items=0 ppid=2258 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 43.910438] audit: type=1327 audit(1773188980.946:180): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 43.913391] audit: type=1130 audit(1773188980.951:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.917815] audit: type=1131 audit(1773188980.951:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.922198] audit: type=1106 audit(1773188980.962:183): pid=2252 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 43.926886] audit: type=1104 audit(1773188980.962:184): pid=2252 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 43.997352] audit: type=1106 audit(1773188981.049:185): pid=2247 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 44.005378] audit: type=1104 audit(1773188981.050:186): pid=2247 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 44.011669] audit: type=1131 audit(1773188981.058:187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-172.31.19.221:22-20.161.92.111:60350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 51.162652] kauditd_printk_skb: 11 callbacks suppressed [ 51.162657] audit: type=1130 audit(1773188988.215:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 51.278709] audit: type=1131 audit(1773188988.331:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 53.051874] Initializing XFRM netlink socket [ 53.278967] audit: type=1325 audit(1773188990.331:199): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.282153] audit: type=1300 audit(1773188990.331:199): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc6b15290 a2=0 a3=0 items=0 ppid=2310 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.288225] audit: type=1327 audit(1773188990.331:199): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 53.290910] audit: type=1325 audit(1773188990.336:200): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.293985] audit: type=1300 audit(1773188990.336:200): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc01a3240 a2=0 a3=0 items=0 ppid=2310 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.300030] audit: type=1327 audit(1773188990.336:200): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 53.302881] audit: type=1325 audit(1773188990.340:201): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2380 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.305945] audit: type=1300 audit(1773188990.340:201): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffedc92660 a2=0 a3=0 items=0 ppid=2310 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:29:51 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: [ 61.800898] kauditd_printk_skb: 107 callbacks suppressed [ 61.800903] audit: type=1130 audit(1773188998.853:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 61.922942] audit: type=1131 audit(1773188998.975:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 64.891410] audit: type=1131 audit(1773189001.942:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.907607] audit: type=1334 audit(1773189001.960:241): prog-id=38 op=UNLOAD [ 72.276115] audit: type=1130 audit(1773189009.328:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 72.368805] audit: type=1131 audit(1773189009.421:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 76.351927] audit: type=1130 audit(1773189013.403:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 76.356649] audit: type=1131 audit(1773189013.403:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 61.922942] audit: type=1131 audit(1773188998.975:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 64.891410] audit: type=1131 audit(1773189001.942:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.907607] audit: type=1334 audit(1773189001.960:241): prog-id=38 op=UNLOAD [ 72.276115] audit: type=1130 audit(1773189009.328:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 72.368805] audit: type=1131 audit(1773189009.421:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 76.351927] audit: type=1130 audit(1773189013.403:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 76.356649] audit: type=1131 audit(1773189013.403:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 76.730686] zram_generator::config[2847]: No configuration found. [ 77.353391] audit: type=1334 audit(1773189014.405:246): prog-id=42 op=LOAD [ 77.355098] audit: type=1334 audit(1773189014.405:247): prog-id=43 op=LOAD [ 77.356729] audit: type=1334 audit(1773189014.405:248): prog-id=32 op=UNLOAD [ 77.358469] audit: type=1334 audit(1773189014.405:249): prog-id=33 op=UNLOAD [ 77.361367] audit: type=1334 audit(1773189014.414:250): prog-id=44 op=LOAD [ 77.362984] audit: type=1334 audit(1773189014.414:251): prog-id=35 op=UNLOAD [ 77.364743] audit: type=1334 audit(1773189014.415:252): prog-id=45 op=LOAD [ 77.366296] audit: type=1334 audit(1773189014.415:253): prog-id=46 op=LOAD [ 77.367894] audit: type=1334 audit(1773189014.415:254): prog-id=36 op=UNLOAD [ 