ftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 134.577891] audit: type=1327 audit(1776899819.690:883): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 134.580210] audit: type=1334 audit(1776899819.693:884): prog-id=333 op=UNLOAD [ 138.392932] NET: Registered PF_ALG protocol family This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:03 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:03 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 ip-172-31-19-73 login: [ 139.532817] kauditd_printk_skb: 4865 callbacks suppressed [ 139.534347] audit: type=1325 audit(1776899824.693:2506): table=mangle:108 family=10 entries=5 op=nft_register_chain pid=4441 subj=system_u:system_r:spc_t:s0 comm="ip6tables" [ 139.538267] audit: type=1300 audit(1776899824.693:2506): arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd26bfcc0 a2=0 a3=ffff8c3115c0 items=0 ppid=4062 pid=4441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 139.545121] audit: type=1327 audit(1776899824.693:2506): proctitle=6970367461626C6573002D770035002D74006D616E676C65002D53 [ 139.548214] audit: type=1325 audit(1776899824.697:2507): table=raw:109 family=2 entries=3 op=nft_register_chain pid=4442 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 139.552491] audit: type=1300 audit(1776899824.697:2507): arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffe15faa0 a2=0 a3=ffffb972b5c0 items=0 ppid=4062 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:04 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:04 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 ip-172-31-19-73 login: [ 139.576344] audit: type=1327 audit(1776899824.697:2507): proctitle=69707461626C6573002D770035002D7400726177002D53 [ 139.581116] audit: type=1325 audit(1776899824.699:2508): table=raw:110 family=10 entries=3 op=nft_register_chain pid=4443 subj=system_u:system_r:spc_t:s0 comm="ip6tables" [ 139.584412] audit: type=1300 audit(1776899824.699:2508): arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe3259ed0 a2=0 a3=ffffa49ac5c0 items=0 ppid=4062 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 139.591224] audit: type=1327 audit(1776899824.699:2508): proctitle=6970367461626C6573002D770035002D7400726177002D53 [ 139.684210] audit: type=1325 audit(1776899824.845:2509): table=filter:111 family=2 entries=1 op=nft_register_chain pid=4480 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:05 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:05 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 ip-172-31-19-73 login: [ 141.084025] eth0: renamed from tmp99d19 [ 141.129735] eth0: renamed from tmp0a04b This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:07 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:07 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 ip-172-31-19-73 login: This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:09 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:17:09 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 ip-172-31-19-73 login: [ 147.415765] kauditd_printk_skb: 242 callbacks suppressed [ 147.415771] audit: type=1106 audit(1776899832.577:2590): pid=2335 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 147.422769] audit: type=1104 audit(1776899832.577:2591): pid=2335 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 147.592891] audit: type=1106 audit(1776899832.752:2592): pid=2330 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 147.607191] audit: type=1104 audit(1776899832.752:2593): pid=2330 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 147.612606] audit: type=1131 audit(1776899832.755:2594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.19.73:22-50.85.169.122:38100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.530878] audit: type=1334 audit(1776899835.692:2595): prog-id=1169 op=LOAD [ 150.532894] audit: type=1300 audit(1776899835.692:2595): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd17fe728 a2=74 a3=11 items=0 ppid=4062 pid=4696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 150.541927] audit: type=1327 audit(1776899835.692:2595): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313130325F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 150.550215] audit: type=1334 audit(1776899835.692:2596): prog-id=1169 op=UNLOAD [ 150.553296] audit: type=1300 audit(1776899835.692:2596): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff9a7fef50 a2=74 a3=11 items=0 ppid=4062 pid=4696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 152.726497] kauditd_printk_skb: 467 callbacks suppressed [ 152.726503] audit: type=1325 audit(1776899837.888:2755): table=filter:155 family=2 entries=11 op=nft_register_rule pid=4863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.731226] audit: type=1300 audit(1776899837.888:2755): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe4ead2a0 a2=0 a3=1 items=0 ppid=3603 pid=4863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.737695] audit: type=1327 audit(1776899837.888:2755): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 152.751654] audit: type=1325 audit(1776899837.913:2756): table=nat:156 family=2 entries=45 op=nft_register_chain pid=4863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.755016] audit: type=1300 audit(1776899837.913:2756): arch=c00000b7 syscall=211 success=yes exit=19092 a0=3 a1=ffffe4ead2a0 a2=0 a3=1 items=0 ppid=3603 pid=4863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.761635] audit: type=1327 audit(1776899837.913:2756): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 237.397661] audit: type=1130 