02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:19:30 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 50.088969] audit: type=1305 audit(1784762378.050:165): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 50.092769] audit: type=1300 audit(1784762378.050:165): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeebd80f0 a2=420 a3=0 items=0 ppid=2642 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.100727] audit: type=1327 audit(1784762378.050:165): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 50.105057] audit: type=1130 audit(1784762378.061:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.109173] audit: type=1131 audit(1784762378.061:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.113541] audit: type=1106 audit(1784762378.065:168): pid=2636 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 50.117999] audit: type=1104 audit(1784762378.065:169): pid=2636 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 50.272087] audit: type=1106 audit(1784762378.232:170): pid=2631 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 50.280931] audit: type=1104 audit(1784762378.232:171): pid=2631 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 50.285877] audit: type=1131 audit(1784762378.245:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-172.31.21.196:22-20.103.240.199:33736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.717792] Initializing XFRM netlink socket [ 59.869949] kauditd_printk_skb: 13 callbacks suppressed [ 59.869955] audit: type=1325 audit(1784762387.831:184): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.874261] audit: type=1300 audit(1784762387.831:184): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc0c44030 a2=0 a3=0 items=0 ppid=2710 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.881130] audit: type=1327 audit(1784762387.831:184): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 59.884075] audit: type=1325 audit(1784762387.844:185): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.887359] audit: type=1300 audit(1784762387.844:185): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc6024f50 a2=0 a3=0 items=0 ppid=2710 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.894041] audit: type=1327 audit(1784762387.844:185): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 59.897236] audit: type=1325 audit(1784762387.856:186): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.900867] audit: type=1300 audit(1784762387.856:186): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3d19ff0 a2=0 a3=0 items=0 ppid=2710 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.907263] audit: type=1327 audit(1784762387.856:186): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 59.910772] audit: type=1325 audit(1784762387.864:187): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:19:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:19:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 67.241789] kauditd_printk_skb: 107 callbacks suppressed [ 67.241794] audit: type=1131 audit(1784762395.203:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.268043] audit: type=1334 audit(1784762395.229:226): prog-id=32 op=UNLOAD [ 74.885748] audit: type=1130 audit(1784762402.846:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.986741] audit: type=1131 audit(1784762402.947:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 81.039942] audit: type=1130 audit(1784762409.000:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 81.047271] audit: type=1131 audit(1784762409.000:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 81.451659] zram_generator::config[3275]: No configuration found. [ 82.421443] audit: type=1334 audit(1784762410.382:231): prog-id=36 op=LOAD [ 82.422908] audit: type=1334 audit(1784762410.382:232): prog-id=20 op=UNLOAD [ 82.424468] audit: type=1334 audit(1784762410.385:233): prog-id=37 op=LOAD [ 82.426027] audit: type=1334 audit(1784762410.387:234): prog-id=38 op=LOAD [ 82.427378] audit: type=1334 audit(1784762410.387:235): prog-id=21 op=UNLOAD [ 82.428839] audit: type=1334 audit(1784762410.387:236): prog-id=22 op=UNLOAD [ 82.430319] audit: type=1334 audit(1784762410.391:237): prog-id=39 op=LOAD [ 82.431849] audit: type=1334 audit(1784762410.393:238): prog-id=40 op=LOAD [ 91.735888] zram_generator::config[3856]: No configuration found. [ 92.515224] kauditd_printk_skb: 203 callbacks suppressed [ 92.515229] audit: type=1334 audit(1784762420.476:334): prog-id=86 op=LOAD [ 92.518782] audit: type=1334 audit(1784762420.479:335): prog-id=76 op=UNLOAD [ 92.520991] audit: type=1334 audit(1784762420.481:336): prog-id=87 op=LOAD [ 92.523130] audit: type=1334 audit(1784762420.481:337): prog-id=36 op=UNLOAD [ 92.525305] audit: type=1334 audit(1784762420.481:338): prog-id=88 op=LOAD [ 92.526893] audit: type=1334 audit(1784762420.481:339): prog-id=89 op=LOAD [ 92.529063] audit: type=1334 audit(1784762420.482:340): prog-id=37 op=UNLOAD [ 92.531032] audit: type=1334 audit(1784762420.482:341): prog-id=38 op=UNLOAD [ 92.533022] audit: type=1334 audit(1784762420.484:342): prog-id=90 op=LOAD [ 92.535156] audit: type=1334 