77.369555] audit: type=1334 audit(1773189014.415:255): prog-id=37 op=UNLOAD [ 88.062972] zram_generator::config[3434]: No configuration found. [ 88.785011] kauditd_printk_skb: 200 callbacks suppressed [ 88.785016] audit: type=1334 audit(1773189025.837:348): prog-id=92 op=LOAD [ 88.787592] audit: type=1334 audit(1773189025.840:349): prog-id=93 op=LOAD [ 88.788999] audit: type=1334 audit(1773189025.840:350): prog-id=42 op=UNLOAD [ 88.790544] audit: type=1334 audit(1773189025.840:351): prog-id=43 op=UNLOAD [ 88.792563] audit: type=1334 audit(1773189025.845:352): prog-id=94 op=LOAD [ 88.793998] audit: type=1334 audit(1773189025.845:353): prog-id=87 op=UNLOAD [ 88.806360] audit: type=1334 audit(1773189025.858:354): prog-id=95 op=LOAD [ 88.808378] audit: type=1334 audit(1773189025.858:355): prog-id=44 op=UNLOAD [ 88.810340] audit: type=1334 audit(1773189025.858:356): prog-id=96 op=LOAD [ 88.811942] audit: type=1334 audit(1773189025.858:357): prog-id=97 op=LOAD [ 93.886890] kauditd_printk_skb: 71 callbacks suppressed [ 93.886895] audit: type=1334 audit(1773189030.938:415): prog-id=123 op=LOAD [ 93.889719] audit: type=1300 audit(1773189030.938:415): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=40001a03f8 a2=98 a3=0 items=0 ppid=3560 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.895867] audit: type=1327 audit(1773189030.938:415): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643764656132613636623765363861316238623030333236363532 [ 93.901714] audit: type=1334 audit(1773189030.939:416): prog-id=124 op=LOAD [ 93.903197] audit: type=1300 audit(1773189030.939:416): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001a0178 a2=98 a3=0 items=0 ppid=3560 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.909457] audit: type=1327 audit(1773189030.939:416): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643764656132613636623765363861316238623030333236363532 [ 93.915389] audit: type=1334 audit(1773189030.939:417): prog-id=124 op=UNLOAD [ 93.917108] audit: type=1300 audit(1773189030.939:417): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3560 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.923747] audit: type=1327 audit(1773189030.939:417): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643764656132613636623765363861316238623030333236363532 [ 93.932344] audit: type=1334 audit(1773189030.939:418): prog-id=123 op=UNLOAD [ 105.797644] kauditd_printk_skb: 202 callbacks suppressed [ 105.797650] audit: type=1334 audit(1773189042.849:487): prog-id=136 op=LOAD [ 105.803290] audit: type=1334 audit(1773189042.851:488): prog-id=137 op=LOAD [ 105.806393] audit: type=1300 audit(1773189042.851:488): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000178190 a2=98 a3=0 items=0 ppid=3770 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.819079] audit: type=1327 audit(1773189042.851:488): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656338313532656663363135366136303336353832366434343732 [ 105.829375] audit: type=1334 audit(1773189042.854:489): prog-id=137 op=UNLOAD [ 105.833059] audit: type=1300 audit(1773189042.854:489): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3770 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.842378] audit: type=1327 audit(1773189042.854:489): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656338313532656663363135366136303336353832366434343732 [ 105.849980] audit: type=1334 audit(1773189042.854:490): prog-id=138 op=LOAD [ 105.852382] audit: type=1300 audit(1773189042.854:490): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001783f8 a2=98 a3=0 items=0 ppid=3770 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.859266] audit: type=1327 audit(1773189042.854:490): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863656338313532656663363135366136303336353832366434343732 [ 111.226347] kauditd_printk_skb: 122 callbacks suppressed [ 111.226352] audit: type=1334 audit(1773189048.278:539): prog-id=164 op=LOAD [ 111.229583] audit: type=1300 audit(1773189048.278:539): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffe76f7d8 a2=74 a3=0 items=0 ppid=4111 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 111.236253] audit: type=1327 audit(1773189048.278:539): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 111.238778] audit: type=1334 audit(1773189048.279:540): prog-id=164 op=UNLOAD [ 111.242041] audit: type=1300 audit(1773189048.279:540): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff9c8c9f10 a2=74 a3=0 items=0 ppid=4111 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 111.256484] audit: type=1327 audit(1773189048.279:540): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 111.263275] audit: type=1334 audit(1773189048.279:541): prog-id=165 op=LOAD [ 111.269340] audit: type=1300 audit(1773189048.279:541): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffe76e818 a2=90 a3=2 items=0 ppid=4111 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 