bj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 43.611334] audit: type=1104 audit(1778320411.435:180): pid=2249 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 43.616378] audit: type=1131 audit(1778320411.439:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-172.31.21.38:22-4.175.71.9:48758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.217873] Initializing XFRM netlink socket [ 53.352428] kauditd_printk_skb: 13 callbacks suppressed [ 53.352433] audit: type=1325 audit(1778320421.183:193): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.357285] audit: type=1300 audit(1778320421.183:193): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcf4a79a40 a2=0 a3=0 items=0 ppid=2327 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.364243] audit: type=1327 audit(1778320421.183:193): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 53.367341] audit: type=1325 audit(1778320421.186:194): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.370446] audit: type=1300 audit(1778320421.186:194): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd87263250 a2=0 a3=0 items=0 ppid=2327 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.376739] audit: type=1327 audit(1778320421.186:194): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 53.379234] audit: type=1325 audit(1778320421.188:195): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2381 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.381907] audit: type=1300 audit(1778320421.188:195): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf8e615a0 a2=0 a3=0 items=0 ppid=2327 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.387343] audit: type=1327 audit(1778320421.188:195): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 53.390073] audit: type=1325 audit(1778320421.191:196): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:53:42 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:53:42 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: [ 59.201818] kauditd_printk_skb: 107 callbacks suppressed [ 59.201822] audit: type=1131 audit(1778320427.031:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.223863] audit: type=1334 audit(1778320427.055:235): prog-id=38 op=UNLOAD [ 66.305635] audit: type=1130 audit(1778320434.136:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.368131] audit: type=1131 audit(1778320434.199:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 77.125862] audit: type=1130 audit(1778320444.955:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 77.223119] audit: type=1131 audit(1778320445.054:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 80.106552] audit: type=1130 audit(1778320447.937:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 80.112974] audit: type=1131 audit(1778320447.937:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 80.331869] zram_generator::config[3051]: No configuration found. [ 80.335296] systemd-ssh-generator[3044]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 80.692961] audit: type=1334 audit(1778320448.524:242): prog-id=42 op=LOAD [ 80.694676] audit: type=1334 audit(1778320448.524:243): prog-id=35 op=UNLOAD [ 80.696357] audit: type=1334 audit(1778320448.524:244): prog-id=43 op=LOAD [ 80.697964] audit: type=1334 audit(1778320448.524:245): prog-id=44 op=LOAD [ 80.699527] audit: type=1334 audit(1778320448.524:246): prog-id=36 op=UNLOAD [ 80.701071] audit: type=1334 audit(1778320448.524:247): prog-id=37 op=UNLOAD [ 82.963212] kauditd_printk_skb: 72 callbacks suppressed [ 82.963216] audit: type=1334 audit(1778320450.794:296): prog-id=62 op=LOAD [ 82.966083] audit: type=1334 audit(1778320450.794:297): prog-id=63 op=LOAD [ 82.968016] audit: type=1300 audit(1778320450.794:297): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000128240 a2=98 a3=0 items=0 ppid=3178 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.974172] audit: type=1327 audit(1778320450.794:297): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763383439396366643662633634316265643539323430396338616638 [ 82.980196] audit: type=1334 audit(1778320450.795:298): prog-id=63 op=UNLOAD [ 82.981691] audit: type=1300 audit(1778320450.795:298): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3178 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.987237] audit: type=1327 audit(1778320450.795:298): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763383439396366643662633634316265643539323430396338616638 [ 82.993158] audit: type=1334 audit(1778320450.799:299): prog-id=64 op=LOAD [ 82.994719] audit: type=1300 audit(1778320450.799:299): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000128490 a2=98 a3=0 items=0 ppid=3178 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.000618] audit: type=1327 audit(1778320450.799:299): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763383439396366643662633634316265643539323430396338616638 [ 92.128040] systemd-ssh-generator[3443]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 92.140740] zram_generator::config[3449]: No configuration