:22-185.217.1.246:64268.service - OpenSSH per-connection server daemon (185.217.1.246:64268).
Apr 16 01:58:14.096625 kernel: audit: type=1130 audit(1776304694.086:459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-10.0.0.12:22-185.217.1.246:64268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:14.967051 sshd[3717]: maximum authentication attempts exceeded for root from 185.217.1.246 port 64268 ssh2 [preauth]
Apr 16 01:58:14.967051 sshd[3717]: Disconnecting authenticating user root 185.217.1.246 port 64268: Too many authentication failures [preauth]
Apr 16 01:58:14.972789 kernel: audit: type=1109 audit(1776304694.966:460): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:14.966000 audit[3717]: USER_ERR pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:14.971513 systemd[1]: sshd@82-10.0.0.12:22-185.217.1.246:64268.service: Deactivated successfully.
Apr 16 01:58:14.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-10.0.0.12:22-185.217.1.246:64268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:14.977697 kernel: audit: type=1131 audit(1776304694.970:461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-10.0.0.12:22-185.217.1.246:64268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:15.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-10.0.0.12:22-185.217.1.246:2270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:15.062091 systemd[1]: Started sshd@83-10.0.0.12:22-185.217.1.246:2270.service - OpenSSH per-connection server daemon (185.217.1.246:2270).
Apr 16 01:58:15.067624 kernel: audit: type=1130 audit(1776304695.060:462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-10.0.0.12:22-185.217.1.246:2270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:15.157242 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:15.156755Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"103.326185ms","expected-duration":"100ms","prefix":"","request":"header:<ID:7587894206183970745 > txn:<compare:<target:MOD key:\"/registry/flowschemas/system-nodes\" mod_revision:42 > success:<request_put:<key:\"/registry/flowschemas/system-nodes\" value_size:1001 >> failure:<request_range:<key:\"/registry/flowschemas/system-nodes\" > >>","response":"size:14"}
Apr 16 01:58:15.157242 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:15.156931Z","caller":"traceutil/trace.go:171","msg":"trace[420321889] transaction","detail":"{read_only:false; response_revision:47; number_of_response:1; }","duration":"104.300925ms","start":"2026-04-16T01:58:15.052625Z","end":"2026-04-16T01:58:15.156926Z","steps":["trace[420321889] 'process raft request'  (duration: 104.19104ms)"],"step_count":1}
Apr 16 01:58:15.157242 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:15.156918Z","caller":"traceutil/trace.go:171","msg":"trace[1144906505] transaction","detail":"{read_only:false; response_revision:46; number_of_response:1; }","duration":"105.240229ms","start":"2026-04-16T01:58:15.051665Z","end":"2026-04-16T01:58:15.156905Z","steps":["trace[1144906505] 'compare'  (duration: 103.290587ms)"],"step_count":1}
Apr 16 01:58:15.157242 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:15.156976Z","caller":"traceutil/trace.go:171","msg":"trace[1456578989] transaction","detail":"{read_only:false; response_revision:48; number_of_response:1; }","duration":"104.331446ms","start":"2026-04-16T01:58:15.052641Z","end":"2026-04-16T01:58:15.156972Z","steps":["trace[1456578989] 'process raft request'  (duration: 104.199128ms)"],"step_count":1}
Apr 16 01:58:15.552869 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:15.552644Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"143.681613ms","expected-duration":"100ms","prefix":"","request":"header:<ID:7587894206183970778 > txn:<compare:<target:MOD key:\"/registry/events/default/ci-4593.1.0-n-4cd571de57.18a6b3b4d3ca7a99\" mod_revision:58 > success:<request_put:<key:\"/registry/events/default/ci-4593.1.0-n-4cd571de57.18a6b3b4d3ca7a99\" value_size:666 lease:7587894206183970724 >> failure:<request_range:<key:\"/registry/events/default/ci-4593.1.0-n-4cd571de57.18a6b3b4d3ca7a99\" > >>","response":"size:14"}
Apr 16 01:58:15.553219 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:15.552828Z","caller":"traceutil/trace.go:171","msg":"trace[1901050768] transaction","detail":"{read_only:false; response_revision:70; number_of_response:1; }","duration":"191.246185ms","start":"2026-04-16T01:58:15.361569Z","end":"2026-04-16T01:58:15.552816Z","steps":["trace[1901050768] 'process raft request'  (duration: 47.316978ms)","trace[1901050768] 'compare'  (duration: 143.624665ms)"],"step_count":2}
Apr 16 01:58:15.553219 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:15.553006Z","caller":"traceutil/trace.go:171","msg":"trace[1021640472] transaction","detail":"{read_only:false; response_revision:72; number_of_response:1; }","duration":"190.109088ms","start":"2026-04-16T01:58:15.362891Z","end":"2026-04-16T01:58:15.553000Z","steps":["trace[1021640472] 'process raft request'  (duration: 190.065601ms)"],"step_count":1}
Apr 16 01:58:15.553219 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:15.553039Z","caller":"traceutil/trace.go:171","msg":"trace[1514874457] transaction","detail":"{read_only:false; response_revision:71; number_of_response:1; }","duration":"190.685385ms","start":"2026-04-16T01:58:15.362350Z","end":"2026-04-16T01:58:15.553036Z","steps":["trace[1514874457] 'process raft request'  (duration: 190.346405ms)"],"step_count":1}
Apr 16 01:58:15.801253 sshd[3725]: maximum authentication attempts exceeded for root from 185.217.1.246 port 2270 ssh2 [preauth]
Apr 16 01:58:15.801253 sshd[3725]: Disconnecting authenticating user root 185.217.1.246 port 2270: Too many authentication failures [preauth]
Apr 16 01:58:15.800000 audit[3725]: USER_ERR pid=3725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:15.803949 systemd[1]: sshd@83-10.0.0.12:22-185.217.1.246:2270.service: Deactivated successfully.
Apr 16 01:58:15.811799 kernel: audit: type=1109 audit(1776304695.800:463): pid=3725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:15.811885 kernel: audit: type=1131 audit(1776304695.802:464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-10.0.0.12:22-185.217.1.246:2270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:15.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-10.0.0.12:22-185.217.1.246:2270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:15.875000 systemd[1]: Started sshd@84-10.0.0.12:22-185.217.1.246:26299.service - OpenSSH per-connection server daemon (185.217.1.246:26299).
Apr 16 01:58:15.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-10.0.0.12:22-185.217.1.246:26299 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:15.882650 kernel: audit: type=1130 audit(1776304695.873:465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-10.0.0.12:22-185.217.1.246:26299 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:18.579529 sshd[3731]: maximum authentication attempts exceeded for root from 185.217.1.246 port 26299 ssh2 [preauth]
Apr 16 01:58:18.579529 sshd[3731]: Disconnecting authenticating user root 185.217.1.246 port 26299: Too many authentication failures [preauth]
Apr 16 01:58:18.578000 audit[3731]: USER_ERR pid=3731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:18.584627 kernel: audit: type=1109 audit(1776304698.578:466): pid=3731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:18.584624 systemd[1]: sshd@84-10.0.0.12:22-185.217.1.246:26299.service: Deactivated successfully.
Apr 16 01:58:18.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-10.0.0.12:22-185.217.1.246:26299 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:18.591806 kernel: audit: type=1131 audit(1776304698.583:467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-10.0.0.12:22-185.217.1.246:26299 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:20.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-10.0.0.12:22-185.217.1.246:23652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:20.606785 kernel: audit: type=1130 audit(1776304700.584:468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-10.0.0.12:22-185.217.1.246:23652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:20.585263 systemd[1]: Started sshd@85-10.0.0.12:22-185.217.1.246:23652.service - OpenSSH per-connection server daemon (185.217.1.246:23652).
Apr 16 01:58:22.693705 sshd[3737]: maximum authentication attempts exceeded for root from 185.217.1.246 port 23652 ssh2 [preauth]
Apr 16 01:58:22.693705 sshd[3737]: Disconnecting authenticating user root 185.217.1.246 port 23652: Too many authentication failures [preauth]
Apr 16 01:58:22.693000 audit[3737]: USER_ERR pid=3737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:22.696375 systemd[1]: sshd@85-10.0.0.12:22-185.217.1.246:23652.service: Deactivated successfully.
Apr 16 01:58:22.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-10.0.0.12:22-185.217.1.246:23652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:22.703856 kernel: audit: type=1109 audit(1776304702.693:469): pid=3737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:22.703904 kernel: audit: type=1131 audit(1776304702.693:470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-10.0.0.12:22-185.217.1.246:23652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:22.852287 systemd[1]: Started sshd@86-10.0.0.12:22-185.217.1.246:31037.service - OpenSSH per-connection server daemon (185.217.1.246:31037).
Apr 16 01:58:22.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-10.0.0.12:22-185.217.1.246:31037 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:22.860768 kernel: audit: type=1130 audit(1776304702.851:471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-10.0.0.12:22-185.217.1.246:31037 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:24.858181 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:24.857745Z","caller":"traceutil/trace.go:171","msg":"trace[1003694669] transaction","detail":"{read_only:false; response_revision:367; number_of_response:1; }","duration":"105.415992ms","start":"2026-04-16T01:58:24.752313Z","end":"2026-04-16T01:58:24.857729Z","steps":["trace[1003694669] 'process raft request'  (duration: 105.342733ms)"],"step_count":1}
Apr 16 01:58:24.858181 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:24.857794Z","caller":"traceutil/trace.go:171","msg":"trace[949037326] transaction","detail":"{read_only:false; response_revision:368; number_of_response:1; }","duration":"105.334449ms","start":"2026-04-16T01:58:24.752456Z","end":"2026-04-16T01:58:24.857790Z","steps":["trace[949037326] 'process raft request'  (duration: 105.221059ms)"],"step_count":1}
Apr 16 01:58:24.858181 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:24.857817Z","caller":"traceutil/trace.go:171","msg":"trace[249988189] transaction","detail":"{read_only:false; response_revision:369; number_of_response:1; }","duration":"104.722876ms","start":"2026-04-16T01:58:24.753091Z","end":"2026-04-16T01:58:24.857814Z","steps":["trace[249988189] 'process raft request'  (duration: 104.60556ms)"],"step_count":1}
Apr 16 01:58:24.858181 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:24.857775Z","caller":"traceutil/trace.go:171","msg":"trace[1001289960] transaction","detail":"{read_only:false; response_revision:366; number_of_response:1; }","duration":"106.743295ms","start":"2026-04-16T01:58:24.751009Z","end":"2026-04-16T01:58:24.857752Z","steps":["trace[1001289960] 'process raft request'  (duration: 106.578258ms)"],"step_count":1}
Apr 16 01:58:24.858181 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:24.857889Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"100.144136ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/kube-system/endpoint-controller\" limit:1 ","response":"range_response_count:1 size:203"}
Apr 16 01:58:24.858683 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:24.857907Z","caller":"traceutil/trace.go:171","msg":"trace[1415968941] range","detail":"{range_begin:/registry/serviceaccounts/kube-system/endpoint-controller; range_end:; response_count:1; response_revision:369; }","duration":"100.190568ms","start":"2026-04-16T01:58:24.757711Z","end":"2026-04-16T01:58:24.857901Z","steps":["trace[1415968941] 'agreement among raft nodes before linearized reading'  (duration: 100.12165ms)"],"step_count":1}
Apr 16 01:58:24.945529 sshd[3743]: maximum authentication attempts exceeded for root from 185.217.1.246 port 31037 ssh2 [preauth]
Apr 16 01:58:24.945529 sshd[3743]: Disconnecting authenticating user root 185.217.1.246 port 31037: Too many authentication failures [preauth]
Apr 16 01:58:24.945000 audit[3743]: USER_ERR pid=3743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:24.947271 systemd[1]: sshd@86-10.0.0.12:22-185.217.1.246:31037.service: Deactivated successfully.
Apr 16 01:58:24.952640 kernel: audit: type=1109 audit(1776304704.945:472): pid=3743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:24.952709 kernel: audit: type=1131 audit(1776304704.945:473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-10.0.0.12:22-185.217.1.246:31037 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:24.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-10.0.0.12:22-185.217.1.246:31037 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:25.159527 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:25.159083Z","caller":"traceutil/trace.go:171","msg":"trace[341913061] transaction","detail":"{read_only:false; response_revision:391; number_of_response:1; }","duration":"109.809904ms","start":"2026-04-16T01:58:25.049256Z","end":"2026-04-16T01:58:25.159065Z","steps":["trace[341913061] 'process raft request'  (duration: 44.799794ms)","trace[341913061] 'compare'  (duration: 64.824476ms)"],"step_count":2}
Apr 16 01:58:25.159527 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:25.159171Z","caller":"traceutil/trace.go:171","msg":"trace[142004230] transaction","detail":"{read_only:false; response_revision:392; number_of_response:1; }","duration":"102.483337ms","start":"2026-04-16T01:58:25.056683Z","end":"2026-04-16T01:58:25.159166Z","steps":["trace[142004230] 'process raft request'  (duration: 102.299134ms)"],"step_count":1}
Apr 16 01:58:25.159527 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:25.159188Z","caller":"traceutil/trace.go:171","msg":"trace[859526426] transaction","detail":"{read_only:false; response_revision:394; number_of_response:1; }","duration":"100.047803ms","start":"2026-04-16T01:58:25.059134Z","end":"2026-04-16T01:58:25.159182Z","steps":["trace[859526426] 'process raft request'  (duration: 99.893576ms)"],"step_count":1}
Apr 16 01:58:25.159527 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:25.159217Z","caller":"traceutil/trace.go:171","msg":"trace[1299138399] transaction","detail":"{read_only:false; response_revision:395; number_of_response:1; }","duration":"100.031344ms","start":"2026-04-16T01:58:25.059180Z","end":"2026-04-16T01:58:25.159211Z","steps":["trace[1299138399] 'process raft request'  (duration: 99.88288ms)"],"step_count":1}
Apr 16 01:58:25.305827 systemd[1]: Started sshd@87-10.0.0.12:22-185.217.1.246:61458.service - OpenSSH per-connection server daemon (185.217.1.246:61458).
Apr 16 01:58:25.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-10.0.0.12:22-185.217.1.246:61458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:25.313631 kernel: audit: type=1130 audit(1776304705.305:474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-10.0.0.12:22-185.217.1.246:61458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:26.717166 sshd[3749]: maximum authentication attempts exceeded for root from 185.217.1.246 port 61458 ssh2 [preauth]
Apr 16 01:58:26.717166 sshd[3749]: Disconnecting authenticating user root 185.217.1.246 port 61458: Too many authentication failures [preauth]
Apr 16 01:58:26.717000 audit[3749]: USER_ERR pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:26.719043 systemd[1]: sshd@87-10.0.0.12:22-185.217.1.246:61458.service: Deactivated successfully.
Apr 16 01:58:26.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-10.0.0.12:22-185.217.1.246:61458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:26.727492 kernel: audit: type=1109 audit(1776304706.717:475): pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:26.727530 kernel: audit: type=1131 audit(1776304706.718:476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-10.0.0.12:22-185.217.1.246:61458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:27.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-10.0.0.12:22-185.217.1.246:37746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:27.247382 systemd[1]: Started sshd@88-10.0.0.12:22-185.217.1.246:37746.service - OpenSSH per-connection server daemon (185.217.1.246:37746).
Apr 16 01:58:27.254639 kernel: audit: type=1130 audit(1776304707.246:477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-10.0.0.12:22-185.217.1.246:37746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:31.776954 sshd[3755]: maximum authentication attempts exceeded for root from 185.217.1.246 port 37746 ssh2 [preauth]
Apr 16 01:58:31.777377 sshd[3755]: Disconnecting authenticating user root 185.217.1.246 port 37746: Too many authentication failures [preauth]
Apr 16 01:58:31.782877 kernel: audit: type=1109 audit(1776304711.776:478): pid=3755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:31.776000 audit[3755]: USER_ERR pid=3755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:31.781252 systemd[1]: sshd@88-10.0.0.12:22-185.217.1.246:37746.service: Deactivated successfully.
Apr 16 01:58:31.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-10.0.0.12:22-185.217.1.246:37746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:31.788637 kernel: audit: type=1131 audit(1776304711.780:479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-10.0.0.12:22-185.217.1.246:37746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:32.485370 systemd[1]: Started sshd@89-10.0.0.12:22-185.217.1.246:16824.service - OpenSSH per-connection server daemon (185.217.1.246:16824).
Apr 16 01:58:32.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-10.0.0.12:22-185.217.1.246:16824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:32.492727 kernel: audit: type=1130 audit(1776304712.485:480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-10.0.0.12:22-185.217.1.246:16824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:33.455775 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:33.455368Z","caller":"traceutil/trace.go:171","msg":"trace[1210083948] transaction","detail":"{read_only:false; response_revision:553; number_of_response:1; }","duration":"102.846392ms","start":"2026-04-16T01:58:33.352501Z","end":"2026-04-16T01:58:33.455348Z","steps":["trace[1210083948] 'process raft request'  (duration: 54.094978ms)","trace[1210083948] 'compare'  (duration: 48.588051ms)"],"step_count":2}
Apr 16 01:58:34.751784 sshd[3761]: maximum authentication attempts exceeded for root from 185.217.1.246 port 16824 ssh2 [preauth]
Apr 16 01:58:34.751784 sshd[3761]: Disconnecting authenticating user root 185.217.1.246 port 16824: Too many authentication failures [preauth]
Apr 16 01:58:34.756904 kernel: audit: type=1109 audit(1776304714.750:481): pid=3761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:34.750000 audit[3761]: USER_ERR pid=3761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:34.755348 systemd[1]: sshd@89-10.0.0.12:22-185.217.1.246:16824.service: Deactivated successfully.
Apr 16 01:58:34.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-10.0.0.12:22-185.217.1.246:16824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:34.761800 kernel: audit: type=1131 audit(1776304714.753:482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-10.0.0.12:22-185.217.1.246:16824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:34.910184 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.909713Z","caller":"traceutil/trace.go:171","msg":"trace[1273977095] transaction","detail":"{read_only:false; response_revision:580; number_of_response:1; }","duration":"104.56145ms","start":"2026-04-16T01:58:34.805139Z","end":"2026-04-16T01:58:34.909701Z","steps":["trace[1273977095] 'process raft request'  (duration: 104.209816ms)"],"step_count":1}
Apr 16 01:58:34.910184 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.909697Z","caller":"traceutil/trace.go:171","msg":"trace[31750616] linearizableReadLoop","detail":"{readStateIndex:599; appliedIndex:598; }","duration":"102.17695ms","start":"2026-04-16T01:58:34.807491Z","end":"2026-04-16T01:58:34.909668Z","steps":["trace[31750616] 'read index received'  (duration: 101.941122ms)","trace[31750616] 'applied index is now lower than readState.Index'  (duration: 235.56µs)"],"step_count":2}
Apr 16 01:58:34.910184 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:34.909792Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"131.655309ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/rolebindings/calico-system/tigera-operator-secrets\" limit:1 ","response":"range_response_count:1 size:663"}
Apr 16 01:58:34.910184 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.909813Z","caller":"traceutil/trace.go:171","msg":"trace[1659350925] range","detail":"{range_begin:/registry/rolebindings/calico-system/tigera-operator-secrets; range_end:; response_count:1; response_revision:580; }","duration":"131.685706ms","start":"2026-04-16T01:58:34.778120Z","end":"2026-04-16T01:58:34.909806Z","steps":["trace[1659350925] 'agreement among raft nodes before linearized reading'  (duration: 131.610755ms)"],"step_count":1}
Apr 16 01:58:34.910184 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:34.909855Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"127.629349ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/namespaces/calico-system\" limit:1 ","response":"range_response_count:1 size:764"}
Apr 16 01:58:34.910535 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:34.909859Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"105.025915ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/secrets/tigera-operator/goldmane-key-pair\" limit:1 ","response":"range_response_count:1 size:4711"}
Apr 16 01:58:34.910535 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.909866Z","caller":"traceutil/trace.go:171","msg":"trace[1023056079] range","detail":"{range_begin:/registry/namespaces/calico-system; range_end:; response_count:1; response_revision:580; }","duration":"127.639736ms","start":"2026-04-16T01:58:34.782223Z","end":"2026-04-16T01:58:34.909862Z","steps":["trace[1023056079] 'agreement among raft nodes before linearized reading'  (duration: 127.621059ms)"],"step_count":1}
Apr 16 01:58:34.910535 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.909871Z","caller":"traceutil/trace.go:171","msg":"trace[1331337494] range","detail":"{range_begin:/registry/secrets/tigera-operator/goldmane-key-pair; range_end:; response_count:1; response_revision:580; }","duration":"105.038043ms","start":"2026-04-16T01:58:34.804829Z","end":"2026-04-16T01:58:34.909867Z","steps":["trace[1331337494] 'agreement among raft nodes before linearized reading'  (duration: 105.001651ms)"],"step_count":1}
Apr 16 01:58:34.956490 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.956099Z","caller":"traceutil/trace.go:171","msg":"trace[1910122625] transaction","detail":"{read_only:false; response_revision:582; number_of_response:1; }","duration":"142.974285ms","start":"2026-04-16T01:58:34.813116Z","end":"2026-04-16T01:58:34.956090Z","steps":["trace[1910122625] 'process raft request'  (duration: 142.954746ms)"],"step_count":1}
Apr 16 01:58:34.956581 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:34.956378Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"145.913683ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/calico-apiserver\" limit:1 ","response":"range_response_count:1 size:446"}
Apr 16 01:58:34.956581 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.956401Z","caller":"traceutil/trace.go:171","msg":"trace[1064108144] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/calico-apiserver; range_end:; response_count:1; response_revision:582; }","duration":"145.93992ms","start":"2026-04-16T01:58:34.810454Z","end":"2026-04-16T01:58:34.956394Z","steps":["trace[1064108144] 'agreement among raft nodes before linearized reading'  (duration: 145.903143ms)"],"step_count":1}
Apr 16 01:58:34.956737 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:34.956583Z","caller":"traceutil/trace.go:171","msg":"trace[1323273301] transaction","detail":"{read_only:false; response_revision:581; number_of_response:1; }","duration":"144.203243ms","start":"2026-04-16T01:58:34.812373Z","end":"2026-04-16T01:58:34.956576Z","steps":["trace[1323273301] 'process raft request'  (duration: 143.642106ms)"],"step_count":1}
Apr 16 01:58:35.069044 systemd[1]: Started sshd@90-10.0.0.12:22-185.217.1.246:28771.service - OpenSSH per-connection server daemon (185.217.1.246:28771).
