687] audit: type=1130 audit(1779818428.776:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.839368] audit: type=1131 audit(1779818428.776:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.852657] audit: type=1130 audit(1779818428.797:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.905507] audit: type=1130 audit(1779818428.850:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.905514] audit: type=1131 audit(1779818428.850:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.940936] audit: type=1130 audit(1779818428.885:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.969466] audit: type=1131 audit(1779818428.914:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.983438] audit: type=1131 audit(1779818428.928:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.990741] audit: type=1131 audit(1779818428.935:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.203021] systemd-journald[291]: Received SIGTERM from PID 1 (systemd). [ 11.814479] SELinux: policy capability network_peer_controls=1 [ 11.815820] SELinux: policy capability open_perms=1 [ 11.816946] SELinux: policy capability extended_socket_class=1 [ 11.818186] SELinux: policy capability always_check_network=0 [ 11.819419] SELinux: policy capability cgroup_seclabel=1 [ 11.820571] SELinux: policy capability nnp_nosuid_transition=1 [ 11.821742] SELinux: policy capability genfs_seclabel_symlinks=0 [ 11.822981] SELinux: policy capability ioctl_skip_cloexec=0 [ 11.824129] SELinux: policy capability userspace_initial_context=0 [ 11.843696] systemd[1]: Successfully loaded SELinux policy in 62.199ms. [ 11.993049] systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 7.206ms. [ 11.996911] systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) [ 12.003425] systemd[1]: Detected virtualization amazon. [ 12.004619] systemd[1]: Detected architecture x86-64. [ 12.005839] systemd[1]: Detected first boot. [ 12.008255] systemd[1]: Initializing machine ID from SMBIOS/DMI UUID. [ 12.112482] zram_generator::config[1361]: No configuration found. [ 12.124113] Guest personality initialized and is inactive [ 12.125346] VMCI host device registered (name=vmci, major=10, minor=258) [ 12.126592] Initialized host personality [ 12.131541] NET: Registered PF_VSOCK protocol family [ 12.691623] systemd[1]: Populated /etc with preset unit settings. [ 12.923625] systemd[1]: initrd-switch-root.service: Deactivated successfully. [ 12.924995] systemd[1]: Stopped initrd-switch-root.service - Switch Root. [ 12.928711] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 12.931070] systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. [ 12.933402] systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. [ 12.935571] systemd[1]: Created slice system-getty.slice - Slice /system/getty. [ 12.937642] systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. [ 12.939724] systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. [ 12.941906] systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. [ 12.944623] systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. [ 12.946794] systemd[1]: Created slice user.slice - User and Session Slice. [ 12.948388] systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. [ 12.950666] systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. [ 12.953038] systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. [ 12.956200] systemd[1]: Set up automount boot.automount - Boot partition Automount Point. [ 12.958315] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. [ 12.960920] systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... [ 12.963036] systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... [ 12.964558] systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). [ 12.966364] systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. [ 12.967979] systemd[1]: Stopped target initrd-switch-root.target - Switch Root. [ 12.969555] systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. [ 12.971079] systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. [ 12.972731] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. [ 12.974515] systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. [ 12.976190] systemd[1]: Reached target remote-fs.target - Remote File Systems. [ 12.977727] systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. [ 12.979887] systemd[1]: Reached target slices.target - Slice Units. [ 12.981323] systemd[1]: Reached target swap.target - Swaps. [ 12.982676] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. [ 12.986049] systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. [ 12.988669] systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. [ 12.997904] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 13.006734] systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. [ 13.011457] systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. [ 13.013867] systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. [ 13.016750] systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. [ 13.026323] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 13.028501] systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. [ 13.032623] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 13.039138] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 