9.839281] kauditd_printk_skb: 148 callbacks suppressed [ 39.839285] audit: type=1305 audit(1784247420.879:242): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 39.841900] audit: type=1300 audit(1784247420.879:242): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd3a53e5c0 a2=420 a3=0 items=0 ppid=2283 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 39.846045] audit: type=1327 audit(1784247420.879:242): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 39.848053] audit: type=1130 audit(1784247420.883:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.850936] audit: type=1131 audit(1784247420.883:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.853877] audit: type=1106 audit(1784247420.887:245): pid=2277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 39.857077] audit: type=1104 audit(1784247420.887:246): pid=2277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 40.007045] audit: type=1106 audit(1784247421.047:247): pid=2272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 40.014120] audit: type=1104 audit(1784247421.047:248): pid=2272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 40.019573] audit: type=1131 audit(1784247421.049:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.49:22-20.103.240.199:48584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.478034] Initializing XFRM netlink socket [ 44.855929] kauditd_printk_skb: 109 callbacks suppressed [ 44.855934] audit: type=1325 audit(1784247425.893:293): table=nat:34 family=2 entries=2 op=nft_register_chain pid=2497 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 44.860258] audit: type=1300 audit(1784247425.893:293): arch=c000003e syscall=46 success=yes exit=520 a0=3 a1=7ffc079b2200 a2=0 a3=0 items=0 ppid=2350 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 44.866327] audit: type=1327 audit(1784247425.893:293): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 [ 44.870330] audit: type=1325 audit(1784247425.900:294): table=nat:35 family=2 entries=1 op=nft_register_rule pid=2499 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 44.873466] audit: type=1300 audit(1784247425.900:294): arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe81d84e70 a2=0 a3=0 items=0 ppid=2350 pid=2499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 44.879811] audit: type=1327 audit(1784247425.900:294): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E [ 44.883095] audit: type=1325 audit(1784247425.921:295): table=filter:36 family=2 entries=1 op=nft_register_rule pid=2507 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 44.886360] audit: type=1300 audit(1784247425.921:295): arch=c000003e syscall=46 success=yes exit=300 a0=3 a1=7fff95d50900 a2=0 a3=0 items=0 ppid=2350 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 44.892373] audit: type=1327 audit(1784247425.921:295): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D464F5257415244002D6900646F636B657230002D6A00414343455054 [ 44.901734] audit: type=1325 audit(1784247425.942:296): table=filter:37 family=2 entries=1 op=nft_register_rule pid=2513 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:17:06 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:17:06 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: [ 52.187529] kauditd_printk_skb: 15 callbacks suppressed [ 52.187533] audit: type=1130 audit(1784247433.227:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.245828] audit: type=1131 audit(1784247433.286:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 55.053009] audit: type=1131 audit(1784247436.093:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.071750] audit: type=1334 audit(1784247436.112:305): prog-id=66 op=UNLOAD [ 62.778994] audit: type=1130 audit(1784247443.819:306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.868403] audit: type=1131 audit(1784247443.908:307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 64.633920] audit: type=1130 audit(1784247445.673:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.638547] audit: type=1131 audit(1784247445.673:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.834536] zram_generator::config[2861]: No configuration found. [ 65.160582] audit: type=1334 audit(1784247446.200:310): prog-id=70 op=LOAD [ 65.163578] audit: type=1334 audit(1784247446.200:311): prog-id=60 op=UNLOAD [ 65.166601] audit: type=1334 audit(1784247446.201:312): prog-id=71 op=LOAD [ 65.169571] audit: type=1334 audit(1784247446.201:313): prog-id=72 op=LOAD [ 65.171204] audit: type=1334 audit(1784247446.201:314): prog-id=61 op=UNLOAD [ 65.173756] audit: type=1334 audit(1784247446.201:315): prog-id=62 op=UNLOAD [ 68.088327] kauditd_printk_skb: 72 callbacks suppressed [ 68.088331] audit: type=1334 audit(1784247449.128:364): prog-id=90 op=LOAD [ 68.093029] audit: type=1334 audit(1784247449.129:365): prog-id=91 op=LOAD [ 68.094846] audit: type=1300 audit(1784247449.129:365): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=2992 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 68.111650] audit: type=1327 