tcar) 01:02:39 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: [ 42.106227] kauditd_printk_skb: 1 callbacks suppressed [ 42.106232] audit: type=1305 audit(1781053367.611:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 42.109134] audit: type=1300 audit(1781053367.611:168): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeb0f09460 a2=420 a3=0 items=0 ppid=2175 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 42.113953] audit: type=1327 audit(1781053367.611:168): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 42.115892] audit: type=1130 audit(1781053367.614:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.118790] audit: type=1131 audit(1781053367.614:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.121698] audit: type=1106 audit(1781053367.619:171): pid=2169 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.124928] audit: type=1104 audit(1781053367.619:172): pid=2169 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.276697] audit: type=1106 audit(1781053367.780:173): pid=2164 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 42.283305] audit: type=1104 audit(1781053367.780:174): pid=2164 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 42.288295] audit: type=1131 audit(1781053367.783:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-172.31.31.82:22-50.85.169.122:51708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.365469] Initializing XFRM netlink socket [ 52.524228] kauditd_printk_skb: 13 callbacks suppressed [ 52.524232] audit: type=1325 audit(1781053378.029:187): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.528120] audit: type=1300 audit(1781053378.029:187): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffd84a8f60 a2=0 a3=0 items=0 ppid=2242 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.534536] audit: type=1327 audit(1781053378.029:187): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 52.537105] audit: type=1325 audit(1781053378.036:188): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.540446] audit: type=1300 audit(1781053378.036:188): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc43e30d80 a2=0 a3=0 items=0 ppid=2242 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.546843] audit: type=1327 audit(1781053378.036:188): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 52.550073] audit: type=1325 audit(1781053378.038:189): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.553215] audit: type=1300 audit(1781053378.038:189): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9a97e6f0 a2=0 a3=0 items=0 ppid=2242 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.558914] audit: type=1327 audit(1781053378.038:189): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 52.561690] audit: type=1325 audit(1781053378.043:190): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:02:59 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:02:59 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: [ 58.487016] kauditd_printk_skb: 107 callbacks suppressed [ 58.487021] audit: type=1131 audit(1781053383.993:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.508719] audit: type=1334 audit(1781053384.014:229): prog-id=35 op=UNLOAD [ 66.168665] audit: type=1130 audit(1781053391.673:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.251514] audit: type=1131 audit(1781053391.756:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 69.853155] audit: type=1130 audit(1781053395.357:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.856918] audit: type=1131 audit(1781053395.357:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.077555] zram_generator::config[2764]: No configuration found. [ 70.081802] systemd-ssh-generator[2760]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 70.447101] audit: type=1334 audit(1781053395.952:234): prog-id=39 op=LOAD [ 70.448509] audit: type=1334 audit(1781053395.952:235): prog-id=38 op=UNLOAD [ 70.450381] audit: type=1334 audit(1781053395.953:236): prog-id=40 op=LOAD [ 70.451992] audit: type=1334 audit(1781053395.953:237): prog-id=22 op=UNLOAD [ 70.453644] audit: type=1334 audit(1781053395.958:238): prog-id=41 op=LOAD [ 70.455144] audit: type=1334 audit(1781053395.958:239): prog-id=32 op=UNLOAD [ 71.173971] kauditd_printk_skb: 66 callbacks suppressed [ 71.173974] audit: type=1325 audit(1781053396.679:286): table=nat:50 family=2 entries=1 op=nft_register_chain pid=2858 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.179678] audit: type=1300 audit(1781053396.679:286): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd50be550 a2=0 a3=0 items=0 ppid=2826 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.185387] audit: type=1327 audit(1781053396.679:286): proctitle=69707461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 [ 71.188230] audit: type=1325 audit(1781053396.685:287): table=filter:51 family=2 entries=1 op=nft_register_chain pid=2859 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.191245] audit: type=1300 audit(1781053396.685:287): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff17d36a90 a2=0 a3=0 