13.044336] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 13.052626] systemd[1]: Mounting media.mount - External Media Directory... [ 13.055655] systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 13.063344] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 13.071325] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 13.079371] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 13.082183] systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). [ 13.085741] systemd[1]: Reached target machines.target - Containers. [ 13.097387] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 13.100119] systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. [ 13.107415] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 13.112691] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 13.120779] systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... [ 13.126528] systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... [ 13.133861] systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... [ 13.138972] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 13.146404] systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... [ 13.150893] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 13.156366] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 13.158446] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 13.164162] systemd[1]: systemd-fsck-usr.service: Deactivated successfully. [ 13.167403] systemd[1]: Stopped systemd-fsck-usr.service. [ 13.170243] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). [ 13.182469] systemd[1]: Starting systemd-journald.service - Journal Service... [ 13.221414] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 13.229483] systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... [ 13.235782] systemd-journald[1439]: Collecting audit messages is enabled. [ 13.238258] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 13.256328] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 13.262670] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 13.267025] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 13.274646] systemd[1]: Started systemd-journald.service - Journal Service. [ 13.293468] fuse: init (API version 7.41) [ 13.464350] systemd-journald[1439]: Received client request to flush runtime journal. [ 13.478843] loop1: detected capacity change from 0 to 217752 [ 13.484400] ACPI: bus type drm_connector registered [ 13.909788] loop2: detected capacity change from 0 to 111560 [ 14.269370] loop3: detected capacity change from 0 to 50784 [ 14.878949] loop4: detected capacity change from 0 to 73176 [ 14.925713] mousedev: PS/2 mouse device common for all mice [ 14.983353] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input4 [ 14.994257] ACPI: button: Power Button [PWRF] [ 14.996922] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input5 [ 15.002198] ACPI: button: Sleep Button [SLPF] [ 15.012145] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 15.280358] loop5: detected capacity change from 0 to 217752 [ 15.347883] loop6: detected capacity change from 0 to 111560 [ 15.480357] loop7: detected capacity change from 0 to 50784 [ 15.544263] loop1: detected capacity change from 0 to 73176 [ 15.659809] zram_generator::config[1711]: No configuration found. [ 15.963259] kauditd_printk_skb: 113 callbacks suppressed [ 15.963263] audit: type=1130 audit(1779818433.908:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 15.968997] audit: type=1130 audit(1779818433.913:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 15.995271] audit: type=1334 audit(1779818433.938:161): prog-id=31 op=LOAD [ 15.996486] audit: type=1334 audit(1779818433.938:162): prog-id=15 op=UNLOAD [ 15.996490] audit: type=1334 audit(1779818433.939:163): prog-id=32 op=LOAD [ 15.996492] audit: type=1334 audit(1779818433.939:164): prog-id=33 op=LOAD [ 15.996494] audit: type=1334 audit(1779818433.939:165): prog-id=16 op=UNLOAD [ 15.996496] audit: type=1334 audit(1779818433.939:166): prog-id=17 op=UNLOAD [ 15.997055] audit: type=1334 audit(1779818433.941:167): prog-id=34 op=LOAD [ 16.010269] audit: type=1334 audit(1779818433.953:168): prog-id=30 op=UNLOAD [ 16.142979] zram_generator::config[1799]: No configuration found. [ 17.713250] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 17.743085] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/05/26 18:00:38Z: Amazon SSM Agent v3.3.0.0 is running 2026/05/26 18:00:38Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/05/26 18:00:38Z: OsVersion: 4593.2.2 [!p]104[?7h This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:00:42 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:00:42 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 ip-172-31-23-140 login: [ 41.417537] kauditd_printk_skb: 73 callbacks suppressed [ 41.417541] audit: type=1305 audit(1779818460.342:240): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 41.424938] audit: type=1300 audit(1779818460.342:240): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe62e2f490 a2=420 a3=0 items=0 ppid=2322 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 41.433492] audit: type=1327 audit(1779818460.342:240): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 41.435231] audit: type=1130 