Apr 16 01:58:35.074903 kernel: audit: type=1130 audit(1776304715.067:483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-10.0.0.12:22-185.217.1.246:28771 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:35.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-10.0.0.12:22-185.217.1.246:28771 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:35.258246 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:35.257945Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"102.43145ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/calico-apiserver\" limit:1 ","response":"range_response_count:1 size:446"}
Apr 16 01:58:35.258246 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:35.257997Z","caller":"traceutil/trace.go:171","msg":"trace[510468394] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/calico-apiserver; range_end:; response_count:1; response_revision:612; }","duration":"102.480263ms","start":"2026-04-16T01:58:35.155502Z","end":"2026-04-16T01:58:35.257982Z","steps":["trace[510468394] 'agreement among raft nodes before linearized reading'  (duration: 102.419343ms)"],"step_count":1}
Apr 16 01:58:35.558382 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:35.557921Z","caller":"traceutil/trace.go:171","msg":"trace[973078509] transaction","detail":"{read_only:false; response_revision:636; number_of_response:1; }","duration":"102.126166ms","start":"2026-04-16T01:58:35.455779Z","end":"2026-04-16T01:58:35.557905Z","steps":["trace[973078509] 'process raft request'  (duration: 102.016856ms)"],"step_count":1}
Apr 16 01:58:35.558382 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:35.557986Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"101.816804ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/configmaps/calico-system/active-operator\" limit:1 ","response":"range_response_count:1 size:518"}
Apr 16 01:58:35.558382 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:35.557938Z","caller":"traceutil/trace.go:171","msg":"trace[885944622] linearizableReadLoop","detail":"{readStateIndex:656; appliedIndex:654; }","duration":"101.773921ms","start":"2026-04-16T01:58:35.456158Z","end":"2026-04-16T01:58:35.557932Z","steps":["trace[885944622] 'read index received'  (duration: 45.879309ms)","trace[885944622] 'applied index is now lower than readState.Index'  (duration: 55.894377ms)"],"step_count":2}
Apr 16 01:58:35.558382 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:35.558003Z","caller":"traceutil/trace.go:171","msg":"trace[567869972] range","detail":"{range_begin:/registry/configmaps/calico-system/active-operator; range_end:; response_count:1; response_revision:638; }","duration":"101.843937ms","start":"2026-04-16T01:58:35.456154Z","end":"2026-04-16T01:58:35.557998Z","steps":["trace[567869972] 'agreement among raft nodes before linearized reading'  (duration: 101.795657ms)"],"step_count":1}
Apr 16 01:58:35.558382 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:35.558062Z","caller":"traceutil/trace.go:171","msg":"trace[235113503] transaction","detail":"{read_only:false; response_revision:637; number_of_response:1; }","duration":"100.204882ms","start":"2026-04-16T01:58:35.457852Z","end":"2026-04-16T01:58:35.558057Z","steps":["trace[235113503] 'process raft request'  (duration: 99.985619ms)"],"step_count":1}
Apr 16 01:58:35.563004 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:35.562672Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"105.807439ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/configmaps/calico-system/whisker-ca-bundle\" limit:1 ","response":"range_response_count:1 size:3195"}
Apr 16 01:58:35.563004 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:35.562749Z","caller":"traceutil/trace.go:171","msg":"trace[1798927984] range","detail":"{range_begin:/registry/configmaps/calico-system/whisker-ca-bundle; range_end:; response_count:1; response_revision:643; }","duration":"105.887025ms","start":"2026-04-16T01:58:35.456853Z","end":"2026-04-16T01:58:35.562740Z","steps":["trace[1798927984] 'agreement among raft nodes before linearized reading'  (duration: 105.781664ms)"],"step_count":1}
Apr 16 01:58:35.563004 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:35.562873Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"103.800157ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/networkpolicies/calico-system/allow-apiserver\" limit:1 ","response":"range_response_count:1 size:595"}
Apr 16 01:58:35.563156 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:35.562949Z","caller":"traceutil/trace.go:171","msg":"trace[1719425152] range","detail":"{range_begin:/registry/networkpolicies/calico-system/allow-apiserver; range_end:; response_count:1; response_revision:643; }","duration":"103.876577ms","start":"2026-04-16T01:58:35.459066Z","end":"2026-04-16T01:58:35.562943Z","steps":["trace[1719425152] 'agreement among raft nodes before linearized reading'  (duration: 103.754713ms)"],"step_count":1}
Apr 16 01:58:36.257713 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:36.257387Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"120.347851ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/secrets/tigera-operator/goldmane-key-pair\" limit:1 ","response":"range_response_count:1 size:4711"}
Apr 16 01:58:36.257713 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.257434Z","caller":"traceutil/trace.go:171","msg":"trace[2047740435] range","detail":"{range_begin:/registry/secrets/tigera-operator/goldmane-key-pair; range_end:; response_count:1; response_revision:682; }","duration":"120.403866ms","start":"2026-04-16T01:58:36.137020Z","end":"2026-04-16T01:58:36.257424Z","steps":["trace[2047740435] 'agreement among raft nodes before linearized reading'  (duration: 120.321499ms)"],"step_count":1}
Apr 16 01:58:36.456650 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.456318Z","caller":"traceutil/trace.go:171","msg":"trace[1449386692] transaction","detail":"{read_only:false; response_revision:692; number_of_response:1; }","duration":"106.124053ms","start":"2026-04-16T01:58:36.350180Z","end":"2026-04-16T01:58:36.456304Z","steps":["trace[1449386692] 'process raft request'  (duration: 58.663112ms)","trace[1449386692] 'compare'  (duration: 47.377202ms)"],"step_count":2}
Apr 16 01:58:36.456650 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.456418Z","caller":"traceutil/trace.go:171","msg":"trace[31970966] transaction","detail":"{read_only:false; response_revision:693; number_of_response:1; }","duration":"106.11878ms","start":"2026-04-16T01:58:36.350292Z","end":"2026-04-16T01:58:36.456411Z","steps":["trace[31970966] 'process raft request'  (duration: 105.98698ms)"],"step_count":1}
Apr 16 01:58:36.460213 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.459863Z","caller":"traceutil/trace.go:171","msg":"trace[48353247] transaction","detail":"{read_only:false; response_revision:695; number_of_response:1; }","duration":"103.092192ms","start":"2026-04-16T01:58:36.356760Z","end":"2026-04-16T01:58:36.459852Z","steps":["trace[48353247] 'process raft request'  (duration: 103.013445ms)"],"step_count":1}
Apr 16 01:58:36.460213 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.459924Z","caller":"traceutil/trace.go:171","msg":"trace[1703676665] transaction","detail":"{read_only:false; response_revision:696; number_of_response:1; }","duration":"102.58021ms","start":"2026-04-16T01:58:36.357338Z","end":"2026-04-16T01:58:36.459919Z","steps":["trace[1703676665] 'process raft request'  (duration: 102.469642ms)"],"step_count":1}
Apr 16 01:58:36.460213 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.459934Z","caller":"traceutil/trace.go:171","msg":"trace[943252467] transaction","detail":"{read_only:false; response_revision:694; number_of_response:1; }","duration":"103.948632ms","start":"2026-04-16T01:58:36.355981Z","end":"2026-04-16T01:58:36.459930Z","steps":["trace[943252467] 'process raft request'  (duration: 103.755145ms)"],"step_count":1}
Apr 16 01:58:36.503801 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:36.503529Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"116.696767ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/secrets/calico-system/typha-certs\" limit:1 ","response":"range_response_count:1 size:4582"}
Apr 16 01:58:36.503801 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.503578Z","caller":"traceutil/trace.go:171","msg":"trace[1662815401] range","detail":"{range_begin:/registry/secrets/calico-system/typha-certs; range_end:; response_count:1; response_revision:697; }","duration":"116.753364ms","start":"2026-04-16T01:58:36.386817Z","end":"2026-04-16T01:58:36.503570Z","steps":["trace[1662815401] 'agreement among raft nodes before linearized reading'  (duration: 116.686415ms)"],"step_count":1}
Apr 16 01:58:36.808994 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.808723Z","caller":"traceutil/trace.go:171","msg":"trace[266855714] transaction","detail":"{read_only:false; response_revision:712; number_of_response:1; }","duration":"103.299376ms","start":"2026-04-16T01:58:36.705409Z","end":"2026-04-16T01:58:36.808708Z","steps":["trace[266855714] 'process raft request'  (duration: 60.430593ms)","trace[266855714] 'compare'  (duration: 42.811366ms)"],"step_count":2}
Apr 16 01:58:36.813039 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.812694Z","caller":"traceutil/trace.go:171","msg":"trace[1237802605] linearizableReadLoop","detail":"{readStateIndex:737; appliedIndex:734; }","duration":"101.84028ms","start":"2026-04-16T01:58:36.710842Z","end":"2026-04-16T01:58:36.812682Z","steps":["trace[1237802605] 'read index received'  (duration: 54.980841ms)","trace[1237802605] 'applied index is now lower than readState.Index'  (duration: 46.859066ms)"],"step_count":2}
Apr 16 01:58:36.813039 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.812780Z","caller":"traceutil/trace.go:171","msg":"trace[1010982958] transaction","detail":"{read_only:false; response_revision:713; number_of_response:1; }","duration":"103.086267ms","start":"2026-04-16T01:58:36.709669Z","end":"2026-04-16T01:58:36.812755Z","steps":["trace[1010982958] 'process raft request'  (duration: 102.85036ms)"],"step_count":1}
Apr 16 01:58:36.813407 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.812883Z","caller":"traceutil/trace.go:171","msg":"trace[1182546085] transaction","detail":"{read_only:false; response_revision:714; number_of_response:1; }","duration":"102.641345ms","start":"2026-04-16T01:58:36.710236Z","end":"2026-04-16T01:58:36.812877Z","steps":["trace[1182546085] 'process raft request'  (duration: 102.31645ms)"],"step_count":1}
Apr 16 01:58:36.813407 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:36.812978Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"102.123525ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/calico-cni-plugin\" limit:1 ","response":"range_response_count:1 size:537"}
Apr 16 01:58:36.813407 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:36.813016Z","caller":"traceutil/trace.go:171","msg":"trace[515876563] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/calico-cni-plugin; range_end:; response_count:1; response_revision:718; }","duration":"102.174482ms","start":"2026-04-16T01:58:36.710837Z","end":"2026-04-16T01:58:36.813011Z","steps":["trace[515876563] 'agreement among raft nodes before linearized reading'  (duration: 102.113255ms)"],"step_count":1}
Apr 16 01:58:38.267157 sshd[3767]: maximum authentication attempts exceeded for root from 185.217.1.246 port 28771 ssh2 [preauth]
Apr 16 01:58:38.267157 sshd[3767]: Disconnecting authenticating user root 185.217.1.246 port 28771: Too many authentication failures [preauth]
Apr 16 01:58:38.266000 audit[3767]: USER_ERR pid=3767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:38.272671 kernel: audit: type=1109 audit(1776304718.266:484): pid=3767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:38.271121 systemd[1]: sshd@90-10.0.0.12:22-185.217.1.246:28771.service: Deactivated successfully.
Apr 16 01:58:38.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-10.0.0.12:22-185.217.1.246:28771 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:38.284623 kernel: audit: type=1131 audit(1776304718.269:485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-10.0.0.12:22-185.217.1.246:28771 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:39.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-10.0.0.12:22-185.217.1.246:30500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:39.038356 systemd[1]: Started sshd@91-10.0.0.12:22-185.217.1.246:30500.service - OpenSSH per-connection server daemon (185.217.1.246:30500).
Apr 16 01:58:39.045641 kernel: audit: type=1130 audit(1776304719.036:486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-10.0.0.12:22-185.217.1.246:30500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:39.607966 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:39.606938Z","caller":"traceutil/trace.go:171","msg":"trace[1551830640] transaction","detail":"{read_only:false; response_revision:774; number_of_response:1; }","duration":"102.21762ms","start":"2026-04-16T01:58:39.504700Z","end":"2026-04-16T01:58:39.606918Z","steps":["trace[1551830640] 'process raft request'  (duration: 56.234849ms)","trace[1551830640] 'compare'  (duration: 45.851377ms)"],"step_count":2}
Apr 16 01:58:42.738199 sshd[3773]: maximum authentication attempts exceeded for root from 185.217.1.246 port 30500 ssh2 [preauth]
Apr 16 01:58:42.738199 sshd[3773]: Disconnecting authenticating user root 185.217.1.246 port 30500: Too many authentication failures [preauth]
Apr 16 01:58:42.738000 audit[3773]: USER_ERR pid=3773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:42.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-10.0.0.12:22-185.217.1.246:30500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:42.742983 systemd[1]: sshd@91-10.0.0.12:22-185.217.1.246:30500.service: Deactivated successfully.
Apr 16 01:58:42.748115 kernel: audit: type=1109 audit(1776304722.738:487): pid=3773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:42.748181 kernel: audit: type=1131 audit(1776304722.742:488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-10.0.0.12:22-185.217.1.246:30500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:42.903811 systemd[1]: Started sshd@92-10.0.0.12:22-185.217.1.246:44354.service - OpenSSH per-connection server daemon (185.217.1.246:44354).
Apr 16 01:58:42.909845 kernel: audit: type=1130 audit(1776304722.903:489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-10.0.0.12:22-185.217.1.246:44354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:42.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-10.0.0.12:22-185.217.1.246:44354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:43.335706 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:43.335413Z","caller":"etcdserver/v3_server.go:920","msg":"waiting for ReadIndex response took too long, retrying","sent-request-id":7587894206183972304,"retry-timeout":"500ms"}
Apr 16 01:58:43.683269 sshd[3779]: maximum authentication attempts exceeded for root from 185.217.1.246 port 44354 ssh2 [preauth]
Apr 16 01:58:43.683269 sshd[3779]: Disconnecting authenticating user root 185.217.1.246 port 44354: Too many authentication failures [preauth]
Apr 16 01:58:43.683000 audit[3779]: USER_ERR pid=3779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:43.686162 systemd[1]: sshd@92-10.0.0.12:22-185.217.1.246:44354.service: Deactivated successfully.
Apr 16 01:58:43.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-10.0.0.12:22-185.217.1.246:44354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:43.693309 kernel: audit: type=1109 audit(1776304723.683:490): pid=3779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:43.693379 kernel: audit: type=1131 audit(1776304723.685:491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-10.0.0.12:22-185.217.1.246:44354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:43.764013 systemd[1]: Started sshd@93-10.0.0.12:22-185.217.1.246:16778.service - OpenSSH per-connection server daemon (185.217.1.246:16778).
Apr 16 01:58:43.769633 kernel: audit: type=1130 audit(1776304723.763:492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-10.0.0.12:22-185.217.1.246:16778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:43.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-10.0.0.12:22-185.217.1.246:16778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:43.836611 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:43.836371Z","caller":"etcdserver/v3_server.go:920","msg":"waiting for ReadIndex response took too long, retrying","sent-request-id":7587894206183972304,"retry-timeout":"500ms"}
Apr 16 01:58:44.203021 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:44.202678Z","caller":"wal/wal.go:805","msg":"slow fdatasync","took":"1.37673779s","expected-duration":"1s"}
Apr 16 01:58:44.203427 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:44.203240Z","caller":"traceutil/trace.go:171","msg":"trace[1325776141] transaction","detail":"{read_only:false; response_revision:797; number_of_response:1; }","duration":"1.377369971s","start":"2026-04-16T01:58:42.825852Z","end":"2026-04-16T01:58:44.203222Z","steps":["trace[1325776141] 'process raft request'  (duration: 1.37701651s)"],"step_count":1}
Apr 16 01:58:44.203635 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:44.203326Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:42.825825Z","time spent":"1.377446784s","remote":"10.0.0.14:39712","response type":"/etcdserverpb.KV/Txn","request count":1,"request size":507,"response count":0,"response size":40,"request content":"compare:<target:MOD key:\"/registry/leases/kube-system/kube-controller-manager\" mod_revision:783 > success:<request_put:<key:\"/registry/leases/kube-system/kube-controller-manager\" value_size:447 >> failure:<request_range:<key:\"/registry/leases/kube-system/kube-controller-manager\" > >"}
Apr 16 01:58:44.568531 sshd[3785]: maximum authentication attempts exceeded for root from 185.217.1.246 port 16778 ssh2 [preauth]
Apr 16 01:58:44.568531 sshd[3785]: Disconnecting authenticating user root 185.217.1.246 port 16778: Too many authentication failures [preauth]
Apr 16 01:58:44.568000 audit[3785]: USER_ERR pid=3785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:44.573150 systemd[1]: sshd@93-10.0.0.12:22-185.217.1.246:16778.service: Deactivated successfully.
Apr 16 01:58:44.573631 kernel: audit: type=1109 audit(1776304724.568:493): pid=3785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:44.573688 kernel: audit: type=1131 audit(1776304724.571:494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-10.0.0.12:22-185.217.1.246:16778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:44.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-10.0.0.12:22-185.217.1.246:16778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:44.642885 systemd[1]: Started sshd@94-10.0.0.12:22-185.217.1.246:19644.service - OpenSSH per-connection server daemon (185.217.1.246:19644).
