id=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.373302] audit: type=1327 audit(1784160635.043:282): proctitle=69707461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 73.376819] audit: type=1325 audit(1784160635.050:283): table=filter:41 family=2 entries=1 op=nft_register_chain pid=3354 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 73.380233] audit: type=1300 audit(1784160635.050:283): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc922d9680 a2=0 a3=0 items=0 ppid=3337 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.386459] audit: type=1327 audit(1784160635.050:283): proctitle=69707461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 73.389424] audit: type=1325 audit(1784160635.057:284): table=filter:42 family=2 entries=2 op=nft_register_chain pid=3356 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 73.392709] audit: type=1300 audit(1784160635.057:284): arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7ffc2ff83b70 a2=0 a3=0 items=0 ppid=3337 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.400737] audit: type=1327 audit(1784160635.057:284): proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C [ 73.403852] audit: type=1325 audit(1784160635.063:285): table=filter:43 family=2 entries=2 op=nft_register_chain pid=3358 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 83.660935] zram_generator::config[3951]: No configuration found. [ 84.038409] kauditd_printk_skb: 158 callbacks suppressed [ 84.038412] audit: type=1334 audit(1784160645.724:342): prog-id=92 op=LOAD [ 84.041507] audit: type=1334 audit(1784160645.724:343): prog-id=93 op=LOAD [ 84.043152] audit: type=1334 audit(1784160645.724:344): prog-id=42 op=UNLOAD [ 84.044849] audit: type=1334 audit(1784160645.724:345): prog-id=43 op=UNLOAD [ 84.046428] audit: type=1334 audit(1784160645.726:346): prog-id=94 op=LOAD [ 84.048030] audit: type=1334 audit(1784160645.726:347): prog-id=77 op=UNLOAD [ 84.049640] audit: type=1334 audit(1784160645.727:348): prog-id=95 op=LOAD [ 84.051191] audit: type=1334 audit(1784160645.727:349): prog-id=72 op=UNLOAD [ 84.052795] audit: type=1334 audit(1784160645.729:350): prog-id=96 op=LOAD [ 84.054283] audit: type=1334 audit(1784160645.729:351): prog-id=64 op=UNLOAD [ 89.835997] kauditd_printk_skb: 49 callbacks suppressed [ 89.836001] audit: type=1106 audit(1784160651.522:401): pid=2739 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 89.842503] audit: type=1104 audit(1784160651.522:402): pid=2739 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 89.997797] audit: type=1106 audit(1784160651.684:403): pid=2720 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 90.005470] audit: type=1104 audit(1784160651.684:404): pid=2720 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 90.010265] audit: type=1131 audit(1784160651.686:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-172.31.30.83:22-50.85.169.122:49074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 93.440096] audit: type=1334 audit(1784160655.126:406): prog-id=118 op=LOAD [ 93.441440] audit: type=1334 audit(1784160655.127:407): prog-id=119 op=LOAD [ 93.445941] audit: type=1300 audit(1784160655.127:407): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=236815c47fd0 a2=98 a3=0 items=0 ppid=4094 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.452714] audit: type=1327 audit(1784160655.127:407): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338333161396566363031323261303536373636633666336135326130 [ 93.459026] audit: type=1334 audit(1784160655.127:408): prog-id=119 op=UNLOAD [ 97.435038] kauditd_printk_skb: 76 callbacks suppressed [ 97.435044] audit: type=1325 audit(1784160659.120:435): table=mangle:52 family=2 entries=1 op=nft_register_chain pid=4294 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 97.444017] audit: type=1300 audit(1784160659.120:435): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff11e6d730 a2=0 a3=7fff11e6d71c items=0 ppid=4240 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.454360] audit: type=1327 audit(1784160659.120:435): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 97.458553] audit: type=1325 audit(1784160659.139:436): table=nat:53 family=2 entries=1 op=nft_register_chain pid=4295 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 97.462866] audit: type=1300 audit(1784160659.139:436): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe57e70470 a2=0 a3=7ffe57e7045c items=0 ppid=4240 pid=4295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.469524] audit: type=1327 audit(1784160659.139:436): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 97.472822] audit: type=1325 audit(1784160659.140:437): table=mangle:54 family=10 entries=1 op=nft_register_chain pid=4296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 97.476293] audit: type=1300 audit(1784160659.140:437): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc063b7b0 a2=0 a3=7fffc063b79c items=0 ppid=4240 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.483340] audit: type=1327 