audit(1776899922.559:2757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.19.73:22-50.85.169.122:34038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 238.314278] audit: type=1101 audit(1776899923.476:2758): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 238.320886] audit: type=1103 audit(1776899923.482:2759): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 238.326917] audit: type=1006 audit(1776899923.482:2760): pid=4881 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 238.331629] audit: type=1300 audit(1776899923.482:2760): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdb624c80 a2=3 a3=0 items=0 ppid=1 pid=4881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 238.338365] audit: type=1327 audit(1776899923.482:2760): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 238.357283] audit: type=1105 audit(1776899923.519:2761): pid=4881 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 238.364251] audit: type=1103 audit(1776899923.523:2762): pid=4885 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 238.970927] audit: type=1106 audit(1776899924.132:2763): pid=4881 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 238.978492] audit: type=1104 audit(1776899924.132:2764): pid=4881 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 244.144305] kauditd_printk_skb: 1 callbacks suppressed [ 244.144312] audit: type=1130 audit(1776899929.305:2766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.19.73:22-50.85.169.122:34048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 245.034405] audit: type=1101 audit(1776899930.196:2767): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 245.040739] audit: type=1103 audit(1776899930.202:2768): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 245.046910] audit: type=1006 audit(1776899930.203:2769): pid=4899 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 245.051208] audit: type=1300 audit(1776899930.203:2769): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc1e465c0 a2=3 a3=0 items=0 ppid=1 pid=4899 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 245.057869] audit: type=1327 audit(1776899930.203:2769): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 245.082429] audit: type=1105 audit(1776899930.244:2770): pid=4899 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 245.091946] audit: type=1103 audit(1776899930.253:2771): pid=4903 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 245.654426] audit: type=1106 audit(1776899930.815:2772): pid=4899 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 245.665052] audit: type=1104 audit(1776899930.815:2773): pid=4899 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 250.828905] kauditd_printk_skb: 1 callbacks suppressed [ 250.828911] audit: type=1130 audit(1776899935.990:2775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.19.73:22-50.85.169.122:55332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 251.718803] audit: type=1101 audit(1776899936.880:2776): pid=4916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 251.727583] audit: type=1103 audit(1776899936.889:2777): pid=4916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 251.733404] audit: type=1006 audit(1776899936.890:2778): pid=4916 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 251.737907] audit: type=1300 audit(1776899936.890:2778): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffeaecb720 a2=3 a3=0 items=0 ppid=1 pid=4916 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 251.744383] audit: type=1327 audit(1776899936.890:2778): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 251.769657] audit: type=1105 audit(1776899936.931:2779): pid=4916 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 251.777935] audit: type=1103 audit(1776899936.939:2780): pid=4920 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 252.352901] audit: type=1106 audit(1776899937.514:2781): pid=4916 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 252.361663] audit: type=1104 audit(1776899937.514:2782): pid=4916 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 257.524873] kauditd_printk_skb: 1 callbacks suppressed [ 257.524879] audit: type=1130 audit(1776899942.686:2784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.19.73:22-50.85.169.122:58892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 258.405685] audit: type=1101 audit(1776899943.567:2785): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 258.412862] audit: type=1103 audit(1776899943.574:2786): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 258.418335] audit: type=1006 audit(1776899943.574:2787): pid=4936 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 258.423224] audit: type=1300 audit(1776899943.574:2787): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe55d3c00 a2=3 a3=0 items=0 ppid=1 pid=4936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 258.429561] audit: type=1327 audit(1776899943.574:2787): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 258.453074] audit: type=1105 audit(1776899943.614:2788): pid=4936 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 258.460807] audit: type=1103 audit(1776899943.622:2789): pid=4940 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 259.031203] audit: type=1106 audit(1776899944.193:2790): pid=4936 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 259.040289] audit: type=1104 audit(1776899944.193:2791): pid=4936 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 264.206983] kauditd_printk_skb: 1 callbacks suppressed [ 264.206990] audit: type=1130 