Apr 16 01:58:44.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-10.0.0.12:22-185.217.1.246:19644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:44.648625 kernel: audit: type=1130 audit(1776304724.642:495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-10.0.0.12:22-185.217.1.246:19644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:45.186444 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:45.185999Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.999900066s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/health\" ","response":"","error":"context deadline exceeded"}
Apr 16 01:58:45.186444 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:45.186094Z","caller":"traceutil/trace.go:171","msg":"trace[2067251879] range","detail":"{range_begin:/registry/health; range_end:; }","duration":"2.000001397s","start":"2026-04-16T01:58:43.186076Z","end":"2026-04-16T01:58:45.186077Z","steps":["trace[2067251879] 'agreement among raft nodes before linearized reading'  (duration: 1.999896892s)"],"step_count":1}
Apr 16 01:58:45.186444 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:45.186142Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.186065Z","time spent":"2.000064875s","remote":"10.0.0.14:39222","response type":"/etcdserverpb.KV/Range","request count":0,"request size":18,"response count":0,"response size":0,"request content":"key:\"/registry/health\" "}
Apr 16 01:58:45.959892 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:45.959103Z","caller":"wal/wal.go:805","msg":"slow fdatasync","took":"1.756287985s","expected-duration":"1s"}
Apr 16 01:58:45.959892 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:45.959361Z","caller":"traceutil/trace.go:171","msg":"trace[789198547] linearizableReadLoop","detail":"{readStateIndex:823; appliedIndex:820; }","duration":"3.12494617s","start":"2026-04-16T01:58:42.834402Z","end":"2026-04-16T01:58:45.959348Z","steps":["trace[789198547] 'read index received'  (duration: 1.368767919s)","trace[789198547] 'applied index is now lower than readState.Index'  (duration: 1.756177947s)"],"step_count":2}
Apr 16 01:58:45.959892 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:45.959407Z","caller":"traceutil/trace.go:171","msg":"trace[1357079833] transaction","detail":"{read_only:false; response_revision:799; number_of_response:1; }","duration":"2.268169368s","start":"2026-04-16T01:58:43.691234Z","end":"2026-04-16T01:58:45.959403Z","steps":["trace[1357079833] 'process raft request'  (duration: 2.268094758s)"],"step_count":1}
Apr 16 01:58:45.959892 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:45.959407Z","caller":"traceutil/trace.go:171","msg":"trace[710061231] transaction","detail":"{read_only:false; response_revision:798; number_of_response:1; }","duration":"2.268665411s","start":"2026-04-16T01:58:43.690733Z","end":"2026-04-16T01:58:45.959398Z","steps":["trace[710061231] 'process raft request'  (duration: 2.268509974s)"],"step_count":1}
Apr 16 01:58:45.959892 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:45.959475Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.691227Z","time spent":"2.268195989s","remote":"10.0.0.14:39712","response type":"/etcdserverpb.KV/Txn","request count":1,"request size":480,"response count":0,"response size":40,"request content":"compare:<target:MOD key:\"/registry/leases/tigera-operator/operator-lock\" mod_revision:796 > success:<request_put:<key:\"/registry/leases/tigera-operator/operator-lock\" value_size:426 >> failure:<request_range:<key:\"/registry/leases/tigera-operator/operator-lock\" > >"}
Apr 16 01:58:45.960133 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:45.959480Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.690716Z","time spent":"2.268707337s","remote":"10.0.0.14:39712","response type":"/etcdserverpb.KV/Txn","request count":1,"request size":480,"response count":0,"response size":40,"request content":"compare:<target:MOD key:\"/registry/leases/kube-system/kube-scheduler\" mod_revision:795 > success:<request_put:<key:\"/registry/leases/kube-system/kube-scheduler\" value_size:429 >> failure:<request_range:<key:\"/registry/leases/kube-system/kube-scheduler\" > >"}
Apr 16 01:58:45.960133 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:45.959534Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"3.125130412s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/clusterrolebindings/calico-cni-plugin\" limit:1 ","response":"range_response_count:1 size:716"}
Apr 16 01:58:45.960133 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:45.959548Z","caller":"traceutil/trace.go:171","msg":"trace[1285700874] range","detail":"{range_begin:/registry/clusterrolebindings/calico-cni-plugin; range_end:; response_count:1; response_revision:799; }","duration":"3.125143538s","start":"2026-04-16T01:58:42.834400Z","end":"2026-04-16T01:58:45.959543Z","steps":["trace[1285700874] 'agreement among raft nodes before linearized reading'  (duration: 3.125117245s)"],"step_count":1}
Apr 16 01:58:45.960133 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:45.959561Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:42.834394Z","time spent":"3.125163781s","remote":"10.0.0.14:39944","response type":"/etcdserverpb.KV/Range","request count":0,"request size":51,"response count":1,"response size":740,"request content":"key:\"/registry/clusterrolebindings/calico-cni-plugin\" limit:1 "}
Apr 16 01:58:46.005285 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.005073Z","caller":"traceutil/trace.go:171","msg":"trace[904695742] transaction","detail":"{read_only:false; response_revision:800; number_of_response:1; }","duration":"191.137047ms","start":"2026-04-16T01:58:45.813921Z","end":"2026-04-16T01:58:46.005058Z","steps":["trace[904695742] 'process raft request'  (duration: 190.982193ms)"],"step_count":1}
Apr 16 01:58:46.005285 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005218Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"818.716271ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/health\" ","response":"range_response_count:0 size:5"}
Apr 16 01:58:46.005469 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.005295Z","caller":"traceutil/trace.go:171","msg":"trace[1268253660] range","detail":"{range_begin:/registry/health; range_end:; response_count:0; response_revision:800; }","duration":"818.797659ms","start":"2026-04-16T01:58:45.186490Z","end":"2026-04-16T01:58:46.005288Z","steps":["trace[1268253660] 'agreement among raft nodes before linearized reading'  (duration: 818.708163ms)"],"step_count":1}
Apr 16 01:58:46.005680 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005315Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:45.186450Z","time spent":"818.857437ms","remote":"10.0.0.14:39244","response type":"/etcdserverpb.KV/Range","request count":0,"request size":18,"response count":0,"response size":29,"request content":"key:\"/registry/health\" "}
Apr 16 01:58:46.005680 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005357Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.370598542s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/namespaces/calico-system\" limit:1 ","response":"range_response_count:1 size:764"}
Apr 16 01:58:46.005680 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.005419Z","caller":"traceutil/trace.go:171","msg":"trace[434062988] range","detail":"{range_begin:/registry/namespaces/calico-system; range_end:; response_count:1; response_revision:800; }","duration":"2.370658088s","start":"2026-04-16T01:58:43.634754Z","end":"2026-04-16T01:58:46.005412Z","steps":["trace[434062988] 'agreement among raft nodes before linearized reading'  (duration: 2.370587285s)"],"step_count":1}
Apr 16 01:58:46.005680 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005445Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.634743Z","time spent":"2.370696335s","remote":"10.0.0.14:39462","response type":"/etcdserverpb.KV/Range","request count":0,"request size":38,"response count":1,"response size":788,"request content":"key:\"/registry/namespaces/calico-system\" limit:1 "}
Apr 16 01:58:46.005680 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005523Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.471149191s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/clusterrolebindings/calico-typha\" limit:1 ","response":"range_response_count:1 size:612"}
Apr 16 01:58:46.006113 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.005559Z","caller":"traceutil/trace.go:171","msg":"trace[1176745602] range","detail":"{range_begin:/registry/clusterrolebindings/calico-typha; range_end:; response_count:1; response_revision:800; }","duration":"2.471184511s","start":"2026-04-16T01:58:43.534369Z","end":"2026-04-16T01:58:46.005554Z","steps":["trace[1176745602] 'agreement among raft nodes before linearized reading'  (duration: 2.471137157s)"],"step_count":1}
Apr 16 01:58:46.006113 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005584Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.534360Z","time spent":"2.471217792s","remote":"10.0.0.14:39944","response type":"/etcdserverpb.KV/Range","request count":0,"request size":46,"response count":1,"response size":636,"request content":"key:\"/registry/clusterrolebindings/calico-typha\" limit:1 "}
Apr 16 01:58:46.006113 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005761Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.271203822s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/rolebindings/calico-system/tigera-operator-secrets\" limit:1 ","response":"range_response_count:1 size:663"}
Apr 16 01:58:46.006315 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.005822Z","caller":"traceutil/trace.go:171","msg":"trace[1281238340] range","detail":"{range_begin:/registry/rolebindings/calico-system/tigera-operator-secrets; range_end:; response_count:1; response_revision:800; }","duration":"2.271262774s","start":"2026-04-16T01:58:43.734552Z","end":"2026-04-16T01:58:46.005814Z","steps":["trace[1281238340] 'agreement among raft nodes before linearized reading'  (duration: 2.271187459s)"],"step_count":1}
Apr 16 01:58:46.006315 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005859Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.734541Z","time spent":"2.271312495s","remote":"10.0.0.14:39908","response type":"/etcdserverpb.KV/Range","request count":0,"request size":64,"response count":1,"response size":687,"request content":"key:\"/registry/rolebindings/calico-system/tigera-operator-secrets\" limit:1 "}
Apr 16 01:58:46.006678 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005917Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.572012953s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/daemonsets/calico-system/calico-node\" limit:1 ","response":"range_response_count:1 size:13040"}
Apr 16 01:58:46.006678 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.006357Z","caller":"traceutil/trace.go:171","msg":"trace[1132391631] range","detail":"{range_begin:/registry/daemonsets/calico-system/calico-node; range_end:; response_count:1; response_revision:800; }","duration":"2.572450727s","start":"2026-04-16T01:58:43.433899Z","end":"2026-04-16T01:58:46.006350Z","steps":["trace[1132391631] 'agreement among raft nodes before linearized reading'  (duration: 2.571977174s)"],"step_count":1}
Apr 16 01:58:46.006678 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006406Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.433889Z","time spent":"2.57251066s","remote":"10.0.0.14:40160","response type":"/etcdserverpb.KV/Range","request count":0,"request size":50,"response count":1,"response size":13064,"request content":"key:\"/registry/daemonsets/calico-system/calico-node\" limit:1 "}
Apr 16 01:58:46.006678 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005937Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.772125883s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/clusterroles/calico-typha\" limit:1 ","response":"range_response_count:1 size:1668"}
Apr 16 01:58:46.006931 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.006529Z","caller":"traceutil/trace.go:171","msg":"trace[734266180] range","detail":"{range_begin:/registry/clusterroles/calico-typha; range_end:; response_count:1; response_revision:800; }","duration":"2.772713518s","start":"2026-04-16T01:58:43.233809Z","end":"2026-04-16T01:58:46.006522Z","steps":["trace[734266180] 'agreement among raft nodes before linearized reading'  (duration: 2.772117334s)"],"step_count":1}
Apr 16 01:58:46.006931 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006635Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.233797Z","time spent":"2.772829769s","remote":"10.0.0.14:39924","response type":"/etcdserverpb.KV/Range","request count":0,"request size":39,"response count":1,"response size":1692,"request content":"key:\"/registry/clusterroles/calico-typha\" limit:1 "}
Apr 16 01:58:46.006931 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005976Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.272084943s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/clusterrolebindings/calico-kube-controllers\" limit:1 ","response":"range_response_count:1 size:656"}
Apr 16 01:58:46.006931 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.006702Z","caller":"traceutil/trace.go:171","msg":"trace[176517727] range","detail":"{range_begin:/registry/clusterrolebindings/calico-kube-controllers; range_end:; response_count:1; response_revision:800; }","duration":"1.27281061s","start":"2026-04-16T01:58:44.733885Z","end":"2026-04-16T01:58:46.006696Z","steps":["trace[176517727] 'agreement among raft nodes before linearized reading'  (duration: 1.272072331s)"],"step_count":1}
Apr 16 01:58:46.007079 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006827Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.733875Z","time spent":"1.272945415s","remote":"10.0.0.14:39944","response type":"/etcdserverpb.KV/Range","request count":0,"request size":57,"response count":1,"response size":680,"request content":"key:\"/registry/clusterrolebindings/calico-kube-controllers\" limit:1 "}
Apr 16 01:58:46.007958 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005992Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.871875216s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/configmaps/calico-system/cni-config\" limit:1 ","response":"range_response_count:1 size:1179"}
Apr 16 01:58:46.007958 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.006915Z","caller":"traceutil/trace.go:171","msg":"trace[1403783770] range","detail":"{range_begin:/registry/configmaps/calico-system/cni-config; range_end:; response_count:1; response_revision:800; }","duration":"2.872795159s","start":"2026-04-16T01:58:43.134114Z","end":"2026-04-16T01:58:46.006909Z","steps":["trace[1403783770] 'agreement among raft nodes before linearized reading'  (duration: 2.871866123s)"],"step_count":1}
Apr 16 01:58:46.007958 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006932Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.134100Z","time spent":"2.872825443s","remote":"10.0.0.14:39432","response type":"/etcdserverpb.KV/Range","request count":0,"request size":49,"response count":1,"response size":1203,"request content":"key:\"/registry/configmaps/calico-system/cni-config\" limit:1 "}
Apr 16 01:58:46.007958 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.005999Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.372174326s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/clusterroles/calico-kube-controllers\" limit:1 ","response":"range_response_count:1 size:1186"}
Apr 16 01:58:46.007958 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.006978Z","caller":"traceutil/trace.go:171","msg":"trace[431065608] range","detail":"{range_begin:/registry/clusterroles/calico-kube-controllers; range_end:; response_count:1; response_revision:800; }","duration":"1.373151715s","start":"2026-04-16T01:58:44.633822Z","end":"2026-04-16T01:58:46.006973Z","steps":["trace[431065608] 'agreement among raft nodes before linearized reading'  (duration: 1.372167541s)"],"step_count":1}
Apr 16 01:58:46.008143 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006991Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.633811Z","time spent":"1.373175253s","remote":"10.0.0.14:39924","response type":"/etcdserverpb.KV/Range","request count":0,"request size":50,"response count":1,"response size":1210,"request content":"key:\"/registry/clusterroles/calico-kube-controllers\" limit:1 "}
Apr 16 01:58:46.008143 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006011Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.971850173s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/poddisruptionbudgets/calico-system/calico-apiserver\" limit:1 ","response":"range_response_count:1 size:965"}
Apr 16 01:58:46.008143 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007016Z","caller":"traceutil/trace.go:171","msg":"trace[1489367819] range","detail":"{range_begin:/registry/poddisruptionbudgets/calico-system/calico-apiserver; range_end:; response_count:1; response_revision:800; }","duration":"2.972854706s","start":"2026-04-16T01:58:43.034158Z","end":"2026-04-16T01:58:46.007012Z","steps":["trace[1489367819] 'agreement among raft nodes before linearized reading'  (duration: 2.971841613s)"],"step_count":1}
Apr 16 01:58:46.008143 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007028Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.034149Z","time spent":"2.972875515s","remote":"10.0.0.14:39864","response type":"/etcdserverpb.KV/Range","request count":0,"request size":65,"response count":1,"response size":989,"request content":"key:\"/registry/poddisruptionbudgets/calico-system/calico-apiserver\" limit:1 "}
Apr 16 01:58:46.008143 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006016Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.472200197s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/secrets/tigera-operator/goldmane-key-pair\" limit:1 ","response":"range_response_count:1 size:4711"}
Apr 16 01:58:46.008251 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007057Z","caller":"traceutil/trace.go:171","msg":"trace[1514341154] range","detail":"{range_begin:/registry/secrets/tigera-operator/goldmane-key-pair; range_end:; response_count:1; response_revision:800; }","duration":"1.473240203s","start":"2026-04-16T01:58:44.533813Z","end":"2026-04-16T01:58:46.007053Z","steps":["trace[1514341154] 'agreement among raft nodes before linearized reading'  (duration: 1.472191948s)"],"step_count":1}
Apr 16 01:58:46.008251 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007070Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.533805Z","time spent":"1.473261222s","remote":"10.0.0.14:39406","response type":"/etcdserverpb.KV/Range","request count":0,"request size":55,"response count":1,"response size":4735,"request content":"key:\"/registry/secrets/tigera-operator/goldmane-key-pair\" limit:1 "}
Apr 16 01:58:46.008251 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006034Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"3.004109468s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/pods/calico-system/calico-node-xxjdq\" limit:1 ","response":"range_response_count:1 size:16738"}
Apr 16 01:58:46.008251 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007106Z","caller":"traceutil/trace.go:171","msg":"trace[2107856520] range","detail":"{range_begin:/registry/pods/calico-system/calico-node-xxjdq; range_end:; response_count:1; response_revision:800; }","duration":"3.005180522s","start":"2026-04-16T01:58:43.001922Z","end":"2026-04-16T01:58:46.007102Z","steps":["trace[2107856520] 'agreement among raft nodes before linearized reading'  (duration: 3.004095891s)"],"step_count":1}
Apr 16 01:58:46.008348 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007117Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.001909Z","time spent":"3.005204915s","remote":"10.0.0.14:39576","response type":"/etcdserverpb.KV/Range","request count":0,"request size":50,"response count":1,"response size":16762,"request content":"key:\"/registry/pods/calico-system/calico-node-xxjdq\" limit:1 "}
Apr 16 01:58:46.008348 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006043Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.556401071s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/rolebindings/kube-system/calico-apiserver-auth-reader\" limit:1 ","response":"range_response_count:1 size:676"}
Apr 16 01:58:46.008348 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007206Z","caller":"traceutil/trace.go:171","msg":"trace[201209615] range","detail":"{range_begin:/registry/rolebindings/kube-system/calico-apiserver-auth-reader; range_end:; response_count:1; response_revision:800; }","duration":"1.557561341s","start":"2026-04-16T01:58:44.449639Z","end":"2026-04-16T01:58:46.007200Z","steps":["trace[201209615] 'agreement among raft nodes before linearized reading'  (duration: 1.556393833s)"],"step_count":1}
Apr 16 01:58:46.008348 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007240Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.449623Z","time spent":"1.557612328s","remote":"10.0.0.14:39908","response type":"/etcdserverpb.KV/Range","request count":0,"request size":67,"response count":1,"response size":700,"request content":"key:\"/registry/rolebindings/kube-system/calico-apiserver-auth-reader\" limit:1 "}
Apr 16 01:58:46.008348 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006062Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.571970499s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/secrets/calico-system/node-certs\" limit:1 ","response":"range_response_count:1 size:4580"}
Apr 16 01:58:46.008435 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007263Z","caller":"traceutil/trace.go:171","msg":"trace[550370085] range","detail":"{range_begin:/registry/secrets/calico-system/node-certs; range_end:; response_count:1; response_revision:800; }","duration":"1.573170514s","start":"2026-04-16T01:58:44.434089Z","end":"2026-04-16T01:58:46.007259Z","steps":["trace[550370085] 'agreement among raft nodes before linearized reading'  (duration: 1.571961744s)"],"step_count":1}
Apr 16 01:58:46.008435 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007281Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.434069Z","time spent":"1.573209993s","remote":"10.0.0.14:39406","response type":"/etcdserverpb.KV/Range","request count":0,"request size":46,"response count":1,"response size":4604,"request content":"key:\"/registry/secrets/calico-system/node-certs\" limit:1 "}
Apr 16 01:58:46.008435 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006062Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"3.071687949s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/clusterroles/calico-cni-plugin\" limit:1 ","response":"range_response_count:1 size:789"}
Apr 16 01:58:46.008435 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007300Z","caller":"traceutil/trace.go:171","msg":"trace[1578251376] range","detail":"{range_begin:/registry/clusterroles/calico-cni-plugin; range_end:; response_count:1; response_revision:800; }","duration":"3.072926402s","start":"2026-04-16T01:58:42.934371Z","end":"2026-04-16T01:58:46.007298Z","steps":["trace[1578251376] 'agreement among raft nodes before linearized reading'  (duration: 3.071678532s)"],"step_count":1}
Apr 16 01:58:46.008435 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007316Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:42.934361Z","time spent":"3.072946921s","remote":"10.0.0.14:39924","response type":"/etcdserverpb.KV/Range","request count":0,"request size":44,"response count":1,"response size":813,"request content":"key:\"/registry/clusterroles/calico-cni-plugin\" limit:1 "}
Apr 16 01:58:46.008586 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006078Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.671757247s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/csi-node-driver\" limit:1 ","response":"range_response_count:1 size:447"}
Apr 16 01:58:46.008586 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007333Z","caller":"traceutil/trace.go:171","msg":"trace[344445769] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/csi-node-driver; range_end:; response_count:1; response_revision:800; }","duration":"1.673011393s","start":"2026-04-16T01:58:44.334318Z","end":"2026-04-16T01:58:46.007329Z","steps":["trace[344445769] 'agreement among raft nodes before linearized reading'  (duration: 1.671750457s)"],"step_count":1}
Apr 16 01:58:46.008586 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007345Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.334297Z","time spent":"1.673044315s","remote":"10.0.0.14:39610","response type":"/etcdserverpb.KV/Range","request count":0,"request size":59,"response count":1,"response size":471,"request content":"key:\"/registry/serviceaccounts/calico-system/csi-node-driver\" limit:1 "}
Apr 16 01:58:46.008586 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006079Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"3.078391923s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/events/calico-system/csi-node-driver-qz2xq.18a6b3ba90285da7\" limit:1 ","response":"range_response_count:1 size:898"}
Apr 16 01:58:46.008685 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007378Z","caller":"traceutil/trace.go:171","msg":"trace[1902967850] range","detail":"{range_begin:/registry/events/calico-system/csi-node-driver-qz2xq.18a6b3ba90285da7; range_end:; response_count:1; response_revision:800; }","duration":"3.07969065s","start":"2026-04-16T01:58:42.927684Z","end":"2026-04-16T01:58:46.007375Z","steps":["trace[1902967850] 'agreement among raft nodes before linearized reading'  (duration: 3.07838478s)"],"step_count":1}
Apr 16 01:58:46.008685 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007388Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:42.927674Z","time spent":"3.079711155s","remote":"10.0.0.14:39370","response type":"/etcdserverpb.KV/Range","request count":0,"request size":73,"response count":1,"response size":922,"request content":"key:\"/registry/events/calico-system/csi-node-driver-qz2xq.18a6b3ba90285da7\" limit:1 "}
Apr 16 01:58:46.008685 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006093Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.772384701s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/calico-kube-controllers\" limit:1 ","response":"range_response_count:1 size:463"}
Apr 16 01:58:46.008685 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007405Z","caller":"traceutil/trace.go:171","msg":"trace[124211338] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/calico-kube-controllers; range_end:; response_count:1; response_revision:800; }","duration":"1.773696571s","start":"2026-04-16T01:58:44.233706Z","end":"2026-04-16T01:58:46.007402Z","steps":["trace[124211338] 'agreement among raft nodes before linearized reading'  (duration: 1.772378509s)"],"step_count":1}
Apr 16 01:58:46.008755 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007443Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.233696Z","time spent":"1.773714107s","remote":"10.0.0.14:39610","response type":"/etcdserverpb.KV/Range","request count":0,"request size":67,"response count":1,"response size":487,"request content":"key:\"/registry/serviceaccounts/calico-system/calico-kube-controllers\" limit:1 "}
Apr 16 01:58:46.008755 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006240Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.072288545s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/csidrivers/csi.tigera.io\" limit:1 ","response":"range_response_count:1 size:685"}
Apr 16 01:58:46.008755 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007459Z","caller":"traceutil/trace.go:171","msg":"trace[533779116] range","detail":"{range_begin:/registry/csidrivers/csi.tigera.io; range_end:; response_count:1; response_revision:800; }","duration":"2.073508664s","start":"2026-04-16T01:58:43.933947Z","end":"2026-04-16T01:58:46.007456Z","steps":["trace[533779116] 'agreement among raft nodes before linearized reading'  (duration: 2.07227156s)"],"step_count":1}
Apr 16 01:58:46.008755 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007468Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.933937Z","time spent":"2.073527961s","remote":"10.0.0.14:40040","response type":"/etcdserverpb.KV/Range","request count":0,"request size":38,"response count":1,"response size":709,"request content":"key:\"/registry/csidrivers/csi.tigera.io\" limit:1 "}
Apr 16 01:58:46.008755 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006250Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.871795584s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/poddisruptionbudgets/calico-system/calico-typha\" limit:1 ","response":"range_response_count:1 size:944"}
Apr 16 01:58:46.008850 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007485Z","caller":"traceutil/trace.go:171","msg":"trace[996958786] range","detail":"{range_begin:/registry/poddisruptionbudgets/calico-system/calico-typha; range_end:; response_count:1; response_revision:800; }","duration":"1.873031596s","start":"2026-04-16T01:58:44.134450Z","end":"2026-04-16T01:58:46.007482Z","steps":["trace[996958786] 'agreement among raft nodes before linearized reading'  (duration: 1.871648376s)"],"step_count":1}
Apr 16 01:58:46.008850 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007495Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.134436Z","time spent":"1.873054497s","remote":"10.0.0.14:39864","response type":"/etcdserverpb.KV/Range","request count":0,"request size":61,"response count":1,"response size":968,"request content":"key:\"/registry/poddisruptionbudgets/calico-system/calico-typha\" limit:1 "}
Apr 16 01:58:46.008850 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006261Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.971689712s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/daemonsets/calico-system/csi-node-driver\" limit:1 ","response":"range_response_count:1 size:4886"}
Apr 16 01:58:46.008850 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007518Z","caller":"traceutil/trace.go:171","msg":"trace[110043659] range","detail":"{range_begin:/registry/daemonsets/calico-system/csi-node-driver; range_end:; response_count:1; response_revision:800; }","duration":"1.972947924s","start":"2026-04-16T01:58:44.034568Z","end":"2026-04-16T01:58:46.007516Z","steps":["trace[110043659] 'agreement among raft nodes before linearized reading'  (duration: 1.97168006s)"],"step_count":1}
Apr 16 01:58:46.008937 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007542Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:44.034558Z","time spent":"1.972968091s","remote":"10.0.0.14:40160","response type":"/etcdserverpb.KV/Range","request count":0,"request size":54,"response count":1,"response size":4910,"request content":"key:\"/registry/daemonsets/calico-system/csi-node-driver\" limit:1 "}
Apr 16 01:58:46.008937 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.006268Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.172084396s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/configmaps/calico-system/active-operator\" limit:1 ","response":"range_response_count:1 size:518"}
Apr 16 01:58:46.008937 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:46.007564Z","caller":"traceutil/trace.go:171","msg":"trace[1017002308] range","detail":"{range_begin:/registry/configmaps/calico-system/active-operator; range_end:; response_count:1; response_revision:800; }","duration":"2.173380625s","start":"2026-04-16T01:58:43.834181Z","end":"2026-04-16T01:58:46.007561Z","steps":["trace[1017002308] 'agreement among raft nodes before linearized reading'  (duration: 2.172077724s)"],"step_count":1}
Apr 16 01:58:46.008937 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:46.007576Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:58:43.834156Z","time spent":"2.173415809s","remote":"10.0.0.14:39432","response type":"/etcdserverpb.KV/Range","request count":0,"request size":54,"response count":1,"response size":542,"request content":"key:\"/registry/configmaps/calico-system/active-operator\" limit:1 "}
Apr 16 01:58:46.466986 sshd[3791]: maximum authentication attempts exceeded for root from 185.217.1.246 port 19644 ssh2 [preauth]
Apr 16 01:58:46.466986 sshd[3791]: Disconnecting authenticating user root 185.217.1.246 port 19644: Too many authentication failures [preauth]
Apr 16 01:58:46.466000 audit[3791]: USER_ERR pid=3791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:46.472635 kernel: audit: type=1109 audit(1776304726.466:496): pid=3791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:46.472748 systemd[1]: sshd@94-10.0.0.12:22-185.217.1.246:19644.service: Deactivated successfully.
Apr 16 01:58:46.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-10.0.0.12:22-185.217.1.246:19644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:46.478847 kernel: audit: type=1131 audit(1776304726.472:497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-10.0.0.12:22-185.217.1.246:19644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:47.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-10.0.0.12:22-185.217.1.246:17321 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:47.891338 systemd[1]: Started sshd@95-10.0.0.12:22-185.217.1.246:17321.service - OpenSSH per-connection server daemon (185.217.1.246:17321).
Apr 16 01:58:47.897661 kernel: audit: type=1130 audit(1776304727.890:498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-10.0.0.12:22-185.217.1.246:17321 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:49.076412 sshd[3797]: maximum authentication attempts exceeded for root from 185.217.1.246 port 17321 ssh2 [preauth]
Apr 16 01:58:49.076412 sshd[3797]: Disconnecting authenticating user root 185.217.1.246 port 17321: Too many authentication failures [preauth]
Apr 16 01:58:49.076000 audit[3797]: USER_ERR pid=3797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:49.080878 systemd[1]: sshd@95-10.0.0.12:22-185.217.1.246:17321.service: Deactivated successfully.
Apr 16 01:58:49.086671 kernel: audit: type=1109 audit(1776304729.076:499): pid=3797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:49.086703 kernel: audit: type=1131 audit(1776304729.079:500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-10.0.0.12:22-185.217.1.246:17321 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:49.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-10.0.0.12:22-185.217.1.246:17321 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:49.310464 systemd[1]: Started sshd@96-10.0.0.12:22-185.217.1.246:18065.service - OpenSSH per-connection server daemon (185.217.1.246:18065).
Apr 16 01:58:49.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-10.0.0.12:22-185.217.1.246:18065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:49.317671 kernel: audit: type=1130 audit(1776304729.310:501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-10.0.0.12:22-185.217.1.246:18065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:50.840159 sshd[3803]: maximum authentication attempts exceeded for root from 185.217.1.246 port 18065 ssh2 [preauth]
Apr 16 01:58:50.840159 sshd[3803]: Disconnecting authenticating user root 185.217.1.246 port 18065: Too many authentication failures [preauth]
Apr 16 01:58:50.839000 audit[3803]: USER_ERR pid=3803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:50.844981 systemd[1]: sshd@96-10.0.0.12:22-185.217.1.246:18065.service: Deactivated successfully.