audit(1784762420.484:343): prog-id=56 op=UNLOAD [ 97.864855] kauditd_printk_skb: 49 callbacks suppressed [ 97.864861] audit: type=1334 audit(1784762425.826:393): prog-id=112 op=LOAD [ 97.868634] audit: type=1334 audit(1784762425.829:394): prog-id=113 op=LOAD [ 97.871289] audit: type=1300 audit(1784762425.829:394): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3d92a9eb7f80 a2=98 a3=0 items=0 ppid=3995 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.878577] audit: type=1327 audit(1784762425.829:394): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931303537316432393038333032633238633934646465636337373436 [ 97.888832] audit: type=1334 audit(1784762425.831:395): prog-id=113 op=UNLOAD [ 97.892723] audit: type=1300 audit(1784762425.831:395): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3995 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.901944] audit: type=1327 audit(1784762425.831:395): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931303537316432393038333032633238633934646465636337373436 [ 97.909029] audit: type=1334 audit(1784762425.831:396): prog-id=114 op=LOAD [ 97.913106] audit: type=1300 audit(1784762425.831:396): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3d92a9eb8258 a2=98 a3=0 items=0 ppid=3995 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.923814] audit: type=1327 audit(1784762425.831:396): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931303537316432393038333032633238633934646465636337373436 [ 107.131132] kauditd_printk_skb: 229 callbacks suppressed [ 107.131137] audit: type=1334 audit(1784762435.092:478): prog-id=130 op=LOAD [ 107.135885] audit: type=1334 audit(1784762435.096:479): prog-id=131 op=LOAD [ 107.138797] audit: type=1300 audit(1784762435.096:479): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=53ae09fbff80 a2=98 a3=0 items=0 ppid=3995 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.145023] audit: type=1327 audit(1784762435.096:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656230313064306163653937366237346533313238356431346138 [ 107.150888] audit: type=1334 audit(1784762435.096:480): prog-id=131 op=UNLOAD [ 107.152912] audit: type=1300 audit(1784762435.096:480): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3995 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.160757] audit: type=1327 audit(1784762435.096:480): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656230313064306163653937366237346533313238356431346138 [ 107.170226] audit: type=1334 audit(1784762435.098:481): prog-id=132 op=LOAD [ 107.171936] audit: type=1300 audit(1784762435.098:481): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=53ae09fc0258 a2=98 a3=0 items=0 ppid=3995 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.178391] audit: type=1327 audit(1784762435.098:481): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656230313064306163653937366237346533313238356431346138 [ 112.847805] kauditd_printk_skb: 100 callbacks suppressed [ 112.847811] audit: type=1334 audit(1784762440.809:522): prog-id=153 op=LOAD [ 112.854036] audit: type=1334 audit(1784762440.815:523): prog-id=154 op=LOAD [ 112.856834] audit: type=1300 audit(1784762440.815:523): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=18c05b837f80 a2=98 a3=0 items=0 ppid=3995 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.866020] audit: type=1327 audit(1784762440.815:523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656435376637626635396534646435356263653839633837363730 [ 112.874543] audit: type=1334 audit(1784762440.817:524): prog-id=154 op=UNLOAD [ 112.877143] audit: type=1300 audit(1784762440.817:524): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3995 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.886151] audit: type=1327 audit(1784762440.817:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656435376637626635396534646435356263653839633837363730 [ 112.892395] audit: type=1334 audit(1784762440.817:525): prog-id=155 op=LOAD [ 112.894564] audit: type=1300 audit(1784762440.817:525): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=18c05b838258 a2=98 a3=0 items=0 ppid=3995 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.900737] audit: type=1327 audit(1784762440.817:525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656435376637626635396534646435356263653839633837363730 [ 117.349231] NET: Registered PF_ALG protocol family This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:45 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:45 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 117.879033] kauditd_printk_skb: 5715 callbacks suppressed [ 117.879038] audit: type=1334 audit(1784762445.839:2431): prog-id=1110 op=LOAD [ 117.881968] audit: type=1300 audit(1784762445.839:2431): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffeb215718 a2=74 a3=d items=0 ppid=4684 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.887628] audit: type=1327 audit(1784762445.839:2431): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 117.892606] audit: type=1334 audit(1784762445.843:2432): prog-id=1110 op=UNLOAD [ 117.894160] audit: type=1300 