items=0 ppid=2826 pid=2859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.197253] audit: type=1327 audit(1781053396.685:287): proctitle=69707461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 [ 72.012283] audit: type=1334 audit(1781053397.517:288): prog-id=59 op=LOAD [ 72.014521] audit: type=1334 audit(1781053397.519:289): prog-id=60 op=LOAD [ 72.018559] audit: type=1300 audit(1781053397.519:289): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130240 a2=98 a3=0 items=0 ppid=2887 pid=2909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 72.025824] audit: type=1327 audit(1781053397.519:289): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766353931353633313066303663353536383737363266343532636131 [ 80.861337] zram_generator::config[3352]: No configuration found. [ 80.876496] systemd-ssh-generator[3348]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 81.243675] kauditd_printk_skb: 128 callbacks suppressed [ 81.243679] audit: type=1334 audit(1781053406.748:336): prog-id=89 op=LOAD [ 81.247044] audit: type=1334 audit(1781053406.749:337): prog-id=39 op=UNLOAD [ 81.249957] audit: type=1334 audit(1781053406.750:338): prog-id=90 op=LOAD [ 81.252759] audit: type=1334 audit(1781053406.750:339): prog-id=40 op=UNLOAD [ 81.255666] audit: type=1334 audit(1781053406.755:340): prog-id=91 op=LOAD [ 81.258667] audit: type=1334 audit(1781053406.755:341): prog-id=41 op=UNLOAD [ 81.261420] audit: type=1334 audit(1781053406.755:342): prog-id=92 op=LOAD [ 81.264116] audit: type=1334 audit(1781053406.755:343): prog-id=93 op=LOAD [ 81.267398] audit: type=1334 audit(1781053406.755:344): prog-id=42 op=UNLOAD [ 81.272918] audit: type=1334 audit(1781053406.755:345): prog-id=43 op=UNLOAD [ 86.245093] kauditd_printk_skb: 49 callbacks suppressed [ 86.245096] audit: type=1106 audit(1781053411.750:395): pid=2208 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 86.250540] audit: type=1104 audit(1781053411.751:396): pid=2208 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 86.411337] audit: type=1106 audit(1781053411.916:397): pid=2203 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 86.418435] audit: type=1104 audit(1781053411.916:398): pid=2203 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 86.423445] audit: type=1131 audit(1781053411.919:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4100-172.31.31.82:22-50.85.169.122:51724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 89.173362] audit: type=1334 audit(1781053414.678:400): prog-id=115 op=LOAD [ 89.175982] audit: type=1334 audit(1781053414.681:401): prog-id=116 op=LOAD [ 89.178596] audit: type=1300 audit(1781053414.681:401): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130240 a2=98 a3=0 items=0 ppid=3498 pid=3517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.184874] audit: type=1327 audit(1781053414.681:401): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038326463323234613132396637353766356465323064616538633938 [ 89.190945] audit: type=1334 audit(1781053414.683:402): prog-id=116 op=UNLOAD [ 92.897774] kauditd_printk_skb: 76 callbacks suppressed [ 92.897778] audit: type=1325 audit(1781053418.402:429): table=mangle:52 family=10 entries=1 op=nft_register_chain pid=3702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 92.904706] audit: type=1300 audit(1781053418.402:429): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe06de6e90 a2=0 a3=7ffe06de6e7c items=0 ppid=3638 pid=3702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.917342] audit: type=1327 audit(1781053418.402:429): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 92.924286] audit: type=1325 audit(1781053418.404:430): table=nat:53 family=10 entries=1 op=nft_register_chain pid=3706 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 92.928336] audit: type=1300 audit(1781053418.404:430): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5468df60 a2=0 a3=7ffd5468df4c items=0 ppid=3638 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.938198] audit: type=1327 audit(1781053418.404:430): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 92.942323] audit: type=1325 audit(1781053418.406:431): table=filter:54 family=10 entries=1 op=nft_register_chain pid=3707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 92.947657] audit: type=1300 audit(1781053418.406:431): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe13a63d0 a2=0 a3=7fffe13a63bc items=0 ppid=3638 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.954634] audit: type=1327 audit(1781053418.406:431): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 92.957824] audit: type=1325 audit(1781053418.414:432): table=mangle:55 family=2 entries=1 op=nft_register_chain pid=3703 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 99.497785] kauditd_printk_skb: 143 callbacks suppressed [ 99.497790] audit: type=1334 audit(1781053425.003:480): prog-id=133 op=LOAD [ 99.500500] audit: type=1334 audit(1781053425.003:481): prog-id=134 op=LOAD [ 99.502046] audit: type=1300 audit(1781053425.003:481): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0240 