audit(1779818460.355:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.438180] audit: type=1131 audit(1779818460.355:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.441127] audit: type=1106 audit(1779818460.357:243): pid=2316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.444361] audit: type=1104 audit(1779818460.357:244): pid=2316 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.603914] audit: type=1106 audit(1779818460.528:245): pid=2311 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 41.612118] audit: type=1104 audit(1779818460.528:246): pid=2311 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 41.617370] audit: type=1131 audit(1779818460.530:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.23.140:22-20.229.252.112:45392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.022887] Initializing XFRM netlink socket [ 46.506578] kauditd_printk_skb: 133 callbacks suppressed [ 46.506582] audit: type=1130 audit(1779818465.431:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:06 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:06 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 ip-172-31-23-140 login: [ 49.040865] audit: type=1131 audit(1779818467.965:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 49.061269] audit: type=1334 audit(1779818467.986:301): prog-id=66 op=UNLOAD [ 56.536536] audit: type=1130 audit(1779818475.461:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.666216] audit: type=1131 audit(1779818475.590:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 60.355483] audit: type=1130 audit(1779818479.280:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.362001] audit: type=1131 audit(1779818479.280:305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.556114] zram_generator::config[2886]: No configuration found. [ 60.874770] audit: type=1334 audit(1779818479.799:306): prog-id=70 op=LOAD [ 60.876169] audit: type=1334 audit(1779818479.799:307): prog-id=48 op=UNLOAD [ 60.880128] audit: type=1334 audit(1779818479.799:308): prog-id=71 op=LOAD [ 60.883210] audit: type=1334 audit(1779818479.799:309): prog-id=72 op=LOAD [ 60.885208] audit: type=1334 audit(1779818479.799:310): prog-id=55 op=UNLOAD [ 60.886598] audit: type=1334 audit(1779818479.799:311): prog-id=56 op=UNLOAD [ 61.577362] kauditd_printk_skb: 36 callbacks suppressed [ 61.577367] audit: type=1325 audit(1779818480.501:348): table=mangle:42 family=2 entries=2 op=nft_register_chain pid=2965 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.585723] audit: type=1300 audit(1779818480.501:348): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe4cd111a0 a2=0 a3=0 items=0 ppid=2949 pid=2965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.591877] audit: type=1327 audit(1779818480.501:348): proctitle=69707461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 61.595231] audit: type=1325 audit(1779818480.502:349): table=filter:43 family=2 entries=1 op=nft_register_chain pid=2966 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.598696] audit: type=1300 audit(1779818480.502:349): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5e9c7550 a2=0 a3=0 items=0 ppid=2949 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.607734] audit: type=1327 audit(1779818480.502:349): proctitle=69707461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 61.611615] audit: type=1325 audit(1779818480.521:350): table=filter:44 family=2 entries=2 op=nft_register_chain pid=2968 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.614861] audit: type=1300 audit(1779818480.521:350): arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7ffc95bcf330 a2=0 a3=0 items=0 ppid=2949 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.620989] audit: type=1327 audit(1779818480.521:350): proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C [ 61.643405] audit: type=1325 audit(1779818480.566:351): table=filter:45 family=2 entries=2 op=nft_register_chain pid=2971 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 68.367630] zram_generator::config[3462]: No configuration found. [ 68.713100] kauditd_printk_skb: 158 callbacks suppressed [ 68.713103] audit: type=1131 audit(1779818487.637:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.722222] audit: type=1334 audit(1779818487.646:409): prog-id=120 op=LOAD [ 68.725447] audit: type=1334 audit(1779818487.648:410): prog-id=76 op=UNLOAD [ 68.726832] audit: type=1334 audit(1779818487.648:411): prog-id=121 op=LOAD [ 68.728074] audit: type=1334 audit(1779818487.648:412): prog-id=122 op=LOAD [ 68.729382] audit: type=1334 audit(1779818487.648:413): prog-id=77 op=UNLOAD [ 68.730680] audit: type=1334 audit(1779818487.648:414): prog-id=78 op=UNLOAD [ 68.733592] audit: type=1334 audit(1779818487.649:415): prog-id=123 op=LOAD [ 68.735153] audit: type=1334 audit(1779818487.649:416): prog-id=85 op=UNLOAD [ 68.736681] audit: type=1334 audit(1779818487.658:417): prog-id=124 op=LOAD [ 74.352634] kauditd_printk_skb: 42 callbacks suppressed [ 74.352638] audit: type=1334 audit(1779818493.276:460): prog-id=140 op=LOAD [ 74.355732] audit: type=1334 audit(1779818493.277:461): prog-id=141 op=LOAD [ 74.361112] audit: type=1300 audit(1779818493.277:461): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3610 pid=3622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.366950] audit: type=1327 