Apr 16 01:58:50.849410 kernel: audit: type=1109 audit(1776304730.839:502): pid=3803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:50.849500 kernel: audit: type=1131 audit(1776304730.844:503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-10.0.0.12:22-185.217.1.246:18065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:50.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-10.0.0.12:22-185.217.1.246:18065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:50.920024 systemd[1]: Started sshd@97-10.0.0.12:22-185.217.1.246:6139.service - OpenSSH per-connection server daemon (185.217.1.246:6139).
Apr 16 01:58:50.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-10.0.0.12:22-185.217.1.246:6139 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:50.925635 kernel: audit: type=1130 audit(1776304730.919:504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-10.0.0.12:22-185.217.1.246:6139 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:53.413202 sshd[3809]: maximum authentication attempts exceeded for root from 185.217.1.246 port 6139 ssh2 [preauth]
Apr 16 01:58:53.413202 sshd[3809]: Disconnecting authenticating user root 185.217.1.246 port 6139: Too many authentication failures [preauth]
Apr 16 01:58:53.413000 audit[3809]: USER_ERR pid=3809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:53.417029 systemd[1]: sshd@97-10.0.0.12:22-185.217.1.246:6139.service: Deactivated successfully.
Apr 16 01:58:53.422640 kernel: audit: type=1109 audit(1776304733.413:505): pid=3809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:53.422721 kernel: audit: type=1131 audit(1776304733.416:506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-10.0.0.12:22-185.217.1.246:6139 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:53.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-10.0.0.12:22-185.217.1.246:6139 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:53.541108 systemd[1]: Started sshd@98-10.0.0.12:22-185.217.1.246:5532.service - OpenSSH per-connection server daemon (185.217.1.246:5532).
Apr 16 01:58:53.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-10.0.0.12:22-185.217.1.246:5532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:53.546625 kernel: audit: type=1130 audit(1776304733.540:507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-10.0.0.12:22-185.217.1.246:5532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:55.246206 sshd[3815]: maximum authentication attempts exceeded for root from 185.217.1.246 port 5532 ssh2 [preauth]
Apr 16 01:58:55.246206 sshd[3815]: Disconnecting authenticating user root 185.217.1.246 port 5532: Too many authentication failures [preauth]
Apr 16 01:58:55.246000 audit[3815]: USER_ERR pid=3815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:55.249474 systemd[1]: sshd@98-10.0.0.12:22-185.217.1.246:5532.service: Deactivated successfully.
Apr 16 01:58:55.251653 kernel: audit: type=1109 audit(1776304735.246:508): pid=3815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:55.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-10.0.0.12:22-185.217.1.246:5532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:55.256722 kernel: audit: type=1131 audit(1776304735.249:509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-10.0.0.12:22-185.217.1.246:5532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:55.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-10.0.0.12:22-185.217.1.246:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:55.664165 systemd[1]: Started sshd@99-10.0.0.12:22-185.217.1.246:52880.service - OpenSSH per-connection server daemon (185.217.1.246:52880).
Apr 16 01:58:55.670634 kernel: audit: type=1130 audit(1776304735.663:510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-10.0.0.12:22-185.217.1.246:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:56.446061 sshd[3821]: maximum authentication attempts exceeded for root from 185.217.1.246 port 52880 ssh2 [preauth]
Apr 16 01:58:56.446061 sshd[3821]: Disconnecting authenticating user root 185.217.1.246 port 52880: Too many authentication failures [preauth]
Apr 16 01:58:56.444000 audit[3821]: USER_ERR pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:56.448644 systemd[1]: sshd@99-10.0.0.12:22-185.217.1.246:52880.service: Deactivated successfully.
Apr 16 01:58:56.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-10.0.0.12:22-185.217.1.246:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:56.455437 kernel: audit: type=1109 audit(1776304736.444:511): pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:56.455478 kernel: audit: type=1131 audit(1776304736.447:512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-10.0.0.12:22-185.217.1.246:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:56.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-10.0.0.12:22-185.217.1.246:25473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:56.973361 systemd[1]: Started sshd@100-10.0.0.12:22-185.217.1.246:25473.service - OpenSSH per-connection server daemon (185.217.1.246:25473).
Apr 16 01:58:56.980630 kernel: audit: type=1130 audit(1776304736.971:513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-10.0.0.12:22-185.217.1.246:25473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:57.794397 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:57.793849Z","caller":"traceutil/trace.go:171","msg":"trace[606673580] linearizableReadLoop","detail":"{readStateIndex:894; appliedIndex:893; }","duration":"119.352075ms","start":"2026-04-16T01:58:57.674481Z","end":"2026-04-16T01:58:57.793833Z","steps":["trace[606673580] 'read index received'  (duration: 30.050059ms)","trace[606673580] 'applied index is now lower than readState.Index'  (duration: 89.301647ms)"],"step_count":2}
Apr 16 01:58:57.794397 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:57.793850Z","caller":"traceutil/trace.go:171","msg":"trace[2065852136] transaction","detail":"{read_only:false; response_revision:867; number_of_response:1; }","duration":"125.838034ms","start":"2026-04-16T01:58:57.668000Z","end":"2026-04-16T01:58:57.793838Z","steps":["trace[2065852136] 'process raft request'  (duration: 40.629323ms)","trace[2065852136] 'compare'  (duration: 85.128583ms)"],"step_count":2}
Apr 16 01:58:57.794397 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:57.793956Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"119.463677ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/whisker\" limit:1 ","response":"range_response_count:1 size:426"}
Apr 16 01:58:57.794397 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:57.793965Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"118.623643ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/calico-apiserver\" limit:1 ","response":"range_response_count:1 size:446"}
Apr 16 01:58:57.794397 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:57.793975Z","caller":"traceutil/trace.go:171","msg":"trace[2084295351] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/whisker; range_end:; response_count:1; response_revision:867; }","duration":"119.493792ms","start":"2026-04-16T01:58:57.674476Z","end":"2026-04-16T01:58:57.793969Z","steps":["trace[2084295351] 'agreement among raft nodes before linearized reading'  (duration: 119.413233ms)"],"step_count":1}
Apr 16 01:58:57.794984 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:57.793977Z","caller":"traceutil/trace.go:171","msg":"trace[1031160374] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/calico-apiserver; range_end:; response_count:1; response_revision:867; }","duration":"118.635373ms","start":"2026-04-16T01:58:57.675337Z","end":"2026-04-16T01:58:57.793973Z","steps":["trace[1031160374] 'agreement among raft nodes before linearized reading'  (duration: 118.613479ms)"],"step_count":1}
Apr 16 01:58:57.794984 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:57.793999Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"113.989258ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/calico-apiserver\" limit:1 ","response":"range_response_count:1 size:446"}
Apr 16 01:58:57.794984 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:57.794010Z","caller":"traceutil/trace.go:171","msg":"trace[476044797] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/calico-apiserver; range_end:; response_count:1; response_revision:867; }","duration":"113.999626ms","start":"2026-04-16T01:58:57.680007Z","end":"2026-04-16T01:58:57.794006Z","steps":["trace[476044797] 'agreement among raft nodes before linearized reading'  (duration: 113.981472ms)"],"step_count":1}
Apr 16 01:58:57.794984 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:57.794033Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"117.842814ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/serviceaccounts/calico-system/goldmane\" limit:1 ","response":"range_response_count:1 size:429"}
Apr 16 01:58:57.795049 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:57.794042Z","caller":"traceutil/trace.go:171","msg":"trace[1124577529] range","detail":"{range_begin:/registry/serviceaccounts/calico-system/goldmane; range_end:; response_count:1; response_revision:867; }","duration":"117.851564ms","start":"2026-04-16T01:58:57.676187Z","end":"2026-04-16T01:58:57.794039Z","steps":["trace[1124577529] 'agreement among raft nodes before linearized reading'  (duration: 117.836952ms)"],"step_count":1}
Apr 16 01:58:58.456893 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:58.456378Z","caller":"traceutil/trace.go:171","msg":"trace[2097952329] linearizableReadLoop","detail":"{readStateIndex:916; appliedIndex:914; }","duration":"108.26396ms","start":"2026-04-16T01:58:58.348099Z","end":"2026-04-16T01:58:58.456363Z","steps":["trace[2097952329] 'read index received'  (duration: 60.047165ms)","trace[2097952329] 'applied index is now lower than readState.Index'  (duration: 48.216531ms)"],"step_count":2}
Apr 16 01:58:58.456893 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:58.456453Z","caller":"traceutil/trace.go:171","msg":"trace[1729604847] transaction","detail":"{read_only:false; response_revision:886; number_of_response:1; }","duration":"109.064575ms","start":"2026-04-16T01:58:58.347379Z","end":"2026-04-16T01:58:58.456443Z","steps":["trace[1729604847] 'process raft request'  (duration: 108.942406ms)"],"step_count":1}
Apr 16 01:58:58.456893 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:58.456507Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"110.723938ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/pods/calico-system/whisker-7656565c6-gkstf\" limit:1 ","response":"range_response_count:1 size:6821"}
Apr 16 01:58:58.456893 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:58.456522Z","caller":"traceutil/trace.go:171","msg":"trace[357608706] range","detail":"{range_begin:/registry/pods/calico-system/whisker-7656565c6-gkstf; range_end:; response_count:1; response_revision:886; }","duration":"110.748779ms","start":"2026-04-16T01:58:58.345769Z","end":"2026-04-16T01:58:58.456518Z","steps":["trace[357608706] 'agreement among raft nodes before linearized reading'  (duration: 110.713168ms)"],"step_count":1}
Apr 16 01:58:58.457195 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:58.456554Z","caller":"traceutil/trace.go:171","msg":"trace[1514409434] transaction","detail":"{read_only:false; response_revision:885; number_of_response:1; }","duration":"110.463183ms","start":"2026-04-16T01:58:58.346082Z","end":"2026-04-16T01:58:58.456545Z","steps":["trace[1514409434] 'process raft request'  (duration: 62.085544ms)","trace[1514409434] 'compare'  (duration: 48.066305ms)"],"step_count":2}
Apr 16 01:58:58.457195 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:58:58.456589Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"100.31188ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/deployments/calico-system/whisker\" limit:1 ","response":"range_response_count:1 size:5379"}
Apr 16 01:58:58.457195 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:58.456613Z","caller":"traceutil/trace.go:171","msg":"trace[919721776] range","detail":"{range_begin:/registry/deployments/calico-system/whisker; range_end:; response_count:1; response_revision:886; }","duration":"100.322987ms","start":"2026-04-16T01:58:58.356273Z","end":"2026-04-16T01:58:58.456596Z","steps":["trace[919721776] 'agreement among raft nodes before linearized reading'  (duration: 100.297828ms)"],"step_count":1}
Apr 16 01:58:59.310493 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:59.310122Z","caller":"traceutil/trace.go:171","msg":"trace[1312612271] transaction","detail":"{read_only:false; response_revision:917; number_of_response:1; }","duration":"102.536629ms","start":"2026-04-16T01:58:59.207563Z","end":"2026-04-16T01:58:59.310100Z","steps":["trace[1312612271] 'process raft request'  (duration: 48.252562ms)","trace[1312612271] 'compare'  (duration: 54.173346ms)"],"step_count":2}
Apr 16 01:58:59.310493 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:59.310179Z","caller":"traceutil/trace.go:171","msg":"trace[482009225] transaction","detail":"{read_only:false; response_revision:918; number_of_response:1; }","duration":"101.767845ms","start":"2026-04-16T01:58:59.208402Z","end":"2026-04-16T01:58:59.310170Z","steps":["trace[482009225] 'process raft request'  (duration: 101.62965ms)"],"step_count":1}
Apr 16 01:58:59.310493 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:58:59.310218Z","caller":"traceutil/trace.go:171","msg":"trace[429900762] transaction","detail":"{read_only:false; response_revision:919; number_of_response:1; }","duration":"101.181944ms","start":"2026-04-16T01:58:59.209032Z","end":"2026-04-16T01:58:59.310214Z","steps":["trace[429900762] 'process raft request'  (duration: 101.046245ms)"],"step_count":1}
Apr 16 01:58:59.437950 sshd[3827]: maximum authentication attempts exceeded for root from 185.217.1.246 port 25473 ssh2 [preauth]
Apr 16 01:58:59.437950 sshd[3827]: Disconnecting authenticating user root 185.217.1.246 port 25473: Too many authentication failures [preauth]
Apr 16 01:58:59.437000 audit[3827]: USER_ERR pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:59.442466 systemd[1]: sshd@100-10.0.0.12:22-185.217.1.246:25473.service: Deactivated successfully.
Apr 16 01:58:59.446859 kernel: audit: type=1109 audit(1776304739.437:514): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:58:59.446922 kernel: audit: type=1131 audit(1776304739.441:515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-10.0.0.12:22-185.217.1.246:25473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:58:59.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-10.0.0.12:22-185.217.1.246:25473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:00.514233 systemd[1]: Started sshd@101-10.0.0.12:22-185.217.1.246:45482.service - OpenSSH per-connection server daemon (185.217.1.246:45482).
Apr 16 01:59:00.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-10.0.0.12:22-185.217.1.246:45482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:00.520629 kernel: audit: type=1130 audit(1776304740.513:516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-10.0.0.12:22-185.217.1.246:45482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:02.470509 sshd[3833]: maximum authentication attempts exceeded for root from 185.217.1.246 port 45482 ssh2 [preauth]
Apr 16 01:59:02.470509 sshd[3833]: Disconnecting authenticating user root 185.217.1.246 port 45482: Too many authentication failures [preauth]
Apr 16 01:59:02.469000 audit[3833]: USER_ERR pid=3833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:02.473041 systemd[1]: sshd@101-10.0.0.12:22-185.217.1.246:45482.service: Deactivated successfully.
Apr 16 01:59:02.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-10.0.0.12:22-185.217.1.246:45482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:02.480979 kernel: audit: type=1109 audit(1776304742.469:517): pid=3833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:02.481036 kernel: audit: type=1131 audit(1776304742.471:518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-10.0.0.12:22-185.217.1.246:45482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:03.128106 systemd[1]: Started sshd@102-10.0.0.12:22-185.217.1.246:26601.service - OpenSSH per-connection server daemon (185.217.1.246:26601).
Apr 16 01:59:03.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-10.0.0.12:22-185.217.1.246:26601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:03.134624 kernel: audit: type=1130 audit(1776304743.126:519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-10.0.0.12:22-185.217.1.246:26601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.087141 sshd[3839]: maximum authentication attempts exceeded for root from 185.217.1.246 port 26601 ssh2 [preauth]
Apr 16 01:59:04.087141 sshd[3839]: Disconnecting authenticating user root 185.217.1.246 port 26601: Too many authentication failures [preauth]
Apr 16 01:59:04.086000 audit[3839]: USER_ERR pid=3839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:04.089830 systemd[1]: sshd@102-10.0.0.12:22-185.217.1.246:26601.service: Deactivated successfully.
Apr 16 01:59:04.098726 kernel: audit: type=1109 audit(1776304744.086:520): pid=3839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:04.098792 kernel: audit: type=1131 audit(1776304744.086:521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-10.0.0.12:22-185.217.1.246:26601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-10.0.0.12:22-185.217.1.246:26601 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-10.0.0.12:22-185.217.1.246:33020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.162087 systemd[1]: Started sshd@103-10.0.0.12:22-185.217.1.246:33020.service - OpenSSH per-connection server daemon (185.217.1.246:33020).
Apr 16 01:59:04.169618 kernel: audit: type=1130 audit(1776304744.160:522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-10.0.0.12:22-185.217.1.246:33020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.676691 sshd[3845]: maximum authentication attempts exceeded for root from 185.217.1.246 port 33020 ssh2 [preauth]
Apr 16 01:59:04.676691 sshd[3845]: Disconnecting authenticating user root 185.217.1.246 port 33020: Too many authentication failures [preauth]
Apr 16 01:59:04.675000 audit[3845]: USER_ERR pid=3845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:04.678455 systemd[1]: sshd@103-10.0.0.12:22-185.217.1.246:33020.service: Deactivated successfully.
Apr 16 01:59:04.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-10.0.0.12:22-185.217.1.246:33020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.686376 kernel: audit: type=1109 audit(1776304744.675:523): pid=3845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:04.686412 kernel: audit: type=1131 audit(1776304744.677:524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-10.0.0.12:22-185.217.1.246:33020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.783182 systemd[1]: Started sshd@104-10.0.0.12:22-185.217.1.246:1111.service - OpenSSH per-connection server daemon (185.217.1.246:1111).
Apr 16 01:59:04.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-10.0.0.12:22-185.217.1.246:1111 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:04.789627 kernel: audit: type=1130 audit(1776304744.781:525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-10.0.0.12:22-185.217.1.246:1111 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:05.770701 sshd[3851]: maximum authentication attempts exceeded for root from 185.217.1.246 port 1111 ssh2 [preauth]
Apr 16 01:59:05.770701 sshd[3851]: Disconnecting authenticating user root 185.217.1.246 port 1111: Too many authentication failures [preauth]
Apr 16 01:59:05.770000 audit[3851]: USER_ERR pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:05.775377 systemd[1]: sshd@104-10.0.0.12:22-185.217.1.246:1111.service: Deactivated successfully.
Apr 16 01:59:05.780507 kernel: audit: type=1109 audit(1776304745.770:526): pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:05.780572 kernel: audit: type=1131 audit(1776304745.775:527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-10.0.0.12:22-185.217.1.246:1111 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:05.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-10.0.0.12:22-185.217.1.246:1111 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:05.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-10.0.0.12:22-185.217.1.246:38011 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:05.861007 systemd[1]: Started sshd@105-10.0.0.12:22-185.217.1.246:38011.service - OpenSSH per-connection server daemon (185.217.1.246:38011).
Apr 16 01:59:05.865632 kernel: audit: type=1130 audit(1776304745.860:528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-10.0.0.12:22-185.217.1.246:38011 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:06.523246 sshd[3857]: maximum authentication attempts exceeded for root from 185.217.1.246 port 38011 ssh2 [preauth]
Apr 16 01:59:06.523246 sshd[3857]: Disconnecting authenticating user root 185.217.1.246 port 38011: Too many authentication failures [preauth]
Apr 16 01:59:06.522000 audit[3857]: USER_ERR pid=3857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:06.527372 systemd[1]: sshd@105-10.0.0.12:22-185.217.1.246:38011.service: Deactivated successfully.
Apr 16 01:59:06.528636 kernel: audit: type=1109 audit(1776304746.522:529): pid=3857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:06.532651 kernel: audit: type=1131 audit(1776304746.527:530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-10.0.0.12:22-185.217.1.246:38011 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:06.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-10.0.0.12:22-185.217.1.246:38011 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:06.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-10.0.0.12:22-185.217.1.246:16926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:06.935495 systemd[1]: Started sshd@106-10.0.0.12:22-185.217.1.246:16926.service - OpenSSH per-connection server daemon (185.217.1.246:16926).
Apr 16 01:59:06.942632 kernel: audit: type=1130 audit(1776304746.935:531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-10.0.0.12:22-185.217.1.246:16926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:08.237057 sshd[3863]: maximum authentication attempts exceeded for root from 185.217.1.246 port 16926 ssh2 [preauth]
Apr 16 01:59:08.237057 sshd[3863]: Disconnecting authenticating user root 185.217.1.246 port 16926: Too many authentication failures [preauth]
Apr 16 01:59:08.236000 audit[3863]: USER_ERR pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:08.239567 systemd[1]: sshd@106-10.0.0.12:22-185.217.1.246:16926.service: Deactivated successfully.
Apr 16 01:59:08.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-10.0.0.12:22-185.217.1.246:16926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:08.246860 kernel: audit: type=1109 audit(1776304748.236:532): pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:08.246904 kernel: audit: type=1131 audit(1776304748.239:533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-10.0.0.12:22-185.217.1.246:16926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:08.573955 systemd[1]: Started sshd@107-10.0.0.12:22-185.217.1.246:62557.service - OpenSSH per-connection server daemon (185.217.1.246:62557).
Apr 16 01:59:08.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-10.0.0.12:22-185.217.1.246:62557 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:08.580625 kernel: audit: type=1130 audit(1776304748.573:534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-10.0.0.12:22-185.217.1.246:62557 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:11.665048 sshd[3869]: maximum authentication attempts exceeded for root from 185.217.1.246 port 62557 ssh2 [preauth]
Apr 16 01:59:11.665048 sshd[3869]: Disconnecting authenticating user root 185.217.1.246 port 62557: Too many authentication failures [preauth]
Apr 16 01:59:11.664000 audit[3869]: USER_ERR pid=3869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:11.668159 systemd[1]: sshd@107-10.0.0.12:22-185.217.1.246:62557.service: Deactivated successfully.
Apr 16 01:59:11.673638 kernel: audit: type=1109 audit(1776304751.664:535): pid=3869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:11.673714 kernel: audit: type=1131 audit(1776304751.667:536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-10.0.0.12:22-185.217.1.246:62557 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:11.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-10.0.0.12:22-185.217.1.246:62557 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:12.540282 systemd[1]: Started sshd@108-10.0.0.12:22-185.217.1.246:31179.service - OpenSSH per-connection server daemon (185.217.1.246:31179).
Apr 16 01:59:12.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-10.0.0.12:22-185.217.1.246:31179 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:12.547719 kernel: audit: type=1130 audit(1776304752.539:537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-10.0.0.12:22-185.217.1.246:31179 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:13.884139 sshd[3875]: maximum authentication attempts exceeded for root from 185.217.1.246 port 31179 ssh2 [preauth]
Apr 16 01:59:13.884139 sshd[3875]: Disconnecting authenticating user root 185.217.1.246 port 31179: Too many authentication failures [preauth]
Apr 16 01:59:13.884000 audit[3875]: USER_ERR pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:13.886220 systemd[1]: sshd@108-10.0.0.12:22-185.217.1.246:31179.service: Deactivated successfully.
Apr 16 01:59:13.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-10.0.0.12:22-185.217.1.246:31179 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:13.893702 kernel: audit: type=1109 audit(1776304753.884:538): pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:13.893738 kernel: audit: type=1131 audit(1776304753.884:539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-10.0.0.12:22-185.217.1.246:31179 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:14.297796 systemd[1]: Started sshd@109-10.0.0.12:22-185.217.1.246:48314.service - OpenSSH per-connection server daemon (185.217.1.246:48314).
Apr 16 01:59:14.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-10.0.0.12:22-185.217.1.246:48314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:14.304644 kernel: audit: type=1130 audit(1776304754.297:540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-10.0.0.12:22-185.217.1.246:48314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:14.774835 sshd[3881]: maximum authentication attempts exceeded for root from 185.217.1.246 port 48314 ssh2 [preauth]
Apr 16 01:59:14.774835 sshd[3881]: Disconnecting authenticating user root 185.217.1.246 port 48314: Too many authentication failures [preauth]
Apr 16 01:59:14.774000 audit[3881]: USER_ERR pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:14.776568 systemd[1]: sshd@109-10.0.0.12:22-185.217.1.246:48314.service: Deactivated successfully.