a2=98 a3=0 items=0 ppid=3520 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.507931] audit: type=1327 audit(1781053425.003:481): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763373062343866313163643263633363343437343038346233353131 [ 99.514164] audit: type=1334 audit(1781053425.004:482): prog-id=134 op=UNLOAD [ 99.518369] audit: type=1300 audit(1781053425.004:482): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3520 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.524388] audit: type=1327 audit(1781053425.004:482): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763373062343866313163643263633363343437343038346233353131 [ 99.530299] audit: type=1334 audit(1781053425.004:483): prog-id=135 op=LOAD [ 99.531689] audit: type=1300 audit(1781053425.004:483): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0490 a2=98 a3=0 items=0 ppid=3520 pid=3826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.537557] audit: type=1327 audit(1781053425.004:483): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763373062343866313163643263633363343437343038346233353131 [ 109.007915] kauditd_printk_skb: 122 callbacks suppressed [ 109.007919] audit: type=1334 audit(1781053434.513:532): prog-id=161 op=LOAD [ 109.010541] audit: type=1300 audit(1781053434.513:532): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1dd489d0 a2=74 a3=7fff1dd489d0 items=0 ppid=4054 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.016065] audit: type=1327 audit(1781053434.513:532): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 109.018119] audit: type=1334 audit(1781053434.513:533): prog-id=161 op=UNLOAD [ 109.019327] audit: type=1300 audit(1781053434.513:533): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7fff1dd489d0 a2=74 a3=7fff1dd489d0 items=0 ppid=4054 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.024904] audit: type=1327 audit(1781053434.513:533): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 109.026949] audit: type=1334 audit(1781053434.513:534): prog-id=162 op=LOAD [ 109.028103] audit: type=1300 audit(1781053434.513:534): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1dd47a50 a2=90 a3=2 items=0 ppid=4054 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.033393] audit: type=1327 audit(1781053434.513:534): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 109.035366] audit: type=1334 audit(1781053434.514:535): prog-id=162 op=UNLOAD This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:03:58 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:03:58 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:03:59 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:03:59 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:04:00 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:04:00 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: [ 117.668778] NET: Registered PF_ALG protocol family [ 117.679750] kauditd_printk_skb: 5660 callbacks suppressed [ 117.679753] audit: type=1334 audit(1781053443.184:2422): prog-id=1106 op=LOAD [ 117.686791] audit: type=1300 audit(1781053443.184:2422): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe72e5e140 a2=74 a3=7ffe72e5e140 items=0 ppid=4182 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.699073] audit: type=1327 audit(1781053443.184:2422): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 117.707556] audit: type=1334 audit(1781053443.185:2423): prog-id=1106 op=UNLOAD [ 117.708991] audit: type=1300 audit(1781053443.185:2423): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe72e5e140 a2=74 a3=7ffe72e5e140 items=0 ppid=4182 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.715241] audit: type=1327 audit(1781053443.185:2423): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 117.723399] audit: type=1334 audit(1781053443.185:2424): prog-id=1107 op=LOAD [ 117.724782] audit: type=1300 audit(1781053443.185:2424): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe72e5e0d0 a2=80 a3=0 items=0 ppid=4182 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.732742] audit: type=1327 audit(1781053443.185:2424): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 117.741530] audit: type=1334 audit(1781053443.185:2425): prog-id=1107 op=UNLOAD [ 120.059499] eth0: renamed from tmp5e657 [ 120.082470] eth0: renamed from tmpb3e58 This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:04:07 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:04:07 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:04:08 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:04:08 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: [ 124.229719] kauditd_printk_skb: 323 callbacks suppressed [ 124.229723] audit: type=1334 audit(1781053449.734:2533): prog-id=1144 op=LOAD [ 124.232778] audit: type=1300 audit(1781053449.734:2533): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe7d520dd0 a2=74 a3=7ffe7d520dd0 items=0 ppid=4054 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 124.240744] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.241850] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 