_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.341491] audit: type=1106 audit(1776817624.657:174): pid=2218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 43.344946] audit: type=1104 audit(1776817624.657:175): pid=2218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 43.497125] audit: type=1106 audit(1776817624.820:176): pid=2213 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 43.502449] audit: type=1104 audit(1776817624.821:177): pid=2213 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 43.509111] audit: type=1131 audit(1776817624.827:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-3-172.31.18.178:22-20.229.252.112:35604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.864029] Initializing XFRM netlink socket [ 52.985532] kauditd_printk_skb: 13 callbacks suppressed [ 52.985535] audit: type=1325 audit(1776817634.310:190): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2342 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.990335] audit: type=1300 audit(1776817634.310:190): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffeaa6551d0 a2=0 a3=0 items=0 ppid=2292 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.996939] audit: type=1327 audit(1776817634.310:190): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 53.000158] audit: type=1325 audit(1776817634.313:191): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.004317] audit: type=1300 audit(1776817634.313:191): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc0c9758e0 a2=0 a3=0 items=0 ppid=2292 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.010023] audit: type=1327 audit(1776817634.313:191): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 53.012532] audit: type=1325 audit(1776817634.315:192): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.015177] audit: type=1300 audit(1776817634.315:192): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbf98b870 a2=0 a3=0 items=0 ppid=2292 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.020630] audit: type=1327 audit(1776817634.315:192): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 53.023321] audit: type=1325 audit(1776817634.318:193): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:27:15 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: [ 58.058055] kauditd_printk_skb: 107 callbacks suppressed [ 58.058059] audit: type=1131 audit(1776817639.382:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.076406] audit: type=1334 audit(1776817639.401:232): prog-id=35 op=UNLOAD [ 65.836758] audit: type=1130 audit(1776817647.160:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 65.929219] audit: type=1131 audit(1776817647.253:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 68.676024] audit: type=1130 audit(1776817650.000:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.683586] audit: type=1131 audit(1776817650.000:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.892568] zram_generator::config[2813]: No configuration found. [ 69.260246] audit: type=1334 audit(1776817650.584:237): prog-id=39 op=LOAD [ 69.261882] audit: type=1334 audit(1776817650.584:238): prog-id=38 op=UNLOAD [ 69.263544] audit: type=1334 audit(1776817650.586:239): prog-id=40 op=LOAD [ 69.265206] audit: type=1334 audit(1776817650.586:240): prog-id=22 op=UNLOAD [ 69.266723] audit: type=1334 audit(1776817650.587:241): prog-id=41 op=LOAD [ 69.268217] audit: type=1334 audit(1776817650.587:242): prog-id=19 op=UNLOAD [ 70.953109] kauditd_printk_skb: 72 callbacks suppressed [ 70.953113] audit: type=1334 audit(1776817652.277:291): prog-id=59 op=LOAD [ 70.960833] audit: type=1334 audit(1776817652.279:292): prog-id=60 op=LOAD [ 70.962149] audit: type=1300 audit(1776817652.279:292): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a240 a2=98 a3=0 items=0 ppid=2916 pid=2927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.969680] audit: type=1327 audit(1776817652.279:292): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613964383463383634366238353664653262333238646465663738 [ 70.984350] audit: type=1334 audit(1776817652.279:293): prog-id=60 op=UNLOAD [ 70.987677] audit: type=1300 audit(1776817652.279:293): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2916 pid=2927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.999275] audit: type=1327 audit(1776817652.279:293): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613964383463383634366238353664653262333238646465663738 [ 71.006313] audit: type=1334 audit(1776817652.283:294): prog-id=61 op=LOAD [ 71.008902] audit: type=1300 audit(1776817652.283:294): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a490 a2=98 a3=0 items=0 ppid=2916 pid=2927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.015013] audit: type=1327 audit(1776817652.283:294): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633613964383463383634366238353664653262333238646465663738 [ 76.352952] zram_generator::config[3406]: No configuration found. [ 76.725504] kauditd_printk_skb: 122 callbacks suppressed [ 76.725508] audit: type=1334 audit(1776817658.050:339): prog-id=89 op=LOAD [ 76.728553] audit: type=1334 audit(1776817658.050:340): prog-id=39 op=UNLOAD [ 76.730113] audit: type=1334 audit(1776817658.050:341): prog-id=90 op=LOAD [ 76.731803] audit: type=1334 audit(1776817658.050:342): prog-id=84 op=UNLOAD [ 76.733503] audit: type=1334 audit(1776817658.051:343): prog-id=91 op=LOAD [ 76.734992] audit: type=1334 audit(1776817658.051:344): prog-id=59 op=UNLOAD [ 76.736563] audit: type=1334 audit(1776817658.053:345): prog-id=92 op=LOAD [ 76.738040] audit: type=1334 audit(1776817658.053:346): prog-id=40 op=UNLOAD [ 76.739567] audit: type=1334 audit(1776817658.054:347): prog-id=93 