audit(1784762445.843:2432): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff9adcff50 a2=74 a3=d items=0 ppid=4684 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.900023] audit: type=1327 audit(1784762445.843:2432): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 117.904628] audit: type=1334 audit(1784762445.843:2433): prog-id=1111 op=LOAD [ 117.906238] audit: type=1300 audit(1784762445.843:2433): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffeb2156f8 a2=80 a3=0 items=0 ppid=4684 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.912157] audit: type=1327 audit(1784762445.843:2433): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 117.916794] audit: type=1334 audit(1784762445.854:2434): prog-id=1111 op=UNLOAD This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:46 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:46 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 119.163331] eth0: renamed from tmp947c4 [ 119.201249] eth0: renamed from tmpaebe8 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:47 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:47 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:50 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:50 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 127.917758] kauditd_printk_skb: 290 callbacks suppressed [ 127.917764] audit: type=1334 audit(1784762455.878:2531): prog-id=1141 op=LOAD [ 127.923183] audit: type=1300 audit(1784762455.878:2531): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd2028c68 a2=74 a3=11 items=0 ppid=4548 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 127.934013] audit: type=1327 audit(1784762455.878:2531): proctitle=74630066696C746572007265706C61636500646576006C786330343465313135316438656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333231305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 127.940931] audit: type=1334 audit(1784762455.878:2532): prog-id=1141 op=UNLOAD [ 127.943102] audit: type=1300 audit(1784762455.878:2532): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff966b4f50 a2=74 a3=11 items=0 ppid=4548 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 127.950199] audit: type=1327 audit(1784762455.878:2532): proctitle=74630066696C746572007265706C61636500646576006C786330343465313135316438656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333231305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 127.955852] audit: type=1334 audit(1784762455.878:2533): prog-id=1142 op=LOAD [ 127.957655] audit: type=1300 audit(1784762455.878:2533): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd2028c48 a2=80 a3=0 items=0 ppid=4548 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 127.964020] audit: type=1327 audit(1784762455.878:2533): proctitle=74630066696C746572007265706C61636500646576006C786330343465313135316438656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333231305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 127.969410] audit: type=1334 audit(1784762455.878:2534): prog-id=1142 op=UNLOAD [ 166.453469] kauditd_printk_skb: 468 callbacks suppressed [ 166.453475] audit: type=1130 audit(1784762494.414:2693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4-172.31.21.196:22-20.103.240.199:36992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.381741] audit: type=1101 audit(1784762495.341:2694): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.392742] audit: type=1103 audit(1784762495.352:2695): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.402759] audit: type=1006 audit(1784762495.353:2696): pid=5235 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 167.408186] audit: type=1300 audit(1784762495.353:2696): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffef8c9bb0 a2=3 a3=0 items=0 ppid=1 pid=5235 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.418796] audit: type=1327 audit(1784762495.353:2696): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.445148] audit: type=1105 audit(1784762495.406:2697): pid=5235 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.455747] audit: type=1103 audit(1784762495.416:2698): pid=5239 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.062924] audit: type=1106 audit(1784762496.024:2699): pid=5235 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.072769] audit: type=1104 audit(1784762496.024:2700): pid=5235 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 173.228219] kauditd_printk_skb: 1 callbacks suppressed [ 173.228225] audit: type=1130 audit(1784762501.189:2702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.21.196:22-20.103.240.199:43568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 174.109843] audit: type=1101 audit(1784762502.071:2703): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.119136] audit: type=1103 audit(1784762502.078:2704): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.125272] audit: type=1006 audit(1784762502.078:2705): pid=5253 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 174.130475] audit: type=1300 audit(1784762502.078:2705): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe26e8400 a2=3 a3=0 items=0 ppid=1 