124.242036] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.242204] audit: backlog limit exceeded [ 124.242498] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 124.243240] audit: type=1327 audit(1781053449.734:2533): proctitle=74630066696C746572007265706C61636500646576006C786331653062363336343936313700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313433395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 124.243974] audit: backlog limit exceeded [ 124.245159] audit: type=1334 audit(1781053449.735:2534): prog-id=1144 op=UNLOAD [ 136.219720] kauditd_printk_skb: 468 callbacks suppressed [ 136.219724] audit: type=1325 audit(1781053461.724:2693): table=filter:155 family=2 entries=11 op=nft_register_rule pid=4726 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 136.224300] audit: type=1300 audit(1781053461.724:2693): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff57051640 a2=0 a3=7fff5705162c items=0 ppid=3638 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.230515] audit: type=1327 audit(1781053461.724:2693): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 136.235732] audit: type=1325 audit(1781053461.740:2694): table=nat:156 family=2 entries=33 op=nft_register_chain pid=4726 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 136.239278] audit: type=1300 audit(1781053461.740:2694): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7fff57051640 a2=0 a3=7fff5705162c items=0 ppid=3638 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.246403] audit: type=1327 audit(1781053461.740:2694): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 137.260343] audit: type=1325 audit(1781053462.765:2695): table=filter:157 family=2 entries=8 op=nft_register_rule pid=4728 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 137.263952] audit: type=1300 audit(1781053462.765:2695): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd1d9f58a0 a2=0 a3=7ffd1d9f588c items=0 ppid=3638 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.270001] audit: type=1327 audit(1781053462.765:2695): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 137.334881] audit: type=1325 audit(1781053462.839:2696): table=nat:158 family=2 entries=54 op=nft_register_chain pid=4728 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 144.541643] kauditd_printk_skb: 2 callbacks suppressed [ 144.541647] audit: type=1130 audit(1781053470.046:2697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4101-172.31.31.82:22-50.85.169.122:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.437624] audit: type=1101 audit(1781053470.942:2698): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 145.443671] audit: type=1103 audit(1781053470.945:2699): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 145.449227] audit: type=1006 audit(1781053470.945:2700): pid=4737 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 145.452596] audit: type=1300 audit(1781053470.945:2700): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd09f4e830 a2=3 a3=0 items=0 ppid=1 pid=4737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.458698] audit: type=1327 audit(1781053470.945:2700): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 145.469684] audit: type=1105 audit(1781053470.975:2701): pid=4737 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 145.477658] audit: type=1103 audit(1781053470.982:2702): pid=4741 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 146.567138] audit: type=1106 audit(1781053472.072:2703): pid=4737 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 146.574120] audit: type=1104 audit(1781053472.072:2704): pid=4737 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 151.735770] kauditd_printk_skb: 1 callbacks suppressed [ 151.735773] audit: type=1130 audit(1781053477.240:2706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4102-172.31.31.82:22-50.85.169.122:52536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.610560] audit: type=1101 audit(1781053478.115:2707): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 152.616886] audit: type=1103 audit(1781053478.117:2708): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 152.622604] audit: type=1006 audit(1781053478.117:2709): pid=4755 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 152.625818] audit: type=1300 audit(1781053478.117:2709): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffec196bb80 a2=3 a3=0 items=0 ppid=1 pid=4755 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.632580] audit: type=1327 audit(1781053478.117:2709): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 152.642080] audit: type=1105 audit(1781053478.147:2710): pid=4755 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 152.648824] audit: type=1103 audit(1781053478.150:2711): pid=4759 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 153.196665] audit: type=1106 audit(1781053478.701:2712): pid=4755 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 153.204598] audit: type=1104 audit(1781053478.701:2713): pid=4755 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 