NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:08:40 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: [ 46.882001] kauditd_printk_skb: 50 callbacks suppressed [ 46.882005] audit: type=1305 audit(1784160528.237:170): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 46.886987] audit: type=1300 audit(1784160528.237:170): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd00e439f0 a2=420 a3=0 items=0 ppid=2697 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 46.891124] audit: type=1327 audit(1784160528.237:170): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 46.892949] audit: type=1130 audit(1784160528.237:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.895839] audit: type=1131 audit(1784160528.237:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.898741] audit: type=1106 audit(1784160528.240:173): pid=2691 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 46.901967] audit: type=1104 audit(1784160528.240:174): pid=2691 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 47.044411] audit: type=1106 audit(1784160528.399:175): pid=2686 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 47.054063] audit: type=1104 audit(1784160528.399:176): pid=2686 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 47.059079] audit: type=1131 audit(1784160528.406:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-3-172.31.22.166:22-50.85.169.122:39710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.583488] Initializing XFRM netlink socket [ 53.699642] kauditd_printk_skb: 13 callbacks suppressed [ 53.699646] audit: type=1325 audit(1784160535.054:189): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2813 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.704513] audit: type=1300 audit(1784160535.054:189): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff7fb6c6b0 a2=0 a3=0 items=0 ppid=2763 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.711156] audit: type=1327 audit(1784160535.054:189): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 53.714430] audit: type=1325 audit(1784160535.057:190): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.717900] audit: type=1300 audit(1784160535.057:190): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffef2c415e0 a2=0 a3=0 items=0 ppid=2763 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.724230] audit: type=1327 audit(1784160535.057:190): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 53.726808] audit: type=1325 audit(1784160535.059:191): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2817 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.729553] audit: type=1300 audit(1784160535.059:191): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe8e56b0c0 a2=0 a3=0 items=0 ppid=2763 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.735101] audit: type=1327 audit(1784160535.059:191): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 53.737883] audit: type=1325 audit(1784160535.062:192): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2819 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:08:56 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:08:56 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: [ 60.486371] kauditd_printk_skb: 105 callbacks suppressed [ 60.486376] audit: type=1130 audit(1784160541.841:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 61.265647] audit: type=1131 audit(1784160542.620:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 63.194213] audit: type=1131 audit(1784160544.548:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.219240] audit: type=1334 audit(1784160544.574:231): prog-id=35 op=UNLOAD [ 71.676612] audit: type=1130 audit(1784160553.031:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.767506] audit: type=1131 audit(1784160553.122:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 72.250532] audit: type=1130 audit(1784160553.605:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 72.254875] audit: type=1131 audit(1784160553.605:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 63.194213] audit: type=1131 audit(1784160544.548:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.219240] audit: type=1334 audit(1784160544.574:231): prog-id=35 op=UNLOAD [ 71.676612] audit: type=1130 audit(1784160553.031:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.767506] audit: type=1131 audit(1784160553.122:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 72.250532] audit: type=1130 audit(1784160553.605:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 72.254875] audit: type=1131 audit(1784160553.605:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 72.465039] zram_generator::config[3283]: No configuration found. [ 72.839489] audit: type=1334 audit(1784160554.194:236): prog-id=39 op=LOAD [ 72.841101] audit: type=1334 audit(1784160554.194:237): prog-id=40 op=LOAD [ 72.842833] audit: type=1334 audit(1784160554.194:238): prog-id=29 op=UNLOAD [ 72.844465] audit: type=1334 audit(1784160554.194:239): prog-id=30 