Apr 16 01:59:14.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-10.0.0.12:22-185.217.1.246:48314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:14.785049 kernel: audit: type=1109 audit(1776304754.774:541): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:14.785092 kernel: audit: type=1131 audit(1776304754.776:542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-10.0.0.12:22-185.217.1.246:48314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:14.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-10.0.0.12:22-185.217.1.246:18542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:14.949989 systemd[1]: Started sshd@110-10.0.0.12:22-185.217.1.246:18542.service - OpenSSH per-connection server daemon (185.217.1.246:18542).
Apr 16 01:59:14.955769 kernel: audit: type=1130 audit(1776304754.949:543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-10.0.0.12:22-185.217.1.246:18542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:15.308285 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:15.307963Z","caller":"traceutil/trace.go:171","msg":"trace[1623327727] transaction","detail":"{read_only:false; response_revision:1043; number_of_response:1; }","duration":"103.916229ms","start":"2026-04-16T01:59:15.204032Z","end":"2026-04-16T01:59:15.307948Z","steps":["trace[1623327727] 'process raft request'  (duration: 52.911167ms)","trace[1623327727] 'compare'  (duration: 50.788815ms)"],"step_count":2}
Apr 16 01:59:15.308741 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:15.308043Z","caller":"traceutil/trace.go:171","msg":"trace[560040609] transaction","detail":"{read_only:false; response_revision:1044; number_of_response:1; }","duration":"104.004551ms","start":"2026-04-16T01:59:15.204033Z","end":"2026-04-16T01:59:15.308038Z","steps":["trace[560040609] 'process raft request'  (duration: 103.76149ms)"],"step_count":1}
Apr 16 01:59:15.308741 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:15.308094Z","caller":"traceutil/trace.go:171","msg":"trace[1492595974] transaction","detail":"{read_only:false; response_revision:1045; number_of_response:1; }","duration":"102.677237ms","start":"2026-04-16T01:59:15.205412Z","end":"2026-04-16T01:59:15.308089Z","steps":["trace[1492595974] 'process raft request'  (duration: 102.404052ms)"],"step_count":1}
Apr 16 01:59:15.308741 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:15.308116Z","caller":"traceutil/trace.go:171","msg":"trace[2103541293] transaction","detail":"{read_only:false; number_of_response:0; response_revision:1045; }","duration":"102.385041ms","start":"2026-04-16T01:59:15.205728Z","end":"2026-04-16T01:59:15.308113Z","steps":["trace[2103541293] 'process raft request'  (duration: 102.103282ms)"],"step_count":1}
Apr 16 01:59:15.646101 sshd[3887]: maximum authentication attempts exceeded for root from 185.217.1.246 port 18542 ssh2 [preauth]
Apr 16 01:59:15.646101 sshd[3887]: Disconnecting authenticating user root 185.217.1.246 port 18542: Too many authentication failures [preauth]
Apr 16 01:59:15.646000 audit[3887]: USER_ERR pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:15.652002 systemd[1]: sshd@110-10.0.0.12:22-185.217.1.246:18542.service: Deactivated successfully.
Apr 16 01:59:15.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-10.0.0.12:22-185.217.1.246:18542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:15.652621 kernel: audit: type=1109 audit(1776304755.646:544): pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:16.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-10.0.0.12:22-185.217.1.246:5931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:16.499512 systemd[1]: Started sshd@111-10.0.0.12:22-185.217.1.246:5931.service - OpenSSH per-connection server daemon (185.217.1.246:5931).
Apr 16 01:59:17.507961 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:17.507708Z","caller":"etcdserver/v3_server.go:920","msg":"waiting for ReadIndex response took too long, retrying","sent-request-id":7587894206183973330,"retry-timeout":"500ms"}
Apr 16 01:59:17.723638 sshd[3893]: maximum authentication attempts exceeded for root from 185.217.1.246 port 5931 ssh2 [preauth]
Apr 16 01:59:17.723638 sshd[3893]: Disconnecting authenticating user root 185.217.1.246 port 5931: Too many authentication failures [preauth]
Apr 16 01:59:17.729521 kernel: kauditd_printk_skb: 2 callbacks suppressed
Apr 16 01:59:17.729620 kernel: audit: type=1109 audit(1776304757.723:547): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:17.723000 audit[3893]: USER_ERR pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:17.726849 systemd[1]: sshd@111-10.0.0.12:22-185.217.1.246:5931.service: Deactivated successfully.
Apr 16 01:59:17.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-10.0.0.12:22-185.217.1.246:5931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:17.734645 kernel: audit: type=1131 audit(1776304757.727:548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-10.0.0.12:22-185.217.1.246:5931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:18.008918 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:18.008650Z","caller":"etcdserver/v3_server.go:920","msg":"waiting for ReadIndex response took too long, retrying","sent-request-id":7587894206183973330,"retry-timeout":"500ms"}
Apr 16 01:59:18.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-10.0.0.12:22-185.217.1.246:24398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:18.139210 systemd[1]: Started sshd@112-10.0.0.12:22-185.217.1.246:24398.service - OpenSSH per-connection server daemon (185.217.1.246:24398).
Apr 16 01:59:18.144631 kernel: audit: type=1130 audit(1776304758.138:549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-10.0.0.12:22-185.217.1.246:24398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:18.345926 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:18.345538Z","caller":"wal/wal.go:805","msg":"slow fdatasync","took":"1.50822613s","expected-duration":"1s"}
Apr 16 01:59:18.346443 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:18.346087Z","caller":"traceutil/trace.go:171","msg":"trace[194296752] transaction","detail":"{read_only:false; response_revision:1053; number_of_response:1; }","duration":"1.508855107s","start":"2026-04-16T01:59:16.837215Z","end":"2026-04-16T01:59:18.346070Z","steps":["trace[194296752] 'process raft request'  (duration: 1.508485242s)"],"step_count":1}
Apr 16 01:59:18.346443 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:18.346172Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:16.837200Z","time spent":"1.508916547s","remote":"10.0.0.14:39712","response type":"/etcdserverpb.KV/Txn","request count":1,"request size":689,"response count":0,"response size":40,"request content":"compare:<target:MOD key:\"/registry/leases/kube-system/apiserver-za32o3qmiicfnbtbkqs66nhwl4\" mod_revision:959 > success:<request_put:<key:\"/registry/leases/kube-system/apiserver-za32o3qmiicfnbtbkqs66nhwl4\" value_size:616 >> failure:<request_range:<key:\"/registry/leases/kube-system/apiserver-za32o3qmiicfnbtbkqs66nhwl4\" > >"}
Apr 16 01:59:19.797175 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.796825Z","caller":"wal/wal.go:805","msg":"slow fdatasync","took":"1.450888185s","expected-duration":"1s"}
Apr 16 01:59:19.798098 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.797296Z","caller":"traceutil/trace.go:171","msg":"trace[308948196] linearizableReadLoop","detail":"{readStateIndex:1221; appliedIndex:1220; }","duration":"2.79023227s","start":"2026-04-16T01:59:17.007049Z","end":"2026-04-16T01:59:19.797281Z","steps":["trace[308948196] 'read index received'  (duration: 1.339241675s)","trace[308948196] 'applied index is now lower than readState.Index'  (duration: 1.450990098s)"],"step_count":2}
Apr 16 01:59:19.798098 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.797386Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:17.573528Z","time spent":"2.223853581s","remote":"10.0.0.14:39370","response type":"/etcdserverpb.Lease/LeaseGrant","request count":-1,"request size":-1,"response count":-1,"response size":-1,"request content":""}
Apr 16 01:59:19.798098 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.797591Z","caller":"traceutil/trace.go:171","msg":"trace[1157258936] transaction","detail":"{read_only:false; response_revision:1054; number_of_response:1; }","duration":"1.691902379s","start":"2026-04-16T01:59:18.105680Z","end":"2026-04-16T01:59:19.797582Z","steps":["trace[1157258936] 'process raft request'  (duration: 1.691486873s)"],"step_count":1}
Apr 16 01:59:19.798098 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.797709Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.105664Z","time spent":"1.691971733s","remote":"10.0.0.14:39712","response type":"/etcdserverpb.KV/Txn","request count":1,"request size":479,"response count":0,"response size":40,"request content":"compare:<target:MOD key:\"/registry/leases/kube-system/kube-scheduler\" mod_revision:1047 > success:<request_put:<key:\"/registry/leases/kube-system/kube-scheduler\" value_size:428 >> failure:<request_range:<key:\"/registry/leases/kube-system/kube-scheduler\" > >"}
Apr 16 01:59:19.798368 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.797789Z","caller":"traceutil/trace.go:171","msg":"trace[140862743] transaction","detail":"{read_only:false; response_revision:1055; number_of_response:1; }","duration":"1.684721084s","start":"2026-04-16T01:59:18.113049Z","end":"2026-04-16T01:59:19.797770Z","steps":["trace[140862743] 'process raft request'  (duration: 1.68420188s)"],"step_count":1}
Apr 16 01:59:19.798368 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.797825Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.113037Z","time spent":"1.684771614s","remote":"10.0.0.14:39712","response type":"/etcdserverpb.KV/Txn","request count":1,"request size":479,"response count":0,"response size":40,"request content":"compare:<target:MOD key:\"/registry/leases/tigera-operator/operator-lock\" mod_revision:1048 > success:<request_put:<key:\"/registry/leases/tigera-operator/operator-lock\" value_size:425 >> failure:<request_range:<key:\"/registry/leases/tigera-operator/operator-lock\" > >"}
Apr 16 01:59:19.798368 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.797902Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.790857107s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/daemonsets/calico-system/calico-node\" limit:1 ","response":"range_response_count:1 size:13040"}
Apr 16 01:59:19.798368 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.797929Z","caller":"traceutil/trace.go:171","msg":"trace[1297187315] range","detail":"{range_begin:/registry/daemonsets/calico-system/calico-node; range_end:; response_count:1; response_revision:1055; }","duration":"2.790883435s","start":"2026-04-16T01:59:17.007040Z","end":"2026-04-16T01:59:19.797924Z","steps":["trace[1297187315] 'agreement among raft nodes before linearized reading'  (duration: 2.790835743s)"],"step_count":1}
Apr 16 01:59:19.798517 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.797968Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:17.007012Z","time spent":"2.790950817s","remote":"10.0.0.14:40160","response type":"/etcdserverpb.KV/Range","request count":0,"request size":50,"response count":1,"response size":13064,"request content":"key:\"/registry/daemonsets/calico-system/calico-node\" limit:1 "}
Apr 16 01:59:19.798796 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798377Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.597406829s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/clusterroles\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.798796 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.798411Z","caller":"traceutil/trace.go:171","msg":"trace[18214298] range","detail":"{range_begin:/registry/clusterroles; range_end:; response_count:0; response_revision:1056; }","duration":"2.597443347s","start":"2026-04-16T01:59:17.200958Z","end":"2026-04-16T01:59:19.798401Z","steps":["trace[18214298] 'agreement among raft nodes before linearized reading'  (duration: 2.597377584s)"],"step_count":1}
Apr 16 01:59:19.798796 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798431Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:17.200930Z","time spent":"2.59749493s","remote":"10.0.0.14:39924","response type":"/etcdserverpb.KV/Range","request count":0,"request size":26,"response count":0,"response size":29,"request content":"key:\"/registry/clusterroles\" limit:1 "}
Apr 16 01:59:19.798796 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.798516Z","caller":"traceutil/trace.go:171","msg":"trace[732712450] transaction","detail":"{read_only:false; response_revision:1056; number_of_response:1; }","duration":"1.42502827s","start":"2026-04-16T01:59:18.373482Z","end":"2026-04-16T01:59:19.798511Z","steps":["trace[732712450] 'process raft request'  (duration: 1.424802817s)"],"step_count":1}
Apr 16 01:59:19.799038 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798739Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.373467Z","time spent":"1.425060153s","remote":"10.0.0.14:39712","response type":"/etcdserverpb.KV/Txn","request count":1,"request size":507,"response count":0,"response size":40,"request content":"compare:<target:MOD key:\"/registry/leases/kube-system/kube-controller-manager\" mod_revision:1049 > success:<request_put:<key:\"/registry/leases/kube-system/kube-controller-manager\" value_size:447 >> failure:<request_range:<key:\"/registry/leases/kube-system/kube-controller-manager\" > >"}
Apr 16 01:59:19.799038 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798941Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"2.095280133s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/crd.projectcalico.org/clusterinformations/default\" limit:1 ","response":"range_response_count:1 size:886"}
Apr 16 01:59:19.799348 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799216Z","caller":"traceutil/trace.go:171","msg":"trace[2043818017] range","detail":"{range_begin:/registry/crd.projectcalico.org/clusterinformations/default; range_end:; response_count:1; response_revision:1056; }","duration":"2.095547734s","start":"2026-04-16T01:59:17.703658Z","end":"2026-04-16T01:59:19.799206Z","steps":["trace[2043818017] 'agreement among raft nodes before linearized reading'  (duration: 2.095270792s)"],"step_count":1}
Apr 16 01:59:19.799529 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799333Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:17.703646Z","time spent":"2.095604009s","remote":"10.0.0.14:53826","response type":"/etcdserverpb.KV/Range","request count":0,"request size":63,"response count":1,"response size":910,"request content":"key:\"/registry/crd.projectcalico.org/clusterinformations/default\" limit:1 "}
Apr 16 01:59:19.799813 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798775Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.681119092s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/poddisruptionbudgets\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.799813 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799498Z","caller":"traceutil/trace.go:171","msg":"trace[2654236] range","detail":"{range_begin:/registry/poddisruptionbudgets; range_end:; response_count:0; response_revision:1056; }","duration":"1.681825314s","start":"2026-04-16T01:59:18.117650Z","end":"2026-04-16T01:59:19.799475Z","steps":["trace[2654236] 'agreement among raft nodes before linearized reading'  (duration: 1.681108867s)"],"step_count":1}
Apr 16 01:59:19.799813 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799572Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.117646Z","time spent":"1.681871227s","remote":"10.0.0.14:39864","response type":"/etcdserverpb.KV/Range","request count":0,"request size":34,"response count":0,"response size":29,"request content":"key:\"/registry/poddisruptionbudgets\" limit:1 "}
Apr 16 01:59:19.800147 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798797Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"672.20072ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/namespaces\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.800147 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799687Z","caller":"traceutil/trace.go:171","msg":"trace[2015378084] range","detail":"{range_begin:/registry/namespaces; range_end:; response_count:0; response_revision:1056; }","duration":"673.088416ms","start":"2026-04-16T01:59:19.126593Z","end":"2026-04-16T01:59:19.799682Z","steps":["trace[2015378084] 'agreement among raft nodes before linearized reading'  (duration: 672.194095ms)"],"step_count":1}
Apr 16 01:59:19.800147 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799706Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:19.126580Z","time spent":"673.118724ms","remote":"10.0.0.14:39462","response type":"/etcdserverpb.KV/Range","request count":0,"request size":24,"response count":0,"response size":29,"request content":"key:\"/registry/namespaces\" limit:1 "}
Apr 16 01:59:19.800147 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798815Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"808.373428ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/horizontalpodautoscalers\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.800147 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799725Z","caller":"traceutil/trace.go:171","msg":"trace[485161208] range","detail":"{range_begin:/registry/horizontalpodautoscalers; range_end:; response_count:0; response_revision:1056; }","duration":"809.28131ms","start":"2026-04-16T01:59:18.990438Z","end":"2026-04-16T01:59:19.799719Z","steps":["trace[485161208] 'agreement among raft nodes before linearized reading'  (duration: 808.368247ms)"],"step_count":1}
Apr 16 01:59:19.800290 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799744Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.990423Z","time spent":"809.314796ms","remote":"10.0.0.14:39660","response type":"/etcdserverpb.KV/Range","request count":0,"request size":38,"response count":0,"response size":29,"request content":"key:\"/registry/horizontalpodautoscalers\" limit:1 "}
Apr 16 01:59:19.800290 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798828Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"972.60379ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/pods\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.800290 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799767Z","caller":"traceutil/trace.go:171","msg":"trace[1743367490] range","detail":"{range_begin:/registry/pods; range_end:; response_count:0; response_revision:1056; }","duration":"973.54145ms","start":"2026-04-16T01:59:18.826222Z","end":"2026-04-16T01:59:19.799764Z","steps":["trace[1743367490] 'agreement among raft nodes before linearized reading'  (duration: 972.59977ms)"],"step_count":1}
Apr 16 01:59:19.800290 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799788Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.826209Z","time spent":"973.571345ms","remote":"10.0.0.14:39576","response type":"/etcdserverpb.KV/Range","request count":0,"request size":18,"response count":0,"response size":29,"request content":"key:\"/registry/pods\" limit:1 "}
Apr 16 01:59:19.800290 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798846Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.369167193s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/masterleases/10.0.0.14\" limit:1 ","response":"range_response_count:1 size:125"}
Apr 16 01:59:19.800417 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799815Z","caller":"traceutil/trace.go:171","msg":"trace[1189246211] range","detail":"{range_begin:/registry/masterleases/10.0.0.14; range_end:; response_count:1; response_revision:1056; }","duration":"1.37013277s","start":"2026-04-16T01:59:18.429677Z","end":"2026-04-16T01:59:19.799810Z","steps":["trace[1189246211] 'agreement among raft nodes before linearized reading'  (duration: 1.369156489s)"],"step_count":1}
Apr 16 01:59:19.800417 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799845Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.429668Z","time spent":"1.37015654s","remote":"10.0.0.14:39294","response type":"/etcdserverpb.KV/Range","request count":0,"request size":36,"response count":1,"response size":149,"request content":"key:\"/registry/masterleases/10.0.0.14\" limit:1 "}
Apr 16 01:59:19.800417 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798858Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.612724185s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/health\" ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.800417 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799871Z","caller":"traceutil/trace.go:171","msg":"trace[696083682] range","detail":"{range_begin:/registry/health; range_end:; response_count:0; response_revision:1056; }","duration":"1.613735498s","start":"2026-04-16T01:59:18.186131Z","end":"2026-04-16T01:59:19.799867Z","steps":["trace[696083682] 'agreement among raft nodes before linearized reading'  (duration: 1.612720633s)"],"step_count":1}
Apr 16 01:59:19.800417 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799883Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.186121Z","time spent":"1.613758692s","remote":"10.0.0.14:39222","response type":"/etcdserverpb.KV/Range","request count":0,"request size":18,"response count":0,"response size":29,"request content":"key:\"/registry/health\" "}
Apr 16 01:59:19.800532 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798874Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.844465082s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/rolebindings\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.800532 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799904Z","caller":"traceutil/trace.go:171","msg":"trace[262875446] range","detail":"{range_begin:/registry/rolebindings; range_end:; response_count:0; response_revision:1056; }","duration":"1.845494738s","start":"2026-04-16T01:59:17.954406Z","end":"2026-04-16T01:59:19.799901Z","steps":["trace[262875446] 'agreement among raft nodes before linearized reading'  (duration: 1.844460223s)"],"step_count":1}
Apr 16 01:59:19.800532 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799927Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:17.954388Z","time spent":"1.845534323s","remote":"10.0.0.14:39908","response type":"/etcdserverpb.KV/Range","request count":0,"request size":26,"response count":0,"response size":29,"request content":"key:\"/registry/rolebindings\" limit:1 "}
Apr 16 01:59:19.800532 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798892Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.689355456s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/pods/calico-system/calico-kube-controllers-5d99f49fc-h5lhp\" limit:1 ","response":"range_response_count:1 size:6656"}
Apr 16 01:59:19.800684 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.799956Z","caller":"traceutil/trace.go:171","msg":"trace[28143379] range","detail":"{range_begin:/registry/pods/calico-system/calico-kube-controllers-5d99f49fc-h5lhp; range_end:; response_count:1; response_revision:1056; }","duration":"1.690418007s","start":"2026-04-16T01:59:18.109534Z","end":"2026-04-16T01:59:19.799952Z","steps":["trace[28143379] 'agreement among raft nodes before linearized reading'  (duration: 1.689346082s)"],"step_count":1}
Apr 16 01:59:19.800684 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.799970Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.109529Z","time spent":"1.690436605s","remote":"10.0.0.14:39576","response type":"/etcdserverpb.KV/Range","request count":0,"request size":72,"response count":1,"response size":6680,"request content":"key:\"/registry/pods/calico-system/calico-kube-controllers-5d99f49fc-h5lhp\" limit:1 "}
Apr 16 01:59:19.800684 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798905Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.690051145s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/horizontalpodautoscalers\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.800684 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.800005Z","caller":"traceutil/trace.go:171","msg":"trace[677405056] range","detail":"{range_begin:/registry/horizontalpodautoscalers; range_end:; response_count:0; response_revision:1056; }","duration":"1.691135259s","start":"2026-04-16T01:59:18.108851Z","end":"2026-04-16T01:59:19.799986Z","steps":["trace[677405056] 'agreement among raft nodes before linearized reading'  (duration: 1.69004763s)"],"step_count":1}
Apr 16 01:59:19.800807 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.800017Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:18.108842Z","time spent":"1.691171082s","remote":"10.0.0.14:39660","response type":"/etcdserverpb.KV/Range","request count":0,"request size":38,"response count":0,"response size":29,"request content":"key:\"/registry/horizontalpodautoscalers\" limit:1 "}
Apr 16 01:59:19.800807 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.798921Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"1.899353363s","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/daemonsets\" limit:1 ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.800807 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.800038Z","caller":"traceutil/trace.go:171","msg":"trace[2052804354] range","detail":"{range_begin:/registry/daemonsets; range_end:; response_count:0; response_revision:1056; }","duration":"1.900468564s","start":"2026-04-16T01:59:17.899565Z","end":"2026-04-16T01:59:19.800034Z","steps":["trace[2052804354] 'agreement among raft nodes before linearized reading'  (duration: 1.899348899s)"],"step_count":1}
Apr 16 01:59:19.800807 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.800048Z","caller":"v3rpc/interceptor.go:197","msg":"request stats","start time":"2026-04-16T01:59:17.899553Z","time spent":"1.900492367s","remote":"10.0.0.14:40160","response type":"/etcdserverpb.KV/Range","request count":0,"request size":24,"response count":0,"response size":29,"request content":"key:\"/registry/daemonsets\" limit:1 "}
Apr 16 01:59:19.913570 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.913385Z","caller":"traceutil/trace.go:171","msg":"trace[1841679544] transaction","detail":"{read_only:false; response_revision:1057; number_of_response:1; }","duration":"114.195035ms","start":"2026-04-16T01:59:19.799177Z","end":"2026-04-16T01:59:19.913372Z","steps":["trace[1841679544] 'process raft request'  (duration: 43.910717ms)","trace[1841679544] 'compare'  (duration: 70.137492ms)"],"step_count":2}
Apr 16 01:59:19.914053 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.913402Z","caller":"traceutil/trace.go:171","msg":"trace[330079907] transaction","detail":"{read_only:false; number_of_response:0; response_revision:1057; }","duration":"109.521493ms","start":"2026-04-16T01:59:19.803875Z","end":"2026-04-16T01:59:19.913396Z","steps":["trace[330079907] 'process raft request'  (duration: 109.475376ms)"],"step_count":1}
Apr 16 01:59:19.914053 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.913782Z","caller":"traceutil/trace.go:171","msg":"trace[319028323] transaction","detail":"{read_only:false; response_revision:1058; number_of_response:1; }","duration":"107.28183ms","start":"2026-04-16T01:59:19.806495Z","end":"2026-04-16T01:59:19.913776Z","steps":["trace[319028323] 'process raft request'  (duration: 106.877668ms)"],"step_count":1}
Apr 16 01:59:19.914053 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.913418Z","caller":"traceutil/trace.go:171","msg":"trace[538312465] linearizableReadLoop","detail":"{readStateIndex:1225; appliedIndex:1224; }","duration":"112.044998ms","start":"2026-04-16T01:59:19.801368Z","end":"2026-04-16T01:59:19.913413Z","steps":["trace[538312465] 'read index received'  (duration: 41.73729ms)","trace[538312465] 'applied index is now lower than readState.Index'  (duration: 70.307411ms)"],"step_count":2}
Apr 16 01:59:19.914053 etcd-wrapper[2805]: {"level":"warn","ts":"2026-04-16T01:59:19.913500Z","caller":"etcdserver/util.go:170","msg":"apply request took too long","took":"112.100195ms","expected-duration":"100ms","prefix":"read-only range ","request":"key:\"/registry/health\" ","response":"range_response_count:0 size:5"}
Apr 16 01:59:19.914053 etcd-wrapper[2805]: {"level":"info","ts":"2026-04-16T01:59:19.913848Z","caller":"traceutil/trace.go:171","msg":"trace[169373376] range","detail":"{range_begin:/registry/health; range_end:; response_count:0; response_revision:1057; }","duration":"112.483713ms","start":"2026-04-16T01:59:19.801357Z","end":"2026-04-16T01:59:19.913841Z","steps":["trace[169373376] 'agreement among raft nodes before linearized reading'  (duration: 112.067508ms)"],"step_count":1}
Apr 16 01:59:19.916659 sshd[3899]: maximum authentication attempts exceeded for root from 185.217.1.246 port 24398 ssh2 [preauth]
Apr 16 01:59:19.916659 sshd[3899]: Disconnecting authenticating user root 185.217.1.246 port 24398: Too many authentication failures [preauth]
Apr 16 01:59:19.915000 audit[3899]: USER_ERR pid=3899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:19.921806 systemd[1]: sshd@112-10.0.0.12:22-185.217.1.246:24398.service: Deactivated successfully.