audit(1784160659.140:437): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 97.486497] audit: type=1325 audit(1784160659.151:438): table=nat:55 family=10 entries=1 op=nft_register_chain pid=4300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 104.852484] kauditd_printk_skb: 143 callbacks suppressed [ 104.852488] audit: type=1334 audit(1784160666.538:486): prog-id=136 op=LOAD [ 104.855218] audit: type=1334 audit(1784160666.540:487): prog-id=137 op=LOAD [ 104.856608] audit: type=1300 audit(1784160666.540:487): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=8a97b2b7fd0 a2=98 a3=0 items=0 ppid=4113 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.862129] audit: type=1327 audit(1784160666.540:487): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646633393962333066666134643466616664393865353064356131 [ 104.868166] audit: type=1334 audit(1784160666.540:488): prog-id=137 op=UNLOAD [ 104.870104] audit: type=1300 audit(1784160666.540:488): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4113 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.882393] audit: type=1327 audit(1784160666.540:488): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646633393962333066666134643466616664393865353064356131 [ 104.893649] audit: type=1334 audit(1784160666.540:489): prog-id=138 op=LOAD [ 104.894958] audit: type=1300 audit(1784160666.540:489): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=8a97b2b8288 a2=98 a3=0 items=0 ppid=4113 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.906077] audit: type=1327 audit(1784160666.540:489): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438646633393962333066666134643466616664393865353064356131 [ 110.398375] kauditd_printk_skb: 122 callbacks suppressed [ 110.398380] audit: type=1334 audit(1784160672.084:538): prog-id=164 op=LOAD [ 110.400893] audit: type=1300 audit(1784160672.084:538): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcfa8f2f40 a2=74 a3=7ffcfa8f2f40 items=0 ppid=4645 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.406679] audit: type=1327 audit(1784160672.084:538): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 110.408854] audit: type=1334 audit(1784160672.084:539): prog-id=164 op=UNLOAD [ 110.410291] audit: type=1300 audit(1784160672.084:539): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffcfa8f2f40 a2=74 a3=7ffcfa8f2f40 items=0 ppid=4645 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.415789] audit: type=1327 audit(1784160672.084:539): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 110.418028] audit: type=1334 audit(1784160672.085:540): prog-id=165 op=LOAD [ 110.419321] audit: type=1300 audit(1784160672.085:540): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcfa8f1fc0 a2=90 a3=2 items=0 ppid=4645 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.424747] audit: type=1327 audit(1784160672.085:540): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 110.426772] audit: type=1334 audit(1784160672.085:541): prog-id=165 op=UNLOAD This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:15 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:15 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: [ 113.948957] NET: Registered PF_ALG protocol family This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:16 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:16 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: [ 115.483697] eth0: renamed from tmp126ee [ 115.493207] eth0: renamed from tmp4bed6 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:17 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:17 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: [ 116.259981] kauditd_printk_skb: 5876 callbacks suppressed [ 116.259984] audit: type=1334 audit(1784160677.946:2500): prog-id=1123 op=LOAD [ 116.263642] audit: type=1300 audit(1784160677.946:2500): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd624431e0 a2=74 a3=7ffd624431e0 items=0 ppid=4645 pid=5132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.272646] audit: type=1327 audit(1784160677.946:2500): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003435365F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 116.277064] audit: type=1334 audit(1784160677.946:2501): prog-id=1123 op=UNLOAD [ 116.278445] audit: type=1300 audit(1784160677.946:2501): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd624431e0 a2=74 a3=7ffd624431e0 items=0 ppid=4645 pid=5132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.284098] audit: type=1327 audit(1784160677.946:2501): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003435365F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 116.288902] audit: type=1334 audit(1784160677.946:2502): prog-id=1124 op=LOAD [ 116.290383] audit: type=1300 audit(1784160677.946:2502): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd62443170 a2=80 a3=0 items=0 ppid=4645 pid=5132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.296596] audit: type=1327 audit(1784160677.946:2502): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003435365F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 