audit(1779818493.277:461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643038366331643338613638333833623231393130316139363131 [ 74.373049] audit: type=1334 audit(1779818493.277:462): prog-id=141 op=UNLOAD [ 74.374805] audit: type=1300 audit(1779818493.277:462): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3610 pid=3622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.380543] audit: type=1327 audit(1779818493.277:462): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643038366331643338613638333833623231393130316139363131 [ 74.392933] audit: type=1334 audit(1779818493.277:463): prog-id=142 op=LOAD [ 74.395535] audit: type=1300 audit(1779818493.277:463): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3610 pid=3622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.404655] audit: type=1327 audit(1779818493.277:463): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643038366331643338613638333833623231393130316139363131 [ 86.971979] kauditd_printk_skb: 224 callbacks suppressed [ 86.971982] audit: type=1334 audit(1779818505.896:540): prog-id=158 op=LOAD [ 86.974964] audit: type=1334 audit(1779818505.899:541): prog-id=159 op=LOAD [ 86.976385] audit: type=1300 audit(1779818505.899:541): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3636 pid=3934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.982678] audit: type=1327 audit(1779818505.899:541): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316538363330623130336339303163396536636533313938393136 [ 86.988549] audit: type=1334 audit(1779818505.899:542): prog-id=159 op=UNLOAD [ 86.989981] audit: type=1300 audit(1779818505.899:542): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3636 pid=3934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.995645] audit: type=1327 audit(1779818505.899:542): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316538363330623130336339303163396536636533313938393136 [ 87.001593] audit: type=1334 audit(1779818505.899:543): prog-id=160 op=LOAD [ 87.003392] audit: type=1300 audit(1779818505.899:543): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3636 pid=3934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.009476] audit: type=1327 audit(1779818505.899:543): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316538363330623130336339303163396536636533313938393136 [ 91.973545] kauditd_printk_skb: 1448 callbacks suppressed [ 91.973549] audit: type=1334 audit(1779818510.898:1034): prog-id=407 op=LOAD [ 91.983248] audit: type=1300 audit(1779818510.898:1034): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcb177140 a2=90 a3=2 items=0 ppid=4161 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 91.997090] audit: type=1327 audit(1779818510.898:1034): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.002257] audit: type=1334 audit(1779818510.907:1035): prog-id=407 op=UNLOAD [ 92.004429] audit: type=1300 audit(1779818510.907:1035): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffdcb177140 a2=90 a3=2 items=0 ppid=4161 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.010632] audit: type=1327 audit(1779818510.907:1035): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.013064] audit: type=1334 audit(1779818510.907:1036): prog-id=408 op=LOAD [ 92.014473] audit: type=1300 audit(1779818510.907:1036): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcb177140 a2=90 a3=2 items=0 ppid=4161 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.020513] audit: type=1327 audit(1779818510.907:1036): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.023251] audit: type=1334 audit(1779818510.907:1037): prog-id=408 op=UNLOAD [ 95.507716] NET: Registered PF_ALG protocol family This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:54 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:54 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 ip-172-31-23-140 login: This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:55 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:55 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 ip-172-31-23-140 login: [ 96.894486] eth0: renamed from tmp3d1c5 [ 96.932201] eth0: renamed from tmp20f22 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:56 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:56 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 ip-172-31-23-140 login: [ 97.897669] kauditd_printk_skb: 4550 callbacks suppressed [ 97.897673] audit: type=1334 audit(1779818516.822:2554): prog-id=1145 op=LOAD [ 97.902112] audit: type=1300 audit(1779818516.822:2554): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdb21dfa80 a2=74 a3=7ffdb21dfa80 items=0 ppid=4161 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.910690] audit: type=1327 audit(1779818516.822:2554): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313935315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.918256] audit: type=1334 audit(1779818516.822:2555): prog-id=1145 op=UNLOAD [ 97.920668] audit: type=1300 audit(1779818516.822:2555): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffdb21dfa80 a2=74 a3=7ffdb21dfa80 items=0 ppid=4161 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.930291] audit: type=1327 audit(1779818516.822:2555): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313935315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.937581] audit: type=1334 audit(1779818516.822:2556): prog-id=1146 op=LOAD [ 97.939426] audit: type=1300 audit(1779818516.822:2556): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdb21dfa10 a2=80 a3=0 items=0 ppid=4161 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.945417] audit: type=1327 audit(1779818516.822:2556): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313935315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.950318] audit: type=1334 audit(1779818516.822:2557): prog-id=1146 op=UNLOAD This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:58 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:58 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 ip-172-31-23-140 login: This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:59 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:01:59 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 ip-172-31-23-140 login: [ 103.178870] kauditd_printk_skb: 573 callbacks suppressed [ 103.178874] audit: type=1325 audit(1779818522.103:2751): table=filter:153 family=2 entries=14 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.192250] audit: type=1300 audit(1779818522.103:2751): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe460585d0 a2=0 a3=7ffe460585bc items=0 ppid=3747 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.230203] audit: type=1327 audit(1779818522.103:2751): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 103.252218] audit: type=1325 audit(1779818522.155:2752): table=nat:154 family=2 entries=12 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.257421] audit: type=1300 audit(1779818522.155:2752): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe460585d0 a2=0 a3=0 items=0 ppid=3747 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.271213] audit: type=1327 audit(1779818522.155:2752): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 104.356625] audit: type=1325 audit(1779818523.275:2753): table=filter:155 family=2 entries=14 op=nft_register_rule pid=4822 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 104.361791] audit: type=1300 audit(1779818523.275:2753): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc53b0d0d0 a2=0 a3=7ffc53b0d0bc items=0 ppid=3747 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.369426] audit: type=1327 audit(1779818523.275:2753): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 104.375143] audit: type=1325 audit(1779818523.299:2754): table=nat:156 family=2 entries=12 op=nft_register_rule pid=4822 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.748029] kauditd_printk_skb: 2 callbacks suppressed [ 112.748034] audit: type=1325 audit(1779818531.672:2755): table=filter:157 family=2 entries=11 op=nft_register_rule pid=4840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.752232] audit: type=1300 audit(1779818531.672:2755): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc8fe53d60 a2=0 a3=7ffc8fe53d4c items=0 ppid=3747 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.758907] audit: type=1327 audit(1779818531.672:2755): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 112.762132] audit: type=1325 audit(1779818531.686:2756): table=nat:158 family=2 entries=33 op=nft_register_chain pid=4840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.765496] audit: type=1300 audit(1779818531.686:2756): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffc8fe53d60 a2=0 a3=7ffc8fe53d4c items=0 ppid=3747 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.771894] audit: type=1327 audit(1779818531.686:2756): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.817009] audit: type=1325 audit(1779818532.741:2757): table=filter:159 family=2 entries=8 op=nft_register_rule pid=4842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.820084] audit: type=1300 audit(1779818532.741:2757): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd7db1f9d0 a2=0 a3=7ffd7db1f9bc items=0 ppid=3747 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.825894] audit: type=1327 audit(1779818532.741:2757): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.841979] audit: type=1325 audit(1779818532.765:2758): table=nat:160 family=2 entries=54 op=nft_register_chain pid=4842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.036640] kauditd_printk_skb: 2 callbacks suppressed [ 131.036644] audit: type=1130 audit(1779818549.961:2759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.23.140:22-20.229.252.112:41460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.954424] audit: type=1101 audit(1779818550.879:2760): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 131.960759] audit: type=1103 audit(1779818550.880:2761): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 131.966346] audit: type=1006 audit(1779818550.881:2762): pid=4848 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 131.970894] audit: type=1300 audit(1779818550.881:2762): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe5cba6370 a2=3 a3=0 items=0 ppid=1 pid=4848 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.977940] audit: type=1327 audit(1779818550.881:2762): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 131.991676] audit: type=1105 audit(1779818550.916:2763): pid=4848 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 