audit(1784247449.129:365): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331306163383263633138386533633830623862653231613265386635 [ 68.122638] audit: type=1334 audit(1784247449.129:366): prog-id=91 op=UNLOAD [ 68.125143] audit: type=1300 audit(1784247449.129:366): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2992 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 68.134644] audit: type=1327 audit(1784247449.129:366): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331306163383263633138386533633830623862653231613265386635 [ 68.143412] audit: type=1334 audit(1784247449.129:367): prog-id=92 op=LOAD [ 68.148720] audit: type=1300 audit(1784247449.129:367): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=2992 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 68.154132] audit: type=1327 audit(1784247449.129:367): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331306163383263633138386533633830623862653231613265386635 [ 75.049248] zram_generator::config[3526]: No configuration found. [ 75.424236] kauditd_printk_skb: 122 callbacks suppressed [ 75.424240] audit: type=1131 audit(1784247456.464:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 75.433662] audit: type=1334 audit(1784247456.473:413): prog-id=120 op=LOAD [ 75.435664] audit: type=1334 audit(1784247456.473:414): prog-id=89 op=UNLOAD [ 75.438408] audit: type=1334 audit(1784247456.475:415): prog-id=121 op=LOAD [ 75.441578] audit: type=1334 audit(1784247456.475:416): prog-id=73 op=UNLOAD [ 75.443570] audit: type=1334 audit(1784247456.475:417): prog-id=122 op=LOAD [ 75.446107] audit: type=1334 audit(1784247456.475:418): prog-id=123 op=LOAD [ 75.447336] audit: type=1334 audit(1784247456.475:419): prog-id=74 op=UNLOAD [ 75.448582] audit: type=1334 audit(1784247456.475:420): prog-id=75 op=UNLOAD [ 75.451572] audit: type=1334 audit(1784247456.476:421): prog-id=124 op=LOAD [ 83.083901] kauditd_printk_skb: 42 callbacks suppressed [ 83.083905] audit: type=1334 audit(1784247464.124:464): prog-id=140 op=LOAD [ 83.087382] audit: type=1334 audit(1784247464.125:465): prog-id=141 op=LOAD [ 83.089536] audit: type=1300 audit(1784247464.125:465): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3705 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.097170] audit: type=1327 audit(1784247464.125:465): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831666638353434613937643261313237613835373437393563353937 [ 83.103520] audit: type=1334 audit(1784247464.125:466): prog-id=141 op=UNLOAD [ 83.105310] audit: type=1300 audit(1784247464.125:466): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3705 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.112791] audit: type=1327 audit(1784247464.125:466): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831666638353434613937643261313237613835373437393563353937 [ 83.120703] audit: type=1334 audit(1784247464.125:467): prog-id=142 op=LOAD [ 83.124411] audit: type=1300 audit(1784247464.125:467): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=3705 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.130145] audit: type=1327 audit(1784247464.125:467): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831666638353434613937643261313237613835373437393563353937 [ 94.479977] kauditd_printk_skb: 224 callbacks suppressed [ 94.479981] audit: type=1334 audit(1784247475.520:544): prog-id=158 op=LOAD [ 94.483088] audit: type=1334 audit(1784247475.523:545): prog-id=159 op=LOAD [ 94.484855] audit: type=1300 audit(1784247475.523:545): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a8238 a2=98 a3=0 items=0 ppid=3705 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.490475] audit: type=1327 audit(1784247475.523:545): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437656230663163363964376334323335393433333832616531373230 [ 94.496113] audit: type=1334 audit(1784247475.523:546): prog-id=159 op=UNLOAD [ 94.498170] audit: type=1300 audit(1784247475.523:546): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3705 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.504330] audit: type=1327 audit(1784247475.523:546): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437656230663163363964376334323335393433333832616531373230 [ 94.510506] audit: type=1334 audit(1784247475.523:547): prog-id=160 op=LOAD [ 94.512215] audit: type=1300 audit(1784247475.523:547): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a8488 a2=98 a3=0 items=0 ppid=3705 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.518928] audit: type=1327 audit(1784247475.523:547): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437656230663163363964376334323335393433333832616531373230 [ 99.619776] kauditd_printk_skb: 3902 callbacks suppressed [ 99.619779] audit: type=1334 audit(1784247480.660:1856): prog-id=816 op=LOAD [ 99.622438] audit: type=1300 audit(1784247480.660:1856): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff680dd710 a2=74 a3=7fff680dd710 items=0 ppid=4227 pid=4349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.627928] audit: type=1327 audit(1784247480.660:1856): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 