116.301488] audit: type=1334 audit(1784160677.946:2503): prog-id=1124 op=UNLOAD This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:18 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:18 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:19 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:19 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:20 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:11:20 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: [ 121.269163] kauditd_printk_skb: 573 callbacks suppressed [ 121.269168] audit: type=1325 audit(1784160682.955:2697): table=filter:151 family=2 entries=14 op=nft_register_rule pid=5291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.272812] audit: type=1300 audit(1784160682.955:2697): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff6a33e880 a2=0 a3=7fff6a33e86c items=0 ppid=4240 pid=5291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.278195] audit: type=1327 audit(1784160682.955:2697): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 121.280712] audit: type=1325 audit(1784160682.961:2698): table=nat:152 family=2 entries=12 op=nft_register_rule pid=5291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.283476] audit: type=1300 audit(1784160682.961:2698): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff6a33e880 a2=0 a3=0 items=0 ppid=4240 pid=5291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.289027] audit: type=1327 audit(1784160682.961:2698): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 122.314872] audit: type=1325 audit(1784160684.001:2699): table=filter:153 family=2 entries=14 op=nft_register_rule pid=5303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 122.317966] audit: type=1300 audit(1784160684.001:2699): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe6995a780 a2=0 a3=7ffe6995a76c items=0 ppid=4240 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.323906] audit: type=1327 audit(1784160684.001:2699): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 122.326579] audit: type=1325 audit(1784160684.006:2700): table=nat:154 family=2 entries=12 op=nft_register_rule pid=5303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 132.184525] kauditd_printk_skb: 2 callbacks suppressed [ 132.184529] audit: type=1325 audit(1784160693.870:2701): table=filter:155 family=2 entries=11 op=nft_register_rule pid=5308 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 132.189927] audit: type=1300 audit(1784160693.870:2701): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcff92faf0 a2=0 a3=7ffcff92fadc items=0 ppid=4240 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 132.196807] audit: type=1327 audit(1784160693.870:2701): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 132.199383] audit: type=1325 audit(1784160693.881:2702): table=nat:156 family=2 entries=33 op=nft_register_chain pid=5308 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 132.203694] audit: type=1300 audit(1784160693.881:2702): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffcff92faf0 a2=0 a3=7ffcff92fadc items=0 ppid=4240 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 132.209795] audit: type=1327 audit(1784160693.881:2702): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 133.214716] audit: type=1325 audit(1784160694.900:2703): table=filter:157 family=2 entries=8 op=nft_register_rule pid=5310 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.217836] audit: type=1300 audit(1784160694.900:2703): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffed7f82440 a2=0 a3=7ffed7f8242c items=0 ppid=4240 pid=5310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.224078] audit: type=1327 audit(1784160694.900:2703): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 133.262261] audit: type=1325 audit(1784160694.948:2704): table=nat:158 family=2 entries=54 op=nft_register_chain pid=5310 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 146.375413] kauditd_printk_skb: 2 callbacks suppressed [ 146.375417] audit: type=1130 audit(1784160708.061:2705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4100-172.31.30.83:22-50.85.169.122:53146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.289300] audit: type=1101 audit(1784160708.975:2706): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 147.296024] audit: type=1103 audit(1784160708.977:2707): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 147.301270] audit: type=1006 audit(1784160708.977:2708): pid=5316 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 147.304965] audit: type=1300 audit(1784160708.977:2708): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff647a6880 a2=3 a3=0 items=0 ppid=1 pid=5316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.311101] audit: type=1327 audit(1784160708.977:2708): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 147.326656] audit: type=1105 audit(1784160709.013:2709): pid=5316 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 147.333548] audit: type=1103 audit(1784160709.016:2710): pid=5320 