111.279077] audit: type=1327 audit(1773189048.279:541): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 111.282183] audit: type=1334 audit(1773189048.281:542): prog-id=165 op=UNLOAD [ 115.363065] NET: Registered PF_ALG protocol family This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:30:52 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: [ 116.405423] kauditd_printk_skb: 5732 callbacks suppressed [ 116.405445] audit: type=1325 audit(1773189053.457:2453): table=nat:103 family=2 entries=1 op=nft_register_chain pid=4495 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 116.410012] audit: type=1300 audit(1773189053.457:2453): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=fffffa4b16b0 a2=0 a3=ffffb4ff65c0 items=0 ppid=4111 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.417026] audit: type=1327 audit(1773189053.457:2453): proctitle=69707461626C6573002D770035002D74006E6174002D53 [ 116.419820] audit: type=1325 audit(1773189053.471:2454): table=nat:104 family=10 entries=1 op=nft_register_chain pid=4496 subj=system_u:system_r:spc_t:s0 comm="ip6tables" [ 116.423210] audit: type=1300 audit(1773189053.471:2454): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=fffffbb2edd0 a2=0 a3=ffff817665c0 items=0 ppid=4111 pid=4496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.430424] audit: type=1327 audit(1773189053.471:2454): proctitle=6970367461626C6573002D770035002D74006E6174002D53 [ 116.432784] audit: type=1325 audit(1773189053.475:2455): table=mangle:105 family=2 entries=5 op=nft_register_chain pid=4497 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 116.436564] audit: type=1300 audit(1773189053.475:2455): arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffccf18620 a2=0 a3=ffff9139c5c0 items=0 ppid=4111 pid=4497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.443907] audit: type=1327 audit(1773189053.475:2455): proctitle=69707461626C6573002D770035002D74006D616E676C65002D53 [ 116.446419] audit: type=1325 audit(1773189053.486:2456): table=mangle:106 family=10 entries=5 op=nft_register_chain pid=4498 subj=system_u:system_r:spc_t:s0 comm="ip6tables" This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:30:53 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: [ 117.462802] eth0: renamed from tmp93039 [ 117.472547] eth0: renamed from tmp18a31 This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:30:54 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:30:56 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:30:57 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: [ 123.934964] kauditd_printk_skb: 251 callbacks suppressed [ 123.934969] audit: type=1106 audit(1773189060.987:2540): pid=2291 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 123.943489] audit: type=1104 audit(1773189060.989:2541): pid=2291 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 124.030374] audit: type=1106 audit(1773189061.082:2542): pid=2286 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 124.041878] audit: type=1104 audit(1773189061.082:2543): pid=2286 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 124.048566] audit: type=1131 audit(1773189061.100:2544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-172.31.19.221:22-20.161.92.111:60356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 126.475899] audit: type=1334 audit(1773189063.528:2545): prog-id=1147 op=LOAD [ 126.477752] audit: type=1334 audit(1773189063.528:2546): prog-id=1148 op=LOAD [ 126.480611] audit: type=1300 audit(1773189063.528:2546): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdee100d8 a2=74 a3=11 items=0 ppid=4111 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 126.490581] audit: type=1327 audit(1773189063.528:2546): proctitle=74630066696C746572007265706C61636500646576006C786363363937343232633336613700696E6772657373007072696F00310068616E646C65003100627066006461006F626A003630315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 126.498382] audit: type=1334 audit(1773189063.530:2547): prog-id=1148 op=UNLOAD [ 185.294123] kauditd_printk_skb: 473 callbacks suppressed [ 185.294128] audit: type=1130 audit(1773189122.346:2707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4100-172.31.19.221:22-20.161.92.111:48656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.792352] audit: type=1101 audit(1773189122.844:2708): pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 185.799898] audit: type=1103 audit(1773189122.852:2709): pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 185.805837] audit: type=1006 audit(1773189122.852:2710): pid=4933 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 185.809860] audit: type=1300 audit(1773189122.852:2710): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc8e204d0 a2=3 a3=0 items=0 ppid=1 pid=4933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.816356] audit: type=1327 