Apr 16 01:59:19.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-10.0.0.12:22-185.217.1.246:24398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:19.927310 kernel: audit: type=1109 audit(1776304759.915:550): pid=3899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:19.927385 kernel: audit: type=1131 audit(1776304759.920:551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-10.0.0.12:22-185.217.1.246:24398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:21.583360 systemd[1]: Started sshd@113-10.0.0.12:22-185.217.1.246:64651.service - OpenSSH per-connection server daemon (185.217.1.246:64651).
Apr 16 01:59:21.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-10.0.0.12:22-185.217.1.246:64651 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:21.590629 kernel: audit: type=1130 audit(1776304761.582:552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-10.0.0.12:22-185.217.1.246:64651 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:26.508291 sshd[3905]: maximum authentication attempts exceeded for root from 185.217.1.246 port 64651 ssh2 [preauth]
Apr 16 01:59:26.508291 sshd[3905]: Disconnecting authenticating user root 185.217.1.246 port 64651: Too many authentication failures [preauth]
Apr 16 01:59:26.507000 audit[3905]: USER_ERR pid=3905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:26.513399 systemd[1]: sshd@113-10.0.0.12:22-185.217.1.246:64651.service: Deactivated successfully.
Apr 16 01:59:26.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-10.0.0.12:22-185.217.1.246:64651 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:26.518352 kernel: audit: type=1109 audit(1776304766.507:553): pid=3905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:26.518409 kernel: audit: type=1131 audit(1776304766.512:554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-10.0.0.12:22-185.217.1.246:64651 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:26.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-10.0.0.12:22-185.217.1.246:18727 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:26.605020 systemd[1]: Started sshd@114-10.0.0.12:22-185.217.1.246:18727.service - OpenSSH per-connection server daemon (185.217.1.246:18727).
Apr 16 01:59:26.611634 kernel: audit: type=1130 audit(1776304766.603:555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-10.0.0.12:22-185.217.1.246:18727 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:28.751090 sshd[3911]: maximum authentication attempts exceeded for root from 185.217.1.246 port 18727 ssh2 [preauth]
Apr 16 01:59:28.751090 sshd[3911]: Disconnecting authenticating user root 185.217.1.246 port 18727: Too many authentication failures [preauth]
Apr 16 01:59:28.750000 audit[3911]: USER_ERR pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:28.754540 systemd[1]: sshd@114-10.0.0.12:22-185.217.1.246:18727.service: Deactivated successfully.
Apr 16 01:59:28.760310 kernel: audit: type=1109 audit(1776304768.750:556): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:28.760373 kernel: audit: type=1131 audit(1776304768.753:557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-10.0.0.12:22-185.217.1.246:18727 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:28.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-10.0.0.12:22-185.217.1.246:18727 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:28.917048 systemd[1]: Started sshd@115-10.0.0.12:22-185.217.1.246:62167.service - OpenSSH per-connection server daemon (185.217.1.246:62167).
Apr 16 01:59:28.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-10.0.0.12:22-185.217.1.246:62167 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:28.922627 kernel: audit: type=1130 audit(1776304768.916:558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-10.0.0.12:22-185.217.1.246:62167 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:33.102389 sshd[3917]: maximum authentication attempts exceeded for root from 185.217.1.246 port 62167 ssh2 [preauth]
Apr 16 01:59:33.102833 sshd[3917]: Disconnecting authenticating user root 185.217.1.246 port 62167: Too many authentication failures [preauth]
Apr 16 01:59:33.102000 audit[3917]: USER_ERR pid=3917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:33.107619 kernel: audit: type=1109 audit(1776304773.102:559): pid=3917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:33.107765 systemd[1]: sshd@115-10.0.0.12:22-185.217.1.246:62167.service: Deactivated successfully.
Apr 16 01:59:33.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-10.0.0.12:22-185.217.1.246:62167 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:33.114724 kernel: audit: type=1131 audit(1776304773.107:560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-10.0.0.12:22-185.217.1.246:62167 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:33.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-10.0.0.12:22-185.217.1.246:8646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:33.643243 systemd[1]: Started sshd@116-10.0.0.12:22-185.217.1.246:8646.service - OpenSSH per-connection server daemon (185.217.1.246:8646).
Apr 16 01:59:33.650646 kernel: audit: type=1130 audit(1776304773.642:561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-10.0.0.12:22-185.217.1.246:8646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:35.059333 sshd[3923]: maximum authentication attempts exceeded for root from 185.217.1.246 port 8646 ssh2 [preauth]
Apr 16 01:59:35.059333 sshd[3923]: Disconnecting authenticating user root 185.217.1.246 port 8646: Too many authentication failures [preauth]
Apr 16 01:59:35.059000 audit[3923]: USER_ERR pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:35.061914 systemd[1]: sshd@116-10.0.0.12:22-185.217.1.246:8646.service: Deactivated successfully.
Apr 16 01:59:35.068558 kernel: audit: type=1109 audit(1776304775.059:562): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:35.068940 kernel: audit: type=1131 audit(1776304775.059:563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-10.0.0.12:22-185.217.1.246:8646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:35.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-10.0.0.12:22-185.217.1.246:8646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:35.303196 systemd[1]: Started sshd@117-10.0.0.12:22-185.217.1.246:46041.service - OpenSSH per-connection server daemon (185.217.1.246:46041).
Apr 16 01:59:35.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-10.0.0.12:22-185.217.1.246:46041 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:35.309625 kernel: audit: type=1130 audit(1776304775.302:564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-10.0.0.12:22-185.217.1.246:46041 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:37.686260 sshd[3929]: maximum authentication attempts exceeded for root from 185.217.1.246 port 46041 ssh2 [preauth]
Apr 16 01:59:37.686260 sshd[3929]: Disconnecting authenticating user root 185.217.1.246 port 46041: Too many authentication failures [preauth]
Apr 16 01:59:37.686000 audit[3929]: USER_ERR pid=3929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:37.691221 systemd[1]: sshd@117-10.0.0.12:22-185.217.1.246:46041.service: Deactivated successfully.
Apr 16 01:59:37.691625 kernel: audit: type=1109 audit(1776304777.686:565): pid=3929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:37.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-10.0.0.12:22-185.217.1.246:46041 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:37.698706 kernel: audit: type=1131 audit(1776304777.690:566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-10.0.0.12:22-185.217.1.246:46041 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:37.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-10.0.0.12:22-185.217.1.246:21189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:37.846376 systemd[1]: Started sshd@118-10.0.0.12:22-185.217.1.246:21189.service - OpenSSH per-connection server daemon (185.217.1.246:21189).
Apr 16 01:59:37.851619 kernel: audit: type=1130 audit(1776304777.845:567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-10.0.0.12:22-185.217.1.246:21189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:40.292997 sshd[3935]: maximum authentication attempts exceeded for root from 185.217.1.246 port 21189 ssh2 [preauth]
Apr 16 01:59:40.292997 sshd[3935]: Disconnecting authenticating user root 185.217.1.246 port 21189: Too many authentication failures [preauth]
Apr 16 01:59:40.292000 audit[3935]: USER_ERR pid=3935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:40.296952 systemd[1]: sshd@118-10.0.0.12:22-185.217.1.246:21189.service: Deactivated successfully.
Apr 16 01:59:40.299623 kernel: audit: type=1109 audit(1776304780.292:568): pid=3935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:40.299683 kernel: audit: type=1131 audit(1776304780.296:569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-10.0.0.12:22-185.217.1.246:21189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:40.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-10.0.0.12:22-185.217.1.246:21189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:41.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-10.0.0.12:22-185.217.1.246:62344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:41.368660 kernel: audit: type=1130 audit(1776304781.361:570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-10.0.0.12:22-185.217.1.246:62344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:41.363222 systemd[1]: Started sshd@119-10.0.0.12:22-185.217.1.246:62344.service - OpenSSH per-connection server daemon (185.217.1.246:62344).
Apr 16 01:59:44.028732 sshd[3941]: maximum authentication attempts exceeded for root from 185.217.1.246 port 62344 ssh2 [preauth]
Apr 16 01:59:44.028732 sshd[3941]: Disconnecting authenticating user root 185.217.1.246 port 62344: Too many authentication failures [preauth]
Apr 16 01:59:44.027000 audit[3941]: USER_ERR pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:44.030714 systemd[1]: sshd@119-10.0.0.12:22-185.217.1.246:62344.service: Deactivated successfully.
Apr 16 01:59:44.036734 kernel: audit: type=1109 audit(1776304784.027:571): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:44.036981 kernel: audit: type=1131 audit(1776304784.029:572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-10.0.0.12:22-185.217.1.246:62344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:44.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-10.0.0.12:22-185.217.1.246:62344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:44.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-10.0.0.12:22-185.217.1.246:37925 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:44.777459 systemd[1]: Started sshd@120-10.0.0.12:22-185.217.1.246:37925.service - OpenSSH per-connection server daemon (185.217.1.246:37925).
Apr 16 01:59:44.784629 kernel: audit: type=1130 audit(1776304784.775:573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-10.0.0.12:22-185.217.1.246:37925 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:45.467487 sshd[3947]: maximum authentication attempts exceeded for root from 185.217.1.246 port 37925 ssh2 [preauth]
Apr 16 01:59:45.467487 sshd[3947]: Disconnecting authenticating user root 185.217.1.246 port 37925: Too many authentication failures [preauth]
Apr 16 01:59:45.466000 audit[3947]: USER_ERR pid=3947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:45.468936 systemd[1]: sshd@120-10.0.0.12:22-185.217.1.246:37925.service: Deactivated successfully.
Apr 16 01:59:45.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-10.0.0.12:22-185.217.1.246:37925 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:45.476754 kernel: audit: type=1109 audit(1776304785.466:574): pid=3947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:45.476806 kernel: audit: type=1131 audit(1776304785.467:575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-10.0.0.12:22-185.217.1.246:37925 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:45.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-10.0.0.12:22-185.217.1.246:63485 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:45.540839 systemd[1]: Started sshd@121-10.0.0.12:22-185.217.1.246:63485.service - OpenSSH per-connection server daemon (185.217.1.246:63485).
Apr 16 01:59:45.547639 kernel: audit: type=1130 audit(1776304785.539:576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-10.0.0.12:22-185.217.1.246:63485 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:49.397115 sshd[3953]: maximum authentication attempts exceeded for root from 185.217.1.246 port 63485 ssh2 [preauth]
Apr 16 01:59:49.397115 sshd[3953]: Disconnecting authenticating user root 185.217.1.246 port 63485: Too many authentication failures [preauth]
Apr 16 01:59:49.396000 audit[3953]: USER_ERR pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:49.399342 systemd[1]: sshd@121-10.0.0.12:22-185.217.1.246:63485.service: Deactivated successfully.
Apr 16 01:59:49.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-10.0.0.12:22-185.217.1.246:63485 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:49.406162 kernel: audit: type=1109 audit(1776304789.396:577): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:49.406200 kernel: audit: type=1131 audit(1776304789.398:578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-10.0.0.12:22-185.217.1.246:63485 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:49.686439 systemd[1]: Started sshd@122-10.0.0.12:22-185.217.1.246:6584.service - OpenSSH per-connection server daemon (185.217.1.246:6584).
Apr 16 01:59:49.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-10.0.0.12:22-185.217.1.246:6584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:49.693637 kernel: audit: type=1130 audit(1776304789.685:579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-10.0.0.12:22-185.217.1.246:6584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:51.881211 sshd[3960]: maximum authentication attempts exceeded for root from 185.217.1.246 port 6584 ssh2 [preauth]
Apr 16 01:59:51.881211 sshd[3960]: Disconnecting authenticating user root 185.217.1.246 port 6584: Too many authentication failures [preauth]
Apr 16 01:59:51.881000 audit[3960]: USER_ERR pid=3960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:51.884104 systemd[1]: sshd@122-10.0.0.12:22-185.217.1.246:6584.service: Deactivated successfully.
Apr 16 01:59:51.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-10.0.0.12:22-185.217.1.246:6584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:51.895528 kernel: audit: type=1109 audit(1776304791.881:580): pid=3960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:51.895980 kernel: audit: type=1131 audit(1776304791.881:581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-10.0.0.12:22-185.217.1.246:6584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:52.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-10.0.0.12:22-185.217.1.246:38581 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:52.507413 systemd[1]: Started sshd@123-10.0.0.12:22-185.217.1.246:38581.service - OpenSSH per-connection server daemon (185.217.1.246:38581).
Apr 16 01:59:52.513680 kernel: audit: type=1130 audit(1776304792.507:582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-10.0.0.12:22-185.217.1.246:38581 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:53.900502 sshd[3966]: maximum authentication attempts exceeded for root from 185.217.1.246 port 38581 ssh2 [preauth]
Apr 16 01:59:53.900502 sshd[3966]: Disconnecting authenticating user root 185.217.1.246 port 38581: Too many authentication failures [preauth]
Apr 16 01:59:53.900000 audit[3966]: USER_ERR pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:53.905396 systemd[1]: sshd@123-10.0.0.12:22-185.217.1.246:38581.service: Deactivated successfully.
Apr 16 01:59:53.905667 kernel: audit: type=1109 audit(1776304793.900:583): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:53.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-10.0.0.12:22-185.217.1.246:38581 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:53.912631 kernel: audit: type=1131 audit(1776304793.905:584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-10.0.0.12:22-185.217.1.246:38581 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:54.007062 systemd[1]: Started sshd@124-10.0.0.12:22-185.217.1.246:19255.service - OpenSSH per-connection server daemon (185.217.1.246:19255).
Apr 16 01:59:54.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-10.0.0.12:22-185.217.1.246:19255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:54.013653 kernel: audit: type=1130 audit(1776304794.006:585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-10.0.0.12:22-185.217.1.246:19255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:55.919706 sshd[3972]: maximum authentication attempts exceeded for root from 185.217.1.246 port 19255 ssh2 [preauth]
Apr 16 01:59:55.919706 sshd[3972]: Disconnecting authenticating user root 185.217.1.246 port 19255: Too many authentication failures [preauth]
Apr 16 01:59:55.919000 audit[3972]: USER_ERR pid=3972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:55.921807 systemd[1]: sshd@124-10.0.0.12:22-185.217.1.246:19255.service: Deactivated successfully.
Apr 16 01:59:55.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-10.0.0.12:22-185.217.1.246:19255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:55.929368 kernel: audit: type=1109 audit(1776304795.919:586): pid=3972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:55.929407 kernel: audit: type=1131 audit(1776304795.921:587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-10.0.0.12:22-185.217.1.246:19255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:55.998984 systemd[1]: Started sshd@125-10.0.0.12:22-185.217.1.246:11098.service - OpenSSH per-connection server daemon (185.217.1.246:11098).
Apr 16 01:59:56.004741 kernel: audit: type=1130 audit(1776304795.998:588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-10.0.0.12:22-185.217.1.246:11098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:55.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-10.0.0.12:22-185.217.1.246:11098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:57.690160 sshd[3978]: maximum authentication attempts exceeded for root from 185.217.1.246 port 11098 ssh2 [preauth]
Apr 16 01:59:57.690160 sshd[3978]: Disconnecting authenticating user root 185.217.1.246 port 11098: Too many authentication failures [preauth]
Apr 16 01:59:57.689000 audit[3978]: USER_ERR pid=3978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:57.695121 systemd[1]: sshd@125-10.0.0.12:22-185.217.1.246:11098.service: Deactivated successfully.
Apr 16 01:59:57.695618 kernel: audit: type=1109 audit(1776304797.689:589): pid=3978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:57.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-10.0.0.12:22-185.217.1.246:11098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:57.701638 kernel: audit: type=1131 audit(1776304797.694:590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-10.0.0.12:22-185.217.1.246:11098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:57.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-10.0.0.12:22-185.217.1.246:43387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:57.954216 systemd[1]: Started sshd@126-10.0.0.12:22-185.217.1.246:43387.service - OpenSSH per-connection server daemon (185.217.1.246:43387).
Apr 16 01:59:57.961640 kernel: audit: type=1130 audit(1776304797.953:591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-10.0.0.12:22-185.217.1.246:43387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:58.985573 sshd[3984]: maximum authentication attempts exceeded for root from 185.217.1.246 port 43387 ssh2 [preauth]
Apr 16 01:59:58.985573 sshd[3984]: Disconnecting authenticating user root 185.217.1.246 port 43387: Too many authentication failures [preauth]
Apr 16 01:59:58.985000 audit[3984]: USER_ERR pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:58.990266 systemd[1]: sshd@126-10.0.0.12:22-185.217.1.246:43387.service: Deactivated successfully.
Apr 16 01:59:58.994190 kernel: audit: type=1109 audit(1776304798.985:592): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 01:59:58.994253 kernel: audit: type=1131 audit(1776304798.990:593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-10.0.0.12:22-185.217.1.246:43387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:58.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-10.0.0.12:22-185.217.1.246:43387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:59.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-10.0.0.12:22-185.217.1.246:24965 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 01:59:59.436252 systemd[1]: Started sshd@127-10.0.0.12:22-185.217.1.246:24965.service - OpenSSH per-connection server daemon (185.217.1.246:24965).
Apr 16 01:59:59.441637 kernel: audit: type=1130 audit(1776304799.435:594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-10.0.0.12:22-185.217.1.246:24965 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:01.810629 sshd[3990]: maximum authentication attempts exceeded for root from 185.217.1.246 port 24965 ssh2 [preauth]
Apr 16 02:00:01.810629 sshd[3990]: Disconnecting authenticating user root 185.217.1.246 port 24965: Too many authentication failures [preauth]
Apr 16 02:00:01.810000 audit[3990]: USER_ERR pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:01.815541 systemd[1]: sshd@127-10.0.0.12:22-185.217.1.246:24965.service: Deactivated successfully.
Apr 16 02:00:01.815820 kernel: audit: type=1109 audit(1776304801.810:595): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:01.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-10.0.0.12:22-185.217.1.246:24965 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:01.822856 kernel: audit: type=1131 audit(1776304801.815:596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-10.0.0.12:22-185.217.1.246:24965 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:01.886092 systemd[1]: Started sshd@128-10.0.0.12:22-185.217.1.246:56679.service - OpenSSH per-connection server daemon (185.217.1.246:56679).
Apr 16 02:00:01.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-10.0.0.12:22-185.217.1.246:56679 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:01.892623 kernel: audit: type=1130 audit(1776304801.885:597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-10.0.0.12:22-185.217.1.246:56679 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:02.837090 sshd[3996]: maximum authentication attempts exceeded for root from 185.217.1.246 port 56679 ssh2 [preauth]
Apr 16 02:00:02.837090 sshd[3996]: Disconnecting authenticating user root 185.217.1.246 port 56679: Too many authentication failures [preauth]
Apr 16 02:00:02.837000 audit[3996]: USER_ERR pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:02.839773 systemd[1]: sshd@128-10.0.0.12:22-185.217.1.246:56679.service: Deactivated successfully.
Apr 16 02:00:02.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-10.0.0.12:22-185.217.1.246:56679 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:02.847168 kernel: audit: type=1109 audit(1776304802.837:598): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:02.847209 kernel: audit: type=1131 audit(1776304802.837:599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-10.0.0.12:22-185.217.1.246:56679 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:03.538179 systemd[1]: Started sshd@129-10.0.0.12:22-185.217.1.246:7818.service - OpenSSH per-connection server daemon (185.217.1.246:7818).
Apr 16 02:00:03.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-10.0.0.12:22-185.217.1.246:7818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:03.544626 kernel: audit: type=1130 audit(1776304803.537:600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-10.0.0.12:22-185.217.1.246:7818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:07.402104 sshd[4002]: maximum authentication attempts exceeded for root from 185.217.1.246 port 7818 ssh2 [preauth]
Apr 16 02:00:07.402104 sshd[4002]: Disconnecting authenticating user root 185.217.1.246 port 7818: Too many authentication failures [preauth]
Apr 16 02:00:07.401000 audit[4002]: USER_ERR pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:07.404131 systemd[1]: sshd@129-10.0.0.12:22-185.217.1.246:7818.service: Deactivated successfully.
Apr 16 02:00:07.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-10.0.0.12:22-185.217.1.246:7818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:07.412619 kernel: audit: type=1109 audit(1776304807.401:601): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:07.412680 kernel: audit: type=1131 audit(1776304807.402:602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-10.0.0.12:22-185.217.1.246:7818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:08.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-10.0.0.12:22-185.217.1.246:26246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:08.280222 systemd[1]: Started sshd@130-10.0.0.12:22-185.217.1.246:26246.service - OpenSSH per-connection server daemon (185.217.1.246:26246).
Apr 16 02:00:08.285647 kernel: audit: type=1130 audit(1776304808.278:603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-10.0.0.12:22-185.217.1.246:26246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:09.447095 sshd[4008]: maximum authentication attempts exceeded for root from 185.217.1.246 port 26246 ssh2 [preauth]
Apr 16 02:00:09.447095 sshd[4008]: Disconnecting authenticating user root 185.217.1.246 port 26246: Too many authentication failures [preauth]
Apr 16 02:00:09.445000 audit[4008]: USER_ERR pid=4008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:09.450184 systemd[1]: sshd@130-10.0.0.12:22-185.217.1.246:26246.service: Deactivated successfully.