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.443134] audit: type=1106 audit(1784160710.129:2711): pid=5316 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.450852] audit: type=1104 audit(1784160710.129:2712): pid=5316 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 153.615763] kauditd_printk_skb: 1 callbacks suppressed [ 153.615767] audit: type=1130 audit(1784160715.301:2714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4101-172.31.30.83:22-50.85.169.122:42512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 154.474016] audit: type=1101 audit(1784160716.160:2715): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 154.480269] audit: type=1103 audit(1784160716.162:2716): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 154.486607] audit: type=1006 audit(1784160716.162:2717): pid=5336 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 154.489976] audit: type=1300 audit(1784160716.162:2717): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff516e67a0 a2=3 a3=0 items=0 ppid=1 pid=5336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.496199] audit: type=1327 audit(1784160716.162:2717): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 154.514884] audit: type=1105 audit(1784160716.201:2718): pid=5336 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 154.524216] audit: type=1103 audit(1784160716.209:2719): pid=5341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.067633] audit: type=1106 audit(1784160716.752:2720): pid=5336 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.074993] audit: type=1104 audit(1784160716.752:2721): pid=5336 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 160.253170] kauditd_printk_skb: 1 callbacks suppressed [ 160.253174] audit: type=1130 audit(1784160721.939:2723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4102-172.31.30.83:22-50.85.169.122:48180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.248549] audit: type=1101 audit(1784160722.934:2724): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 161.271864] audit: type=1103 audit(1784160722.950:2725): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 161.300721] audit: type=1006 audit(1784160722.955:2726): pid=5355 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 161.330242] audit: type=1300 audit(1784160722.955:2726): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe06ded7c0 a2=3 a3=0 items=0 ppid=1 pid=5355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.342478] audit: type=1327 audit(1784160722.955:2726): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.382547] audit: type=1105 audit(1784160723.068:2727): pid=5355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 161.421522] audit: type=1103 audit(1784160723.096:2728): pid=5359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 162.503226] audit: type=1106 audit(1784160724.189:2729): pid=5355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 162.531668] audit: type=1104 audit(1784160724.189:2730): pid=5355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.346359] kauditd_printk_skb: 13 callbacks suppressed [ 165.346364] audit: type=1101 audit(1784160727.032:2742): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.354655] audit: type=1103 audit(1784160727.034:2743): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.360642] audit: type=1006 audit(1784160727.034:2744): pid=5388 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 165.364398] audit: type=1300 audit(1784160727.034:2744): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffce3b4d8d0 a2=3 a3=0 items=0 ppid=1 pid=5388 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.371316] audit: type=1327 audit(1784160727.034:2744): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 165.398115] audit: type=1105 audit(1784160727.084:2745): pid=5388 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.405541] audit: type=1103 audit(1784160727.091:2746): pid=5392 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.905476] audit: type=1106 audit(1784160727.591:2747): pid=5388 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.914027] audit: type=1104 audit(1784160727.591:2748): pid=5388 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.918818] audit: type=1131 audit(1784160727.595:2749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-5-172.31.30.83:22-50.85.169.122:48198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.080423] audit: type=1130 audit(1784160732.766:2750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-6-172.31.30.83:22-50.85.169.122:42112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.917840] audit: type=1101 audit(1784160733.604:2751): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 171.924125] audit: type=1103 audit(1784160733.606:2752): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 171.930304] audit: type=1006 audit(1784160733.606:2753): pid=5403 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 171.933248] audit: type=1300 audit(1784160733.606:2753): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcd9128be0 