99.630066] audit: type=1334 audit(1784247480.660:1857): prog-id=816 op=UNLOAD [ 99.631305] audit: type=1300 audit(1784247480.660:1857): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7fff680dd710 a2=74 a3=7fff680dd710 items=0 ppid=4227 pid=4349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.636983] audit: type=1327 audit(1784247480.660:1857): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 99.639107] audit: type=1334 audit(1784247480.660:1858): prog-id=817 op=LOAD [ 99.640312] audit: type=1300 audit(1784247480.660:1858): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff680dc790 a2=90 a3=2 items=0 ppid=4227 pid=4349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 99.645875] audit: type=1327 audit(1784247480.660:1858): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 99.647896] audit: type=1334 audit(1784247480.660:1859): prog-id=817 op=UNLOAD This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:03 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:03 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: [ 103.256874] NET: Registered PF_ALG protocol family This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:04 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:04 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: [ 104.588956] eth0: renamed from tmpfdcfb [ 104.686047] eth0: renamed from tmp78230 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:05 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:05 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: [ 105.537588] kauditd_printk_skb: 2096 callbacks suppressed [ 105.537591] audit: type=1334 audit(1784247486.577:2558): prog-id=1145 op=LOAD [ 105.540651] audit: type=1300 audit(1784247486.577:2558): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff12005de0 a2=74 a3=7fff12005de0 items=0 ppid=4227 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 105.548348] audit: type=1327 audit(1784247486.577:2558): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313334335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 105.554580] audit: type=1334 audit(1784247486.577:2559): prog-id=1145 op=UNLOAD [ 105.556311] audit: type=1300 audit(1784247486.577:2559): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fff12005de0 a2=74 a3=7fff12005de0 items=0 ppid=4227 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 105.563710] audit: type=1327 audit(1784247486.577:2559): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313334335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 105.569240] audit: type=1334 audit(1784247486.577:2560): prog-id=1146 op=LOAD [ 105.570774] audit: type=1300 audit(1784247486.577:2560): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff12005d70 a2=80 a3=0 items=0 ppid=4227 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 105.576965] audit: type=1327 audit(1784247486.577:2560): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313334335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 105.581857] audit: type=1334 audit(1784247486.577:2561): prog-id=1146 op=UNLOAD This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:07 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:07 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:08 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:08 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:09 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:18:09 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: [ 110.679219] kauditd_printk_skb: 573 callbacks suppressed [ 110.679223] audit: type=1325 audit(1784247491.719:2755): table=filter:153 family=2 entries=14 op=nft_register_rule pid=4880 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.683224] audit: type=1300 audit(1784247491.719:2755): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffedc1c8390 a2=0 a3=7ffedc1c837c items=0 ppid=3773 pid=4880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.688814] audit: type=1327 audit(1784247491.719:2755): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 110.691321] audit: type=1325 audit(1784247491.725:2756): table=nat:154 family=2 entries=12 op=nft_register_rule pid=4880 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.694130] audit: type=1300 audit(1784247491.725:2756): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffedc1c8390 a2=0 a3=0 items=0 ppid=3773 pid=4880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.699631] audit: type=1327 audit(1784247491.725:2756): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 111.717888] audit: type=1325 audit(1784247492.758:2757): table=filter:155 family=2 entries=14 op=nft_register_rule pid=4884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 111.720783] audit: type=1300 audit(1784247492.758:2757): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc39bafd60 a2=0 a3=7ffc39bafd4c items=0 ppid=3773 pid=4884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.726510] audit: type=1327 audit(1784247492.758:2757): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 111.729001] audit: type=1325 