op=UNLOAD [ 72.846258] audit: type=1334 audit(1784160554.195:240): prog-id=41 op=LOAD [ 72.847786] audit: type=1334 audit(1784160554.195:241): prog-id=23 op=UNLOAD [ 83.837227] zram_generator::config[3950]: No configuration found. [ 84.232780] kauditd_printk_skb: 204 callbacks suppressed [ 84.232785] audit: type=1334 audit(1784160565.588:338): prog-id=89 op=LOAD [ 84.235991] audit: type=1334 audit(1784160565.588:339): prog-id=79 op=UNLOAD [ 84.237610] audit: type=1334 audit(1784160565.589:340): prog-id=90 op=LOAD [ 84.239762] audit: type=1334 audit(1784160565.589:341): prog-id=91 op=LOAD [ 84.241407] audit: type=1334 audit(1784160565.589:342): prog-id=39 op=UNLOAD [ 84.243141] audit: type=1334 audit(1784160565.589:343): prog-id=40 op=UNLOAD [ 84.244864] audit: type=1334 audit(1784160565.590:344): prog-id=92 op=LOAD [ 84.246356] audit: type=1334 audit(1784160565.590:345): prog-id=84 op=UNLOAD [ 84.248112] audit: type=1334 audit(1784160565.591:346): prog-id=93 op=LOAD [ 84.249942] audit: type=1334 audit(1784160565.591:347): prog-id=41 op=UNLOAD [ 89.635092] kauditd_printk_skb: 49 callbacks suppressed [ 89.635096] audit: type=1106 audit(1784160570.990:397): pid=2730 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 89.640317] audit: type=1104 audit(1784160570.990:398): pid=2730 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 89.795732] audit: type=1106 audit(1784160571.151:399): pid=2725 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 89.802238] audit: type=1104 audit(1784160571.151:400): pid=2725 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 89.808343] audit: type=1131 audit(1784160571.156:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-172.31.22.166:22-50.85.169.122:39718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 92.922759] audit: type=1334 audit(1784160574.278:402): prog-id=115 op=LOAD [ 92.926526] audit: type=1334 audit(1784160574.281:403): prog-id=116 op=LOAD [ 92.928197] audit: type=1300 audit(1784160574.281:403): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1be291137fd0 a2=98 a3=0 items=0 ppid=4110 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.936679] audit: type=1327 audit(1784160574.281:403): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661653635353765396462393239646362316366323735356636323465 [ 92.947510] audit: type=1334 audit(1784160574.281:404): prog-id=116 op=UNLOAD [ 96.154108] kauditd_printk_skb: 76 callbacks suppressed [ 96.154112] audit: type=1325 audit(1784160577.507:431): table=mangle:52 family=10 entries=1 op=nft_register_chain pid=4296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 96.165724] audit: type=1300 audit(1784160577.507:431): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf6cecf30 a2=0 a3=7ffcf6cecf1c items=0 ppid=4239 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.175933] audit: type=1327 audit(1784160577.507:431): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 96.185689] audit: type=1325 audit(1784160577.509:432): table=mangle:53 family=2 entries=1 op=nft_register_chain pid=4298 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 96.191370] audit: type=1300 audit(1784160577.509:432): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe5067ff0 a2=0 a3=7fffe5067fdc items=0 ppid=4239 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.198103] audit: type=1327 audit(1784160577.509:432): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 96.201346] audit: type=1325 audit(1784160577.512:433): table=nat:54 family=10 entries=1 op=nft_register_chain pid=4300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 96.204395] audit: type=1300 audit(1784160577.512:433): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc58f627b0 a2=0 a3=7ffc58f6279c items=0 ppid=4239 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.210365] audit: type=1327 audit(1784160577.512:433): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 96.213295] audit: type=1325 audit(1784160577.523:434): table=nat:55 family=2 entries=1 op=nft_register_chain pid=4302 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 104.746996] kauditd_printk_skb: 143 callbacks suppressed [ 104.746999] audit: type=1334 audit(1784160586.102:482): prog-id=133 op=LOAD [ 104.749998] audit: type=1334 audit(1784160586.105:483): prog-id=134 op=LOAD [ 104.751454] audit: type=1300 audit(1784160586.105:483): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=377404a9bfd0 a2=98 a3=0 items=0 ppid=4148 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.756859] audit: type=1327 audit(1784160586.105:483): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313335313534356563393736306161643661383562353732636135 [ 104.762697] audit: type=1334 audit(1784160586.105:484): prog-id=134 op=UNLOAD [ 104.764121] audit: type=1300 audit(1784160586.105:484): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4148 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.769832] audit: type=1327 