9] audit: type=1334 audit(1781282384.061:336): prog-id=88 op=LOAD [ 86.557081] audit: type=1334 audit(1781282384.061:337): prog-id=89 op=LOAD [ 86.559606] audit: type=1334 audit(1781282384.061:338): prog-id=37 op=UNLOAD [ 86.561075] audit: type=1334 audit(1781282384.061:339): prog-id=38 op=UNLOAD [ 86.565153] audit: type=1334 audit(1781282384.072:340): prog-id=90 op=LOAD [ 86.566587] audit: type=1334 audit(1781282384.072:341): prog-id=39 op=UNLOAD [ 92.100715] kauditd_printk_skb: 49 callbacks suppressed [ 92.100720] audit: type=1334 audit(1781282389.605:391): prog-id=112 op=LOAD [ 92.106937] audit: type=1334 audit(1781282389.611:392): prog-id=113 op=LOAD [ 92.108308] audit: type=1300 audit(1781282389.611:392): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000128190 a2=98 a3=0 items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.114872] audit: type=1327 audit(1781282389.611:392): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343335613236336366653865313033623261303430633737373562 [ 92.122812] audit: type=1334 audit(1781282389.611:393): prog-id=113 op=UNLOAD [ 92.125650] audit: type=1300 audit(1781282389.611:393): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.132802] audit: type=1327 audit(1781282389.611:393): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343335613236336366653865313033623261303430633737373562 [ 92.140390] audit: type=1334 audit(1781282389.612:394): prog-id=114 op=LOAD [ 92.143910] audit: type=1300 audit(1781282389.612:394): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001283f8 a2=98 a3=0 items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.152241] audit: type=1327 audit(1781282389.612:394): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343335613236336366653865313033623261303430633737373562 [ 103.430470] kauditd_printk_skb: 229 callbacks suppressed [ 103.430476] audit: type=1334 audit(1781282400.929:476): prog-id=130 op=LOAD [ 103.434179] audit: type=1334 audit(1781282400.932:477): prog-id=131 op=LOAD [ 103.436968] audit: type=1300 audit(1781282400.932:477): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000128190 a2=98 a3=0 items=0 ppid=3738 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.445878] audit: type=1327 audit(1781282400.932:477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134356330353230303432306261323033613065326535643633656263 [ 103.453647] audit: type=1334 audit(1781282400.932:478): prog-id=131 op=UNLOAD [ 103.455191] audit: type=1300 audit(1781282400.932:478): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3738 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.461057] audit: type=1327 audit(1781282400.932:478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134356330353230303432306261323033613065326535643633656263 [ 103.467192] audit: type=1334 audit(1781282400.932:479): prog-id=132 op=LOAD [ 103.469037] audit: type=1300 audit(1781282400.932:479): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001283f8 a2=98 a3=0 items=0 ppid=3738 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.477707] audit: type=1327 audit(1781282400.932:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134356330353230303432306261323033613065326535643633656263 [ 108.781678] kauditd_printk_skb: 122 callbacks suppressed [ 108.781684] audit: type=1334 audit(1781282406.276:528): prog-id=158 op=LOAD [ 108.784158] audit: type=1300 audit(1781282406.276:528): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc8846708 a2=74 a3=0 items=0 ppid=4266 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.790127] audit: type=1327 audit(1781282406.276:528): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.792200] audit: type=1334 audit(1781282406.277:529): prog-id=158 op=UNLOAD [ 108.793752] audit: type=1300 audit(1781282406.277:529): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff8b589f10 a2=74 a3=0 items=0 ppid=4266 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.799517] audit: type=1327 audit(1781282406.277:529): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.801617] audit: type=1334 audit(1781282406.279:530): prog-id=159 op=LOAD [ 108.803077] audit: type=1300 audit(1781282406.279:530): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc8845748 a2=90 a3=2 items=0 ppid=4266 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.808923] audit: type=1327 audit(1781282406.279:530): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.810931] audit: type=1334 audit(1781282406.285:531): prog-id=159 op=UNLOAD [ 112.727985] NET: Registered PF_ALG protocol family This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:10 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:10 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 ip-172-31-23-90 login: [ 113.799459] kauditd_printk_skb: 5750 callbacks suppressed [ 113.799465] audit: type=1325 audit(1781282411.293:2448): table=filter:109 family=2 entries=1 op=nft_register_chain pid=4644 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 113.803875] audit: type=1300 audit(1781282411.293:2448): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc20cc2f0 