a2=3 a3=0 items=0 ppid=1 pid=5403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.939381] audit: type=1327 audit(1784160733.606:2753): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 171.950085] audit: type=1105 audit(1784160733.636:2754): pid=5403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 171.957623] audit: type=1103 audit(1784160733.643:2755): pid=5407 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 172.468541] audit: type=1106 audit(1784160734.154:2756): pid=5403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 172.476658] audit: type=1104 audit(1784160734.154:2757): pid=5403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 177.636041] kauditd_printk_skb: 1 callbacks suppressed [ 177.636045] audit: type=1130 audit(1784160739.322:2759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-7-172.31.30.83:22-50.85.169.122:42128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.508935] audit: type=1101 audit(1784160740.195:2760): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 178.515262] audit: type=1103 audit(1784160740.201:2761): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 178.521055] audit: type=1006 audit(1784160740.201:2762): pid=5419 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 178.524395] audit: type=1300 audit(1784160740.201:2762): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe43ac47f0 a2=3 a3=0 items=0 ppid=1 pid=5419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.530330] audit: type=1327 audit(1784160740.201:2762): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 178.548028] audit: type=1105 audit(1784160740.234:2763): pid=5419 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 178.554754] audit: type=1103 audit(1784160740.238:2764): pid=5423 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 179.136422] audit: type=1106 audit(1784160740.822:2765): pid=5419 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 179.143247] audit: type=1104 audit(1784160740.822:2766): pid=5419 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 183.831736] kauditd_printk_skb: 9 callbacks suppressed [ 183.831740] audit: type=1106 audit(1784160745.518:2774): pid=5435 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 183.839004] audit: type=1104 audit(1784160745.518:2775): pid=5435 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 183.847394] audit: type=1131 audit(1784160745.533:2776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4104-172.31.30.83:22-50.85.169.122:51298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.993336] audit: type=1130 audit(1784160745.679:2777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-172.31.30.83:22-50.85.169.122:51312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.851901] audit: type=1101 audit(1784160746.538:2778): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 184.858223] audit: type=1103 audit(1784160746.538:2779): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 184.864275] audit: type=1006 audit(1784160746.538:2780): pid=5450 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 184.867544] audit: type=1300 audit(1784160746.538:2780): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe98dc5ec0 a2=3 a3=0 items=0 ppid=1 pid=5450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.873817] audit: type=1327 audit(1784160746.538:2780): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.882532] audit: type=1105 audit(1784160746.568:2781): pid=5450 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 188.934218] kauditd_printk_skb: 28 callbacks suppressed [ 188.934222] audit: type=1101 audit(1784160750.620:2800): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 188.942541] audit: type=1103 audit(1784160750.622:2801): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 188.948667] audit: type=1006 audit(1784160750.622:2802): pid=5486 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 188.952038] audit: type=1300 audit(1784160750.622:2802): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd3a4badc0 a2=3 a3=0 items=0 ppid=1 pid=5486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.958233] audit: type=1327 audit(1784160750.622:2802): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 188.967290] audit: type=1105 audit(1784160750.653:2803): pid=5486 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 188.974566] audit: type=1103 audit(1784160750.660:2804): pid=5490 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 189.561692] audit: type=1106 audit(1784160751.247:2805): pid=5486 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 189.571751] audit: type=1104 audit(1784160751.247:2806): pid=5486 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 189.577564] audit: type=1131 audit(1784160751.256:2807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-9-172.31.30.83:22-50.85.169.122:43714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.729247] kauditd_printk_skb: 6 callbacks suppressed [ 194.729251] audit: type=1130 