Apr 16 02:00:09.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-10.0.0.12:22-185.217.1.246:26246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:09.455022 kernel: audit: type=1109 audit(1776304809.445:604): pid=4008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:09.455061 kernel: audit: type=1131 audit(1776304809.448:605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-10.0.0.12:22-185.217.1.246:26246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:09.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-10.0.0.12:22-185.217.1.246:35806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:09.557448 systemd[1]: Started sshd@131-10.0.0.12:22-185.217.1.246:35806.service - OpenSSH per-connection server daemon (185.217.1.246:35806).
Apr 16 02:00:09.563632 kernel: audit: type=1130 audit(1776304809.555:606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-10.0.0.12:22-185.217.1.246:35806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:13.000627 sshd[4014]: maximum authentication attempts exceeded for root from 185.217.1.246 port 35806 ssh2 [preauth]
Apr 16 02:00:13.000627 sshd[4014]: Disconnecting authenticating user root 185.217.1.246 port 35806: Too many authentication failures [preauth]
Apr 16 02:00:12.999000 audit[4014]: USER_ERR pid=4014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:13.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-10.0.0.12:22-185.217.1.246:35806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:13.005048 systemd[1]: sshd@131-10.0.0.12:22-185.217.1.246:35806.service: Deactivated successfully.
Apr 16 02:00:13.008310 kernel: audit: type=1109 audit(1776304812.999:607): pid=4014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:13.008379 kernel: audit: type=1131 audit(1776304813.003:608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-10.0.0.12:22-185.217.1.246:35806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:13.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-10.0.0.12:22-185.217.1.246:60091 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:13.827252 systemd[1]: Started sshd@132-10.0.0.12:22-185.217.1.246:60091.service - OpenSSH per-connection server daemon (185.217.1.246:60091).
Apr 16 02:00:13.834664 kernel: audit: type=1130 audit(1776304813.825:609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-10.0.0.12:22-185.217.1.246:60091 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:15.565539 sshd[4020]: maximum authentication attempts exceeded for root from 185.217.1.246 port 60091 ssh2 [preauth]
Apr 16 02:00:15.565539 sshd[4020]: Disconnecting authenticating user root 185.217.1.246 port 60091: Too many authentication failures [preauth]
Apr 16 02:00:15.565000 audit[4020]: USER_ERR pid=4020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:15.569947 systemd[1]: sshd@132-10.0.0.12:22-185.217.1.246:60091.service: Deactivated successfully.
Apr 16 02:00:15.577007 kernel: audit: type=1109 audit(1776304815.565:610): pid=4020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:15.577067 kernel: audit: type=1131 audit(1776304815.569:611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-10.0.0.12:22-185.217.1.246:60091 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:15.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-10.0.0.12:22-185.217.1.246:60091 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:15.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-10.0.0.12:22-185.217.1.246:31992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:15.675285 systemd[1]: Started sshd@133-10.0.0.12:22-185.217.1.246:31992.service - OpenSSH per-connection server daemon (185.217.1.246:31992).
Apr 16 02:00:15.682628 kernel: audit: type=1130 audit(1776304815.674:612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-10.0.0.12:22-185.217.1.246:31992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:18.314255 sshd[4026]: maximum authentication attempts exceeded for root from 185.217.1.246 port 31992 ssh2 [preauth]
Apr 16 02:00:18.314255 sshd[4026]: Disconnecting authenticating user root 185.217.1.246 port 31992: Too many authentication failures [preauth]
Apr 16 02:00:18.314000 audit[4026]: USER_ERR pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:18.319635 kernel: audit: type=1109 audit(1776304818.314:613): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:18.319735 systemd[1]: sshd@133-10.0.0.12:22-185.217.1.246:31992.service: Deactivated successfully.
Apr 16 02:00:18.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-10.0.0.12:22-185.217.1.246:31992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:18.326719 kernel: audit: type=1131 audit(1776304818.319:614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-10.0.0.12:22-185.217.1.246:31992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:18.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-10.0.0.12:22-185.217.1.246:59898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:18.616279 systemd[1]: Started sshd@134-10.0.0.12:22-185.217.1.246:59898.service - OpenSSH per-connection server daemon (185.217.1.246:59898).
Apr 16 02:00:18.623825 kernel: audit: type=1130 audit(1776304818.615:615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-10.0.0.12:22-185.217.1.246:59898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:20.498478 sshd[4032]: maximum authentication attempts exceeded for root from 185.217.1.246 port 59898 ssh2 [preauth]
Apr 16 02:00:20.498478 sshd[4032]: Disconnecting authenticating user root 185.217.1.246 port 59898: Too many authentication failures [preauth]
Apr 16 02:00:20.498000 audit[4032]: USER_ERR pid=4032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:20.501058 systemd[1]: sshd@134-10.0.0.12:22-185.217.1.246:59898.service: Deactivated successfully.
Apr 16 02:00:20.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-10.0.0.12:22-185.217.1.246:59898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:20.508802 kernel: audit: type=1109 audit(1776304820.498:616): pid=4032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:20.508854 kernel: audit: type=1131 audit(1776304820.500:617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-10.0.0.12:22-185.217.1.246:59898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:20.602258 systemd[1]: Started sshd@135-10.0.0.12:22-185.217.1.246:58204.service - OpenSSH per-connection server daemon (185.217.1.246:58204).
Apr 16 02:00:20.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-10.0.0.12:22-185.217.1.246:58204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:20.608626 kernel: audit: type=1130 audit(1776304820.601:618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-10.0.0.12:22-185.217.1.246:58204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:25.572274 sshd[4038]: maximum authentication attempts exceeded for root from 185.217.1.246 port 58204 ssh2 [preauth]
Apr 16 02:00:25.572274 sshd[4038]: Disconnecting authenticating user root 185.217.1.246 port 58204: Too many authentication failures [preauth]
Apr 16 02:00:25.571000 audit[4038]: USER_ERR pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:25.576196 systemd[1]: sshd@135-10.0.0.12:22-185.217.1.246:58204.service: Deactivated successfully.
Apr 16 02:00:25.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-10.0.0.12:22-185.217.1.246:58204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:25.581081 kernel: audit: type=1109 audit(1776304825.571:619): pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:25.581130 kernel: audit: type=1131 audit(1776304825.576:620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-10.0.0.12:22-185.217.1.246:58204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:25.672119 systemd[1]: Started sshd@136-10.0.0.12:22-185.217.1.246:55936.service - OpenSSH per-connection server daemon (185.217.1.246:55936).
Apr 16 02:00:25.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-10.0.0.12:22-185.217.1.246:55936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:25.678637 kernel: audit: type=1130 audit(1776304825.671:621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-10.0.0.12:22-185.217.1.246:55936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:28.760073 sshd[4044]: maximum authentication attempts exceeded for root from 185.217.1.246 port 55936 ssh2 [preauth]
Apr 16 02:00:28.760073 sshd[4044]: Disconnecting authenticating user root 185.217.1.246 port 55936: Too many authentication failures [preauth]
Apr 16 02:00:28.759000 audit[4044]: USER_ERR pid=4044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:28.764425 systemd[1]: sshd@136-10.0.0.12:22-185.217.1.246:55936.service: Deactivated successfully.
Apr 16 02:00:28.769744 kernel: audit: type=1109 audit(1776304828.759:622): pid=4044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:28.769807 kernel: audit: type=1131 audit(1776304828.764:623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-10.0.0.12:22-185.217.1.246:55936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:28.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-10.0.0.12:22-185.217.1.246:55936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:29.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-10.0.0.12:22-185.217.1.246:11643 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:29.363348 systemd[1]: Started sshd@137-10.0.0.12:22-185.217.1.246:11643.service - OpenSSH per-connection server daemon (185.217.1.246:11643).
Apr 16 02:00:29.369629 kernel: audit: type=1130 audit(1776304829.362:624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-10.0.0.12:22-185.217.1.246:11643 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:32.705313 sshd[4050]: maximum authentication attempts exceeded for root from 185.217.1.246 port 11643 ssh2 [preauth]
Apr 16 02:00:32.705313 sshd[4050]: Disconnecting authenticating user root 185.217.1.246 port 11643: Too many authentication failures [preauth]
Apr 16 02:00:32.704000 audit[4050]: USER_ERR pid=4050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:32.710450 systemd[1]: sshd@137-10.0.0.12:22-185.217.1.246:11643.service: Deactivated successfully.
Apr 16 02:00:32.710699 kernel: audit: type=1109 audit(1776304832.704:625): pid=4050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:32.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-10.0.0.12:22-185.217.1.246:11643 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:32.717770 kernel: audit: type=1131 audit(1776304832.709:626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-10.0.0.12:22-185.217.1.246:11643 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:32.826566 systemd[1]: Started sshd@138-10.0.0.12:22-185.217.1.246:8029.service - OpenSSH per-connection server daemon (185.217.1.246:8029).
Apr 16 02:00:32.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-10.0.0.12:22-185.217.1.246:8029 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:32.832631 kernel: audit: type=1130 audit(1776304832.825:627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-10.0.0.12:22-185.217.1.246:8029 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:35.171930 sshd[4056]: maximum authentication attempts exceeded for root from 185.217.1.246 port 8029 ssh2 [preauth]
Apr 16 02:00:35.171930 sshd[4056]: Disconnecting authenticating user root 185.217.1.246 port 8029: Too many authentication failures [preauth]
Apr 16 02:00:35.170000 audit[4056]: USER_ERR pid=4056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:35.174509 systemd[1]: sshd@138-10.0.0.12:22-185.217.1.246:8029.service: Deactivated successfully.
Apr 16 02:00:35.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-10.0.0.12:22-185.217.1.246:8029 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:35.181366 kernel: audit: type=1109 audit(1776304835.170:628): pid=4056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:35.181454 kernel: audit: type=1131 audit(1776304835.173:629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-10.0.0.12:22-185.217.1.246:8029 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:35.310141 systemd[1]: Started sshd@139-10.0.0.12:22-185.217.1.246:29849.service - OpenSSH per-connection server daemon (185.217.1.246:29849).
Apr 16 02:00:35.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-10.0.0.12:22-185.217.1.246:29849 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:35.317623 kernel: audit: type=1130 audit(1776304835.308:630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-10.0.0.12:22-185.217.1.246:29849 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:35.845113 sshd[4062]: maximum authentication attempts exceeded for root from 185.217.1.246 port 29849 ssh2 [preauth]
Apr 16 02:00:35.845113 sshd[4062]: Disconnecting authenticating user root 185.217.1.246 port 29849: Too many authentication failures [preauth]
Apr 16 02:00:35.844000 audit[4062]: USER_ERR pid=4062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:35.847713 systemd[1]: sshd@139-10.0.0.12:22-185.217.1.246:29849.service: Deactivated successfully.
Apr 16 02:00:35.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-10.0.0.12:22-185.217.1.246:29849 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:35.854303 kernel: audit: type=1109 audit(1776304835.844:631): pid=4062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:35.854343 kernel: audit: type=1131 audit(1776304835.846:632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-10.0.0.12:22-185.217.1.246:29849 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:36.006951 systemd[1]: Started sshd@140-10.0.0.12:22-185.217.1.246:27353.service - OpenSSH per-connection server daemon (185.217.1.246:27353).
Apr 16 02:00:36.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-10.0.0.12:22-185.217.1.246:27353 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:36.013629 kernel: audit: type=1130 audit(1776304836.005:633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-10.0.0.12:22-185.217.1.246:27353 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:38.468724 sshd[4068]: maximum authentication attempts exceeded for root from 185.217.1.246 port 27353 ssh2 [preauth]
Apr 16 02:00:38.468724 sshd[4068]: Disconnecting authenticating user root 185.217.1.246 port 27353: Too many authentication failures [preauth]
Apr 16 02:00:38.467000 audit[4068]: USER_ERR pid=4068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:38.473910 systemd[1]: sshd@140-10.0.0.12:22-185.217.1.246:27353.service: Deactivated successfully.
Apr 16 02:00:38.478450 kernel: audit: type=1109 audit(1776304838.467:634): pid=4068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:38.478525 kernel: audit: type=1131 audit(1776304838.472:635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-10.0.0.12:22-185.217.1.246:27353 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:38.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-10.0.0.12:22-185.217.1.246:27353 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:38.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-10.0.0.12:22-185.217.1.246:15424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:38.543131 systemd[1]: Started sshd@141-10.0.0.12:22-185.217.1.246:15424.service - OpenSSH per-connection server daemon (185.217.1.246:15424).
Apr 16 02:00:38.548622 kernel: audit: type=1130 audit(1776304838.541:636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-10.0.0.12:22-185.217.1.246:15424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:39.328493 sshd[4074]: maximum authentication attempts exceeded for root from 185.217.1.246 port 15424 ssh2 [preauth]
Apr 16 02:00:39.328493 sshd[4074]: Disconnecting authenticating user root 185.217.1.246 port 15424: Too many authentication failures [preauth]
Apr 16 02:00:39.327000 audit[4074]: USER_ERR pid=4074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:39.331169 systemd[1]: sshd@141-10.0.0.12:22-185.217.1.246:15424.service: Deactivated successfully.
Apr 16 02:00:39.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-10.0.0.12:22-185.217.1.246:15424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:39.343693 kernel: audit: type=1109 audit(1776304839.327:637): pid=4074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:39.343737 kernel: audit: type=1131 audit(1776304839.327:638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-10.0.0.12:22-185.217.1.246:15424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:39.462874 systemd[1]: Started sshd@142-10.0.0.12:22-185.217.1.246:58923.service - OpenSSH per-connection server daemon (185.217.1.246:58923).
Apr 16 02:00:39.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-10.0.0.12:22-185.217.1.246:58923 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:39.468626 kernel: audit: type=1130 audit(1776304839.461:639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-10.0.0.12:22-185.217.1.246:58923 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:40.720284 sshd[4080]: maximum authentication attempts exceeded for root from 185.217.1.246 port 58923 ssh2 [preauth]
Apr 16 02:00:40.720284 sshd[4080]: Disconnecting authenticating user root 185.217.1.246 port 58923: Too many authentication failures [preauth]
Apr 16 02:00:40.719000 audit[4080]: USER_ERR pid=4080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:40.722929 systemd[1]: sshd@142-10.0.0.12:22-185.217.1.246:58923.service: Deactivated successfully.
Apr 16 02:00:40.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-10.0.0.12:22-185.217.1.246:58923 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:40.729535 kernel: audit: type=1109 audit(1776304840.719:640): pid=4080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:40.729578 kernel: audit: type=1131 audit(1776304840.721:641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-10.0.0.12:22-185.217.1.246:58923 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:43.714278 systemd[1]: Started sshd@143-10.0.0.12:22-185.217.1.246:36092.service - OpenSSH per-connection server daemon (185.217.1.246:36092).
Apr 16 02:00:43.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-10.0.0.12:22-185.217.1.246:36092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:43.720648 kernel: audit: type=1130 audit(1776304843.714:642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-10.0.0.12:22-185.217.1.246:36092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.079715 sshd[4086]: maximum authentication attempts exceeded for root from 185.217.1.246 port 36092 ssh2 [preauth]
Apr 16 02:00:45.079715 sshd[4086]: Disconnecting authenticating user root 185.217.1.246 port 36092: Too many authentication failures [preauth]
Apr 16 02:00:45.079000 audit[4086]: USER_ERR pid=4086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:45.083739 systemd[1]: sshd@143-10.0.0.12:22-185.217.1.246:36092.service: Deactivated successfully.
Apr 16 02:00:45.085830 kernel: audit: type=1109 audit(1776304845.079:643): pid=4086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:45.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-10.0.0.12:22-185.217.1.246:36092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.090651 kernel: audit: type=1131 audit(1776304845.083:644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-10.0.0.12:22-185.217.1.246:36092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-10.0.0.12:22-185.217.1.246:6438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.170236 systemd[1]: Started sshd@144-10.0.0.12:22-185.217.1.246:6438.service - OpenSSH per-connection server daemon (185.217.1.246:6438).
Apr 16 02:00:45.177710 kernel: audit: type=1130 audit(1776304845.169:645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-10.0.0.12:22-185.217.1.246:6438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.669621 sshd[4092]: maximum authentication attempts exceeded for root from 185.217.1.246 port 6438 ssh2 [preauth]
Apr 16 02:00:45.669621 sshd[4092]: Disconnecting authenticating user root 185.217.1.246 port 6438: Too many authentication failures [preauth]
Apr 16 02:00:45.669000 audit[4092]: USER_ERR pid=4092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:45.672247 systemd[1]: sshd@144-10.0.0.12:22-185.217.1.246:6438.service: Deactivated successfully.
Apr 16 02:00:45.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-10.0.0.12:22-185.217.1.246:6438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.679718 kernel: audit: type=1109 audit(1776304845.669:646): pid=4092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:45.679761 kernel: audit: type=1131 audit(1776304845.671:647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-10.0.0.12:22-185.217.1.246:6438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-10.0.0.12:22-185.217.1.246:39865 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:45.745298 systemd[1]: Started sshd@145-10.0.0.12:22-185.217.1.246:39865.service - OpenSSH per-connection server daemon (185.217.1.246:39865).
Apr 16 02:00:45.753628 kernel: audit: type=1130 audit(1776304845.744:648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-10.0.0.12:22-185.217.1.246:39865 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:47.168021 sshd[4098]: maximum authentication attempts exceeded for root from 185.217.1.246 port 39865 ssh2 [preauth]
Apr 16 02:00:47.168021 sshd[4098]: Disconnecting authenticating user root 185.217.1.246 port 39865: Too many authentication failures [preauth]
Apr 16 02:00:47.167000 audit[4098]: USER_ERR pid=4098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:47.169595 systemd[1]: sshd@145-10.0.0.12:22-185.217.1.246:39865.service: Deactivated successfully.
Apr 16 02:00:47.179943 kernel: audit: type=1109 audit(1776304847.167:649): pid=4098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:47.180025 kernel: audit: type=1131 audit(1776304847.167:650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-10.0.0.12:22-185.217.1.246:39865 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:47.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-10.0.0.12:22-185.217.1.246:39865 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:47.658301 systemd[1]: Started sshd@146-10.0.0.12:22-185.217.1.246:36868.service - OpenSSH per-connection server daemon (185.217.1.246:36868).
Apr 16 02:00:47.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-10.0.0.12:22-185.217.1.246:36868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:47.664626 kernel: audit: type=1130 audit(1776304847.657:651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-10.0.0.12:22-185.217.1.246:36868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:52.804745 sshd[4104]: maximum authentication attempts exceeded for root from 185.217.1.246 port 36868 ssh2 [preauth]
Apr 16 02:00:52.804745 sshd[4104]: Disconnecting authenticating user root 185.217.1.246 port 36868: Too many authentication failures [preauth]
Apr 16 02:00:52.820820 kernel: audit: type=1109 audit(1776304852.804:652): pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:52.820857 kernel: audit: type=1131 audit(1776304852.806:653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-10.0.0.12:22-185.217.1.246:36868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:52.804000 audit[4104]: USER_ERR pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:52.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-10.0.0.12:22-185.217.1.246:36868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:52.807335 systemd[1]: sshd@146-10.0.0.12:22-185.217.1.246:36868.service: Deactivated successfully.
Apr 16 02:00:53.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-10.0.0.12:22-185.217.1.246:40061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:53.029262 systemd[1]: Started sshd@147-10.0.0.12:22-185.217.1.246:40061.service - OpenSSH per-connection server daemon (185.217.1.246:40061).
Apr 16 02:00:53.036700 kernel: audit: type=1130 audit(1776304853.028:654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-10.0.0.12:22-185.217.1.246:40061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:56.123084 sshd[4111]: maximum authentication attempts exceeded for root from 185.217.1.246 port 40061 ssh2 [preauth]
Apr 16 02:00:56.123084 sshd[4111]: Disconnecting authenticating user root 185.217.1.246 port 40061: Too many authentication failures [preauth]
Apr 16 02:00:56.122000 audit[4111]: USER_ERR pid=4111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:56.128068 systemd[1]: sshd@147-10.0.0.12:22-185.217.1.246:40061.service: Deactivated successfully.
Apr 16 02:00:56.132936 kernel: audit: type=1109 audit(1776304856.122:655): pid=4111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:56.133011 kernel: audit: type=1131 audit(1776304856.126:656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-10.0.0.12:22-185.217.1.246:40061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:56.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-10.0.0.12:22-185.217.1.246:40061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:56.653253 systemd[1]: Started sshd@148-10.0.0.12:22-185.217.1.246:6279.service - OpenSSH per-connection server daemon (185.217.1.246:6279).
Apr 16 02:00:56.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-10.0.0.12:22-185.217.1.246:6279 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:56.658642 kernel: audit: type=1130 audit(1776304856.651:657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-10.0.0.12:22-185.217.1.246:6279 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:57.579563 sshd[4125]: maximum authentication attempts exceeded for root from 185.217.1.246 port 6279 ssh2 [preauth]
Apr 16 02:00:57.579563 sshd[4125]: Disconnecting authenticating user root 185.217.1.246 port 6279: Too many authentication failures [preauth]
Apr 16 02:00:57.578000 audit[4125]: USER_ERR pid=4125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:57.583638 systemd[1]: sshd@148-10.0.0.12:22-185.217.1.246:6279.service: Deactivated successfully.
Apr 16 02:00:57.589618 kernel: audit: type=1109 audit(1776304857.578:658): pid=4125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:57.589770 kernel: audit: type=1131 audit(1776304857.582:659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-10.0.0.12:22-185.217.1.246:6279 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:57.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-10.0.0.12:22-185.217.1.246:6279 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:57.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-10.0.0.12:22-185.217.1.246:4126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:57.857123 systemd[1]: Started sshd@149-10.0.0.12:22-185.217.1.246:4126.service - OpenSSH per-connection server daemon (185.217.1.246:4126).
Apr 16 02:00:57.863627 kernel: audit: type=1130 audit(1776304857.855:660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-10.0.0.12:22-185.217.1.246:4126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:59.433047 sshd[4131]: maximum authentication attempts exceeded for root from 185.217.1.246 port 4126 ssh2 [preauth]
Apr 16 02:00:59.433047 sshd[4131]: Disconnecting authenticating user root 185.217.1.246 port 4126: Too many authentication failures [preauth]
Apr 16 02:00:59.432000 audit[4131]: USER_ERR pid=4131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:59.435627 systemd[1]: sshd@149-10.0.0.12:22-185.217.1.246:4126.service: Deactivated successfully.
Apr 16 02:00:59.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-10.0.0.12:22-185.217.1.246:4126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:59.443247 kernel: audit: type=1109 audit(1776304859.432:661): pid=4131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:00:59.443290 kernel: audit: type=1131 audit(1776304859.434:662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-10.0.0.12:22-185.217.1.246:4126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:59.559228 systemd[1]: Started sshd@150-10.0.0.12:22-185.217.1.246:15367.service - OpenSSH per-connection server daemon (185.217.1.246:15367).