a2=0 a3=ffffb21365c0 items=0 ppid=4266 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.810497] audit: type=1327 audit(1781282411.293:2448): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F494E505554 [ 113.813616] audit: type=1325 audit(1781282411.297:2449): table=filter:110 family=2 entries=1 op=nft_register_chain pid=4645 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 113.816776] audit: type=1300 audit(1781282411.297:2449): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffeafa64f0 a2=0 a3=ffffa14645c0 items=0 ppid=4266 pid=4645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.823030] audit: type=1327 audit(1781282411.297:2449): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F4F5554505554 [ 113.826570] audit: type=1325 audit(1781282411.304:2450): table=raw:111 family=2 entries=1 op=nft_register_chain pid=4646 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 113.831188] audit: type=1300 audit(1781282411.304:2450): arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffde60fb20 a2=0 a3=ffffa39b55c0 items=0 ppid=4266 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.840500] audit: type=1327 audit(1781282411.304:2450): proctitle=69707461626C6573002D770035002D7400726177002D4E0043494C49554D5F4F55545055545F726177 [ 113.843644] audit: type=1325 audit(1781282411.307:2451): table=nat:112 family=2 entries=1 op=nft_register_chain pid=4647 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:11 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:11 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 ip-172-31-23-90 login: [ 114.491503] eth0: renamed from tmpcc5f7 [ 114.494598] eth0: renamed from tmpcaa8f This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:12 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:12 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 ip-172-31-23-90 login: This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:14 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:14 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 ip-172-31-23-90 login: This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:15 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:40:15 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 ip-172-31-23-90 login: [ 122.989767] kauditd_printk_skb: 233 callbacks suppressed [ 122.989773] audit: type=1334 audit(1781282420.478:2529): prog-id=1141 op=LOAD [ 122.993038] audit: type=1300 audit(1781282420.478:2529): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffce158da8 a2=74 a3=11 items=0 ppid=4266 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 123.001286] audit: type=1327 audit(1781282420.478:2529): proctitle=74630066696C746572007265706C61636500646576006C786365366462393163346463643900696E6772657373007072696F00310068616E646C65003100627066006461006F626A003832375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 123.006394] audit: type=1334 audit(1781282420.479:2530): prog-id=1141 op=UNLOAD [ 123.008164] audit: type=1300 audit(1781282420.479:2530): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff8f355f50 a2=74 a3=11 items=0 ppid=4266 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 123.014468] audit: type=1327 audit(1781282420.479:2530): proctitle=74630066696C746572007265706C61636500646576006C786365366462393163346463643900696E6772657373007072696F00310068616E646C65003100627066006461006F626A003832375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 123.020158] audit: type=1334 audit(1781282420.479:2531): prog-id=1142 op=LOAD [ 123.021870] audit: type=1300 audit(1781282420.479:2531): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffce158d88 a2=80 a3=0 items=0 ppid=4266 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 123.027696] audit: type=1327 audit(1781282420.479:2531): proctitle=74630066696C746572007265706C61636500646576006C786365366462393163346463643900696E6772657373007072696F00310068616E646C65003100627066006461006F626A003832375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 123.032900] audit: type=1334 audit(1781282420.481:2532): prog-id=1142 op=UNLOAD [ 157.006438] kauditd_printk_skb: 468 callbacks suppressed [ 157.006444] audit: type=1130 audit(1781282454.478:2691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-6-172.31.23.90:22-4.175.71.9:49660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 157.874770] audit: type=1101 audit(1781282455.346:2692): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 157.882289] audit: type=1103 audit(1781282455.354:2693): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 157.888078] audit: type=1006 audit(1781282455.354:2694): pid=4950 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 157.892409] audit: type=1300 audit(1781282455.354:2694): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdfe3c100 a2=3 a3=0 items=0 ppid=1 pid=4950 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.899310] audit: type=1327 audit(1781282455.354:2694): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 157.917344] audit: type=1105 audit(1781282455.389:2695): pid=4950 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 