audit(1773189122.852:2710): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.834960] audit: type=1105 audit(1773189122.887:2711): pid=4933 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 185.842939] audit: type=1103 audit(1773189122.895:2712): pid=4937 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 186.201517] audit: type=1106 audit(1773189123.253:2713): pid=4933 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 186.209683] audit: type=1104 audit(1773189123.253:2714): pid=4933 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 191.304412] kauditd_printk_skb: 1 callbacks suppressed [ 191.304417] audit: type=1130 audit(1773189128.356:2716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.19.221:22-20.161.92.111:48666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.833148] audit: type=1101 audit(1773189128.885:2717): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 191.841364] audit: type=1103 audit(1773189128.893:2718): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 191.846623] audit: type=1006 audit(1773189128.893:2719): pid=4950 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 191.849948] audit: type=1300 audit(1773189128.893:2719): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd6f11220 a2=3 a3=0 items=0 ppid=1 pid=4950 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.855948] audit: type=1327 audit(1773189128.893:2719): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 191.873460] audit: type=1105 audit(1773189128.926:2720): pid=4950 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 191.880940] audit: type=1103 audit(1773189128.933:2721): pid=4954 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 192.223652] audit: type=1106 audit(1773189129.276:2722): pid=4950 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 192.231467] audit: type=1104 audit(1773189129.276:2723): pid=4950 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 197.323481] kauditd_printk_skb: 1 callbacks suppressed [ 197.323487] audit: type=1130 audit(1773189134.376:2725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.19.221:22-20.161.92.111:57696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.826346] audit: type=1101 audit(1773189134.878:2726): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 197.836360] audit: type=1103 audit(1773189134.887:2727): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 197.843847] audit: type=1006 audit(1773189134.887:2728): pid=4966 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 197.848909] audit: type=1300 audit(1773189134.887:2728): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc2ddd8b0 a2=3 a3=0 items=0 ppid=1 pid=4966 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.860120] audit: type=1327 audit(1773189134.887:2728): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.882132] audit: type=1105 audit(1773189134.934:2729): pid=4966 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 197.890520] audit: type=1103 audit(1773189134.943:2730): pid=4970 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 198.216421] audit: type=1106 audit(1773189135.269:2731): pid=4966 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 198.224258] audit: type=1104 audit(1773189135.269:2732): pid=4966 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 203.317352] kauditd_printk_skb: 1 callbacks suppressed [ 203.317358] audit: type=1130 audit(1773189140.369:2734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-172.31.19.221:22-20.161.92.111:55906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.826351] audit: type=1101 audit(1773189140.878:2735): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 203.834624] audit: type=1103 audit(1773189140.886:2736): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 203.841192] audit: type=1006 audit(1773189140.886:2737): pid=4983 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 203.845597] audit: type=1300 audit(1773189140.886:2737): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff9857850 a2=3 a3=0 items=0 ppid=1 pid=4983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.852223] audit: type=1327 audit(1773189140.886:2737): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 203.867619] audit: type=1105 audit(1773189140.920:2738): pid=4983 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 203.877402] audit: type=1103 audit(1773189140.930:2739): pid=4987 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 204.225186] audit: type=1106 audit(1773189141.276:2740): pid=4983 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 204.234389] audit: type=1104 audit(1773189141.277:2741): pid=4983 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 211.452772] kauditd_printk_skb: 23 callbacks suppressed [ 211.452777] audit: type=1130 audit(1773189148.504:2761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-8-172.31.19.221:22-20.161.92.111:55928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.956352] audit: type=1101 audit(1773189149.008:2762): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 211.963166] audit: type=1103 audit(1773189149.015:2763): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 211.969791] audit: type=1006 audit(1773189149.015:2764): pid=5033 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 211.974395] audit: type=1300 audit(1773189149.015:2764): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd230ae10 a2=3 a3=0 items=0 ppid=1 pid=5033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.981670] audit: type=1327 audit(1773189149.015:2764): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 212.014911] audit: type=1105 audit(1773189149.067:2765): pid=5033 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 212.022862] audit: type=1103 audit(1773189149.075:2766): pid=5037 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 212.345820] audit: type=1106 audit(1773189149.397:2767): pid=5033 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 212.352733] audit: type=1104 audit(1773189149.398:2768): pid=5033 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 217.442804] kauditd_printk_skb: 1 callbacks suppressed [ 217.442809] audit: type=1130 audit(1773189154.495:2770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-9-172.31.19.221:22-20.161.92.111:55500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 217.940710] audit: type=1101 audit(1773189154.993:2771): pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 217.948800] audit: type=1103 audit(1773189155.001:2772): pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 217.954177] audit: type=1006 audit(1773189155.001:2773): pid=5051 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 217.957780] audit: type=1300 audit(1773189155.001:2773): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd888e3e0 a2=3 a3=0 items=0 ppid=1 pid=5051 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.966376] audit: type=1327 audit(1773189155.001:2773): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 217.984423] audit: type=1105 audit(1773189155.037:2774): pid=5051 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 217.992728] audit: type=1103 audit(1773189155.045:2775): pid=5055 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 218.333895] audit: type=1106 audit(1773189155.386:2776): pid=5051 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 218.341195] audit: type=1104 audit(1773189155.386:2777): pid=5051 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 223.435239] kauditd_printk_skb: 1 callbacks suppressed [ 223.435243] audit: type=1130 audit(1773189160.487:2779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4103-172.31.19.221:22-20.161.92.111:39186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 223.936271] audit: type=1101 audit(1773189160.988:2780): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 223.944203] audit: type=1103 audit(1773189160.996:2781): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 223.950428] audit: type=1006 audit(1773189160.997:2782): pid=5068 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 223.954608] audit: type=1300 audit(1773189160.997:2782): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffeee8ebb0 a2=3 a3=0 items=0 ppid=1 pid=5068 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.961616] audit: type=1327 audit(1773189160.997:2782): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 223.986155] audit: type=1105 audit(1773189161.038:2783): pid=5068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 223.994498] audit: type=1103 audit(1773189161.047:2784): pid=5072 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 224.344064] audit: type=1106 audit(1773189161.396:2785): pid=5068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 224.352384] audit: type=1104 audit(1773189161.397:2786): pid=5068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 228.441840] kauditd_printk_skb: 46 callbacks suppressed [ 228.441846] audit: type=1130 audit(1773189165.494:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4106-172.31.19.221:22-20.161.92.111:39230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 228.936971] audit: type=1101 audit(1773189165.989:2820): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 228.944819] audit: type=1103 audit(1773189165.997:2821): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 228.950575] audit: type=1006 audit(1773189165.997:2822): pid=5131 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 228.955041] audit: type=1300 audit(1773189165.997:2822): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffce520270 a2=3 a3=0 items=0 ppid=1 pid=5131 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.961587] audit: type=1327 audit(1773189165.997:2822): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 228.987407] audit: type=1105 audit(1773189166.039:2823): pid=5131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 