found. [ 92.508062] kauditd_printk_skb: 122 callbacks suppressed [ 92.508066] audit: type=1334 audit(1778320460.339:344): prog-id=92 op=LOAD [ 92.511304] audit: type=1334 audit(1778320460.339:345): prog-id=42 op=UNLOAD [ 92.513122] audit: type=1334 audit(1778320460.339:346): prog-id=93 op=LOAD [ 92.514820] audit: type=1334 audit(1778320460.339:347): prog-id=94 op=LOAD [ 92.516332] audit: type=1334 audit(1778320460.339:348): prog-id=43 op=UNLOAD [ 92.518122] audit: type=1334 audit(1778320460.339:349): prog-id=44 op=UNLOAD [ 92.519821] audit: type=1334 audit(1778320460.340:350): prog-id=95 op=LOAD [ 92.521276] audit: type=1334 audit(1778320460.340:351): prog-id=45 op=UNLOAD [ 92.522994] audit: type=1334 audit(1778320460.340:352): prog-id=96 op=LOAD [ 92.524508] audit: type=1334 audit(1778320460.340:353): prog-id=97 op=LOAD [ 101.154258] kauditd_printk_skb: 54 callbacks suppressed [ 101.154263] audit: type=1334 audit(1778320468.985:408): prog-id=118 op=LOAD [ 101.158382] audit: type=1334 audit(1778320468.989:409): prog-id=119 op=LOAD [ 101.160442] audit: type=1300 audit(1778320468.989:409): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130240 a2=98 a3=0 items=0 ppid=3600 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.166422] audit: type=1327 audit(1778320468.989:409): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335323665623936633136343935323937666463626637313136396339 [ 101.179056] audit: type=1334 audit(1778320468.991:410): prog-id=119 op=UNLOAD [ 101.180673] audit: type=1300 audit(1778320468.991:410): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3600 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.190386] audit: type=1327 audit(1778320468.991:410): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335323665623936633136343935323937666463626637313136396339 [ 101.196450] audit: type=1334 audit(1778320468.998:411): prog-id=120 op=LOAD [ 101.198224] audit: type=1300 audit(1778320468.998:411): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130490 a2=98 a3=0 items=0 ppid=3600 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.204289] audit: type=1327 audit(1778320468.998:411): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335323665623936633136343935323937666463626637313136396339 [ 110.207655] kauditd_printk_skb: 224 callbacks suppressed [ 110.207659] audit: type=1334 audit(1778320478.038:488): prog-id=136 op=LOAD [ 110.210810] audit: type=1334 audit(1778320478.039:489): prog-id=137 op=LOAD [ 110.212165] audit: type=1300 audit(1778320478.039:489): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b8240 a2=98 a3=0 items=0 ppid=3652 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.217496] audit: type=1327 audit(1778320478.039:489): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038303639303538323435396562613065626233663665323066613539 [ 110.224185] audit: type=1334 audit(1778320478.040:490): prog-id=137 op=UNLOAD [ 110.225640] audit: type=1300 audit(1778320478.040:490): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3652 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.231761] audit: type=1327 audit(1778320478.040:490): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038303639303538323435396562613065626233663665323066613539 [ 110.237933] audit: type=1334 audit(1778320478.040:491): prog-id=138 op=LOAD [ 110.239492] audit: type=1300 audit(1778320478.040:491): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b8490 a2=98 a3=0 items=0 ppid=3652 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.245636] audit: type=1327 audit(1778320478.040:491): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038303639303538323435396562613065626233663665323066613539 [ 117.512895] kauditd_printk_skb: 122 callbacks suppressed [ 117.512899] audit: type=1334 audit(1778320485.344:540): prog-id=164 op=LOAD [ 117.515391] audit: type=1300 audit(1778320485.344:540): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcbf1a2d50 a2=74 a3=7ffcbf1a2d50 items=0 ppid=4147 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.520933] audit: type=1327 audit(1778320485.344:540): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 117.522960] audit: type=1334 audit(1778320485.344:541): prog-id=164 op=UNLOAD [ 117.524319] audit: type=1300 audit(1778320485.344:541): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffcbf1a2d50 a2=74 a3=7ffcbf1a2d50 items=0 ppid=4147 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.529667] audit: type=1327 audit(1778320485.344:541): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 117.531773] audit: type=1334 audit(1778320485.345:542): prog-id=165 op=LOAD [ 117.532987] audit: type=1300 audit(1778320485.345:542): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcbf1a1dd0 a2=90 a3=2 items=0 ppid=4147 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.538417] audit: type=1327 audit(1778320485.345:542): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 117.540502] audit: type=1334 audit(1778320485.345:543): prog-id=165 op=UNLOAD