131.999755] audit: type=1103 audit(1779818550.924:2764): pid=4852 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 133.197505] audit: type=1106 audit(1779818552.122:2765): pid=4848 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 133.215618] audit: type=1104 audit(1779818552.122:2766): pid=4848 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 138.367822] kauditd_printk_skb: 1 callbacks suppressed [ 138.367827] audit: type=1130 audit(1779818557.292:2768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.23.140:22-20.229.252.112:41466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 139.232742] audit: type=1101 audit(1779818558.157:2769): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 139.239418] audit: type=1103 audit(1779818558.157:2770): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 139.245432] audit: type=1006 audit(1779818558.157:2771): pid=4868 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 139.248787] audit: type=1300 audit(1779818558.157:2771): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdfed75680 a2=3 a3=0 items=0 ppid=1 pid=4868 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.255259] audit: type=1327 audit(1779818558.157:2771): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 139.262827] audit: type=1105 audit(1779818558.187:2772): pid=4868 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 139.269666] audit: type=1103 audit(1779818558.189:2773): pid=4872 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 139.836038] audit: type=1106 audit(1779818558.760:2774): pid=4868 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 139.844472] audit: type=1104 audit(1779818558.760:2775): pid=4868 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 145.007562] kauditd_printk_skb: 1 callbacks suppressed [ 145.007566] audit: type=1130 audit(1779818563.931:2777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.23.140:22-20.229.252.112:40274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.884106] audit: type=1101 audit(1779818564.808:2778): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 145.890649] audit: type=1103 audit(1779818564.811:2779): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 145.896777] audit: type=1006 audit(1779818564.811:2780): pid=4887 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 145.900477] audit: type=1300 audit(1779818564.811:2780): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd89105370 a2=3 a3=0 items=0 ppid=1 pid=4887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.912272] audit: type=1327 audit(1779818564.811:2780): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 145.921141] audit: type=1105 audit(1779818564.845:2781): pid=4887 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 145.929299] audit: type=1103 audit(1779818564.849:2782): pid=4891 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 146.445498] audit: type=1106 audit(1779818565.370:2783): pid=4887 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 146.454114] audit: type=1104 audit(1779818565.370:2784): pid=4887 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 154.945951] kauditd_printk_skb: 23 callbacks suppressed [ 154.945955] audit: type=1130 audit(1779818573.870:2804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.23.140:22-20.229.252.112:51656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.805637] audit: type=1101 audit(1779818574.730:2805): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.812060] audit: type=1103 audit(1779818574.730:2806): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.818626] audit: type=1006 audit(1779818574.730:2807): pid=4934 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 155.822605] audit: type=1300 audit(1779818574.730:2807): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1d3d0ac0 a2=3 a3=0 items=0 ppid=1 pid=4934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.828768] audit: type=1327 audit(1779818574.730:2807): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 155.838583] audit: type=1105 audit(1779818574.763:2808): pid=4934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.845521] audit: type=1103 audit(1779818574.767:2809): pid=4938 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.373545] audit: type=1106 audit(1779818575.298:2810): pid=4934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.383218] audit: type=1104 audit(1779818575.298:2811): pid=4934 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 161.547470] kauditd_printk_skb: 1 callbacks suppressed [ 161.547474] audit: type=1130 audit(1779818580.472:2813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.23.140:22-20.229.252.112:33834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.433452] audit: type=1101 audit(1779818581.358:2814): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.442046] audit: type=1103 audit(1779818581.362:2815): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.450095] audit: type=1006 audit(1779818581.362:2816): pid=4950 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 162.453590] audit: type=1300 audit(1779818581.362:2816): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc52e836b0 a2=3 a3=0 items=0 ppid=1 pid=4950 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.460752] audit: type=1327 