op=LOAD [ 76.741123] audit: type=1334 audit(1776817658.054:348): prog-id=41 op=UNLOAD [ 81.749179] kauditd_printk_skb: 49 callbacks suppressed [ 81.749183] audit: type=1106 audit(1776817663.073:398): pid=2273 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 81.754694] audit: type=1104 audit(1776817663.075:399): pid=2273 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 81.915916] audit: type=1106 audit(1776817663.240:400): pid=2255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 81.922752] audit: type=1104 audit(1776817663.240:401): pid=2255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 81.928163] audit: type=1131 audit(1776817663.247:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-172.31.18.178:22-20.229.252.112:35608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 84.120439] audit: type=1334 audit(1776817665.445:403): prog-id=115 op=LOAD [ 84.121808] audit: type=1334 audit(1776817665.445:404): prog-id=116 op=LOAD [ 84.123603] audit: type=1300 audit(1776817665.445:404): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130240 a2=98 a3=0 items=0 ppid=3542 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.129944] audit: type=1327 audit(1776817665.445:404): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862383236656637363565356135363363646461333961303535366466 [ 84.136974] audit: type=1334 audit(1776817665.445:405): prog-id=116 op=UNLOAD [ 95.991101] kauditd_printk_skb: 229 callbacks suppressed [ 95.991105] audit: type=1334 audit(1776817677.314:483): prog-id=133 op=LOAD [ 95.996032] audit: type=1334 audit(1776817677.315:484): prog-id=134 op=LOAD [ 95.997929] audit: type=1300 audit(1776817677.315:484): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a240 a2=98 a3=0 items=0 ppid=3574 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.005143] audit: type=1327 audit(1776817677.315:484): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346135383437346631383063393166326366636331626366313335 [ 96.011504] audit: type=1334 audit(1776817677.317:485): prog-id=134 op=UNLOAD [ 96.013229] audit: type=1300 audit(1776817677.317:485): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3574 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.019244] audit: type=1327 audit(1776817677.317:485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346135383437346631383063393166326366636331626366313335 [ 96.024886] audit: type=1334 audit(1776817677.317:486): prog-id=135 op=LOAD [ 96.026384] audit: type=1300 audit(1776817677.317:486): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a490 a2=98 a3=0 items=0 ppid=3574 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.033146] audit: type=1327 audit(1776817677.317:486): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466346135383437346631383063393166326366636331626366313335 [ 101.253356] kauditd_printk_skb: 100 callbacks suppressed [ 101.253360] audit: type=1334 audit(1776817682.577:527): prog-id=156 op=LOAD [ 101.264461] audit: type=1334 audit(1776817682.588:528): prog-id=157 op=LOAD [ 101.270699] audit: type=1300 audit(1776817682.588:528): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0240 a2=98 a3=0 items=0 ppid=3574 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.290983] audit: type=1327 audit(1776817682.588:528): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303666353631313130396134653932633163373363343264623266 [ 101.315295] audit: type=1334 audit(1776817682.588:529): prog-id=157 op=UNLOAD [ 101.318922] audit: type=1300 audit(1776817682.588:529): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3574 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.332771] audit: type=1327 audit(1776817682.588:529): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303666353631313130396134653932633163373363343264623266 [ 101.351941] audit: type=1334 audit(1776817682.588:530): prog-id=158 op=LOAD [ 101.361743] audit: type=1300 audit(1776817682.588:530): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0490 a2=98 a3=0 items=0 ppid=3574 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.370633] audit: type=1327 audit(1776817682.588:530): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763303666353631313130396134653932633163373363343264623266 This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:28:08 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: [ 107.404811] NET: Registered PF_ALG protocol family [ 107.412212] kauditd_printk_skb: 5682 callbacks suppressed [ 107.412215] audit: type=1334 audit(1776817688.736:2425): prog-id=1106 op=LOAD [ 107.414839] audit: type=1300 audit(1776817688.736:2425): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcf93001c0 a2=74 a3=7ffcf93001c0 items=0 ppid=4217 pid=4310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.420907] audit: type=1327 audit(1776817688.736:2425): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 107.425511] audit: type=1334 audit(1776817688.736:2426): prog-id=1106 op=UNLOAD [ 107.426820] audit: type=1300 audit(1776817688.736:2426): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffcf93001c0 a2=74 a3=7ffcf93001c0 items=0 ppid=4217 pid=4310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.432002] audit: type=1327 audit(1776817688.736:2426): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 107.436296] audit: type=1334 audit(1776817688.738:2427): prog-id=1107 op=LOAD [ 107.437565] audit: type=1300 audit(1776817688.738:2427): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcf9300150 a2=80 a3=0 items=0 ppid=4217 pid=4310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.446005] audit: type=1327 audit(1776817688.738:2427): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 