157.924948] audit: type=1103 audit(1781282455.396:2696): pid=4954 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 158.511198] audit: type=1106 audit(1781282455.982:2697): pid=4950 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 158.518520] audit: type=1104 audit(1781282455.982:2698): pid=4950 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 163.684104] kauditd_printk_skb: 1 callbacks suppressed [ 163.684109] audit: type=1130 audit(1781282461.152:2700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-7-172.31.23.90:22-4.175.71.9:33348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.548183] audit: type=1101 audit(1781282462.016:2701): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 164.556026] audit: type=1103 audit(1781282462.024:2702): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 164.561272] audit: type=1006 audit(1781282462.024:2703): pid=4969 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 164.565302] audit: type=1300 audit(1781282462.024:2703): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe7df8380 a2=3 a3=0 items=0 ppid=1 pid=4969 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.571947] audit: type=1327 audit(1781282462.024:2703): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.591964] audit: type=1105 audit(1781282462.060:2704): pid=4969 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 164.599833] audit: type=1103 audit(1781282462.068:2705): pid=4973 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 165.154004] audit: type=1106 audit(1781282462.622:2706): pid=4969 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 165.162482] audit: type=1104 audit(1781282462.622:2707): pid=4969 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 170.331632] kauditd_printk_skb: 1 callbacks suppressed [ 170.331638] audit: type=1130 audit(1781282467.796:2709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4099-172.31.23.90:22-4.175.71.9:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.200345] audit: type=1101 audit(1781282468.665:2710): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 171.208045] audit: type=1103 audit(1781282468.673:2711): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 171.213610] audit: type=1006 audit(1781282468.673:2712): pid=4987 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 171.217632] audit: type=1300 audit(1781282468.673:2712): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffba32fb0 a2=3 a3=0 items=0 ppid=1 pid=4987 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.223854] audit: type=1327 audit(1781282468.673:2712): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 171.245534] audit: type=1105 audit(1781282468.710:2713): pid=4987 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 171.253238] audit: type=1103 audit(1781282468.718:2714): pid=4991 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 171.824766] audit: type=1106 audit(1781282469.288:2715): pid=4987 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 171.833348] audit: type=1104 audit(1781282469.289:2716): pid=4987 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 177.000618] kauditd_printk_skb: 1 callbacks suppressed [ 177.000623] audit: type=1130 audit(1781282474.462:2718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4100-172.31.23.90:22-4.175.71.9:60214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.874937] audit: type=1101 audit(1781282475.336:2719): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 177.882079] audit: type=1103 audit(1781282475.343:2720): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 177.887485] audit: type=1006 audit(1781282475.344:2721): pid=5005 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 177.891057] audit: type=1300 audit(1781282475.344:2721): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff10c45b0 a2=3 a3=0 items=0 ppid=1 pid=5005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.897621] audit: type=1327 audit(1781282475.344:2721): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 177.919106] audit: type=1105 audit(1781282475.380:2722): pid=5005 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 177.925536] audit: type=1103 audit(1781282475.385:2723): pid=5009 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 178.489475] audit: type=1106 audit(1781282475.950:2724): pid=5005 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 178.496534] audit: type=1104 audit(1781282475.950:2725): pid=5005 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 183.662010] kauditd_printk_skb: 1 callbacks suppressed [ 183.662015] audit: type=1130 audit(1781282481.120:2727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-8-172.31.23.90:22-4.175.71.9:37852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.526888] audit: type=1101 audit(1781282481.985:2728): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 184.534690] audit: type=1103 audit(1781282481.993:2729): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 184.539894] audit: type=1006 audit(1781282481.993:2730): pid=5024 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 