158.364145] kauditd_printk_skb: 1 callbacks suppressed [ 158.364149] audit: type=1130 audit(1781053483.869:2715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4103-172.31.31.82:22-50.85.169.122:41854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.221223] audit: type=1101 audit(1781053484.726:2716): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.227929] audit: type=1103 audit(1781053484.726:2717): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.233524] audit: type=1006 audit(1781053484.726:2718): pid=4773 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 159.236907] audit: type=1300 audit(1781053484.726:2718): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff3136a8f0 a2=3 a3=0 items=0 ppid=1 pid=4773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.243270] audit: type=1327 audit(1781053484.726:2718): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 159.252180] audit: type=1105 audit(1781053484.757:2719): pid=4773 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.259042] audit: type=1103 audit(1781053484.764:2720): pid=4777 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.777474] audit: type=1106 audit(1781053485.282:2721): pid=4773 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.785180] audit: type=1104 audit(1781053485.282:2722): pid=4773 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 168.174088] kauditd_printk_skb: 23 callbacks suppressed [ 168.174092] audit: type=1130 audit(1781053493.679:2742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-6-172.31.31.82:22-50.85.169.122:43278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.015305] audit: type=1101 audit(1781053494.520:2743): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.022032] audit: type=1103 audit(1781053494.520:2744): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.027690] audit: type=1006 audit(1781053494.520:2745): pid=4821 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 169.031085] audit: type=1300 audit(1781053494.520:2745): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdfcb06100 a2=3 a3=0 items=0 ppid=1 pid=4821 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.036990] audit: type=1327 audit(1781053494.520:2745): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 169.043349] audit: type=1105 audit(1781053494.548:2746): pid=4821 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.050143] audit: type=1103 audit(1781053494.551:2747): pid=4825 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.566812] audit: type=1106 audit(1781053495.072:2748): pid=4821 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 169.574328] audit: type=1104 audit(1781053495.072:2749): pid=4821 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 174.748752] kauditd_printk_skb: 1 callbacks suppressed [ 174.748756] audit: type=1130 audit(1781053500.253:2751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-7-172.31.31.82:22-50.85.169.122:48598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.603356] audit: type=1101 audit(1781053501.108:2752): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 175.609742] audit: type=1103 audit(1781053501.110:2753): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 175.615407] audit: type=1006 audit(1781053501.110:2754): pid=4837 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 175.618685] audit: type=1300 audit(1781053501.110:2754): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc8cc3ae20 a2=3 a3=0 items=0 ppid=1 pid=4837 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.624799] audit: type=1327 audit(1781053501.110:2754): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.631112] audit: type=1105 audit(1781053501.136:2755): pid=4837 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 175.638074] audit: type=1103 audit(1781053501.139:2756): pid=4841 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 176.694724] audit: type=1106 audit(1781053502.199:2757): pid=4837 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 176.714512] audit: type=1104 audit(1781053502.199:2758): pid=4837 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.090495] kauditd_printk_skb: 13 callbacks suppressed [ 180.090500] audit: type=1101 audit(1781053505.595:2770): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.098505] audit: type=1103 audit(1781053505.599:2771): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.104352] audit: type=1006 audit(1781053505.599:2772): pid=4867 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 180.108200] audit: type=1300 audit(1781053505.599:2772): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc4a0b12c0 a2=3 a3=0 items=0 ppid=1 pid=4867 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.114489] audit: type=1327 audit(1781053505.599:2772): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 180.120251] audit: type=1105 audit(1781053505.625:2773): pid=4867 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.127349] audit: type=1103 audit(1781053505.632:2774): pid=4871 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 181.199873] audit: type=1325 audit(1781053506.704:2775): table=filter:159 family=2 entries=20 op=nft_register_rule pid=4882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.204322] audit: type=1300 audit(1781053506.704:2775): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffa62d85b0 a2=0 a3=7fffa62d859c items=0 ppid=3638 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.211420] audit: type=1327 audit(1781053506.704:2775): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 187.449750] kauditd_printk_skb: 34 callbacks suppressed [ 187.449754] audit: type=1325 audit(1781053512.954:2800): table=filter:163 family=2 entries=20 op=nft_register_rule pid=4921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 187.454060] audit: type=1300 audit(1781053512.954:2800): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe6f524880 a2=0 a3=7ffe6f52486c items=0 ppid=3638 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.460421] audit: type=1327 audit(1781053512.954:2800): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 187.462990] audit: type=1325 audit(1781053512.962:2801): table=nat:164 family=2 entries=102 op=nft_register_chain pid=4921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 187.465805] audit: type=1300 audit(1781053512.962:2801): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffe6f524880 a2=0 a3=7ffe6f52486c items=0 ppid=3638 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.471503] audit: type=1327 audit(1781053512.962:2801): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 189.970629] audit: type=1130 audit(1781053515.475:2802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-11-172.31.31.82:22-50.85.169.122:56258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.812209] audit: type=1101 audit(1781053516.317:2803): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 190.818549] audit: type=1103 audit(1781053516.317:2804): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 190.824638] audit: type=1006 audit(1781053516.317:2805): pid=4923 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 196.529263] kauditd_printk_skb: 7 callbacks suppressed [ 196.529267] audit: type=1130 audit(1781053522.034:2811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4105-172.31.31.82:22-50.85.169.122:43770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.369692] audit: type=1101 audit(1781053522.875:2812): pid=4939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 197.376128] audit: type=1103 audit(1781053522.877:2813): pid=4939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 197.382014] audit: type=1006 audit(1781053522.877:2814): pid=4939 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 197.386124] audit: type=1300 audit(1781053522.877:2814): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffee0ca6920 a2=3 a3=0 items=0 ppid=1 pid=4939 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.392110] audit: type=1327 audit(1781053522.877:2814): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.398546] audit: type=1105 audit(1781053522.903:2815): pid=4939 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 197.405365] audit: type=1103 audit(1781053522.909:2816): pid=4943 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 197.918720] audit: type=1106 audit(1781053523.424:2817): pid=4939 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 197.926053] audit: type=1104 audit(1781053523.424:2818): pid=4939 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:05:27 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:05:27 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: [ 203.272313] kauditd_printk_skb: 17 callbacks suppressed [ 203.272317] audit: type=1106 audit(1781053528.777:2834): pid=4955 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 203.279931] audit: type=1104 audit(1781053528.777:2835): pid=4955 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 203.285245] audit: type=1131 audit(1781053528.782:2836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4106-172.31.31.82:22-50.85.169.122:43782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.441888] audit: type=1130 audit(1781053528.945:2837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4107-172.31.31.82:22-50.85.169.122:43788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.309591] audit: type=1101 audit(1781053529.814:2838): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 204.315324] audit: type=1103 audit(1781053529.817:2839): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 204.320662] audit: type=1006 audit(1781053529.817:2840): pid=5111 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 204.324309] audit: type=1300 audit(1781053529.817:2840): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff80d53ee0 a2=3 a3=0 items=0 ppid=1 pid=5111 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.330290] audit: type=1327 audit(1781053529.817:2840): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.336426] audit: type=1105 audit(1781053529.841:2841): pid=5111 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 