107.450349] audit: type=1334 audit(1776817688.738:2428): prog-id=1107 op=UNLOAD This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:28:09 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: [ 108.766092] eth0: renamed from tmpd407c [ 108.789510] eth0: renamed from tmp0b1ec This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:28:10 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:28:11 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:28:12 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: [ 113.114314] kauditd_printk_skb: 323 callbacks suppressed [ 113.114318] audit: type=1334 audit(1776817694.438:2536): prog-id=1144 op=LOAD [ 113.117987] audit: type=1300 audit(1776817694.438:2536): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffff2ba1510 a2=74 a3=7ffff2ba1510 items=0 ppid=4090 pid=4584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.123863] audit: type=1327 audit(1776817694.438:2536): proctitle=74630066696C746572007265706C61636500646576006C786339623932653436373234643800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003732385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 113.128229] audit: type=1334 audit(1776817694.439:2537): prog-id=1144 op=UNLOAD [ 113.129584] audit: type=1300 audit(1776817694.439:2537): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffff2ba1510 a2=74 a3=7ffff2ba1510 items=0 ppid=4090 pid=4584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.134787] audit: type=1327 audit(1776817694.439:2537): proctitle=74630066696C746572007265706C61636500646576006C786339623932653436373234643800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003732385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 113.139246] audit: type=1334 audit(1776817694.439:2538): prog-id=1145 op=LOAD [ 113.140921] audit: type=1300 audit(1776817694.439:2538): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffff2ba14a0 a2=80 a3=0 items=0 ppid=4090 pid=4584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.146391] audit: type=1327 audit(1776817694.439:2538): proctitle=74630066696C746572007265706C61636500646576006C786339623932653436373234643800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003732385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 113.151557] audit: type=1334 audit(1776817694.439:2539): prog-id=1145 op=UNLOAD [ 141.627327] kauditd_printk_skb: 468 callbacks suppressed [ 141.627331] audit: type=1130 audit(1776817722.951:2698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4100-172.31.18.178:22-20.229.252.112:34678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 142.533693] audit: type=1101 audit(1776817723.858:2699): pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 142.540611] audit: type=1103 audit(1776817723.860:2700): pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 142.546510] audit: type=1006 audit(1776817723.860:2701): pid=4764 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 142.549819] audit: type=1300 audit(1776817723.860:2701): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc94de6800 a2=3 a3=0 items=0 ppid=1 pid=4764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.556752] audit: type=1327 audit(1776817723.860:2701): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 142.566136] audit: type=1105 audit(1776817723.890:2702): pid=4764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 142.572947] audit: type=1103 audit(1776817723.893:2703): pid=4768 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 143.684811] audit: type=1106 audit(1776817725.009:2704): pid=4764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 143.693138] audit: type=1104 audit(1776817725.009:2705): pid=4764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 148.854085] kauditd_printk_skb: 1 callbacks suppressed [ 148.854089] audit: type=1130 audit(1776817730.178:2707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4101-172.31.18.178:22-20.229.252.112:58866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.711084] audit: type=1101 audit(1776817731.035:2708): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 149.717365] audit: type=1103 audit(1776817731.035:2709): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 149.723236] audit: type=1006 audit(1776817731.035:2710): pid=4783 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 149.726538] audit: type=1300 audit(1776817731.035:2710): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd3bc88590 a2=3 a3=0 items=0 ppid=1 pid=4783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.732487] audit: type=1327 audit(1776817731.035:2710): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 149.739471] audit: type=1105 audit(1776817731.064:2711): pid=4783 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 149.746359] audit: type=1103 audit(1776817731.067:2712): pid=4787 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 150.296502] audit: type=1106 audit(1776817731.621:2713): pid=4783 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 150.305537] audit: type=1104 audit(1776817731.621:2714): pid=4783 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.475922] kauditd_printk_skb: 1 callbacks suppressed [ 155.475928] audit: type=1130 audit(1776817736.800:2716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4102-172.31.18.178:22-20.229.252.112:40916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.358951] audit: type=1101 audit(1776817737.683:2717): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.365246] audit: type=1103 audit(1776817737.686:2718): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.371500] audit: type=1006 audit(1776817737.686:2719): pid=4801 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 