audit(1784160756.415:2810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4106-172.31.30.83:22-50.85.169.122:43716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.612109] audit: type=1101 audit(1784160757.298:2811): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 195.619024] audit: type=1103 audit(1784160757.298:2812): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 195.625138] audit: type=1006 audit(1784160757.298:2813): pid=5505 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 195.628973] audit: type=1300 audit(1784160757.298:2813): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd855f9f50 a2=3 a3=0 items=0 ppid=1 pid=5505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.635186] audit: type=1327 audit(1784160757.298:2813): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 195.643372] audit: type=1105 audit(1784160757.329:2814): pid=5505 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 195.650671] audit: type=1103 audit(1784160757.337:2815): pid=5509 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 196.169053] audit: type=1106 audit(1784160757.854:2816): pid=5505 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 196.175134] audit: type=1104 audit(1784160757.854:2817): pid=5505 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 201.330595] kauditd_printk_skb: 1 callbacks suppressed [ 201.330599] audit: type=1130 audit(1784160763.016:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-172.31.30.83:22-50.85.169.122:42868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.151292] audit: type=1101 audit(1784160763.837:2820): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.158128] audit: type=1103 audit(1784160763.837:2821): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.164823] audit: type=1006 audit(1784160763.837:2822): pid=5520 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 202.168077] audit: type=1300 audit(1784160763.837:2822): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffb658cd00 a2=3 a3=0 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.174252] audit: type=1327 audit(1784160763.837:2822): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 202.177180] audit: type=1105 audit(1784160763.863:2823): pid=5520 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.184266] audit: type=1103 audit(1784160763.868:2824): pid=5524 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.716526] audit: type=1106 audit(1784160764.402:2825): pid=5520 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.724457] audit: type=1104 audit(1784160764.402:2826): pid=5520 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:12:48 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:12:48 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: [ 207.553791] kauditd_printk_skb: 17 callbacks suppressed [ 207.553794] audit: type=1106 audit(1784160769.240:2842): pid=5536 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 207.562273] audit: type=1104 audit(1784160769.240:2843): pid=5536 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 207.567363] audit: type=1131 audit(1784160769.245:2844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4107-172.31.30.83:22-50.85.169.122:42878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.715211] audit: type=1130 audit(1784160769.401:2845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-11-172.31.30.83:22-50.85.169.122:42882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 208.564635] audit: type=1101 audit(1784160770.251:2846): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 208.571868] audit: type=1103 audit(1784160770.252:2847): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 208.577388] audit: type=1006 audit(1784160770.252:2848): pid=5687 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 208.580812] audit: type=1300 audit(1784160770.252:2848): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdcbba6dc0 a2=3 a3=0 items=0 ppid=1 pid=5687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.586682] audit: type=1327 audit(1784160770.252:2848): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 208.594088] audit: type=1105 audit(1784160770.280:2849): pid=5687 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 212.569119] kauditd_printk_skb: 131 callbacks suppressed [ 212.569124] audit: type=1334 audit(1784160774.255:2911): prog-id=1263 op=UNLOAD [ 212.574940] audit: type=1334 audit(1784160774.255:2912): prog-id=1267 op=UNLOAD [ 213.605292] audit: type=1334 audit(1784160775.291:2913): prog-id=1268 op=LOAD [ 213.608146] audit: type=1334 audit(1784160775.293:2914): prog-id=1269 op=LOAD [ 213.610305] audit: type=1300 audit(1784160775.293:2914): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3e9e169b7fd0 a2=98 a3=0 items=0 ppid=5718 pid=5946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 213.616914] audit: type=1327 audit(1784160775.293:2914): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161346331613730346664303436366531666339663339383634323863 [ 213.622812] audit: type=1334 audit(1784160775.293:2915): prog-id=1269 op=UNLOAD [ 213.629610] audit: type=1300 