audit(1779818581.362:2816): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 162.468607] audit: type=1105 audit(1779818581.393:2817): pid=4950 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.476557] audit: type=1103 audit(1779818581.398:2818): pid=4955 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.609110] audit: type=1106 audit(1779818582.533:2819): pid=4950 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.639057] audit: type=1104 audit(1779818582.534:2820): pid=4950 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 167.275323] kauditd_printk_skb: 13 callbacks suppressed [ 167.275327] audit: type=1101 audit(1779818586.199:2832): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 167.291318] audit: type=1103 audit(1779818586.202:2833): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 167.297949] audit: type=1006 audit(1779818586.202:2834): pid=4982 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 167.302038] audit: type=1300 audit(1779818586.202:2834): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeee9cde70 a2=3 a3=0 items=0 ppid=1 pid=4982 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.310782] audit: type=1327 audit(1779818586.202:2834): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.318865] audit: type=1105 audit(1779818586.243:2835): pid=4982 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 167.326601] audit: type=1103 audit(1779818586.251:2836): pid=4988 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 168.383214] audit: type=1325 audit(1779818587.306:2837): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4998 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 168.387985] audit: type=1300 audit(1779818587.306:2837): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffdeb49bd40 a2=0 a3=7ffdeb49bd2c items=0 ppid=3747 pid=4998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.396764] audit: type=1327 audit(1779818587.306:2837): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 174.997844] kauditd_printk_skb: 34 callbacks suppressed [ 174.997848] audit: type=1325 audit(1779818593.922:2862): table=filter:165 family=2 entries=20 op=nft_register_rule pid=5035 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 175.001960] audit: type=1300 audit(1779818593.922:2862): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffebc19cc30 a2=0 a3=7ffebc19cc1c items=0 ppid=3747 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.008359] audit: type=1327 audit(1779818593.922:2862): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 175.014530] audit: type=1325 audit(1779818593.930:2863): table=nat:166 family=2 entries=102 op=nft_register_chain pid=5035 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 175.017557] audit: type=1300 audit(1779818593.930:2863): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffebc19cc30 a2=0 a3=7ffebc19cc1c items=0 ppid=3747 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.023296] audit: type=1327 audit(1779818593.930:2863): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 177.242089] audit: type=1130 audit(1779818596.166:2864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.23.140:22-20.229.252.112:42682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.111452] audit: type=1101 audit(1779818597.036:2865): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.118784] audit: type=1103 audit(1779818597.037:2866): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.125278] audit: type=1006 audit(1779818597.038:2867): pid=5037 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 183.859385] kauditd_printk_skb: 7 callbacks suppressed [ 183.859389] audit: type=1130 audit(1779818602.784:2873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.23.140:22-20.229.252.112:50110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.736734] audit: type=1101 audit(1779818603.661:2874): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.744950] audit: type=1103 audit(1779818603.663:2875): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.751589] audit: type=1006 audit(1779818603.663:2876): pid=5052 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 184.755018] audit: type=1300 audit(1779818603.663:2876): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe3eabf8a0 a2=3 a3=0 items=0 ppid=1 pid=5052 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.761190] audit: type=1327 audit(1779818603.663:2876): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.769992] audit: type=1105 audit(1779818603.694:2877): pid=5052 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.777316] audit: type=1103 audit(1779818603.702:2878): pid=5056 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.317191] audit: type=1106 audit(1779818604.241:2879): pid=5052 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.326481] audit: type=1104 audit(1779818604.241:2880): pid=5052 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:03:28 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55 This is ip-172-31-23-140 (Linux x86_64 6.12.91-flatcar) 18:03:28 SSH host key: SHA256:GsosM8QOPyPa13zySYrdEf/Ita5U2E2ONbIDsY8Y4tY (ECDSA) SSH host key: SHA256:l41c2avf+M7mseIYu871cy7dXQsBw35j0TkBTgBe82I (RSA) SSH host key: SHA256:RFII3FapbndJF6eGRARDA+pQ6JieO1A0vOzN5eLsCvE (ED25519) eth0: 172.31.23.140 fe80::427:55ff:fe32:4d55