156.374651] audit: type=1300 audit(1776817737.686:2719): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdc774d1e0 a2=3 a3=0 items=0 ppid=1 pid=4801 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.380998] audit: type=1327 audit(1776817737.686:2719): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 156.388667] audit: type=1105 audit(1776817737.713:2720): pid=4801 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.395541] audit: type=1103 audit(1776817737.716:2721): pid=4805 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.937133] audit: type=1106 audit(1776817738.261:2722): pid=4801 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.945079] audit: type=1104 audit(1776817738.261:2723): pid=4801 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.118614] kauditd_printk_skb: 1 callbacks suppressed [ 162.118617] audit: type=1130 audit(1776817743.443:2725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-5-172.31.18.178:22-20.229.252.112:40922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.018438] audit: type=1101 audit(1776817744.343:2726): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.024718] audit: type=1103 audit(1776817744.343:2727): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.030866] audit: type=1006 audit(1776817744.343:2728): pid=4818 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 163.034121] audit: type=1300 audit(1776817744.343:2728): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc3d9b62a0 a2=3 a3=0 items=0 ppid=1 pid=4818 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.040412] audit: type=1327 audit(1776817744.343:2728): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 163.048318] audit: type=1105 audit(1776817744.372:2729): pid=4818 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.054613] audit: type=1103 audit(1776817744.375:2730): pid=4822 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.650653] audit: type=1106 audit(1776817744.974:2731): pid=4818 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.658052] audit: type=1104 audit(1776817744.974:2732): pid=4818 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 172.280406] kauditd_printk_skb: 23 callbacks suppressed [ 172.280410] audit: type=1130 audit(1776817753.604:2752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4104-172.31.18.178:22-20.229.252.112:54966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.164674] audit: type=1101 audit(1776817754.489:2753): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.170761] audit: type=1103 audit(1776817754.490:2754): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.176253] audit: type=1006 audit(1776817754.490:2755): pid=4865 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 173.179379] audit: type=1300 audit(1776817754.490:2755): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff0d4c48a0 a2=3 a3=0 items=0 ppid=1 pid=4865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.185408] audit: type=1327 audit(1776817754.490:2755): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 173.195836] audit: type=1105 audit(1776817754.520:2756): pid=4865 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.202537] audit: type=1103 audit(1776817754.523:2757): pid=4869 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.760736] audit: type=1106 audit(1776817755.085:2758): pid=4865 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.767502] audit: type=1104 audit(1776817755.088:2759): pid=4865 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.932338] kauditd_printk_skb: 1 callbacks suppressed [ 178.932343] audit: type=1130 audit(1776817760.256:2761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4105-172.31.18.178:22-20.229.252.112:48102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.855588] audit: type=1101 audit(1776817761.180:2762): pid=4884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.861725] audit: type=1103 audit(1776817761.181:2763): pid=4884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.867728] audit: type=1006 audit(1776817761.181:2764): pid=4884 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 179.870875] audit: type=1300 audit(1776817761.181:2764): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe2e55f110 a2=3 a3=0 items=0 ppid=1 pid=4884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.876373] audit: type=1327 audit(1776817761.181:2764): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 179.879779] audit: type=1105 audit(1776817761.204:2765): pid=4884 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.886394] audit: type=1103 audit(1776817761.207:2766): pid=4888 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 180.428833] audit: type=1106 audit(1776817761.753:2767): pid=4884 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 180.436701] audit: type=1104 audit(1776817761.753:2768): pid=4884 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.924376] kauditd_printk_skb: 9 callbacks suppressed [ 184.924380] audit: type=1106 audit(1776817766.249:2776): pid=4900 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.932151] audit: type=1104 audit(1776817766.250:2777): pid=4900 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.939803] audit: type=1131 audit(1776817766.264:2778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-7-172.31.18.178:22-20.229.252.112:48118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.096351] audit: type=1130 audit(1776817766.420:2779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4106-172.31.18.178:22-20.229.252.112:49882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.002296] audit: type=1101 