184.543600] audit: type=1300 audit(1781282481.993:2730): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe1740f70 a2=3 a3=0 items=0 ppid=1 pid=5024 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.550123] audit: type=1327 audit(1781282481.993:2730): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.575557] audit: type=1105 audit(1781282482.033:2731): pid=5024 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 184.583195] audit: type=1103 audit(1781282482.041:2732): pid=5028 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 185.134937] audit: type=1106 audit(1781282482.593:2733): pid=5024 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 185.142482] audit: type=1104 audit(1781282482.593:2734): pid=5024 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 190.307401] kauditd_printk_skb: 1 callbacks suppressed [ 190.307407] audit: type=1130 audit(1781282487.762:2736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-9-172.31.23.90:22-4.175.71.9:37864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.174753] audit: type=1101 audit(1781282488.629:2737): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.182418] audit: type=1103 audit(1781282488.637:2738): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.187859] audit: type=1006 audit(1781282488.638:2739): pid=5040 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 191.192395] audit: type=1300 audit(1781282488.638:2739): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc63f7f80 a2=3 a3=0 items=0 ppid=1 pid=5040 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.199169] audit: type=1327 audit(1781282488.638:2739): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 191.219715] audit: type=1105 audit(1781282488.674:2740): pid=5040 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.227580] audit: type=1103 audit(1781282488.682:2741): pid=5044 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.788903] audit: type=1106 audit(1781282489.243:2742): pid=5040 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 191.799422] audit: type=1104 audit(1781282489.243:2743): pid=5040 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 196.969861] kauditd_printk_skb: 1 callbacks suppressed [ 196.969868] audit: type=1130 audit(1781282494.421:2745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4101-172.31.23.90:22-4.175.71.9:33178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.858613] audit: type=1101 audit(1781282495.310:2746): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.867959] audit: type=1103 audit(1781282495.318:2747): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.873698] audit: type=1006 audit(1781282495.318:2748): pid=5057 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 197.877618] audit: type=1300 audit(1781282495.318:2748): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc4884ca0 a2=3 a3=0 items=0 ppid=1 pid=5057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.883685] audit: type=1327 audit(1781282495.318:2748): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.909475] audit: type=1105 audit(1781282495.361:2749): pid=5057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 197.917051] audit: type=1103 audit(1781282495.368:2750): pid=5061 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 198.508269] audit: type=1106 audit(1781282495.958:2751): pid=5057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 198.514779] audit: type=1104 audit(1781282495.959:2752): pid=5057 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 203.679079] kauditd_printk_skb: 1 callbacks suppressed [ 203.679084] audit: type=1130 audit(1781282501.127:2754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4102-172.31.23.90:22-4.175.71.9:60908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.548709] audit: type=1101 audit(1781282501.996:2755): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 204.556306] audit: type=1103 audit(1781282502.004:2756): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 204.562065] audit: type=1006 audit(1781282502.004:2757): pid=5074 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 204.565858] audit: type=1300 audit(1781282502.004:2757): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd228a1e0 a2=3 a3=0 items=0 ppid=1 pid=5074 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.572525] audit: type=1327 audit(1781282502.004:2757): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.598282] audit: type=1105 audit(1781282502.046:2758): pid=5074 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 204.606011] audit: type=1103 audit(1781282502.054:2759): pid=5078 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 205.162136] audit: type=1106 audit(1781282502.610:2760): pid=5074 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 205.170072] audit: type=1104 audit(1781282502.610:2761): pid=5074 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 213.728105] kauditd_printk_skb: 23 callbacks suppressed [ 213.728110] audit: type=1130 audit(1781282511.171:2781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-11-172.31.23.90:22-4.175.71.9:38192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 