audit(1784247492.764:2758): table=nat:156 family=2 entries=12 op=nft_register_rule pid=4884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.353858] kauditd_printk_skb: 2 callbacks suppressed [ 121.353862] audit: type=1325 audit(1784247502.393:2759): table=filter:157 family=2 entries=11 op=nft_register_rule pid=4899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.358668] audit: type=1300 audit(1784247502.393:2759): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd4b25f4d0 a2=0 a3=7ffd4b25f4bc items=0 ppid=3773 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.365989] audit: type=1327 audit(1784247502.393:2759): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 121.368512] audit: type=1325 audit(1784247502.406:2760): table=nat:158 family=2 entries=33 op=nft_register_chain pid=4899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.371386] audit: type=1300 audit(1784247502.406:2760): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffd4b25f4d0 a2=0 a3=7ffd4b25f4bc items=0 ppid=3773 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.377134] audit: type=1327 audit(1784247502.406:2760): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 122.392665] audit: type=1325 audit(1784247503.432:2761): table=filter:159 family=2 entries=8 op=nft_register_rule pid=4901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 122.395803] audit: type=1300 audit(1784247503.432:2761): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdc6ce8dd0 a2=0 a3=7ffdc6ce8dbc items=0 ppid=3773 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.401989] audit: type=1327 audit(1784247503.432:2761): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 122.472579] audit: type=1325 audit(1784247503.512:2762): table=nat:160 family=2 entries=54 op=nft_register_chain pid=4901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 135.898877] kauditd_printk_skb: 2 callbacks suppressed [ 135.898882] audit: type=1130 audit(1784247516.939:2763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.49:22-20.103.240.199:46866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.804716] audit: type=1101 audit(1784247517.845:2764): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 136.810911] audit: type=1103 audit(1784247517.849:2765): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 136.817596] audit: type=1006 audit(1784247517.849:2766): pid=4907 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 136.820883] audit: type=1300 audit(1784247517.849:2766): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffe12a8890 a2=3 a3=0 items=0 ppid=1 pid=4907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.826603] audit: type=1327 audit(1784247517.849:2766): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 136.838039] audit: type=1105 audit(1784247517.878:2767): pid=4907 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 136.844975] audit: type=1103 audit(1784247517.881:2768): pid=4912 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 138.026586] audit: type=1106 audit(1784247519.066:2769): pid=4907 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 138.034627] audit: type=1104 audit(1784247519.067:2770): pid=4907 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 143.187247] kauditd_printk_skb: 1 callbacks suppressed [ 143.187251] audit: type=1130 audit(1784247524.227:2772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.49:22-20.103.240.199:32784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 144.010725] audit: type=1101 audit(1784247525.051:2773): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 144.016978] audit: type=1103 audit(1784247525.053:2774): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 144.023443] audit: type=1006 audit(1784247525.053:2775): pid=4926 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 144.026731] audit: type=1300 audit(1784247525.053:2775): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffee67012b0 a2=3 a3=0 items=0 ppid=1 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.032984] audit: type=1327 audit(1784247525.053:2775): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 144.041531] audit: type=1105 audit(1784247525.081:2776): pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 144.048449] audit: type=1103 audit(1784247525.084:2777): pid=4930 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 144.582739] audit: type=1106 audit(1784247525.623:2778): pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 144.590471] audit: type=1104 audit(1784247525.623:2779): pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 149.758164] kauditd_printk_skb: 1 callbacks suppressed [ 149.758168] audit: type=1130 audit(1784247530.798:2781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.49:22-20.103.240.199:32792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.623783] audit: type=1101 audit(1784247531.664:2782): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 150.630519] audit: type=1103 audit(1784247531.666:2783): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 150.636341] audit: type=1006 audit(1784247531.666:2784): pid=4946 