228.995072] audit: type=1103 audit(1773189166.047:2824): pid=5135 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 229.323150] audit: type=1106 audit(1773189166.375:2825): pid=5131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 229.330695] audit: type=1104 audit(1773189166.377:2826): pid=5131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 234.424724] kauditd_printk_skb: 1 callbacks suppressed [ 234.424729] audit: type=1130 audit(1773189171.477:2828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4107-172.31.19.221:22-20.161.92.111:47266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 234.929881] audit: type=1101 audit(1773189171.982:2829): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 234.938193] audit: type=1103 audit(1773189171.989:2830): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 234.944393] audit: type=1006 audit(1773189171.991:2831): pid=5147 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 234.948372] audit: type=1300 audit(1773189171.991:2831): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd1cad3e0 a2=3 a3=0 items=0 ppid=1 pid=5147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 234.954539] audit: type=1327 audit(1773189171.991:2831): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 234.978494] audit: type=1105 audit(1773189172.030:2832): pid=5147 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 234.986055] audit: type=1103 audit(1773189172.038:2833): pid=5151 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 235.040087] audit: type=1325 audit(1773189172.093:2834): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 235.043383] audit: type=1300 audit(1773189172.093:2834): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffdb71efe0 a2=0 a3=1 items=0 ppid=3609 pid=5153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 240.413073] kauditd_printk_skb: 7 callbacks suppressed [ 240.413079] audit: type=1130 audit(1773189177.466:2839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4108-172.31.19.221:22-20.161.92.111:47278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 240.920979] audit: type=1101 audit(1773189177.974:2840): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 240.928602] audit: type=1103 audit(1773189177.982:2841): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 240.935660] audit: type=1006 audit(1773189177.982:2842): pid=5165 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 240.939394] audit: type=1300 audit(1773189177.982:2842): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe5c3f7b0 a2=3 a3=0 items=0 ppid=1 pid=5165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 240.947494] audit: type=1327 audit(1773189177.982:2842): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 240.971027] audit: type=1105 audit(1773189178.024:2843): pid=5165 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 240.979772] audit: type=1103 audit(1773189178.033:2844): pid=5169 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 241.307594] audit: type=1106 audit(1773189178.360:2845): pid=5165 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 241.316906] audit: type=1104 audit(1773189178.360:2846): pid=5165 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 246.401604] kauditd_printk_skb: 1 callbacks suppressed [ 246.401610] audit: type=1130 audit(1773189183.455:2848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-11-172.31.19.221:22-20.161.92.111:45524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 246.905651] audit: type=1101 audit(1773189183.959:2849): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 246.912664] audit: type=1103 audit(1773189183.966:2850): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 246.918524] audit: type=1006 audit(1773189183.966:2851): pid=5183 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 246.921820] audit: type=1300 audit(1773189183.966:2851): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffffe76bb0 a2=3 a3=0 items=0 ppid=1 pid=5183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 246.928300] audit: type=1327 audit(1773189183.966:2851): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 246.955727] audit: type=1105 audit(1773189184.009:2852): pid=5183 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 246.963705] audit: type=1103 audit(1773189184.017:2853): pid=5187 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 247.285184] audit: type=1106 audit(1773189184.338:2854): pid=5183 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 247.293370] audit: type=1104 audit(1773189184.338:2855): pid=5183 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 251.439733] kauditd_printk_skb: 11 callbacks suppressed [ 251.439738] audit: type=1334 audit(1773189188.493:2865): prog-id=1208 op=UNLOAD [ 251.444217] audit: type=1334 audit(1773189188.493:2866): prog-id=1234 op=UNLOAD [ 251.553070] audit: type=1334 