214.595405] audit: type=1101 audit(1781282512.038:2782): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.602550] audit: type=1103 audit(1781282512.045:2783): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.607736] audit: type=1006 audit(1781282512.045:2784): pid=5125 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 214.612421] audit: type=1300 audit(1781282512.045:2784): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcee8b3d0 a2=3 a3=0 items=0 ppid=1 pid=5125 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.619029] audit: type=1327 audit(1781282512.045:2784): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 214.645328] audit: type=1105 audit(1781282512.088:2785): pid=5125 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 214.653515] audit: type=1103 audit(1781282512.096:2786): pid=5129 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 215.203880] audit: type=1106 audit(1781282512.646:2787): pid=5125 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 215.211797] audit: type=1104 audit(1781282512.646:2788): pid=5125 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 220.374012] kauditd_printk_skb: 1 callbacks suppressed [ 220.374018] audit: type=1130 audit(1781282517.814:2790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4104-172.31.23.90:22-4.175.71.9:38208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.245510] audit: type=1101 audit(1781282518.686:2791): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 221.252413] audit: type=1103 audit(1781282518.693:2792): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 221.258921] audit: type=1006 audit(1781282518.693:2793): pid=5142 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 221.263246] audit: type=1300 audit(1781282518.693:2793): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcf126050 a2=3 a3=0 items=0 ppid=1 pid=5142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.270693] audit: type=1327 audit(1781282518.693:2793): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 221.301310] audit: type=1105 audit(1781282518.742:2794): pid=5142 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 221.309147] audit: type=1103 audit(1781282518.750:2795): pid=5146 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 221.852120] audit: type=1106 audit(1781282519.293:2796): pid=5142 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 221.859123] audit: type=1104 audit(1781282519.294:2797): pid=5142 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 225.978889] kauditd_printk_skb: 20 callbacks suppressed [ 225.978895] audit: type=1325 audit(1781282523.419:2814): table=filter:155 family=2 entries=20 op=nft_register_rule pid=5186 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 225.984378] audit: type=1300 audit(1781282523.419:2814): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd2fd6790 a2=0 a3=1 items=0 ppid=3845 pid=5186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.991954] audit: type=1327 audit(1781282523.419:2814): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 225.999296] audit: type=1325 audit(1781282523.440:2815): table=nat:156 family=2 entries=18 op=nft_register_rule pid=5186 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 226.002905] audit: type=1300 audit(1781282523.440:2815): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffd2fd6790 a2=0 a3=1 items=0 ppid=3845 pid=5186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.010761] audit: type=1327 audit(1781282523.440:2815): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 226.144769] audit: type=1106 audit(1781282523.585:2816): pid=5171 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 226.151901] audit: type=1104 audit(1781282523.585:2817): pid=5171 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 226.158434] audit: type=1131 audit(1781282523.594:2818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-13-172.31.23.90:22-4.175.71.9:36524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 226.314418] audit: type=1130 audit(1781282523.755:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-14-172.31.23.90:22-4.175.71.9:36536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 232.573478] kauditd_printk_skb: 27 callbacks suppressed [ 232.573483] audit: type=1325 audit(1781282530.014:2839): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 232.578024] audit: type=1300 audit(1781282530.014:2839): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff9341a10 a2=0 a3=1 items=0 ppid=3845 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 232.584332] audit: type=1327 audit(1781282530.014:2839): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 232.587511] audit: type=1325 audit(1781282530.019:2840): table=nat:160 family=2 entries=102 op=nft_register_chain pid=5223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 232.590792] audit: type=1300 audit(1781282530.019:2840): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=fffff9341a10 a2=0 a3=1 items=0 ppid=3845 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 