audit(1784160775.293:2915): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5718 pid=5946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 213.639632] audit: type=1327 audit(1784160775.293:2915): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161346331613730346664303436366531666339663339383634323863 [ 213.644792] audit: type=1334 audit(1784160775.294:2916): prog-id=1270 op=LOAD [ 214.663637] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 217.578067] kauditd_printk_skb: 6007 callbacks suppressed [ 217.578071] audit: type=1325 audit(1784160779.264:4920): table=mangle:238 family=2 entries=1 op=nft_unregister_rule pid=6426 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 217.581935] audit: type=1300 audit(1784160779.264:4920): arch=c000003e syscall=46 success=yes exit=544 a0=3 a1=7ffcab3050b0 a2=0 a3=7ffcab30509c items=0 ppid=5959 pid=6426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 217.587875] audit: type=1327 audit(1784160779.264:4920): proctitle=69707461626C6573002D770035002D74006D616E676C65002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F6D616E676C65002D6A004F4C445F43494C49554D5F5052455F6D616E676C65 [ 217.593470] audit: type=1325 audit(1784160779.275:4921): table=mangle:239 family=2 entries=1 op=nft_unregister_rule pid=6427 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 217.596652] audit: type=1300 audit(1784160779.275:4921): arch=c000003e syscall=46 success=yes exit=544 a0=3 a1=7ffe378b8110 a2=0 a3=7ffe378b80fc items=0 ppid=5959 pid=6427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 217.602603] audit: type=1327 audit(1784160779.275:4921): proctitle=69707461626C6573002D770035002D74006D616E676C65002D4400504F5354524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F504F53545F6D616E676C65002D6A004F4C445F43494C49554D5F504F53545F6D616E676C65 [ 217.607703] audit: type=1325 audit(1784160779.288:4922): table=mangle:240 family=2 entries=1 op=nft_unregister_rule pid=6428 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 217.610465] audit: type=1300 audit(1784160779.288:4922): arch=c000003e syscall=46 success=yes exit=572 a0=3 a1=7fff314d1340 a2=0 a3=7fff314d132c items=0 ppid=5959 pid=6428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 217.616220] audit: type=1327 audit(1784160779.288:4922): proctitle=69707461626C6573002D770035002D74006D616E676C65002D44004F4C445F43494C49554D5F5052455F6D616E676C65002D6D00736F636B6574002D2D7472616E73706172656E74002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E706F642072656469726563742070726F7869656420 [ 217.622232] audit: type=1325 audit(1784160779.308:4923): table=mangle:241 family=2 entries=1 op=nft_unregister_rule pid=6429 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:13:02 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 This is ip-172-31-30-83 (Linux x86_64 6.12.95-flatcar) 00:13:02 SSH host key: SHA256:7Pc0+da+Gk+d0POwUHwHpAxOQcG46ycejNpEcnjyCoI (RSA) SSH host key: SHA256:KDzWTYzrZT2GL5ZWnVuTMCMYAE2FP5mW4WjAym+R0yY (ED25519) SSH host key: SHA256:2B5hscXN9gAetOeO99AdqROzLCR+2E9JonguhEciwSY (ECDSA) eth0: 172.31.30.83 fe80::487:51ff:fe73:3405 ip-172-31-30-83 login: [ 224.697332] kauditd_printk_skb: 243 callbacks suppressed [ 224.697336] audit: type=1106 audit(1784160786.383:5011): pid=5854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 224.714027] audit: type=1104 audit(1784160786.391:5012): pid=5854 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 224.719174] audit: type=1131 audit(1784160786.402:5013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-12-172.31.30.83:22-50.85.169.122:48256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 225.461967] audit: type=1334 audit(1784160787.148:5014): prog-id=2256 op=LOAD [ 225.463870] audit: type=1300 audit(1784160787.148:5014): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffd5ebb4e0 a2=74 a3=7fffd5ebb4e0 items=0 ppid=5959 pid=6614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 225.469853] audit: type=1327 audit(1784160787.148:5014): proctitle=74630066696C746572007265706C61636500646576006C786338626466626466646536613200696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313933305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 225.474616] audit: type=1334 audit(1784160787.148:5015): prog-id=2256 op=UNLOAD [ 225.476001] audit: type=1300 audit(1784160787.148:5015): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fffd5ebb4e0 a2=74 a3=7fffd5ebb4e0 items=0 ppid=5959 pid=6614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 225.481862] audit: type=1327 audit(1784160787.148:5015): proctitle=74630066696C746572007265706C61636500646576006C786338626466626466646536613200696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313933305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 225.486422] audit: type=1334 audit(1784160787.148:5016): prog-id=2257 op=LOAD [ 238.832997] kauditd_printk_skb: 423 callbacks suppressed [ 238.833002] audit: type=1334 audit(1784160800.519:5160): prog-id=81 op=UNLOAD [ 238.838247] audit: type=1334 audit(1784160800.519:5161): prog-id=94 op=UNLOAD