Apr 16 02:00:59.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-10.0.0.12:22-185.217.1.246:15367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:00:59.566649 kernel: audit: type=1130 audit(1776304859.557:663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-10.0.0.12:22-185.217.1.246:15367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:04.310530 sshd[4137]: maximum authentication attempts exceeded for root from 185.217.1.246 port 15367 ssh2 [preauth]
Apr 16 02:01:04.310530 sshd[4137]: Disconnecting authenticating user root 185.217.1.246 port 15367: Too many authentication failures [preauth]
Apr 16 02:01:04.309000 audit[4137]: USER_ERR pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:04.313187 systemd[1]: sshd@150-10.0.0.12:22-185.217.1.246:15367.service: Deactivated successfully.
Apr 16 02:01:04.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-10.0.0.12:22-185.217.1.246:15367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:04.320211 kernel: audit: type=1109 audit(1776304864.309:664): pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:04.320260 kernel: audit: type=1131 audit(1776304864.309:665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-10.0.0.12:22-185.217.1.246:15367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:06.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-10.0.0.12:22-185.217.1.246:62013 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:06.549229 systemd[1]: Started sshd@151-10.0.0.12:22-185.217.1.246:62013.service - OpenSSH per-connection server daemon (185.217.1.246:62013).
Apr 16 02:01:06.556702 kernel: audit: type=1130 audit(1776304866.548:666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-10.0.0.12:22-185.217.1.246:62013 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:08.785242 sshd[4143]: maximum authentication attempts exceeded for root from 185.217.1.246 port 62013 ssh2 [preauth]
Apr 16 02:01:08.785242 sshd[4143]: Disconnecting authenticating user root 185.217.1.246 port 62013: Too many authentication failures [preauth]
Apr 16 02:01:08.785000 audit[4143]: USER_ERR pid=4143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:08.787949 systemd[1]: sshd@151-10.0.0.12:22-185.217.1.246:62013.service: Deactivated successfully.
Apr 16 02:01:08.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-10.0.0.12:22-185.217.1.246:62013 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:08.795665 kernel: audit: type=1109 audit(1776304868.785:667): pid=4143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:08.795711 kernel: audit: type=1131 audit(1776304868.785:668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-10.0.0.12:22-185.217.1.246:62013 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:09.028562 systemd[1]: Started sshd@152-10.0.0.12:22-185.217.1.246:52983.service - OpenSSH per-connection server daemon (185.217.1.246:52983).
Apr 16 02:01:09.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-10.0.0.12:22-185.217.1.246:52983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:09.035643 kernel: audit: type=1130 audit(1776304869.028:669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-10.0.0.12:22-185.217.1.246:52983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:10.627629 sshd[4149]: Disconnecting authenticating user root 185.217.1.246 port 52983: Change of username or service not allowed: (root,ssh-connection) -> (devops,ssh-connection) [preauth]
Apr 16 02:01:10.627000 audit[4149]: USER_ERR pid=4149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:10.633621 kernel: audit: type=1109 audit(1776304870.627:670): pid=4149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:10.631949 systemd[1]: sshd@152-10.0.0.12:22-185.217.1.246:52983.service: Deactivated successfully.
Apr 16 02:01:10.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-10.0.0.12:22-185.217.1.246:52983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:10.638625 kernel: audit: type=1131 audit(1776304870.631:671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-10.0.0.12:22-185.217.1.246:52983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:10.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-10.0.0.12:22-185.217.1.246:8848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:10.821232 systemd[1]: Started sshd@153-10.0.0.12:22-185.217.1.246:8848.service - OpenSSH per-connection server daemon (185.217.1.246:8848).
Apr 16 02:01:10.828735 kernel: audit: type=1130 audit(1776304870.820:672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-10.0.0.12:22-185.217.1.246:8848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:12.526270 sshd[4155]: Invalid user devops from 185.217.1.246 port 8848
Apr 16 02:01:12.745014 sshd[4155]: Disconnecting invalid user devops 185.217.1.246 port 8848: Change of username or service not allowed: (devops,ssh-connection) -> (zhao,ssh-connection) [preauth]
Apr 16 02:01:12.744000 audit[4155]: USER_ERR pid=4155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:12.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-10.0.0.12:22-185.217.1.246:8848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:12.748994 systemd[1]: sshd@153-10.0.0.12:22-185.217.1.246:8848.service: Deactivated successfully.
Apr 16 02:01:12.752513 kernel: audit: type=1109 audit(1776304872.744:673): pid=4155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:12.752745 kernel: audit: type=1131 audit(1776304872.747:674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-10.0.0.12:22-185.217.1.246:8848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:12.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-10.0.0.12:22-185.217.1.246:42830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:12.869157 systemd[1]: Started sshd@154-10.0.0.12:22-185.217.1.246:42830.service - OpenSSH per-connection server daemon (185.217.1.246:42830).
Apr 16 02:01:12.874633 kernel: audit: type=1130 audit(1776304872.868:675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-10.0.0.12:22-185.217.1.246:42830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:13.375425 sshd[4161]: Invalid user zhao from 185.217.1.246 port 42830
Apr 16 02:01:13.636082 sshd[4161]: Disconnecting invalid user zhao 185.217.1.246 port 42830: Change of username or service not allowed: (zhao,ssh-connection) -> (liuj,ssh-connection) [preauth]
Apr 16 02:01:13.635000 audit[4161]: USER_ERR pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:13.637821 systemd[1]: sshd@154-10.0.0.12:22-185.217.1.246:42830.service: Deactivated successfully.
Apr 16 02:01:13.647640 kernel: audit: type=1109 audit(1776304873.635:676): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:13.647727 kernel: audit: type=1131 audit(1776304873.637:677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-10.0.0.12:22-185.217.1.246:42830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:13.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-10.0.0.12:22-185.217.1.246:42830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:14.295358 systemd[1]: Started sshd@155-10.0.0.12:22-185.217.1.246:18484.service - OpenSSH per-connection server daemon (185.217.1.246:18484).
Apr 16 02:01:14.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-10.0.0.12:22-185.217.1.246:18484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:14.302649 kernel: audit: type=1130 audit(1776304874.295:678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-10.0.0.12:22-185.217.1.246:18484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:16.547482 sshd[4171]: Invalid user liuj from 185.217.1.246 port 18484
Apr 16 02:01:17.418878 sshd[4171]: Disconnecting invalid user liuj 185.217.1.246 port 18484: Change of username or service not allowed: (liuj,ssh-connection) -> (app,ssh-connection) [preauth]
Apr 16 02:01:17.418000 audit[4171]: USER_ERR pid=4171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:17.423668 systemd[1]: sshd@155-10.0.0.12:22-185.217.1.246:18484.service: Deactivated successfully.
Apr 16 02:01:17.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-10.0.0.12:22-185.217.1.246:18484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:17.427069 kernel: audit: type=1109 audit(1776304877.418:679): pid=4171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:17.427136 kernel: audit: type=1131 audit(1776304877.423:680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-10.0.0.12:22-185.217.1.246:18484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:17.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-10.0.0.12:22-185.217.1.246:32898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:17.842234 systemd[1]: Started sshd@156-10.0.0.12:22-185.217.1.246:32898.service - OpenSSH per-connection server daemon (185.217.1.246:32898).
Apr 16 02:01:17.849641 kernel: audit: type=1130 audit(1776304877.841:681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-10.0.0.12:22-185.217.1.246:32898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:18.836332 sshd[4178]: Invalid user app from 185.217.1.246 port 32898
Apr 16 02:01:18.935132 sshd[4178]: Disconnecting invalid user app 185.217.1.246 port 32898: Change of username or service not allowed: (app,ssh-connection) -> (inspur,ssh-connection) [preauth]
Apr 16 02:01:18.935000 audit[4178]: USER_ERR pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:18.940094 systemd[1]: sshd@156-10.0.0.12:22-185.217.1.246:32898.service: Deactivated successfully.
Apr 16 02:01:18.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-10.0.0.12:22-185.217.1.246:32898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:18.943624 kernel: audit: type=1109 audit(1776304878.935:682): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:18.943688 kernel: audit: type=1131 audit(1776304878.940:683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-10.0.0.12:22-185.217.1.246:32898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:19.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-10.0.0.12:22-185.217.1.246:31508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:19.699305 systemd[1]: Started sshd@157-10.0.0.12:22-185.217.1.246:31508.service - OpenSSH per-connection server daemon (185.217.1.246:31508).
Apr 16 02:01:19.705641 kernel: audit: type=1130 audit(1776304879.698:684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-10.0.0.12:22-185.217.1.246:31508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:20.721343 sshd[4184]: Invalid user inspur from 185.217.1.246 port 31508
Apr 16 02:01:20.761240 sshd[4184]: Disconnecting invalid user inspur 185.217.1.246 port 31508: Change of username or service not allowed: (inspur,ssh-connection) -> (matrix,ssh-connection) [preauth]
Apr 16 02:01:20.759000 audit[4184]: USER_ERR pid=4184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:20.764984 systemd[1]: sshd@157-10.0.0.12:22-185.217.1.246:31508.service: Deactivated successfully.
Apr 16 02:01:20.768625 kernel: audit: type=1109 audit(1776304880.759:685): pid=4184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:20.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-10.0.0.12:22-185.217.1.246:31508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:20.774660 kernel: audit: type=1131 audit(1776304880.763:686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-10.0.0.12:22-185.217.1.246:31508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:20.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-10.0.0.12:22-185.217.1.246:7267 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:20.853064 systemd[1]: Started sshd@158-10.0.0.12:22-185.217.1.246:7267.service - OpenSSH per-connection server daemon (185.217.1.246:7267).
Apr 16 02:01:20.860664 kernel: audit: type=1130 audit(1776304880.851:687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-10.0.0.12:22-185.217.1.246:7267 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:22.081016 update_engine[2428]: I20260416 02:01:22.080964  2428 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs
Apr 16 02:01:22.081016 update_engine[2428]: I20260416 02:01:22.081007  2428 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs
Apr 16 02:01:22.081412 update_engine[2428]: I20260416 02:01:22.081197  2428 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs
Apr 16 02:01:22.081575 update_engine[2428]: I20260416 02:01:22.081554  2428 omaha_request_params.cc:62] Current group set to beta
Apr 16 02:01:22.082140 update_engine[2428]: I20260416 02:01:22.082020  2428 update_attempter.cc:499] Already updated boot flags. Skipping.
Apr 16 02:01:22.082140 update_engine[2428]: I20260416 02:01:22.082038  2428 update_attempter.cc:643] Scheduling an action processor start.
Apr 16 02:01:22.082140 update_engine[2428]: I20260416 02:01:22.082057  2428 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction
Apr 16 02:01:22.082140 update_engine[2428]: I20260416 02:01:22.082095  2428 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs
Apr 16 02:01:22.082257 locksmithd[2504]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0
Apr 16 02:01:22.082424 update_engine[2428]: I20260416 02:01:22.082155  2428 omaha_request_action.cc:271] Posting an Omaha request to disabled
Apr 16 02:01:22.082424 update_engine[2428]: I20260416 02:01:22.082160  2428 omaha_request_action.cc:272] Request: <?xml version="1.0" encoding="UTF-8"?>
Apr 16 02:01:22.082424 update_engine[2428]: <request protocol="3.0" version="update_engine-0.4.10" updaterversion="update_engine-0.4.10" installsource="scheduler" ismachine="1">
Apr 16 02:01:22.082424 update_engine[2428]:     <os version="Chateau" platform="CoreOS" sp="4593.1.0+nightly-20260415-2100_x86_64"></os>
Apr 16 02:01:22.082424 update_engine[2428]:     <app appid="{e96281a6-d1af-4bde-9a0a-97b76e56dc57}" version="4593.1.0+nightly-20260415-2100" track="beta" bootid="{13ab6f34-ca37-41ae-891a-c66031ef4863}" oem="azure" oemversion="2.12.0.4-r2" alephversion="4593.1.0+nightly-20260415-2100" machineid="01189526b1c646318a402b8f81c8aba9" machinealias="" lang="en-US" board="amd64-usr" hardware_class="" delta_okay="false" >
Apr 16 02:01:22.082424 update_engine[2428]:         <ping active="1"></ping>
Apr 16 02:01:22.082424 update_engine[2428]:         <updatecheck></updatecheck>
Apr 16 02:01:22.082424 update_engine[2428]:         <event eventtype="3" eventresult="2" previousversion="0.0.0.0"></event>
Apr 16 02:01:22.082424 update_engine[2428]:     </app>
Apr 16 02:01:22.082424 update_engine[2428]: </request>
Apr 16 02:01:22.082424 update_engine[2428]: I20260416 02:01:22.082165  2428 libcurl_http_fetcher.cc:47] Starting/Resuming transfer
Apr 16 02:01:22.083134 update_engine[2428]: I20260416 02:01:22.083110  2428 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP
Apr 16 02:01:22.083655 update_engine[2428]: I20260416 02:01:22.083616  2428 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds.
Apr 16 02:01:22.131375 update_engine[2428]: E20260416 02:01:22.131332  2428 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled (Domain name not found)
Apr 16 02:01:22.131455 update_engine[2428]: I20260416 02:01:22.131412  2428 libcurl_http_fetcher.cc:283] No HTTP response, retry 1
Apr 16 02:01:22.342781 sshd[4190]: Invalid user matrix from 185.217.1.246 port 7267
Apr 16 02:01:22.425997 sshd[4190]: Disconnecting invalid user matrix 185.217.1.246 port 7267: Change of username or service not allowed: (matrix,ssh-connection) -> (nexus,ssh-connection) [preauth]
Apr 16 02:01:22.424000 audit[4190]: USER_ERR pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:22.431505 systemd[1]: sshd@158-10.0.0.12:22-185.217.1.246:7267.service: Deactivated successfully.
Apr 16 02:01:22.431782 kernel: audit: type=1109 audit(1776304882.424:688): pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:22.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-10.0.0.12:22-185.217.1.246:7267 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:22.437715 kernel: audit: type=1131 audit(1776304882.430:689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-10.0.0.12:22-185.217.1.246:7267 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:22.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-10.0.0.12:22-185.217.1.246:6989 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:22.911220 systemd[1]: Started sshd@159-10.0.0.12:22-185.217.1.246:6989.service - OpenSSH per-connection server daemon (185.217.1.246:6989).
Apr 16 02:01:22.916626 kernel: audit: type=1130 audit(1776304882.909:690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-10.0.0.12:22-185.217.1.246:6989 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:23.317339 sshd[4196]: Invalid user nexus from 185.217.1.246 port 6989
Apr 16 02:01:23.619689 sshd[4196]: Disconnecting invalid user nexus 185.217.1.246 port 6989: Change of username or service not allowed: (nexus,ssh-connection) -> (vr,ssh-connection) [preauth]
Apr 16 02:01:23.618000 audit[4196]: USER_ERR pid=4196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:23.621997 systemd[1]: sshd@159-10.0.0.12:22-185.217.1.246:6989.service: Deactivated successfully.
Apr 16 02:01:23.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-10.0.0.12:22-185.217.1.246:6989 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:23.628882 kernel: audit: type=1109 audit(1776304883.618:691): pid=4196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:23.628932 kernel: audit: type=1131 audit(1776304883.622:692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-10.0.0.12:22-185.217.1.246:6989 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:23.808235 systemd[1]: Started sshd@160-10.0.0.12:22-185.217.1.246:23570.service - OpenSSH per-connection server daemon (185.217.1.246:23570).
Apr 16 02:01:23.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-10.0.0.12:22-185.217.1.246:23570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:23.815677 kernel: audit: type=1130 audit(1776304883.806:693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-10.0.0.12:22-185.217.1.246:23570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:24.285127 sshd[4202]: Invalid user vr from 185.217.1.246 port 23570
Apr 16 02:01:24.387193 sshd[4202]: Disconnecting invalid user vr 185.217.1.246 port 23570: Change of username or service not allowed: (vr,ssh-connection) -> (openvpn,ssh-connection) [preauth]
Apr 16 02:01:24.386000 audit[4202]: USER_ERR pid=4202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:24.392303 systemd[1]: sshd@160-10.0.0.12:22-185.217.1.246:23570.service: Deactivated successfully.
Apr 16 02:01:24.395904 kernel: audit: type=1109 audit(1776304884.386:694): pid=4202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:24.395967 kernel: audit: type=1131 audit(1776304884.390:695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-10.0.0.12:22-185.217.1.246:23570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:24.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-10.0.0.12:22-185.217.1.246:23570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:25.476111 systemd[3031]: Created slice background.slice - User Background Tasks Slice.
Apr 16 02:01:25.476907 systemd[3031]: Starting systemd-tmpfiles-clean.service - Cleanup of User's Temporary Files and Directories...
Apr 16 02:01:25.489103 systemd[3031]: Finished systemd-tmpfiles-clean.service - Cleanup of User's Temporary Files and Directories.
Apr 16 02:01:25.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@161-10.0.0.12:22-185.217.1.246:18454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:25.765233 systemd[1]: Started sshd@161-10.0.0.12:22-185.217.1.246:18454.service - OpenSSH per-connection server daemon (185.217.1.246:18454).
Apr 16 02:01:25.772702 kernel: audit: type=1130 audit(1776304885.763:696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@161-10.0.0.12:22-185.217.1.246:18454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:25.976033 sshd[4210]: Invalid user openvpn from 185.217.1.246 port 18454
Apr 16 02:01:26.012667 sshd[4210]: Disconnecting invalid user openvpn 185.217.1.246 port 18454: Change of username or service not allowed: (openvpn,ssh-connection) -> (test4,ssh-connection) [preauth]
Apr 16 02:01:26.011000 audit[4210]: USER_ERR pid=4210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:26.018385 systemd[1]: sshd@161-10.0.0.12:22-185.217.1.246:18454.service: Deactivated successfully.
Apr 16 02:01:26.018619 kernel: audit: type=1109 audit(1776304886.011:697): pid=4210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:26.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@161-10.0.0.12:22-185.217.1.246:18454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:26.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@162-10.0.0.12:22-185.217.1.246:62859 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:26.094063 systemd[1]: Started sshd@162-10.0.0.12:22-185.217.1.246:62859.service - OpenSSH per-connection server daemon (185.217.1.246:62859).
Apr 16 02:01:26.614651 sshd[4216]: Invalid user test4 from 185.217.1.246 port 62859
Apr 16 02:01:27.177167 sshd[4216]: Disconnecting invalid user test4 185.217.1.246 port 62859: Change of username or service not allowed: (test4,ssh-connection) -> (ADMIN,ssh-connection) [preauth]
Apr 16 02:01:27.175000 audit[4216]: USER_ERR pid=4216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:27.178951 systemd[1]: sshd@162-10.0.0.12:22-185.217.1.246:62859.service: Deactivated successfully.
Apr 16 02:01:27.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@162-10.0.0.12:22-185.217.1.246:62859 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:27.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-10.0.0.12:22-185.217.1.246:26009 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:27.456375 systemd[1]: Started sshd@163-10.0.0.12:22-185.217.1.246:26009.service - OpenSSH per-connection server daemon (185.217.1.246:26009).
Apr 16 02:01:27.463043 kernel: kauditd_printk_skb: 4 callbacks suppressed
Apr 16 02:01:27.463118 kernel: audit: type=1130 audit(1776304887.454:702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-10.0.0.12:22-185.217.1.246:26009 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:27.874483 sshd[4222]: Invalid user ADMIN from 185.217.1.246 port 26009
Apr 16 02:01:28.046425 sshd[4222]: Disconnecting invalid user ADMIN 185.217.1.246 port 26009: Change of username or service not allowed: (ADMIN,ssh-connection) -> (qaz,ssh-connection) [preauth]
Apr 16 02:01:28.045000 audit[4222]: USER_ERR pid=4222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:28.049816 systemd[1]: sshd@163-10.0.0.12:22-185.217.1.246:26009.service: Deactivated successfully.
Apr 16 02:01:28.055533 kernel: audit: type=1109 audit(1776304888.045:703): pid=4222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:28.055596 kernel: audit: type=1131 audit(1776304888.048:704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-10.0.0.12:22-185.217.1.246:26009 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:28.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-10.0.0.12:22-185.217.1.246:26009 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:28.355271 systemd[1]: Started sshd@164-10.0.0.12:22-185.217.1.246:6906.service - OpenSSH per-connection server daemon (185.217.1.246:6906).
Apr 16 02:01:28.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-10.0.0.12:22-185.217.1.246:6906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:28.361628 kernel: audit: type=1130 audit(1776304888.353:705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-10.0.0.12:22-185.217.1.246:6906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:28.972587 sshd[4228]: Invalid user qaz from 185.217.1.246 port 6906
Apr 16 02:01:29.090112 sshd[4228]: Disconnecting invalid user qaz 185.217.1.246 port 6906: Change of username or service not allowed: (qaz,ssh-connection) -> (dev1,ssh-connection) [preauth]
Apr 16 02:01:29.089000 audit[4228]: USER_ERR pid=4228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:29.092802 systemd[1]: sshd@164-10.0.0.12:22-185.217.1.246:6906.service: Deactivated successfully.
Apr 16 02:01:29.099723 kernel: audit: type=1109 audit(1776304889.089:706): pid=4228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:29.099784 kernel: audit: type=1131 audit(1776304889.091:707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-10.0.0.12:22-185.217.1.246:6906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:29.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-10.0.0.12:22-185.217.1.246:6906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:29.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-10.0.0.12:22-185.217.1.246:36142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:29.517372 systemd[1]: Started sshd@165-10.0.0.12:22-185.217.1.246:36142.service - OpenSSH per-connection server daemon (185.217.1.246:36142).
Apr 16 02:01:29.523675 kernel: audit: type=1130 audit(1776304889.517:708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-10.0.0.12:22-185.217.1.246:36142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:30.108458 sshd[4234]: Invalid user dev1 from 185.217.1.246 port 36142
Apr 16 02:01:30.201577 sshd[4234]: Disconnecting invalid user dev1 185.217.1.246 port 36142: Change of username or service not allowed: (dev1,ssh-connection) -> (apache,ssh-connection) [preauth]
Apr 16 02:01:30.201000 audit[4234]: USER_ERR pid=4234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:30.206643 kernel: audit: type=1109 audit(1776304890.201:709): pid=4234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=185.217.1.246 addr=185.217.1.246 terminal=ssh res=failed'
Apr 16 02:01:30.205168 systemd[1]: sshd@165-10.0.0.12:22-185.217.1.246:36142.service: Deactivated successfully.
Apr 16 02:01:30.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-10.0.0.12:22-185.217.1.246:36142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:30.211621 kernel: audit: type=1131 audit(1776304890.204:710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-10.0.0.12:22-185.217.1.246:36142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:30.310357 systemd[1]: Started sshd@166-10.0.0.12:22-185.217.1.246:4567.service - OpenSSH per-connection server daemon (185.217.1.246:4567).
Apr 16 02:01:30.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@166-10.0.0.12:22-185.217.1.246:4567 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 16 02:01:30.315657 kernel: audit: type=1130 audit(1776304890.310:711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@166-10.0.0.12:22-185.217.1.246:4567 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'