This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:48 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:48 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: [ 121.381428] NET: Registered PF_ALG protocol family This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:49 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:49 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: [ 122.804330] eth0: renamed from tmpfa87f [ 122.859693] eth0: renamed from tmp05dcb This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:50 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:50 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: [ 123.680845] kauditd_printk_skb: 5876 callbacks suppressed [ 123.680850] audit: type=1334 audit(1778320491.511:2502): prog-id=1123 op=LOAD [ 123.685767] audit: type=1300 audit(1778320491.511:2502): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc658cc2c0 a2=74 a3=7ffc658cc2c0 items=0 ppid=4147 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 123.691228] audit: type=1327 audit(1778320491.511:2502): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323135305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 123.695931] audit: type=1334 audit(1778320491.512:2503): prog-id=1123 op=UNLOAD [ 123.697384] audit: type=1300 audit(1778320491.512:2503): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc658cc2c0 a2=74 a3=7ffc658cc2c0 items=0 ppid=4147 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 123.703375] audit: type=1327 audit(1778320491.512:2503): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323135305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 123.708195] audit: type=1334 audit(1778320491.512:2504): prog-id=1124 op=LOAD [ 123.709773] audit: type=1300 audit(1778320491.512:2504): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc658cc250 a2=80 a3=0 items=0 ppid=4147 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 123.715637] audit: type=1327 audit(1778320491.512:2504): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323135305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 123.720614] audit: type=1334 audit(1778320491.512:2505): prog-id=1124 op=UNLOAD This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:52 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:52 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:53 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:54:53 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: [ 129.636892] kauditd_printk_skb: 579 callbacks suppressed [ 129.636896] audit: type=1325 audit(1778320497.468:2701): table=filter:153 family=2 entries=14 op=nft_register_rule pid=4791 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 129.640995] audit: type=1300 audit(1778320497.468:2701): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffda53f72b0 a2=0 a3=7ffda53f729c items=0 ppid=3739 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.646636] audit: type=1327 audit(1778320497.468:2701): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 129.649524] audit: type=1325 audit(1778320497.478:2702): table=nat:154 family=2 entries=12 op=nft_register_rule pid=4791 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 129.653814] audit: type=1300 audit(1778320497.478:2702): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffda53f72b0 a2=0 a3=0 items=0 ppid=3739 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.659971] audit: type=1327 audit(1778320497.478:2702): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 139.487390] audit: type=1325 audit(1778320507.318:2703): table=filter:155 family=2 entries=11 op=nft_register_rule pid=4803 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 139.490278] audit: type=1300 audit(1778320507.318:2703): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffed4bbb4c0 a2=0 a3=7ffed4bbb4ac items=0 ppid=3739 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.496421] audit: type=1327 audit(1778320507.318:2703): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 139.502283] audit: type=1325 audit(1778320507.333:2704): table=nat:156 family=2 entries=33 op=nft_register_chain pid=4803 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 139.505509] audit: type=1300 audit(1778320507.333:2704): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffed4bbb4c0 a2=0 a3=7ffed4bbb4ac items=0 ppid=3739 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.511454] audit: type=1327 audit(1778320507.333:2704): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 139.523493] audit: type=1325 audit(1778320507.354:2705): table=filter:157 family=2 entries=8 op=nft_register_rule pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 139.527155] audit: type=1300 audit(1778320507.354:2705): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdd6dd4f80 a2=0 a3=7ffdd6dd4f6c items=0 ppid=3739 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.533618] audit: type=1327 audit(1778320507.354:2705): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 139.550749] audit: type=1325 audit(1778320507.381:2706): table=nat:158 