pid=5253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.136513] audit: type=1327 audit(1784762502.078:2705): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 174.155731] audit: type=1105 audit(1784762502.116:2706): pid=5253 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.163126] audit: type=1103 audit(1784762502.120:2707): pid=5257 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.711094] audit: type=1106 audit(1784762502.672:2708): pid=5253 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.719169] audit: type=1104 audit(1784762502.672:2709): pid=5253 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 179.886353] kauditd_printk_skb: 1 callbacks suppressed [ 179.886359] audit: type=1130 audit(1784762507.847:2711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-172.31.21.196:22-20.103.240.199:43576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.768020] audit: type=1101 audit(1784762508.729:2712): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 180.778000] audit: type=1103 audit(1784762508.736:2713): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 180.788768] audit: type=1006 audit(1784762508.736:2714): pid=5270 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 180.793426] audit: type=1300 audit(1784762508.736:2714): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdc13f700 a2=3 a3=0 items=0 ppid=1 pid=5270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.800933] audit: type=1327 audit(1784762508.736:2714): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 180.828829] audit: type=1105 audit(1784762508.790:2715): pid=5270 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 180.838902] audit: type=1103 audit(1784762508.800:2716): pid=5274 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.392935] audit: type=1106 audit(1784762509.354:2717): pid=5270 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.400963] audit: type=1104 audit(1784762509.354:2718): pid=5270 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 186.568932] kauditd_printk_skb: 1 callbacks suppressed [ 186.568937] audit: type=1130 audit(1784762514.529:2720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-172.31.21.196:22-20.103.240.199:46810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.442982] audit: type=1101 audit(1784762515.404:2721): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.450165] audit: type=1103 audit(1784762515.410:2722): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.458425] audit: type=1006 audit(1784762515.410:2723): pid=5288 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 187.464297] audit: type=1300 audit(1784762515.410:2723): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff25d0c30 a2=3 a3=0 items=0 ppid=1 pid=5288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.471149] audit: type=1327 audit(1784762515.410:2723): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.489933] audit: type=1105 audit(1784762515.450:2724): pid=5288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.498050] audit: type=1103 audit(1784762515.459:2725): pid=5292 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.051484] audit: type=1106 audit(1784762516.011:2726): pid=5288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.063731] audit: type=1104 audit(1784762516.012:2727): pid=5288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.645027] kauditd_printk_skb: 23 callbacks suppressed [ 196.645033] audit: type=1130 audit(1784762524.606:2747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-172.31.21.196:22-20.103.240.199:56328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.564681] audit: type=1101 audit(1784762525.526:2748): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 197.572273] audit: type=1103 audit(1784762525.533:2749): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 197.577547] audit: type=1006 audit(1784762525.533:2750): pid=5337 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 197.581553] audit: type=1300 audit(1784762525.533:2750): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcb494ce0 a2=3 a3=0 items=0 ppid=1 pid=5337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.587949] audit: type=1327 audit(1784762525.533:2750): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.612105] audit: type=1105 audit(1784762525.573:2751): pid=5337 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 197.621841] audit: type=1103 audit(1784762525.582:2752): pid=5341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.214964] audit: type=1106 audit(1784762526.175:2753): pid=5337 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.223483] audit: type=1104 audit(1784762526.176:2754): pid=5337 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 203.375752] kauditd_printk_skb: 1 callbacks suppressed [ 203.375758] audit: type=1130 audit(1784762531.337:2756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-7-172.31.21.196:22-20.103.240.199:59142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.251618] audit: type=1101 audit(1784762532.213:2757): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.260004] audit: type=1103 