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 150.639714] audit: type=1300 audit(1784247531.666:2784): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffca99f0660 a2=3 a3=0 items=0 ppid=1 pid=4946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.645916] audit: type=1327 audit(1784247531.666:2784): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 150.652609] audit: type=1105 audit(1784247531.693:2785): pid=4946 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 150.659572] audit: type=1103 audit(1784247531.696:2786): pid=4950 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 151.181806] audit: type=1106 audit(1784247532.222:2787): pid=4946 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 151.189451] audit: type=1104 audit(1784247532.222:2788): pid=4946 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 156.356134] kauditd_printk_skb: 1 callbacks suppressed [ 156.356139] audit: type=1130 audit(1784247537.396:2790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.49:22-20.103.240.199:39420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 157.220231] audit: type=1101 audit(1784247538.260:2791): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.226903] audit: type=1103 audit(1784247538.260:2792): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.232668] audit: type=1006 audit(1784247538.260:2793): pid=4963 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 157.235583] audit: type=1300 audit(1784247538.260:2793): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffa2a41090 a2=3 a3=0 items=0 ppid=1 pid=4963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.241780] audit: type=1327 audit(1784247538.260:2793): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 157.252172] audit: type=1105 audit(1784247538.292:2794): pid=4963 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.259864] audit: type=1103 audit(1784247538.300:2795): pid=4967 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.795495] audit: type=1106 audit(1784247538.835:2796): pid=4963 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 157.803367] audit: type=1104 audit(1784247538.840:2797): pid=4963 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.456206] kauditd_printk_skb: 20 callbacks suppressed [ 161.456210] audit: type=1106 audit(1784247542.496:2814): pid=4994 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.481083] audit: type=1104 audit(1784247542.496:2815): pid=4994 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.507238] audit: type=1131 audit(1784247542.506:2816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.49:22-20.103.240.199:39444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.617579] audit: type=1130 audit(1784247547.657:2817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.49:22-20.103.240.199:49272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.490942] audit: type=1101 audit(1784247548.531:2818): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.498436] audit: type=1103 audit(1784247548.531:2819): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.504365] audit: type=1006 audit(1784247548.534:2820): pid=5010 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 167.507921] audit: type=1300 audit(1784247548.534:2820): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff6ad56970 a2=3 a3=0 items=0 ppid=1 pid=5010 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.514898] audit: type=1327 audit(1784247548.534:2820): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.560489] audit: type=1105 audit(1784247548.600:2821): pid=5010 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.567497] audit: type=1103 audit(1784247548.604:2822): pid=5014 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.049615] audit: type=1106 audit(1784247549.088:2823): pid=5010 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.057212] audit: type=1104 audit(1784247549.088:2824): pid=5010 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 172.076352] kauditd_printk_skb: 20 callbacks suppressed [ 172.076356] audit: type=1325 audit(1784247553.116:2841): table=filter:161 family=2 entries=20 op=nft_register_rule pid=5054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.081704] audit: type=1300 audit(1784247553.116:2841): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc74f46340 a2=0 a3=7ffc74f4632c items=0 ppid=3773 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.093303] audit: type=1327 audit(1784247553.116:2841): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 172.096405] audit: type=1325 audit(1784247553.127:2842): table=nat:162 family=2 entries=18 op=nft_register_rule pid=5054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.102467] audit: type=1300 audit(1784247553.127:2842): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffc74f46340 a2=0 a3=0 items=0 ppid=3773 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.109992] audit: type=1327 audit(1784247553.127:2842): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 172.276795] audit: type=1106 audit(1784247553.317:2843): pid=5040 