audit(1784160586.105:484): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313335313534356563393736306161643661383562353732636135 [ 104.776704] audit: type=1334 audit(1784160586.105:485): prog-id=135 op=LOAD [ 104.778509] audit: type=1300 audit(1784160586.105:485): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=377404a9c288 a2=98 a3=0 items=0 ppid=4148 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.785168] audit: type=1327 audit(1784160586.105:485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313335313534356563393736306161643661383562353732636135 [ 113.944146] kauditd_printk_skb: 122 callbacks suppressed [ 113.944150] audit: type=1334 audit(1784160595.299:534): prog-id=161 op=LOAD [ 113.946675] audit: type=1300 audit(1784160595.299:534): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf01f5c40 a2=74 a3=7ffcf01f5c40 items=0 ppid=4648 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.952174] audit: type=1327 audit(1784160595.299:534): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 113.954435] audit: type=1334 audit(1784160595.299:535): prog-id=161 op=UNLOAD [ 113.955708] audit: type=1300 audit(1784160595.299:535): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffcf01f5c40 a2=74 a3=7ffcf01f5c40 items=0 ppid=4648 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.961120] audit: type=1327 audit(1784160595.299:535): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 113.963206] audit: type=1334 audit(1784160595.300:536): prog-id=162 op=LOAD [ 113.964419] audit: type=1300 audit(1784160595.300:536): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf01f4cc0 a2=90 a3=2 items=0 ppid=4648 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.969787] audit: type=1327 audit(1784160595.300:536): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 113.971837] audit: type=1334 audit(1784160595.300:537): prog-id=162 op=UNLOAD This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:09:58 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:09:58 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:09:59 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:09:59 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:10:00 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:10:00 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: [ 122.315356] NET: Registered PF_ALG protocol family [ 122.375128] kauditd_printk_skb: 5660 callbacks suppressed [ 122.375133] audit: type=1334 audit(1784160603.730:2424): prog-id=1106 op=LOAD [ 122.391052] audit: type=1300 audit(1784160603.730:2424): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd67357130 a2=74 a3=7ffd67357130 items=0 ppid=4780 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 122.456708] audit: type=1327 audit(1784160603.730:2424): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 122.495184] audit: type=1334 audit(1784160603.746:2425): prog-id=1106 op=UNLOAD [ 122.536001] audit: type=1300 audit(1784160603.746:2425): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd67357130 a2=74 a3=7ffd67357130 items=0 ppid=4780 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 122.592823] audit: type=1327 audit(1784160603.746:2425): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 122.602606] audit: type=1334 audit(1784160603.746:2426): prog-id=1107 op=LOAD [ 122.608605] audit: type=1300 audit(1784160603.746:2426): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd673570c0 a2=80 a3=0 items=0 ppid=4780 pid=4873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 122.627956] audit: type=1327 audit(1784160603.746:2426): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 122.645439] audit: type=1334 audit(1784160603.746:2427): prog-id=1107 op=UNLOAD [ 125.855233] eth0: renamed from tmp072f3 [ 125.903738] eth0: renamed from tmp688e0 This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:10:09 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:10:09 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:10:10 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:10:10 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: [ 131.277349] kauditd_printk_skb: 323 callbacks suppressed [ 131.277362] audit: type=1334 audit(1784160612.632:2535): prog-id=1144 op=LOAD [ 131.280169] audit: type=1300 audit(1784160612.632:2535): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc189cfdb0 a2=74 a3=7ffc189cfdb0 items=0 ppid=4648 pid=5152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 131.288101] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.289205] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 131.289842] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.290436] audit: backlog limit exceeded [ 131.290739] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 131.291435] audit: type=1327 audit(1784160612.632:2535): proctitle=74630066696C746572007265706C61636500646576006C786366393731393437633930613400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323232365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 131.292029] audit: backlog limit exceeded [ 131.299774] audit: type=1334 audit(1784160612.632:2536): prog-id=1144 op=UNLOAD [ 143.539362] kauditd_printk_skb: 468 callbacks suppressed [ 143.539366] audit: type=1325 audit(1784160624.894:2695): table=filter:155 family=2 entries=11 op=nft_register_rule pid=5322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.545127] audit: type=1300 audit(1784160624.894:2695): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd5237c9a0 a2=0 a3=7ffd5237c98c items=0 ppid=4239 pid=5322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.552042] audit: type=1327 audit(1784160624.894:2695): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 143.555238] audit: type=1325 audit(1784160624.910:2696): table=nat:156 family=2 entries=33 op=nft_register_chain pid=5322 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.558221] audit: type=1300 audit(1784160624.910:2696): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7ffd5237c9a0 a2=0 a3=7ffd5237c98c items=0 ppid=4239 pid=5322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.564104] audit: type=1327 audit(1784160624.910:2696): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 144.571795] audit: type=1325 audit(1784160625.927:2697): table=filter:157 family=2 entries=8 op=nft_register_rule pid=5324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 144.574778] audit: type=1300 audit(1784160625.927:2697): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd7f8de990 a2=0 a3=7ffd7f8de97c items=0 ppid=4239 pid=5324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.581709] audit: type=1327 audit(1784160625.927:2697): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 144.598201] audit: type=1325 audit(1784160625.953:2698): table=nat:158 family=2 entries=54 op=nft_register_chain pid=5324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.235737] kauditd_printk_skb: 2 callbacks suppressed [ 158.235740] audit: type=1130 audit(1784160639.590:2699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-172.31.22.166:22-50.85.169.122:32868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.165002] audit: type=1101 audit(1784160640.520:2700): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.178336] audit: type=1103 audit(1784160640.520:2701): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.185708] audit: type=1006 audit(1784160640.520:2702): pid=5334 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 159.197213] audit: type=1300 audit(1784160640.520:2702): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd252982a0 a2=3 a3=0 items=0 ppid=1 pid=5334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.204546] audit: type=1327 audit(1784160640.520:2702): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 159.224511] audit: type=1105 audit(1784160640.579:2703): pid=5334 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 159.231855] audit: type=1103 audit(1784160640.583:2704): pid=5338 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 160.351242] audit: type=1106 audit(1784160641.706:2705): pid=5334 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 160.360507] audit: type=1104 audit(1784160641.706:2706): pid=5334 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.518581] kauditd_printk_skb: 1 callbacks suppressed [ 165.518586] audit: type=1130 audit(1784160646.873:2708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4100-172.31.22.166:22-50.85.169.122:48402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.360810] audit: type=1101 audit(1784160647.716:2709): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 166.368140] audit: type=1103 audit(1784160647.716:2710): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 166.373981] audit: type=1006 audit(1784160647.716:2711): pid=5352 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 166.377290] audit: type=1300 audit(1784160647.716:2711): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc3e2e62a0 a2=3 a3=0 items=0 ppid=1 pid=5352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.383292] audit: type=1327 audit(1784160647.716:2711): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 166.390242] audit: type=1105 audit(1784160647.745:2712): pid=5352 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 166.396935] audit: type=1103 audit(1784160647.747:2713): pid=5356 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 166.916275] audit: type=1106 audit(1784160648.270:2714): pid=5352 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 166.923700] audit: type=1104 audit(1784160648.270:2715): pid=5352 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 172.089825] kauditd_printk_skb: 1 callbacks suppressed [ 172.089830] audit: type=1130 audit(1784160653.444:2717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-172.31.22.166:22-50.85.169.122:47028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.932320] audit: type=1101 audit(1784160654.287:2718): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 172.939068] audit: type=1103 audit(1784160654.289:2719): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 172.945014] audit: type=1006 audit(1784160654.289:2720): pid=5369 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 172.948350] audit: type=1300 audit(1784160654.289:2720): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1c6e7310 a2=3 a3=0 items=0 ppid=1 pid=5369 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.954557] audit: type=1327 audit(1784160654.289:2720): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 172.963998] audit: type=1105 audit(1784160654.319:2721): pid=5369 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 172.971038] audit: type=1103 audit(1784160654.321:2722): pid=5373 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 173.489435] audit: type=1106 audit(1784160654.844:2723): pid=5369 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 173.496876] audit: type=1104 audit(1784160654.844:2724): pid=5369 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 178.676551] kauditd_printk_skb: 1 callbacks suppressed [ 178.676556] audit: type=1130 audit(1784160660.024:2726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-172.31.22.166:22-50.85.169.122:50286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.577580] audit: type=1101 audit(1784160660.932:2727): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 179.584309] audit: type=1103 audit(1784160660.934:2728): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 179.590163] audit: type=1006 audit(1784160660.934:2729): pid=5386 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 179.593526] audit: type=1300 audit(1784160660.934:2729): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffca7b47e20 a2=3 a3=0 items=0 ppid=1 pid=5386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.599739] audit: type=1327 audit(1784160660.934:2729): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 179.612201] audit: type=1105 audit(1784160660.967:2730): pid=5386 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 179.619160] audit: type=1103 audit(1784160660.971:2731): pid=5390 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.414561] audit: type=1106 audit(1784160661.769:2732): pid=5386 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.428063] audit: type=1104 audit(1784160661.769:2733): pid=5386 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 185.577403] kauditd_printk_skb: 1 callbacks suppressed [ 185.577407] audit: type=1130 audit(1784160666.932:2735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-4103-172.31.22.166:22-50.85.169.122:50290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.394474] audit: type=1101 audit(1784160667.749:2736): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 186.400591] audit: type=1103 audit(1784160667.751:2737): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 186.405990] audit: type=1006 audit(1784160667.751:2738): pid=5402 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 186.409253] audit: type=1300 audit(1784160667.751:2738): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcdc237890 a2=3 a3=0 items=0 ppid=1 pid=5402 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.415292] audit: type=1327 audit(1784160667.751:2738): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 186.421416] audit: type=1105 audit(1784160667.776:2739): pid=5402 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 186.428852] audit: type=1103 audit(1784160667.784:2740): pid=5408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 186.948639] audit: type=1106 audit(1784160668.303:2741): pid=5402 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 186.956081] audit: type=1104 audit(1784160668.303:2742): pid=5402 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.113524] kauditd_printk_skb: 1 callbacks suppressed [ 192.113528] audit: type=1130 audit(1784160673.468:2744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4104-172.31.22.166:22-50.85.169.122:59072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.957486] audit: type=1101 audit(1784160674.312:2745): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.963762] audit: type=1103 audit(1784160674.312:2746): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.969780] audit: type=1006 audit(1784160674.312:2747): pid=5423 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 192.973040] audit: type=1300 audit(1784160674.312:2747): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd53c477a0 a2=3 a3=0 items=0 ppid=1 pid=5423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.979259] audit: type=1327 audit(1784160674.312:2747): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 192.987655] audit: type=1105 audit(1784160674.343:2748): pid=5423 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.995576] audit: type=1103 audit(1784160674.350:2749): pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 193.525977] audit: type=1106 audit(1784160674.881:2750): pid=5423 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 