family=2 entries=54 op=nft_register_chain pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 160.071754] kauditd_printk_skb: 2 callbacks suppressed [ 160.071758] audit: type=1130 audit(1778320527.902:2707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4101-172.31.21.38:22-4.175.71.9:38912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.006164] audit: type=1101 audit(1778320528.837:2708): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 161.018649] audit: type=1103 audit(1778320528.839:2709): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 161.028748] audit: type=1006 audit(1778320528.839:2710): pid=4812 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 161.036263] audit: type=1300 audit(1778320528.839:2710): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff36e448f0 a2=3 a3=0 items=0 ppid=1 pid=4812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.047200] audit: type=1327 audit(1778320528.839:2710): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.049980] audit: type=1105 audit(1778320528.867:2711): pid=4812 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 161.060549] audit: type=1103 audit(1778320528.875:2712): pid=4816 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 162.186552] audit: type=1106 audit(1778320530.016:2713): pid=4812 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 162.193936] audit: type=1104 audit(1778320530.017:2714): pid=4812 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 167.361571] kauditd_printk_skb: 1 callbacks suppressed [ 167.361574] audit: type=1130 audit(1778320535.192:2716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-172.31.21.38:22-4.175.71.9:54152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.256540] audit: type=1101 audit(1778320536.087:2717): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 168.263305] audit: type=1103 audit(1778320536.089:2718): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 168.269049] audit: type=1006 audit(1778320536.089:2719): pid=4831 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 168.272599] audit: type=1300 audit(1778320536.089:2719): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffec565ec30 a2=3 a3=0 items=0 ppid=1 pid=4831 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.278209] audit: type=1327 audit(1778320536.089:2719): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 168.284580] audit: type=1105 audit(1778320536.115:2720): pid=4831 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 168.291586] audit: type=1103 audit(1778320536.118:2721): pid=4835 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 168.858614] audit: type=1106 audit(1778320536.689:2722): pid=4831 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 168.865012] audit: type=1104 audit(1778320536.689:2723): pid=4831 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 174.021243] kauditd_printk_skb: 1 callbacks suppressed [ 174.021247] audit: type=1130 audit(1778320541.852:2725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4102-172.31.21.38:22-4.175.71.9:54154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 174.867185] audit: type=1101 audit(1778320542.698:2726): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 174.873699] audit: type=1103 audit(1778320542.701:2727): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 174.879134] audit: type=1006 audit(1778320542.701:2728): pid=4847 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 174.882491] audit: type=1300 audit(1778320542.701:2728): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb25526e0 a2=3 a3=0 items=0 ppid=1 pid=4847 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.888559] audit: type=1327 audit(1778320542.701:2728): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 174.894334] audit: type=1105 audit(1778320542.725:2729): pid=4847 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 174.901017] audit: type=1103 audit(1778320542.728:2730): pid=4851 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 175.424771] audit: type=1106 audit(1778320543.254:2731): pid=4847 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 175.436505] audit: type=1104 audit(1778320543.254:2732): pid=4847 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 183.876623] kauditd_printk_skb: 23 callbacks suppressed [ 183.876626] audit: type=1130 audit(1778320551.707:2752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-7-172.31.21.38:22-4.175.71.9:40212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.749332] audit: type=1101 audit(1778320552.580:2753): pid=4894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 184.755876] audit: type=1103 audit(1778320552.582:2754): pid=4894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 184.761250] audit: type=1006 audit(1778320552.582:2755): pid=4894 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 184.765185] audit: type=1300 audit(1778320552.582:2755): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcdf4c4dc0 a2=3 a3=0 items=0 ppid=1 pid=4894 