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 172.285545] audit: type=1104 audit(1784247553.317:2844): pid=5040 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 172.292393] audit: type=1131 audit(1784247553.322:2845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.49:22-20.103.240.199:54296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.446493] audit: type=1130 audit(1784247553.486:2846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.49:22-20.103.240.199:54310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.866299] kauditd_printk_skb: 27 callbacks suppressed [ 178.866304] audit: type=1325 audit(1784247559.906:2866): table=filter:165 family=2 entries=20 op=nft_register_rule pid=5092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.870369] audit: type=1300 audit(1784247559.906:2866): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcdaa77ab0 a2=0 a3=7ffcdaa77a9c items=0 ppid=3773 pid=5092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.876195] audit: type=1327 audit(1784247559.906:2866): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 178.880068] audit: type=1325 audit(1784247559.920:2867): table=nat:166 family=2 entries=102 op=nft_register_chain pid=5092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.883149] audit: type=1300 audit(1784247559.920:2867): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffcdaa77ab0 a2=0 a3=7ffcdaa77a9c items=0 ppid=3773 pid=5092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.889036] audit: type=1327 audit(1784247559.920:2867): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 180.799231] audit: type=1130 audit(1784247561.839:2868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.49:22-20.103.240.199:40134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.653122] audit: type=1101 audit(1784247562.693:2869): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.659321] audit: type=1103 audit(1784247562.695:2870): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.665118] audit: type=1006 audit(1784247562.695:2871): pid=5094 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 187.387909] kauditd_printk_skb: 7 callbacks suppressed [ 187.387913] audit: type=1130 audit(1784247568.427:2877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.49:22-20.103.240.199:40138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.255748] audit: type=1101 audit(1784247569.296:2878): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.262199] audit: type=1103 audit(1784247569.298:2879): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.268034] audit: type=1006 audit(1784247569.298:2880): pid=5110 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 188.271163] audit: type=1300 audit(1784247569.298:2880): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffef67d7940 a2=3 a3=0 items=0 ppid=1 pid=5110 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.277456] audit: type=1327 audit(1784247569.298:2880): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 188.287812] audit: type=1105 audit(1784247569.328:2881): pid=5110 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.295851] audit: type=1103 audit(1784247569.336:2882): pid=5114 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.820481] audit: type=1106 audit(1784247569.860:2883): pid=5110 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.828868] audit: type=1104 audit(1784247569.860:2884): pid=5110 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 192.400864] kauditd_printk_skb: 15 callbacks suppressed [ 192.400868] audit: type=1334 audit(1784247573.441:2898): prog-id=140 op=UNLOAD [ 192.403264] audit: type=1334 audit(1784247573.441:2899): prog-id=144 op=UNLOAD This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:19:34 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:19:34 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: [ 194.101691] audit: type=1106 audit(1784247575.141:2900): pid=5126 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 194.109169] audit: type=1104 audit(1784247575.141:2901): pid=5126 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 194.115660] audit: type=1131 audit(1784247575.155:2902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.49:22-20.103.240.199:40152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.262996] audit: type=1130 audit(1784247575.303:2903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.49:22-20.103.240.199:47266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.146434] audit: type=1101 audit(1784247576.186:2904): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 195.152325] audit: type=1103 audit(1784247576.188:2905): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 195.157772] audit: type=1006 audit(1784247576.188:2906): pid=5269 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 195.160893] audit: type=1300 audit(1784247576.188:2906): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff96fbd640 a2=3 a3=0 items=0 ppid=1 pid=5269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.544483] kauditd_printk_skb: 53 callbacks