193.532887] audit: type=1104 audit(1784160674.881:2751): pid=5423 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 201.885280] kauditd_printk_skb: 23 callbacks suppressed [ 201.885284] audit: type=1130 audit(1784160683.240:2771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-7-172.31.22.166:22-50.85.169.122:38426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.733367] audit: type=1101 audit(1784160684.088:2772): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.739954] audit: type=1103 audit(1784160684.090:2773): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.746262] audit: type=1006 audit(1784160684.090:2774): pid=5472 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 202.749665] audit: type=1300 audit(1784160684.090:2774): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe8f0de0e0 a2=3 a3=0 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.755619] audit: type=1327 audit(1784160684.090:2774): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 202.769757] audit: type=1105 audit(1784160684.125:2775): pid=5472 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 202.778073] audit: type=1103 audit(1784160684.133:2776): pid=5476 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 203.290580] audit: type=1106 audit(1784160684.645:2777): pid=5472 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 203.298156] audit: type=1104 audit(1784160684.645:2778): pid=5472 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 207.338165] kauditd_printk_skb: 20 callbacks suppressed [ 207.338169] audit: type=1325 audit(1784160688.693:2795): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5519 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 207.344044] audit: type=1300 audit(1784160688.693:2795): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffb886f3c0 a2=0 a3=7fffb886f3ac items=0 ppid=4239 pid=5519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.351287] audit: type=1327 audit(1784160688.693:2795): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 207.355132] audit: type=1325 audit(1784160688.710:2796): table=nat:160 family=2 entries=18 op=nft_register_rule pid=5519 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 207.358336] audit: type=1300 audit(1784160688.710:2796): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7fffb886f3c0 a2=0 a3=0 items=0 ppid=4239 pid=5519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.367333] audit: type=1327 audit(1784160688.710:2796): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 207.539422] audit: type=1106 audit(1784160688.894:2797): pid=5505 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 207.546294] audit: type=1104 audit(1784160688.894:2798): pid=5505 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 207.559823] audit: type=1131 audit(1784160688.915:2799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4106-172.31.22.166:22-50.85.169.122:38452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.694763] audit: type=1130 audit(1784160689.049:2800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4107-172.31.22.166:22-50.85.169.122:38462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 214.070508] kauditd_printk_skb: 27 callbacks suppressed [ 214.070512] audit: type=1325 audit(1784160695.425:2820): table=filter:163 family=2 entries=20 op=nft_register_rule pid=5556 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 214.074570] audit: type=1300 audit(1784160695.425:2820): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd6dc1d880 a2=0 a3=7ffd6dc1d86c items=0 ppid=4239 pid=5556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.080401] audit: type=1327 audit(1784160695.425:2820): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 214.085764] audit: type=1325 audit(1784160695.440:2821): table=nat:164 family=2 entries=102 op=nft_register_chain pid=5556 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 214.088700] audit: type=1300 audit(1784160695.440:2821): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffd6dc1d880 a2=0 a3=7ffd6dc1d86c items=0 ppid=4239 pid=5556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.094692] audit: type=1327 audit(1784160695.440:2821): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 216.002573] audit: type=1130 audit(1784160697.357:2822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4108-172.31.22.166:22-50.85.169.122:34536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.834130] audit: type=1101 audit(1784160698.189:2823): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 216.840787] audit: type=1103 audit(1784160698.191:2824): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 216.846284] audit: type=1006 audit(1784160698.191:2825): pid=5558 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 222.555080] kauditd_printk_skb: 7 callbacks suppressed [ 222.555084] audit: type=1130 audit(1784160703.910:2831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4109-172.31.22.166:22-50.85.169.122:59322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 