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.771285] audit: type=1327 audit(1778320552.582:2755): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.779058] audit: type=1105 audit(1778320552.610:2756): pid=4894 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 184.786329] audit: type=1103 audit(1778320552.617:2757): pid=4898 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 185.323752] audit: type=1106 audit(1778320553.154:2758): pid=4894 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 185.330124] audit: type=1104 audit(1778320553.154:2759): pid=4894 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 190.494384] kauditd_printk_skb: 1 callbacks suppressed [ 190.494388] audit: type=1130 audit(1778320558.325:2761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4103-172.31.21.38:22-4.175.71.9:41310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.362186] audit: type=1101 audit(1778320559.193:2762): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.368634] audit: type=1103 audit(1778320559.195:2763): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.374383] audit: type=1006 audit(1778320559.195:2764): pid=4912 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 191.377244] audit: type=1300 audit(1778320559.195:2764): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffc2534420 a2=3 a3=0 items=0 ppid=1 pid=4912 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.383426] audit: type=1327 audit(1778320559.195:2764): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 191.389511] audit: type=1105 audit(1778320559.220:2765): pid=4912 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.396138] audit: type=1103 audit(1778320559.224:2766): pid=4916 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.926508] audit: type=1106 audit(1778320559.757:2767): pid=4912 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.934052] audit: type=1104 audit(1778320559.757:2768): pid=4912 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 195.638460] kauditd_printk_skb: 9 callbacks suppressed [ 195.638465] audit: type=1106 audit(1778320563.469:2776): pid=4928 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 195.688332] audit: type=1104 audit(1778320563.514:2777): pid=4928 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 195.728324] audit: type=1131 audit(1778320563.559:2778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-8-172.31.21.38:22-4.175.71.9:41312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.854511] audit: type=1130 audit(1778320563.685:2779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-9-172.31.21.38:22-4.175.71.9:37626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.823486] audit: type=1101 audit(1778320564.654:2780): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 196.829687] audit: type=1103 audit(1778320564.657:2781): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 196.835147] audit: type=1006 audit(1778320564.657:2782): pid=4944 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 196.839215] audit: type=1300 audit(1778320564.657:2782): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc73777340 a2=3 a3=0 items=0 ppid=1 pid=4944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.844868] audit: type=1327 audit(1778320564.657:2782): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 196.854318] audit: type=1105 audit(1778320564.685:2783): pid=4944 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 200.907631] kauditd_printk_skb: 28 callbacks suppressed [ 200.907635] audit: type=1101 audit(1778320568.738:2802): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 200.914823] audit: type=1103 audit(1778320568.741:2803): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 200.920601] audit: type=1006 audit(1778320568.741:2804): pid=4979 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 200.923923] audit: type=1300 audit(1778320568.741:2804): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffef4833790 a2=3 a3=0 items=0 ppid=1 pid=4979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.930633] audit: type=1327 audit(1778320568.741:2804): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 200.939629] audit: type=1105 audit(1778320568.770:2805): pid=4979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 200.947100] audit: type=1103 audit(1778320568.778:2806): pid=4983 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 201.478650] audit: type=1106 audit(1778320569.309:2807): pid=4979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 201.486001] audit: type=1104 audit(1778320569.309:2808): pid=4979 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 201.492094] audit: type=1131 audit(1778320569.312:2809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-11-172.31.21.38:22-4.175.71.9:37644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.657381] kauditd_printk_skb: 6 callbacks suppressed [ 206.657386] audit: type=1130 audit(1778320574.488:2812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-12-172.31.21.38:22-4.175.71.9:52330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.539207] audit: type=1101 audit(1778320575.370:2813): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 207.545370] audit: type=1103 audit(1778320575.372:2814): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 207.550982] audit: type=1006 audit(1778320575.372:2815): pid=4996 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 207.554258] audit: type=1300 audit(1778320575.372:2815): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe506934a0 a2=3 a3=0 items=0 ppid=1 pid=4996 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.561263] audit: type=1327 audit(1778320575.372:2815): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 207.569154] audit: type=1105 audit(1778320575.400:2816): pid=4996 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 207.575796] audit: type=1103 audit(1778320575.403:2817): pid=5000 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 208.113283] audit: type=1106 audit(1778320575.943:2818): pid=4996 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 208.120231] audit: type=1104 audit(1778320575.943:2819): pid=4996 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 213.284848] kauditd_printk_skb: 1 callbacks suppressed [ 213.284853] audit: type=1130 audit(1778320581.115:2821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-13-172.31.21.38:22-4.175.71.9:52332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 214.161116] audit: type=1101 audit(1778320581.992:2822): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.167088] audit: type=1103 audit(1778320581.994:2823): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.172738] audit: type=1006 audit(1778320581.994:2824): pid=5014 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 214.176147] audit: type=1300 audit(1778320581.994:2824): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf4d45610 a2=3 a3=0 items=0 ppid=1 pid=5014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.182173] audit: type=1327 audit(1778320581.994:2824): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 214.190394] audit: type=1105 audit(1778320582.021:2825): pid=5014 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.197278] audit: type=1103 audit(1778320582.024:2826): pid=5019 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.731780] audit: type=1106 audit(1778320582.562:2827): pid=5014 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.738319] audit: type=1104 audit(1778320582.562:2828): pid=5014 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 218.953150] kauditd_printk_skb: 9 callbacks suppressed [ 218.953154] audit: type=1334 audit(1778320586.784:2836): prog-id=146 op=UNLOAD [ 218.956534] audit: type=1334 audit(1778320586.784:2837): prog-id=150 op=UNLOAD [ 219.031850] audit: type=1334 audit(1778320586.863:2838): prog-id=1208 op=UNLOAD [ 219.031854] audit: type=1334 audit(1778320586.863:2839): prog-id=1224 op=UNLOAD [ 219.061083] audit: type=1334 audit(1778320586.892:2840): prog-id=128 op=UNLOAD [ 219.063991] audit: type=1334 audit(1778320586.892:2841): prog-id=132 op=UNLOAD [ 219.160707] audit: type=1334 audit(1778320586.991:2842): prog-id=123 op=UNLOAD [ 219.162042] audit: type=1334 audit(1778320586.991:2843): prog-id=127 op=UNLOAD This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:56:27 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:56:27 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: [ 220.965258] audit: type=1106 audit(1778320588.796:2844): pid=5031 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 220.972309] audit: type=1104 audit(1778320588.796:2845): pid=5031 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 224.204471] kauditd_printk_skb: 83 callbacks suppressed [ 224.204475] audit: type=1101 audit(1778320592.035:2885): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 224.211661] audit: type=1103 audit(1778320592.037:2886): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 224.216918] audit: type=1006 audit(1778320592.037:2887): pid=5194 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 224.220060] audit: type=1300 audit(1778320592.037:2887): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd24719870 a2=3 a3=0 items=0 ppid=1 pid=5194 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.226428] audit: type=1327 audit(1778320592.037:2887): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 224.236656] audit: type=1105 audit(1778320592.067:2888): pid=5194 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 224.243269] audit: type=1103 audit(1778320592.071:2889): pid=5338 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 224.704249] audit: type=1106 audit(1778320592.535:2890): pid=5194 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 224.711909] audit: type=1104 audit(1778320592.535:2891): pid=5194 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 224.717001] audit: type=1131 audit(1778320592.540:2892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-15-172.31.21.38:22-4.175.71.9:40476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 