208.306753] kauditd_printk_skb: 86 callbacks suppressed [ 208.306757] audit: type=1101 audit(1781053533.812:2884): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 208.314427] audit: type=1103 audit(1781053533.813:2885): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 208.319879] audit: type=1006 audit(1781053533.813:2886): pid=5238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 208.323223] audit: type=1300 audit(1781053533.813:2886): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1c038e30 a2=3 a3=0 items=0 ppid=1 pid=5238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.330180] audit: type=1327 audit(1781053533.813:2886): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 208.339389] audit: type=1105 audit(1781053533.844:2887): pid=5238 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 208.346177] audit: type=1103 audit(1781053533.847:2888): pid=5281 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 208.523195] audit: type=1334 audit(1781053534.028:2889): prog-id=1257 op=LOAD [ 208.525251] audit: type=1300 audit(1781053534.028:2889): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000206490 a2=98 a3=0 items=0 ppid=5137 pid=5282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.532504] audit: type=1327 audit(1781053534.028:2889): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303434313266363839383565396632613164646538343930313835 [ 212.186717] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 214.177578] kauditd_printk_skb: 5735 callbacks suppressed [ 214.177583] audit: type=1334 audit(1781053539.682:4805): prog-id=2215 op=LOAD [ 214.180380] audit: type=1300 audit(1781053539.682:4805): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc7f6e320 a2=74 a3=7ffdc7f6e320 items=0 ppid=5533 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.186618] audit: type=1327 audit(1781053539.682:4805): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 214.191225] audit: type=1334 audit(1781053539.682:4806): prog-id=2215 op=UNLOAD [ 214.194999] audit: type=1300 audit(1781053539.682:4806): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffdc7f6e320 a2=74 a3=7ffdc7f6e320 items=0 ppid=5533 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.201234] audit: type=1327 audit(1781053539.682:4806): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 214.206038] audit: type=1334 audit(1781053539.683:4807): prog-id=2216 op=LOAD [ 214.207496] audit: type=1300 audit(1781053539.683:4807): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc7f6e2b0 a2=80 a3=0 items=0 ppid=5533 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.213571] audit: type=1327 audit(1781053539.683:4807): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 214.218404] audit: type=1334 audit(1781053539.683:4808): prog-id=2216 op=UNLOAD This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:05:43 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b This is ip-172-31-31-82 (Linux x86_64 6.12.92-flatcar) 01:05:43 SSH host key: SHA256:rhX0hAUCr+xuHnTfehZV/nDYk2FPG6AXWtpjm8Lbui8 (RSA) SSH host key: SHA256:mjW3DN/gbShkZS7oEAbTrjimt2HUfNFkmE6yRo/9lQY (ECDSA) SSH host key: SHA256:XOQdjoJJAC52Mw/JTRx+qz2CS0S9KvvLjdPPj54VhHc (ED25519) eth0: 172.31.31.82 fe80::4c7:8fff:fe09:c33b ip-172-31-31-82 login: [ 219.555621] kauditd_printk_skb: 422 callbacks suppressed [ 219.555626] audit: type=1334 audit(1781053545.060:4955): prog-id=2229 op=LOAD [ 219.559417] audit: type=1334 audit(1781053545.062:4956): prog-id=2230 op=LOAD [ 219.561051] audit: type=1300 audit(1781053545.062:4956): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcee6c4210 a2=74 a3=7ffcee6c4210 items=0 ppid=5379 pid=6001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 219.567448] audit: type=1327 audit(1781053545.062:4956): proctitle=74630066696C746572007265706C61636500646576006C786331653062363336343936313700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313433395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 219.572053] audit: type=1334 audit(1781053545.062:4957): prog-id=2230 op=UNLOAD [ 219.573612] audit: type=1300 audit(1781053545.062:4957): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffcee6c4210 a2=74 a3=7ffcee6c4210 items=0 ppid=5379 pid=6001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 219.579063] audit: type=1327 audit(1781053545.062:4957): proctitle=74630066696C746572007265706C61636500646576006C786331653062363336343936313700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313433395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 219.583583] audit: type=1334 audit(1781053545.062:4958): prog-id=2231 op=LOAD [ 219.584911] audit: type=1300 audit(1781053545.062:4958): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcee6c41a0 a2=80 a3=0 items=0 ppid=5379 pid=6001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 219.590115] audit: type=1327 audit(1781053545.062:4958): proctitle=74630066696C746572007265706C61636500646576006C786331653062363336343936313700696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313433395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572