audit(1776817767.326:2780): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.008498] audit: type=1103 audit(1776817767.328:2781): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.014132] audit: type=1006 audit(1776817767.328:2782): pid=4914 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 186.018046] audit: type=1300 audit(1776817767.328:2782): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc42208150 a2=3 a3=0 items=0 ppid=1 pid=4914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.024186] audit: type=1327 audit(1776817767.328:2782): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 186.030312] audit: type=1105 audit(1776817767.354:2783): pid=4914 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.248452] kauditd_printk_skb: 28 callbacks suppressed [ 190.248456] audit: type=1101 audit(1776817771.573:2802): pid=4949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.256254] audit: type=1103 audit(1776817771.574:2803): pid=4949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.262443] audit: type=1006 audit(1776817771.575:2804): pid=4949 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 190.265674] audit: type=1300 audit(1776817771.575:2804): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff25f934c0 a2=3 a3=0 items=0 ppid=1 pid=4949 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.272323] audit: type=1327 audit(1776817771.575:2804): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 190.286306] audit: type=1105 audit(1776817771.610:2805): pid=4949 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.293234] audit: type=1103 audit(1776817771.614:2806): pid=4953 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.809249] audit: type=1106 audit(1776817772.133:2807): pid=4949 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.816228] audit: type=1104 audit(1776817772.133:2808): pid=4949 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.824040] audit: type=1131 audit(1776817772.137:2809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-9-172.31.18.178:22-20.229.252.112:49886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.973964] kauditd_printk_skb: 6 callbacks suppressed [ 195.973968] audit: type=1130 audit(1776817777.298:2812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-172.31.18.178:22-20.229.252.112:56028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.821901] audit: type=1101 audit(1776817778.146:2813): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.828061] audit: type=1103 audit(1776817778.146:2814): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.833381] audit: type=1006 audit(1776817778.146:2815): pid=4967 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 196.836656] audit: type=1300 audit(1776817778.146:2815): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffeb64cb00 a2=3 a3=0 items=0 ppid=1 pid=4967 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.842773] audit: type=1327 audit(1776817778.146:2815): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 196.848657] audit: type=1105 audit(1776817778.173:2816): pid=4967 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.855457] audit: type=1103 audit(1776817778.176:2817): pid=4971 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.376482] audit: type=1106 audit(1776817778.701:2818): pid=4967 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.385327] audit: type=1104 audit(1776817778.701:2819): pid=4967 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 202.546030] kauditd_printk_skb: 1 callbacks suppressed [ 202.546034] audit: type=1130 audit(1776817783.870:2821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4107-172.31.18.178:22-20.229.252.112:56042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.392778] audit: type=1101 audit(1776817784.717:2822): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.398979] audit: type=1103 audit(1776817784.719:2823): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.404593] audit: type=1006 audit(1776817784.719:2824): pid=4985 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 203.408039] audit: type=1300 audit(1776817784.719:2824): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff8cf6ae90 a2=3 a3=0 items=0 ppid=1 pid=4985 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.414253] audit: type=1327 audit(1776817784.719:2824): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 203.421156] audit: type=1105 audit(1776817784.745:2825): pid=4985 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.428021] audit: type=1103 audit(1776817784.748:2826): pid=4989 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.957099] audit: type=1106 audit(1776817785.281:2827): pid=4985 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.964208] audit: type=1104 audit(1776817785.281:2828): pid=4985 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:29:49 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: [ 209.087497] kauditd_printk_skb: 17 callbacks suppressed [ 209.087501] audit: type=1106 audit(1776817790.412:2844): pid=5001 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 209.095830] audit: type=1104 audit(1776817790.412:2845): pid=5001 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 209.101312] audit: type=1131 audit(1776817790.417:2846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-11-172.31.18.178:22-20.229.252.112:41778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.264312] audit: type=1130 audit(1776817790.588:2847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-12-172.31.18.178:22-20.229.252.112:41784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.155986] audit: type=1101 audit(1776817791.480:2848): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.162040] audit: type=1103 audit(1776817791.483:2849): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.167720] audit: type=1006 audit(1776817791.483:2850): pid=5163 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 210.170861] audit: type=1300 audit(1776817791.483:2850): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff92dd5d70 a2=3 a3=0 items=0 ppid=1 pid=5163 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.176449] audit: type=1327 audit(1776817791.483:2850): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 210.183830] audit: type=1105 audit(1776817791.508:2851): pid=5163 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.168134] kauditd_printk_skb: 102 callbacks suppressed [ 214.168138] audit: type=1101 audit(1776817795.492:2900): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.175604] audit: type=1103 audit(1776817795.494:2901): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.180789] audit: type=1006 audit(1776817795.494:2902): pid=5326 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 214.183996] audit: type=1300 audit(1776817795.494:2902): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff17170f00 a2=3 a3=0 items=0 ppid=1 pid=5326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.190135] audit: type=1327 audit(1776817795.494:2902): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 214.198499] audit: type=1105 audit(1776817795.523:2903): pid=5326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.205375] audit: type=1103 audit(1776817795.526:2904): pid=5371 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.538709] audit: type=1334 audit(1776817795.863:2905): prog-id=1260 op=LOAD [ 214.542196] audit: type=1334 audit(1776817795.863:2906): prog-id=1261 op=LOAD [ 214.545723] audit: type=1300 audit(1776817795.863:2906): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0240 a2=98 a3=0 items=0 ppid=5189 pid=5372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.317532] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 219.168379] kauditd_printk_skb: 5986 callbacks suppressed [ 219.168383] audit: type=1300 audit(1776817800.492:4905): arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffcb17fc1a0 a2=0 a3=7ffcb17fc18c items=0 ppid=5430 pid=5898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 219.177881] audit: type=1327 audit(1776817800.492:4905): proctitle=69707461626C6573002D770035002D7400726177002D49004F5554505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F4F55545055545F726177002D6A0043494C49554D5F4F55545055545F726177 [ 219.182414] audit: type=1325 audit(1776817800.502:4906): table=nat:218 family=2 entries=1 op=nft_register_rule pid=5899 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 219.185576] audit: type=1300 audit(1776817800.502:4906): arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7fffff7e8d10 a2=0 a3=7fffff7e8cfc items=0 ppid=5430 pid=5899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 219.192121] audit: type=1327 audit(1776817800.502:4906): proctitle=69707461626C6573002D770035002D74006E6174002D4900504F5354524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F504F53545F6E6174002D6A0043494C49554D5F504F53545F6E6174 [ 219.197229] audit: type=1325 audit(1776817800.505:4907): table=nat:219 family=2 entries=1 op=nft_register_rule pid=5900 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 219.200449] audit: type=1300 audit(1776817800.505:4907): arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffc31453ce0 a2=0 a3=7ffc31453ccc items=0 ppid=5430 pid=5900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 219.206995] audit: type=1327 audit(1776817800.505:4907): proctitle=69707461626C6573002D770035002D74006E6174002D49004F5554505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F4F55545055545F6E6174002D6A0043494C49554D5F4F55545055545F6E6174 [ 219.211941] audit: type=1325 audit(1776817800.507:4908): table=nat:220 family=2 entries=1 op=nft_register_rule pid=5901 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 219.215017] audit: type=1300 audit(1776817800.507:4908): arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffc06f5a960 a2=0 a3=7ffc06f5a94c items=0 ppid=5430 pid=5901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-18-178 (Linux x86_64 6.12.81-flatcar) 00:30:03 SSH host key: SHA256:awEdv2ghQ2ql7E127Q59/agueCCYS6j/63kPweRdNME (ED25519) SSH host key: SHA256:ppYeqIxkIxc0r1xhSvxBHMvtfFGUA/qo4MhULiWNZvU (ECDSA) SSH host key: SHA256:F1AGhucSgY6QBnui4gOiU4m9cvOytg7NCr9Xo2HlYDU (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.18.178 fe80::43f:7cff:fe86:76cb Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-18-178 login: [ 225.870525] kauditd_printk_skb: 299 callbacks suppressed [ 225.870529] audit: type=1334 audit(1776817807.195:5015): prog-id=2253 op=LOAD [ 225.874377] audit: type=1300 audit(1776817807.195:5015): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff69d768b0 a2=74 a3=7fff69d768b0 items=0 ppid=5430 pid=6081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 225.882053] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.883297] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 225.884523] audit: backlog limit exceeded [ 225.884531] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.885360] audit: type=1327 audit(1776817807.195:5015): proctitle=74630066696C746572007265706C61636500646576006C786332633037346637376662306400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333831305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 225.885721] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 225.887871] audit: type=1334 audit(1776817807.195:5016): prog-id=2253 op=UNLOAD [ 225.891251] audit: backlog limit exceeded