232.597372] audit: type=1327 audit(1781282530.019:2840): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 234.861253] audit: type=1130 audit(1781282532.302:2841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4106-172.31.23.90:22-4.175.71.9:43606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 235.738923] audit: type=1101 audit(1781282533.180:2842): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 235.746266] audit: type=1103 audit(1781282533.187:2843): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 235.752012] audit: type=1006 audit(1781282533.187:2844): pid=5225 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 241.537974] kauditd_printk_skb: 7 callbacks suppressed [ 241.537989] audit: type=1130 audit(1781282538.978:2850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4107-172.31.23.90:22-4.175.71.9:43622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 242.403427] audit: type=1101 audit(1781282539.844:2851): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 242.410828] audit: type=1103 audit(1781282539.852:2852): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 242.416080] audit: type=1006 audit(1781282539.852:2853): pid=5241 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 242.419893] audit: type=1300 audit(1781282539.852:2853): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd9c7cba0 a2=3 a3=0 items=0 ppid=1 pid=5241 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 242.426002] audit: type=1327 audit(1781282539.852:2853): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 242.446895] audit: type=1105 audit(1781282539.888:2854): pid=5241 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 242.454164] audit: type=1103 audit(1781282539.895:2855): pid=5245 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 243.009774] audit: type=1106 audit(1781282540.449:2856): pid=5241 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 243.017676] audit: type=1104 audit(1781282540.450:2857): pid=5241 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 246.612226] kauditd_printk_skb: 9 callbacks suppressed [ 246.612231] audit: type=1334 audit(1781282544.053:2865): prog-id=143 op=UNLOAD [ 246.617621] audit: type=1334 audit(1781282544.053:2866): prog-id=147 op=UNLOAD [ 246.702811] audit: type=1334 audit(1781282544.144:2867): prog-id=1202 op=UNLOAD [ 246.704611] audit: type=1334 audit(1781282544.144:2868): prog-id=1223 op=UNLOAD [ 246.792455] audit: type=1334 audit(1781282544.233:2869): prog-id=122 op=UNLOAD [ 246.795793] audit: type=1334 audit(1781282544.233:2870): prog-id=126 op=UNLOAD [ 246.848331] audit: type=1334 audit(1781282544.289:2871): prog-id=116 op=UNLOAD [ 246.850763] audit: type=1334 audit(1781282544.289:2872): prog-id=120 op=UNLOAD This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:42:25 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:42:25 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 ip-172-31-23-90 login: [ 248.584001] audit: type=1106 audit(1781282546.025:2873): pid=5257 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 248.591801] audit: type=1104 audit(1781282546.025:2874): pid=5257 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 251.902090] kauditd_printk_skb: 9 callbacks suppressed [ 251.902095] audit: type=1106 audit(1781282549.343:2882): pid=5409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 251.917270] audit: type=1104 audit(1781282549.343:2883): pid=5409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 251.923151] audit: type=1131 audit(1781282549.351:2884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-4108-172.31.23.90:22-4.175.71.9:57586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 252.074147] audit: type=1130 audit(1781282549.515:2885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4109-172.31.23.90:22-4.175.71.9:57588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 252.233362] audit: type=1334 audit(1781282549.674:2886): prog-id=1239 op=LOAD [ 252.235626] audit: type=1334 audit(1781282549.676:2887): prog-id=1240 op=LOAD [ 252.237215] audit: type=1300 audit(1781282549.676:2887): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001a0190 a2=98 a3=0 items=0 ppid=5439 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 252.242872] audit: type=1327 audit(1781282549.676:2887): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438623830666332373832333962646337666232666137663461323965 [ 252.248241] audit: type=1334 audit(1781282549.676:2888): prog-id=1240 op=UNLOAD [ 252.249769] audit: type=1300 audit(1781282549.676:2888): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5439 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 256.903108] kauditd_printk_skb: 1908 callbacks suppressed [ 256.903114] audit: type=1334 audit(1781282554.342:3540): prog-id=1561 op=LOAD [ 256.906872] audit: type=1300 audit(1781282554.342:3540): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcfd9c5c8 a2=90 a3=2 items=0 ppid=5677 pid=5736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 256.919891] audit: type=1327 audit(1781282554.342:3540): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 