audit(1776899949.368:2793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.19.73:22-50.85.169.122:58902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 265.080507] audit: type=1101 audit(1776899950.242:2794): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 265.088944] audit: type=1103 audit(1776899950.250:2795): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 265.094540] audit: type=1006 audit(1776899950.250:2796): pid=4953 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 265.098240] audit: type=1300 audit(1776899950.250:2796): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe1b0f820 a2=3 a3=0 items=0 ppid=1 pid=4953 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 265.104849] audit: type=1327 audit(1776899950.250:2796): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 265.126517] audit: type=1105 audit(1776899950.288:2797): pid=4953 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 265.134469] audit: type=1103 audit(1776899950.296:2798): pid=4957 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 265.697746] audit: type=1106 audit(1776899950.859:2799): pid=4953 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 265.706173] audit: type=1104 audit(1776899950.860:2800): pid=4953 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 270.886884] kauditd_printk_skb: 1 callbacks suppressed [ 270.886890] audit: type=1130 audit(1776899956.048:2802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.19.73:22-50.85.169.122:58150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 271.802539] audit: type=1101 audit(1776899956.964:2803): pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 271.810064] audit: type=1103 audit(1776899956.971:2804): pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 271.815939] audit: type=1006 audit(1776899956.971:2805): pid=4971 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 271.819886] audit: type=1300 audit(1776899956.971:2805): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd4178dc0 a2=3 a3=0 items=0 ppid=1 pid=4971 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 271.827165] audit: type=1327 audit(1776899956.971:2805): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 271.855102] audit: type=1105 audit(1776899957.017:2806): pid=4971 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 271.863274] audit: type=1103 audit(1776899957.025:2807): pid=4976 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 272.466420] audit: type=1106 audit(1776899957.627:2808): pid=4971 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 272.474282] audit: type=1104 audit(1776899957.628:2809): pid=4971 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 277.637654] kauditd_printk_skb: 1 callbacks suppressed [ 277.637660] audit: type=1130 audit(1776899962.799:2811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.19.73:22-50.85.169.122:41096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.542680] audit: type=1101 audit(1776899963.704:2812): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 278.550577] audit: type=1103 audit(1776899963.712:2813): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 278.556005] audit: type=1006 audit(1776899963.712:2814): pid=4989 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 278.559866] audit: type=1300 audit(1776899963.712:2814): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc5042310 a2=3 a3=0 items=0 ppid=1 pid=4989 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 278.567746] audit: type=1327 audit(1776899963.712:2814): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 278.592161] audit: type=1105 audit(1776899963.754:2815): pid=4989 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 278.600304] audit: type=1103 audit(1776899963.762:2816): pid=4993 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 279.179901] audit: type=1106 audit(1776899964.341:2817): pid=4989 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 279.187876] audit: type=1104 audit(1776899964.341:2818): pid=4989 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 282.729920] kauditd_printk_skb: 20 callbacks suppressed [ 282.729925] audit: type=1106 audit(1776899967.891:2835): pid=5021 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 282.742177] audit: type=1104 audit(1776899967.892:2836): pid=5021 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 282.747714] audit: type=1131 audit(1776899967.901:2837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.19.73:22-50.85.169.122:41118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 287.910773] audit: type=1130 audit(1776899973.072:2838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.19.73:22-50.85.169.122:58334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 288.824796] audit: type=1101 audit(1776899973.986:2839): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 288.832704] audit: type=1103 audit(1776899973.994:2840): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 288.838453] audit: type=1006 audit(1776899973.995:2841): pid=5039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 288.842936] audit: type=1300 audit(1776899973.995:2841): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc785f330 a2=3 a3=0 items=0 ppid=1 pid=5039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 288.849593] audit: type=1327 audit(1776899973.995:2841): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 288.868535] audit: type=1105 audit(1776899974.030:2842): pid=5039 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 288.876397] audit: type=1103 audit(1776899974.038:2843): pid=5043 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 289.483552] audit: type=1106 audit(1776899974.645:2844): pid=5039 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 289.492869] audit: type=1104 audit(1776899974.646:2845): pid=5039 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 294.667556] kauditd_printk_skb: 1 callbacks suppressed [ 294.667562] audit: type=1130 audit(1776899979.828:2847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.19.73:22-50.85.169.122:39318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 295.573934] audit: type=1101 audit(1776899980.735:2848): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 295.581076] audit: type=1103 audit(1776899980.742:2849): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 295.587010] audit: type=1006 audit(1776899980.742:2850): pid=5055 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 295.590422] audit: type=1300 audit(1776899980.742:2850): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc5fe62e0 a2=3 a3=0 items=0 ppid=1 pid=5055 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 295.596663] audit: type=1327 audit(1776899980.742:2850): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 295.617726] audit: type=1105 audit(1776899980.778:2851): pid=5055 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 295.624796] audit: type=1103 audit(1776899980.778:2852): pid=5059 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 296.218911] audit: type=1106 audit(1776899981.379:2853): pid=5055 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 296.226327] audit: type=1104 audit(1776899981.379:2854): pid=5055 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 301.390865] kauditd_printk_skb: 1 callbacks suppressed [ 301.390871] audit: type=1130 audit(1776899986.551:2856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.19.73:22-50.85.169.122:39330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 302.272477] audit: type=1101 audit(1776899987.433:2857): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 302.279012] audit: type=1103 audit(1776899987.440:2858): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 302.284604] audit: type=1006 audit(1776899987.440:2859): pid=5072 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 302.288791] audit: type=1300 audit(1776899987.440:2859): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffcc99e80 a2=3 a3=0 items=0 ppid=1 pid=5072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 302.295113] audit: type=1327 audit(1776899987.440:2859): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 302.319802] audit: type=1105 audit(1776899987.480:2860): pid=5072 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 302.328358] audit: type=1103 audit(1776899987.489:2861): pid=5076 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 302.901137] audit: type=1106 audit(1776899988.062:2862): pid=5072 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 302.908191] audit: type=1104 audit(1776899988.062:2863): pid=5072 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 306.953082] kauditd_printk_skb: 20 callbacks suppressed [ 306.953087] audit: type=1325 audit(1776899992.113:2880): table=filter:157 family=2 entries=20 op=nft_register_rule pid=5115 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 306.958253] audit: type=1300 audit(1776899992.113:2880): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe3543b50 a2=0 a3=1 items=0 ppid=3603 pid=5115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 306.964886] audit: type=1327 audit(1776899992.113:2880): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 306.969628] audit: type=1325 audit(1776899992.130:2881): table=nat:158 family=2 entries=18 op=nft_register_rule pid=5115 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 306.973588] audit: type=1300 audit(1776899992.130:2881): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffe3543b50 a2=0 a3=1 items=0 ppid=3603 pid=5115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 306.987554] audit: type=1327 audit(1776899992.130:2881): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 307.155315] audit: type=1106 audit(1776899992.316:2882): pid=5100 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 307.163786] audit: type=1104 audit(1776899992.316:2883): pid=5100 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 307.171935] audit: type=1131 audit(1776899992.326:2884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.19.73:22-50.85.169.122:37044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 307.335871] audit: type=1130 audit(1776899992.496:2885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.19.73:22-50.85.169.122:37058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 315.998395] kauditd_printk_skb: 27 callbacks suppressed [ 315.998402] audit: type=1130 audit(1776900001.159:2905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.19.73:22-50.85.169.122:38108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 316.882066] audit: type=1101 audit(1776900002.043:2906): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 316.891916] audit: type=1103 audit(1776900002.052:2907): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 316.897555] audit: type=1006 audit(1776900002.052:2908): pid=5154 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 316.901399] audit: type=1300 audit(1776900002.052:2908): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe3a75b60 a2=3 a3=0 items=0 ppid=1 pid=5154 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 316.908622] audit: type=1327 audit(1776900002.052:2908): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 316.933676] audit: type=1105 