suppressed [ 197.544487] audit: type=1334 audit(1784247578.584:2931): prog-id=1277 op=LOAD [ 197.547319] audit: type=1334 audit(1784247578.585:2932): prog-id=1278 op=LOAD [ 197.548976] audit: type=1300 audit(1784247578.585:2932): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=5302 pid=5386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.555108] audit: type=1327 audit(1784247578.585:2932): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336566343934396131643430386137353062333864613366393731 [ 197.560282] audit: type=1334 audit(1784247578.585:2933): prog-id=1278 op=UNLOAD [ 197.567749] audit: type=1300 audit(1784247578.585:2933): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5302 pid=5386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.576681] audit: type=1327 audit(1784247578.585:2933): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336566343934396131643430386137353062333864613366393731 [ 197.583122] audit: type=1334 audit(1784247578.585:2934): prog-id=1279 op=LOAD [ 197.584793] audit: type=1300 audit(1784247578.585:2934): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=5302 pid=5386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.590379] audit: type=1327 audit(1784247578.585:2934): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336566343934396131643430386137353062333864613366393731 [ 201.467602] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 203.437398] kauditd_printk_skb: 5770 callbacks suppressed [ 203.437403] audit: type=1334 audit(1784247584.477:4871): prog-id=2240 op=LOAD [ 203.440532] audit: type=1300 audit(1784247584.477:4871): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffda5de0aa0 a2=74 a3=7ffda5de0aa0 items=0 ppid=5688 pid=5763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 203.447221] audit: type=1327 audit(1784247584.477:4871): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 203.452458] audit: type=1334 audit(1784247584.477:4872): prog-id=2240 op=UNLOAD [ 203.454338] audit: type=1300 audit(1784247584.477:4872): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffda5de0aa0 a2=74 a3=7ffda5de0aa0 items=0 ppid=5688 pid=5763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 203.461118] audit: type=1327 audit(1784247584.477:4872): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 203.466068] audit: type=1334 audit(1784247584.477:4873): prog-id=2241 op=LOAD [ 203.467851] audit: type=1300 audit(1784247584.477:4873): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffda5de0a30 a2=80 a3=0 items=0 ppid=5688 pid=5763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 203.474199] audit: type=1327 audit(1784247584.477:4873): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 203.479906] audit: type=1334 audit(1784247584.477:4874): prog-id=2241 op=UNLOAD This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:19:48 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 This is ip-172-31-27-49 (Linux x86_64 6.12.95-flatcar) 00:19:48 SSH host key: SHA256:70k6ugh4H+PbjhDmY8aUVYYlaJBSnvForJxeLiwaRec (ED25519) SSH host key: SHA256:HiOTYC3+h05R6nAQieBqXvpZ+phcUw4J4K8cchhZU7s (ECDSA) SSH host key: SHA256:EkQ3veZ4HMDD0g1JWmEnqABmCvFdpaygsU0DpBwu6Ik (RSA) eth0: 172.31.27.49 fe80::45a:4aff:fece:dc87 ip-172-31-27-49 login: [ 209.934213] kauditd_printk_skb: 566 callbacks suppressed [ 209.934217] audit: type=1334 audit(1784247590.974:5071): prog-id=2278 op=LOAD [ 209.938020] audit: type=1334 audit(1784247590.976:5072): prog-id=2279 op=LOAD [ 209.939784] audit: type=1300 audit(1784247590.976:5072): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffb42a8670 a2=74 a3=7fffb42a8670 items=0 ppid=5538 pid=6192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 209.946107] audit: type=1327 audit(1784247590.976:5072): proctitle=74630066696C746572007265706C61636500646576006C786365623935366330373264666500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313930375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 209.950551] audit: type=1334 audit(1784247590.976:5073): prog-id=2279 op=UNLOAD [ 209.951848] audit: type=1300 audit(1784247590.976:5073): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fffb42a8670 a2=74 a3=7fffb42a8670 items=0 ppid=5538 pid=6192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 209.957003] audit: type=1327 audit(1784247590.976:5073): proctitle=74630066696C746572007265706C61636500646576006C786365623935366330373264666500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313930375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 209.961497] audit: type=1334 audit(1784247590.976:5074): prog-id=2280 op=LOAD [ 209.962759] audit: type=1300 audit(1784247590.976:5074): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffb42a8600 a2=80 a3=0 items=0 ppid=5538 pid=6192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 209.967792] audit: type=1327 audit(1784247590.976:5074): proctitle=74630066696C746572007265706C61636500646576006C786365623935366330373264666500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313930375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572