256.923675] audit: type=1334 audit(1781282554.342:3541): prog-id=1561 op=UNLOAD [ 256.927057] audit: type=1300 audit(1781282554.342:3541): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff85783f10 a2=0 a3=2 items=0 ppid=5677 pid=5736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 256.935198] audit: type=1327 audit(1781282554.342:3541): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 256.937690] audit: type=1334 audit(1781282554.355:3542): prog-id=1562 op=LOAD [ 256.940829] audit: type=1300 audit(1781282554.355:3542): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcfd9c5c8 a2=90 a3=2 items=0 ppid=5677 pid=5736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 256.946286] audit: type=1327 audit(1781282554.355:3542): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 256.948503] audit: type=1334 audit(1781282554.355:3543): prog-id=1562 op=UNLOAD [ 257.505920] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 261.907677] kauditd_printk_skb: 4273 callbacks suppressed [ 261.907683] audit: type=1325 audit(1781282559.348:4969): table=filter:252 family=2 entries=1 op=nft_unregister_rule pid=6180 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 261.913363] audit: type=1300 audit(1781282559.348:4969): arch=c00000b7 syscall=211 success=yes exit=816 a0=3 a1=ffffc20614c0 a2=0 a3=ffffb6bf05c0 items=0 ppid=5677 pid=6180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 261.920035] audit: type=1327 audit(1781282559.348:4969): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F4F5554505554002D6D006D61726B0000002D2D6D61726B0030786530302F3078663030002D6D006D61726B0000002D2D6D61726B0030786430302F3078663030002D6D006D61726B0000002D2D6D61726B0030786130302F3078 [ 261.932265] audit: type=1325 audit(1781282559.373:4970): table=filter:253 family=2 entries=1 op=nft_unregister_rule pid=6181 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 261.935931] audit: type=1300 audit(1781282559.373:4970): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe6f5dee0 a2=0 a3=ffff81c545c0 items=0 ppid=5677 pid=6181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 261.942522] audit: type=1327 audit(1781282559.373:4970): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D6F0063696C69756D5F686F7374002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E636C7573746572206F6E2063696C69756D5F686F737420666F7277617264206163 [ 261.950486] audit: type=1325 audit(1781282559.388:4971): table=filter:254 family=2 entries=1 op=nft_unregister_rule pid=6182 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 261.954314] audit: type=1300 audit(1781282559.388:4971): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc2b607b0 a2=0 a3=ffff949545c0 items=0 ppid=5677 pid=6182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 261.960882] audit: type=1327 audit(1781282559.388:4971): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D690063696C69756D5F686F7374002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E2063696C69756D5F686F737420666F7277617264206163 [ 261.973277] audit: type=1325 audit(1781282559.413:4972): table=filter:255 family=2 entries=1 op=nft_unregister_rule pid=6183 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:42:41 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 This is ip-172-31-23-90 (Linux aarch64 6.12.93-flatcar) 16:42:41 SSH host key: SHA256:yG/zAmsMgiCKvTAoayLT5TctT9tb7vcuiB6fAVuELs4 (ED25519) SSH host key: SHA256:qywpfP1RkI/nA/d86NBV+eYT/Ub4Wrm3Kp56p9OimGE (RSA) SSH host key: SHA256:HBjJ4m+HTvoZSTShocV3NZoaB9D6g6XIR2S3Dcd0Qdk (ECDSA) eth0: 172.31.23.90 fe80::461:faff:fe44:b913 ip-172-31-23-90 login: [ 269.194130] kauditd_printk_skb: 189 callbacks suppressed [ 269.194135] audit: type=1106 audit(1781282566.635:5042): pid=5577 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 269.205668] audit: type=1104 audit(1781282566.643:5043): pid=5577 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' [ 269.211318] audit: type=1131 audit(1781282566.651:5044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-4110-172.31.23.90:22-4.175.71.9:51040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 272.332980] audit: type=1334 audit(1781282569.774:5045): prog-id=2250 op=LOAD [ 272.335267] audit: type=1300 audit(1781282569.774:5045): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffce58dfa8 a2=74 a3=11 items=0 ppid=5677 pid=6349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 272.342866] audit: type=1327 audit(1781282569.774:5045): proctitle=74630066696C746572007265706C61636500646576006C786364326536396562663631356400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313437365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 272.348283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.349529] audit: type=1334 audit(1781282569.776:5046): prog-id=2250 op=UNLOAD [ 272.349790] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 272.350973] audit: type=1300 audit(1781282569.776:5046): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff8e863f50 a2=74 a3=11 items=0 ppid=5677 pid=6349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null)