audit(1773189188.606:2867): prog-id=131 op=UNLOAD [ 251.555231] audit: type=1334 audit(1773189188.606:2868): prog-id=135 op=UNLOAD [ 251.582401] audit: type=1334 audit(1773189188.635:2869): prog-id=126 op=UNLOAD [ 251.583954] audit: type=1334 audit(1773189188.635:2870): prog-id=130 op=UNLOAD This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:33:09 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: [ 253.288449] audit: type=1106 audit(1773189190.341:2871): pid=5199 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 253.297378] audit: type=1104 audit(1773189190.342:2872): pid=5199 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 253.302574] audit: type=1131 audit(1773189190.349:2873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-12-172.31.19.221:22-20.161.92.111:45534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 253.393432] audit: type=1130 audit(1773189190.447:2874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-13-172.31.19.221:22-20.161.92.111:56454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 256.606927] kauditd_printk_skb: 68 callbacks suppressed [ 256.606933] audit: type=1334 audit(1773189193.660:2911): prog-id=1255 op=LOAD [ 256.610515] audit: type=1334 audit(1773189193.661:2912): prog-id=1256 op=LOAD [ 256.612556] audit: type=1300 audit(1773189193.661:2912): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000178190 a2=98 a3=0 items=0 ppid=5381 pid=5474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 256.618551] audit: type=1327 audit(1773189193.661:2912): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313736373432656139343536353839313230663235363638383866 [ 256.624537] audit: type=1334 audit(1773189193.663:2913): prog-id=1256 op=UNLOAD [ 256.626259] audit: type=1300 audit(1773189193.663:2913): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5381 pid=5474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 256.634668] audit: type=1327 audit(1773189193.663:2913): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313736373432656139343536353839313230663235363638383866 [ 256.640584] audit: type=1334 audit(1773189193.663:2914): prog-id=1257 op=LOAD [ 256.642202] audit: type=1300 audit(1773189193.663:2914): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001783f8 a2=98 a3=0 items=0 ppid=5381 pid=5474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 256.648469] audit: type=1327 audit(1773189193.663:2914): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431313736373432656139343536353839313230663235363638383866 [ 260.942401] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 263.399267] kauditd_printk_skb: 5759 callbacks suppressed [ 263.399273] audit: type=1334 audit(1773189200.452:4842): prog-id=2218 op=LOAD [ 263.403244] audit: type=1300 audit(1773189200.452:4842): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd1a0bde8 a2=74 a3=d items=0 ppid=5735 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 263.409958] audit: type=1327 audit(1773189200.452:4842): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 263.415856] audit: type=1334 audit(1773189200.452:4843): prog-id=2218 op=UNLOAD [ 263.417460] audit: type=1300 audit(1773189200.452:4843): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff96a3bf50 a2=74 a3=d items=0 ppid=5735 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 263.424658] audit: type=1327 audit(1773189200.452:4843): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 263.431398] audit: type=1334 audit(1773189200.452:4844): prog-id=2219 op=LOAD [ 263.433416] audit: type=1300 audit(1773189200.452:4844): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd1a0bdc8 a2=80 a3=0 items=0 ppid=5735 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 263.441616] audit: type=1327 audit(1773189200.452:4844): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 263.448724] audit: type=1334 audit(1773189200.452:4845): prog-id=2219 op=UNLOAD This is ip-172-31-19-221 (Linux aarch64 6.12.74-flatcar) 00:33:25 SSH host key: SHA256:o7syP6fHsbg3QQhmHu4LVq8B5jQFDDLHbzQ0i7Sb0xA (ED25519) SSH host key: SHA256:PD4YYgLy/W7ICMmL14ptQt6NJvBJ4IKpO7x0tujMEWE (RSA) SSH host key: SHA256:qirb4iokj8gxelxatoeQTZiFXvbnpgeuo43uqEWYaW0 (ECDSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.19.221 fe80::4e0:7dff:fe17:8375 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-19-221 login: [ 268.828360] kauditd_printk_skb: 422 callbacks suppressed [ 268.828366] audit: type=1334 audit(1773189205.880:4992): prog-id=2232 op=LOAD [ 268.832463] audit: type=1300 audit(1773189205.880:4992): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc1a88008 a2=74 a3=10 items=0 ppid=5615 pid=6228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 268.841954] audit: type=1327 audit(1773189205.880:4992): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323532395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 268.847180] audit: type=1334 