audit(1776900002.094:2909): pid=5154 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 316.941621] audit: type=1103 audit(1776900002.102:2910): pid=5158 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 317.512898] audit: type=1106 audit(1776900002.673:2911): pid=5154 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 317.522029] audit: type=1104 audit(1776900002.673:2912): pid=5154 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 322.701461] kauditd_printk_skb: 7 callbacks suppressed [ 322.701467] audit: type=1130 audit(1776900007.862:2916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.19.73:22-50.85.169.122:38120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 323.612950] audit: type=1101 audit(1776900008.774:2917): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 323.621602] audit: type=1103 audit(1776900008.782:2918): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 323.630933] audit: type=1006 audit(1776900008.782:2919): pid=5171 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 323.635294] audit: type=1300 audit(1776900008.782:2919): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc5a5cd30 a2=3 a3=0 items=0 ppid=1 pid=5171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 323.644260] audit: type=1327 audit(1776900008.782:2919): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 323.665510] audit: type=1105 audit(1776900008.826:2920): pid=5171 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 323.672711] audit: type=1103 audit(1776900008.831:2921): pid=5175 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 324.256877] audit: type=1106 audit(1776900009.416:2922): pid=5171 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 324.264409] audit: type=1104 audit(1776900009.416:2923): pid=5171 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 329.424528] kauditd_printk_skb: 1 callbacks suppressed [ 329.424535] audit: type=1130 audit(1776900014.585:2925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.19.73:22-50.85.169.122:38034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 330.309942] audit: type=1101 audit(1776900015.470:2926): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 330.318148] audit: type=1103 audit(1776900015.478:2927): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 330.324693] audit: type=1006 audit(1776900015.478:2928): pid=5188 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 330.330970] audit: type=1300 audit(1776900015.478:2928): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff92b0590 a2=3 a3=0 items=0 ppid=1 pid=5188 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 330.342931] audit: type=1327 audit(1776900015.478:2928): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 330.370250] audit: type=1105 audit(1776900015.531:2929): pid=5188 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 330.381893] audit: type=1103 audit(1776900015.541:2930): pid=5199 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 330.924878] audit: type=1106 audit(1776900016.084:2931): pid=5188 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 330.931968] audit: type=1104 audit(1776900016.084:2932): pid=5188 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 334.563665] kauditd_printk_skb: 9 callbacks suppressed [ 334.563671] audit: type=1334 audit(1776900019.724:2940): prog-id=168 op=UNLOAD [ 334.568242] audit: type=1334 audit(1776900019.724:2941): prog-id=172 op=UNLOAD [ 334.617043] audit: type=1334 audit(1776900019.778:2942): prog-id=1185 op=UNLOAD [ 334.619680] audit: type=1334 audit(1776900019.778:2943): prog-id=1218 op=UNLOAD [ 334.758397] audit: type=1334 audit(1776900019.919:2944): prog-id=153 op=UNLOAD [ 334.761440] audit: type=1334 audit(1776900019.919:2945): prog-id=157 op=UNLOAD [ 334.790389] audit: type=1334 audit(1776900019.951:2946): prog-id=140 op=UNLOAD [ 334.792583] audit: type=1334 audit(1776900019.951:2947): prog-id=144 op=UNLOAD This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:20:20 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:20:20 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 ip-172-31-19-73 login: [ 336.551222] audit: type=1106 audit(1776900021.712:2948): pid=5212 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 336.558562] audit: type=1104 audit(1776900021.712:2949): pid=5212 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 339.679791] kauditd_printk_skb: 9 callbacks suppressed [ 339.679797] audit: type=1106 audit(1776900024.840:2957): pid=5361 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 339.690684] audit: type=1104 audit(1776900024.840:2958): pid=5361 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 339.697045] audit: type=1131 audit(1776900024.851:2959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.19.73:22-50.85.169.122:49816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 339.861717] audit: type=1130 audit(1776900025.022:2960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.19.73:22-50.85.169.122:49820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 340.035579] audit: type=1334 audit(1776900025.196:2961): prog-id=1267 op=LOAD [ 340.038270] audit: type=1334 audit(1776900025.199:2962): prog-id=1268 op=LOAD [ 340.040155] audit: type=1300 audit(1776900025.199:2962): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001a0180 a2=98 a3=0 items=0 ppid=5394 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 340.046245] audit: type=1327 audit(1776900025.199:2962): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139633466663737303261663435373437616337643062353761636663 [ 340.052266] audit: type=1334 audit(1776900025.199:2963): prog-id=1268 op=UNLOAD [ 340.053969] audit: type=1300 audit(1776900025.199:2963): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5394 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 344.718890] kauditd_printk_skb: 144 callbacks suppressed [ 344.718896] audit: type=1334 audit(1776900029.879:3027): prog-id=1295 op=LOAD [ 344.723205] audit: type=1300 audit(1776900029.879:3027): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc50a4698 a2=74 a3=0 items=0 ppid=5636 pid=5695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 344.731231] audit: type=1327 audit(1776900029.879:3027): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 344.733737] audit: type=1334 audit(1776900029.883:3028): prog-id=1295 op=UNLOAD [ 344.736430] audit: type=1300 audit(1776900029.883:3028): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffbcd91f10 a2=74 a3=0 items=0 ppid=5636 pid=5695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 344.742883] audit: type=1327 audit(1776900029.883:3028): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 344.745426] audit: type=1334 audit(1776900029.883:3029): prog-id=1296 op=LOAD [ 344.747187] audit: type=1300 audit(1776900029.883:3029): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc50a36d8 a2=90 a3=2 items=0 ppid=5636 pid=5695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 344.754185] audit: type=1327 audit(1776900029.883:3029): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 344.757644] audit: type=1334 audit(1776900029.883:3030): prog-id=1296 op=UNLOAD [ 345.794968] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 349.723190] kauditd_printk_skb: 5875 callbacks suppressed [ 349.723195] audit: type=1325 audit(1776900034.884:4990): table=nat:200 family=2 entries=1 op=nft_register_rule pid=6058 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 349.728040] audit: type=1300 audit(1776900034.884:4990): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff4d25580 a2=0 a3=ffff9d30f5c0 items=0 ppid=5636 pid=6058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 349.734479] audit: type=1327 audit(1776900034.884:4990): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F5052455F6E6174002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E61742043494C [ 349.740416] audit: type=1325 audit(1776900034.893:4991): table=nat:201 family=2 entries=1 op=nft_register_rule pid=6059 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 349.743524] audit: type=1300 audit(1776900034.893:4991): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc1c0c710 a2=0 a3=ffffaaba05c0 items=0 ppid=5636 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 349.749994] audit: type=1327 audit(1776900034.893:4991): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F5052455F6E6174002D6D006D61726B002D2D6D61726B00307830303030306530302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E61742043494C [ 349.756241] audit: type=1325 audit(1776900034.900:4992): table=nat:202 family=2 entries=1 op=nft_register_rule pid=6060 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 349.759856] audit: type=1300 audit(1776900034.900:4992): arch=c00000b7 syscall=211 success=yes exit=604 a0=3 a1=ffffdb9b89e0 a2=0 a3=ffff8b1575c0 items=0 ppid=5636 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 349.766422] audit: type=1327 audit(1776900034.900:4992): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F4F55545055545F6E6174002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E617420 [ 349.772613] audit: type=1325 audit(1776900034.905:4993): table=nat:203 family=2 entries=1 op=nft_register_rule pid=6061 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:20:38 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 This is ip-172-31-19-73 (Linux aarch64 6.12.81-flatcar) 23:20:38 SSH host key: SHA256:KgOlAKNWk+ZxAMWAByRWyVUWdy6m0nafBvQlP/HkE4o (RSA) SSH host key: SHA256:aTcML7amrqx2ipRDAnq9O/B5FfgJAbBIevV/6iT6o8Y (ED25519) SSH host key: SHA256:T1Kcnko2+mfydgzT2naY9I0JoGATpko/Ur7dJnDAA7Q (ECDSA) eth0: 172.31.19.73 fe80::44b:85ff:fea2:e131 ip-172-31-19-73 login: [ 356.496669] kauditd_printk_skb: 351 callbacks suppressed [ 356.496675] audit: type=1106 audit(1776900041.659:5117): pid=5521 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 356.513616] audit: type=1104 audit(1776900041.660:5118): pid=5521 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 356.524127] audit: type=1131 audit(1776900041.670:5119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.19.73:22-50.85.169.122:49828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 360.671975] audit: type=1334 audit(1776900045.834:5120): prog-id=2278 op=LOAD [ 360.673611] audit: type=1300 audit(1776900045.834:5120): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd7c0dc88 a2=74 a3=11 items=0 ppid=5636 pid=6287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 360.682324] audit: type=1327 audit(1776900045.834:5120): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003331365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 360.687621] audit: type=1334 audit(1776900045.834:5121): prog-id=2278 op=UNLOAD [ 360.689381] audit: type=1300 audit(1776900045.834:5121): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffb0a39f50 a2=74 a3=11 items=0 ppid=5636 pid=6287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 360.695472] audit: type=1327 audit(1776900045.834:5121): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003331365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 360.700634] audit: type=1334 audit(1776900045.834:5122): prog-id=2279 op=LOAD