227.811243] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 229.675215] kauditd_printk_skb: 5746 callbacks suppressed [ 229.675218] audit: type=1334 audit(1778320597.506:4815): prog-id=2218 op=LOAD [ 229.678246] audit: type=1300 audit(1778320597.506:4815): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffd6b5e540 a2=74 a3=7fffd6b5e540 items=0 ppid=5608 pid=5682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 229.684182] audit: type=1327 audit(1778320597.506:4815): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 229.688824] audit: type=1334 audit(1778320597.506:4816): prog-id=2218 op=UNLOAD [ 229.690251] audit: type=1300 audit(1778320597.506:4816): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fffd6b5e540 a2=74 a3=7fffd6b5e540 items=0 ppid=5608 pid=5682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 229.696406] audit: type=1327 audit(1778320597.506:4816): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 229.701298] audit: type=1334 audit(1778320597.506:4817): prog-id=2219 op=LOAD [ 229.702849] audit: type=1300 audit(1778320597.506:4817): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffd6b5e4d0 a2=80 a3=0 items=0 ppid=5608 pid=5682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 229.709002] audit: type=1327 audit(1778320597.506:4817): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 229.714024] audit: type=1334 audit(1778320597.506:4818): prog-id=2219 op=UNLOAD This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:56:41 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 This is ip-172-31-21-38 (Linux x86_64 6.12.87-flatcar) 09:56:41 SSH host key: SHA256:S2bynOquBqbps50EuUrufxeq7Q9+xUUfK2FLzVuj7ig (RSA) SSH host key: SHA256:czbICI0jOaxwd9HX25ozo948mbMl1dBc+O2vJQf1vyA (ED25519) SSH host key: SHA256:ed+cHyg04Q3BOyni85m/oZphVhh5bD6cbA3FGBhGyok (ECDSA) eth0: 172.31.21.38 fe80::4fc:94ff:fe34:c69 ip-172-31-21-38 login: [ 235.935552] kauditd_printk_skb: 560 callbacks suppressed [ 235.935557] audit: type=1334 audit(1778320603.766:5013): prog-id=2256 op=LOAD [ 235.939761] audit: type=1300 audit(1778320603.766:5013): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffedb9fa150 a2=74 a3=7ffedb9fa150 items=0 ppid=5454 pid=6105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 235.947425] audit: type=1327 audit(1778320603.766:5013): proctitle=74630066696C746572007265706C61636500646576006C786331316338653238333132613800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003235385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 235.954400] audit: type=1334 audit(1778320603.766:5014): prog-id=2256 op=UNLOAD [ 235.955955] audit: type=1300 audit(1778320603.766:5014): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffedb9fa150 a2=74 a3=7ffedb9fa150 items=0 ppid=5454 pid=6105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 235.962451] audit: type=1327 audit(1778320603.766:5014): proctitle=74630066696C746572007265706C61636500646576006C786331316338653238333132613800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003235385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 235.968354] audit: type=1334 audit(1778320603.766:5015): prog-id=2257 op=LOAD [ 235.969882] audit: type=1300 audit(1778320603.766:5015): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffedb9fa0e0 a2=80 a3=0 items=0 ppid=5454 pid=6105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 235.976413] audit: type=1327 audit(1778320603.766:5015): proctitle=74630066696C746572007265706C61636500646576006C786331316338653238333132613800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003235385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 235.980944] audit: type=1334 audit(1778320603.766:5016): prog-id=2257 op=UNLOAD [ 252.058079] kauditd_printk_skb: 423 callbacks suppressed [ 252.058083] audit: type=1334 audit(1778320619.889:5162): prog-id=86 op=UNLOAD [ 252.060931] audit: type=1334 audit(1778320619.889:5163): prog-id=99 op=UNLOAD [ 252.956371] audit: type=1334 audit(1778320620.787:5164): prog-id=2334 op=LOAD [ 252.958656] audit: type=1334 audit(1778320620.789:5165): prog-id=2335 op=LOAD [ 252.960356] audit: type=1300 audit(1778320620.789:5165): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a240 a2=98 a3=0 items=0 ppid=3178 pid=6154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 252.968730] audit: type=1327 audit(1778320620.789:5165): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332356137373361633161323666323134316533343536633435623763 [ 252.974994] audit: type=1334 audit(1778320620.789:5166): prog-id=2335 op=UNLOAD [ 252.976615] audit: type=1300 audit(1778320620.789:5166): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3178 pid=6154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 252.982609] audit: type=1327 audit(1778320620.789:5166): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332356137373361633161323666323134316533343536633435623763 [ 252.988573] audit: type=1334 audit(1778320620.789:5167): prog-id=2336 op=LOAD