audit(1773189205.881:4993): prog-id=2232 op=UNLOAD [ 268.849228] audit: type=1300 audit(1773189205.881:4993): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffa2103f50 a2=74 a3=10 items=0 ppid=5615 pid=6228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 268.858816] audit: type=1327 audit(1773189205.881:4993): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323532395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 268.863910] audit: type=1334 audit(1773189205.881:4994): prog-id=2233 op=LOAD [ 268.865873] audit: type=1300 audit(1773189205.881:4994): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc1a87fe8 a2=80 a3=0 items=0 ppid=5615 pid=6228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 268.872153] audit: type=1327 audit(1773189205.881:4994): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323532395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 268.877172] audit: type=1334 audit(1773189205.881:4995): prog-id=2233 op=UNLOAD [ 274.898689] kauditd_printk_skb: 131 callbacks suppressed [ 274.898694] audit: type=1334 audit(1773189211.952:5043): prog-id=2256 op=LOAD [ 274.903186] audit: type=1300 audit(1773189211.952:5043): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffcf17ca88 a2=74 a3=11 items=0 ppid=5615 pid=6266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 274.913075] audit: type=1327 audit(1773189211.952:5043): proctitle=74630066696C746572007265706C61636500646576006C786363363937343232633336613700696E6772657373007072696F00310068616E646C65003100627066006461006F626A003630315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 274.919146] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.920684] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 274.922812] audit: type=1334 audit(1773189211.952:5044): prog-id=2256 op=UNLOAD [ 274.924876] audit: type=1300 audit(1773189211.952:5044): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffa3956f50 a2=74 a3=11 items=0 ppid=5615 pid=6266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 274.930782] audit: backlog limit exceeded [ 274.932026] audit: type=1327 audit(1773189211.952:5044): proctitle=74630066696C746572007265706C61636500646576006C786363363937343232633336613700696E6772657373007072696F00310068616E646C65003100627066006461006F626A003630315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 274.937232] audit: type=1334 audit(1773189211.952:5045): prog-id=2257 op=LOAD [ 285.220639] kauditd_printk_skb: 420 callbacks suppressed [ 285.220644] audit: type=1334 audit(1773189222.274:5188): prog-id=81 op=UNLOAD [ 285.223669] audit: type=1334 audit(1773189222.276:5189): prog-id=103 op=UNLOAD [ 285.764165] audit: type=1334 audit(1773189222.817:5190): prog-id=2334 op=LOAD [ 285.767008] audit: type=1334 audit(1773189222.820:5191): prog-id=2335 op=LOAD [ 285.768632] audit: type=1300 audit(1773189222.820:5191): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000178190 a2=98 a3=0 items=0 ppid=3138 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 285.774780] audit: type=1327 audit(1773189222.820:5191): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313765616635643034663531326133623130336633393236326238 [ 285.780628] audit: type=1334 audit(1773189222.821:5192): prog-id=2335 op=UNLOAD [ 285.782211] audit: type=1300 audit(1773189222.821:5192): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3138 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 285.788752] audit: type=1327 audit(1773189222.821:5192): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313765616635643034663531326133623130336633393236326238 [ 285.795267] audit: type=1334 audit(1773189222.821:5193): prog-id=2336 op=LOAD [ 291.291889] kauditd_printk_skb: 14 callbacks suppressed [ 291.291894] audit: type=1334 audit(1773189228.344:5198): prog-id=91 op=UNLOAD [ 291.294964] audit: type=1334 audit(1773189228.344:5199): prog-id=94 op=UNLOAD [ 291.785528] audit: type=1334 audit(1773189228.837:5200): prog-id=2339 op=LOAD [ 291.788975] audit: type=1334 audit(1773189228.841:5201): prog-id=2340 op=LOAD [ 291.792296] audit: type=1300 audit(1773189228.841:5201): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000178190 a2=98 a3=0 items=0 ppid=3188 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 291.799267] audit: type=1327 audit(1773189228.841:5201): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264323064373964653164336437633436626166366439613335396261 [ 291.805975] audit: type=1334 audit(1773189228.843:5202): prog-id=2340 op=UNLOAD [ 291.807843] audit: type=1300 audit(1773189228.843:5202): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3188 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 291.815062] audit: type=1327 audit(1773189228.843:5202): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264323064373964653164336437633436626166366439613335396261 [ 291.821395] audit: type=1334 audit(1773189228.843:5203): prog-id=2341 op=LOAD