223.399302] audit: type=1101 audit(1784160704.754:2832): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 223.405446] audit: type=1103 audit(1784160704.756:2833): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 223.411781] audit: type=1006 audit(1784160704.756:2834): pid=5577 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 223.414752] audit: type=1300 audit(1784160704.756:2834): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffe35795a0 a2=3 a3=0 items=0 ppid=1 pid=5577 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.420917] audit: type=1327 audit(1784160704.756:2834): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 223.429623] audit: type=1105 audit(1784160704.784:2835): pid=5577 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 223.436359] audit: type=1103 audit(1784160704.787:2836): pid=5581 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 223.999335] audit: type=1106 audit(1784160705.354:2837): pid=5577 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 224.005836] audit: type=1104 audit(1784160705.354:2838): pid=5577 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 229.297942] kauditd_printk_skb: 9 callbacks suppressed [ 229.297946] audit: type=1334 audit(1784160710.653:2846): prog-id=146 op=UNLOAD [ 229.303776] audit: type=1334 audit(1784160710.653:2847): prog-id=150 op=UNLOAD [ 229.386716] audit: type=1334 audit(1784160710.742:2848): prog-id=1205 op=UNLOAD [ 229.386722] audit: type=1334 audit(1784160710.742:2849): prog-id=1221 op=UNLOAD [ 229.440131] audit: type=1334 audit(1784160710.795:2850): prog-id=125 op=UNLOAD [ 229.442031] audit: type=1334 audit(1784160710.795:2851): prog-id=129 op=UNLOAD [ 229.521041] audit: type=1334 audit(1784160710.876:2852): prog-id=120 op=UNLOAD [ 229.522386] audit: type=1334 audit(1784160710.876:2853): prog-id=124 op=UNLOAD This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:11:51 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:11:51 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: [ 231.265116] audit: type=1106 audit(1784160712.620:2854): pid=5593 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 231.272175] audit: type=1104 audit(1784160712.620:2855): pid=5593 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 234.477272] kauditd_printk_skb: 59 callbacks suppressed [ 234.477276] audit: type=1101 audit(1784160715.832:2885): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 234.484236] audit: type=1103 audit(1784160715.833:2886): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 234.489676] audit: type=1006 audit(1784160715.833:2887): pid=5760 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 234.492976] audit: type=1300 audit(1784160715.833:2887): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1175f340 a2=3 a3=0 items=0 ppid=1 pid=5760 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 234.501095] audit: type=1327 audit(1784160715.833:2887): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 234.519166] audit: type=1105 audit(1784160715.874:2888): pid=5760 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 234.526315] audit: type=1103 audit(1784160715.881:2889): pid=5855 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 234.958432] audit: type=1106 audit(1784160716.313:2890): pid=5760 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 234.971362] audit: type=1104 audit(1784160716.313:2891): pid=5760 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 234.977498] audit: type=1131 audit(1784160716.321:2892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4112-172.31.22.166:22-50.85.169.122:45680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 238.944806] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 243.007367] kauditd_printk_skb: 5770 callbacks suppressed [ 243.007371] audit: type=1334 audit(1784160724.362:4825): prog-id=2215 op=LOAD [ 243.017197] audit: type=1300 audit(1784160724.362:4825): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd330ffb30 a2=74 a3=7ffd330ffb30 items=0 ppid=6146 pid=6243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 243.038295] audit: type=1327 audit(1784160724.362:4825): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 243.062244] audit: type=1334 audit(1784160724.364:4826): prog-id=2215 op=UNLOAD [ 243.068269] audit: type=1300 audit(1784160724.364:4826): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd330ffb30 a2=74 a3=7ffd330ffb30 items=0 ppid=6146 pid=6243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 243.075183] audit: type=1327 audit(1784160724.364:4826): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 243.085753] audit: type=1334 audit(1784160724.364:4827): prog-id=2216 op=LOAD [ 243.087425] audit: type=1300 audit(1784160724.364:4827): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd330ffac0 a2=80 a3=0 items=0 ppid=6146 pid=6243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 243.107938] audit: type=1327 audit(1784160724.364:4827): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 243.120542] audit: type=1334 audit(1784160724.364:4828): prog-id=2216 op=UNLOAD This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:12:08 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d This is ip-172-31-22-166 (Linux x86_64 6.12.95-flatcar) 00:12:08 SSH host key: SHA256:1wpvXh5YK8NJSXuDPJuQOIY79x379pxJ4BxZwkhKXqk (RSA) SSH host key: SHA256:kAeHGnhKTFH+lEA0DNVbpRhhWRvqOyRvFr3is9bv6Pw (ED25519) SSH host key: SHA256:7UoIskYFlV3tleAvlRtcDukvaF/KjWmEqu16sA5dSmk (ECDSA) eth0: 172.31.22.166 fe80::460:f5ff:fea9:515d ip-172-31-22-166 login: [ 249.842625] kauditd_printk_skb: 560 callbacks suppressed [ 249.842629] audit: type=1334 audit(1784160731.197:5023): prog-id=2253 op=LOAD [ 249.846376] audit: type=1334 audit(1784160731.198:5024): prog-id=2254 op=LOAD [ 249.847953] audit: type=1300 audit(1784160731.198:5024): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe585cec60 a2=74 a3=7ffe585cec60 items=0 ppid=6013 pid=6673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 249.853955] audit: type=1327 audit(1784160731.198:5024): proctitle=74630066696C746572007265706C61636500646576006C786366393731393437633930613400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323232365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 249.858635] audit: type=1334 audit(1784160731.198:5025): prog-id=2254 op=UNLOAD [ 249.859900] audit: type=1300 audit(1784160731.198:5025): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe585cec60 a2=74 a3=7ffe585cec60 items=0 ppid=6013 pid=6673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 249.865605] audit: type=1327 audit(1784160731.198:5025): proctitle=74630066696C746572007265706C61636500646576006C786366393731393437633930613400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323232365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 249.869924] audit: type=1334 audit(1784160731.198:5026): prog-id=2255 op=LOAD [ 249.871215] audit: type=1300 audit(1784160731.198:5026): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe585cebf0 a2=80 a3=0 items=0 ppid=6013 pid=6673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 249.876232] audit: type=1327 audit(1784160731.198:5026): proctitle=74630066696C746572007265706C61636500646576006C786366393731393437633930613400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323232365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 265.166956] kauditd_printk_skb: 423 callbacks suppressed [ 265.166960] audit: type=1334 audit(1784160746.522:5172): prog-id=78 op=UNLOAD [ 265.171783] audit: type=1334 audit(1784160746.522:5173): prog-id=110 op=UNLOAD [ 266.140183] audit: type=1334 audit(1784160747.495:5174): prog-id=2331 op=LOAD [ 266.142443] audit: type=1334 audit(1784160747.497:5175): prog-id=2332 op=LOAD [ 266.144081] audit: type=1300 audit(1784160747.497:5175): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=30544c937fd0 a2=98 a3=0 items=0 ppid=3415 pid=6724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 266.149916] audit: type=1327 audit(1784160747.497:5175): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939663630326661316335663133643432346435346662323237363337 [ 266.155500] audit: type=1334 audit(1784160747.497:5176): prog-id=2332 op=UNLOAD [ 266.157296] audit: type=1300 audit(1784160747.497:5176): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3415 pid=6724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 266.163530] audit: type=1327 audit(1784160747.497:5176): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939663630326661316335663133643432346435346662323237363337 [ 266.169362] audit: type=1334 audit(1784160747.497:5177): prog-id=2333 op=LOAD [ 270.314910] kauditd_printk_skb: 14 callbacks suppressed [ 270.314914] audit: type=1334 audit(1784160751.670:5182): prog-id=88 op=UNLOAD [ 270.319332] audit: type=1334 audit(1784160751.670:5183): prog-id=92 op=UNLOAD [ 271.132937] audit: type=1334 audit(1784160752.488:5184): prog-id=2336 op=LOAD [ 271.134766] audit: type=1334 audit(1784160752.488:5185): prog-id=2337 op=LOAD [ 271.136325] audit: type=1300 audit(1784160752.488:5185): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=61014037fd0 a2=98 a3=0 items=0 ppid=3406 pid=6771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 271.142622] audit: type=1327 audit(1784160752.488:5185): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163303431336161333465363730346431313531353034373761376265 [ 271.148584] audit: type=1334 audit(1784160752.488:5186): prog-id=2337 op=UNLOAD [ 271.150250] audit: type=1300 audit(1784160752.488:5186): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3406 pid=6771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 271.156256] audit: type=1327 audit(1784160752.488:5186): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163303431336161333465363730346431313531353034373761376265 [ 271.162351] audit: type=1334 audit(1784160752.488:5187): prog-id=2338 op=LOAD