audit(1784762532.222:2758): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.266304] audit: type=1006 audit(1784762532.222:2759): pid=5353 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 204.270057] audit: type=1300 audit(1784762532.222:2759): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffee8cba30 a2=3 a3=0 items=0 ppid=1 pid=5353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.277594] audit: type=1327 audit(1784762532.222:2759): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.298736] audit: type=1105 audit(1784762532.260:2760): pid=5353 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.309592] audit: type=1103 audit(1784762532.271:2761): pid=5357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.863496] audit: type=1106 audit(1784762532.825:2762): pid=5353 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.871543] audit: type=1104 audit(1784762532.826:2763): pid=5353 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.994265] kauditd_printk_skb: 20 callbacks suppressed [ 208.994271] audit: type=1325 audit(1784762536.954:2780): table=filter:155 family=2 entries=20 op=nft_register_rule pid=5396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 208.999754] audit: type=1300 audit(1784762536.954:2780): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffcc26fa60 a2=0 a3=1 items=0 ppid=4117 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.006633] audit: type=1327 audit(1784762536.954:2780): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 209.021467] audit: type=1325 audit(1784762536.983:2781): table=nat:156 family=2 entries=18 op=nft_register_rule pid=5396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 209.024777] audit: type=1300 audit(1784762536.983:2781): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffcc26fa60 a2=0 a3=1 items=0 ppid=4117 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.031722] audit: type=1327 audit(1784762536.983:2781): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 209.151777] audit: type=1106 audit(1784762537.113:2782): pid=5383 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 209.162880] audit: type=1104 audit(1784762537.113:2783): pid=5383 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 209.170071] audit: type=1131 audit(1784762537.123:2784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4106-172.31.21.196:22-20.103.240.199:59152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.345082] audit: type=1130 audit(1784762537.307:2785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-172.31.21.196:22-20.103.240.199:59166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.601180] kauditd_printk_skb: 27 callbacks suppressed [ 216.601186] audit: type=1325 audit(1784762544.563:2805): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5434 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 216.605734] audit: type=1300 audit(1784762544.563:2805): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff39b6b10 a2=0 a3=1 items=0 ppid=4117 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.611887] audit: type=1327 audit(1784762544.563:2805): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 216.614819] audit: type=1325 audit(1784762544.573:2806): table=nat:160 family=2 entries=102 op=nft_register_chain pid=5434 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 216.617917] audit: type=1300 audit(1784762544.573:2806): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=fffff39b6b10 a2=0 a3=1 items=0 ppid=4117 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.624435] audit: type=1327 audit(1784762544.573:2806): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 217.988973] audit: type=1130 audit(1784762545.951:2807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-172.31.21.196:22-20.103.240.199:47420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 218.862568] audit: type=1101 audit(1784762546.824:2808): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 218.871765] audit: type=1103 audit(1784762546.833:2809): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 218.877470] audit: type=1006 audit(1784762546.833:2810): pid=5436 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 224.648795] kauditd_printk_skb: 7 callbacks suppressed [ 224.648801] audit: type=1130 audit(1784762552.611:2816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4110-172.31.21.196:22-20.103.240.199:41934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 225.524193] audit: type=1101 audit(1784762553.486:2817): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.531647] audit: type=1103 audit(1784762553.493:2818): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.537160] audit: type=1006 audit(1784762553.493:2819): pid=5456 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 225.542582] audit: type=1300 audit(1784762553.493:2819): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffccda9270 a2=3 a3=0 items=0 ppid=1 pid=5456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.549842] audit: type=1327 audit(1784762553.493:2819): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 225.566660] audit: type=1105 audit(1784762553.528:2820): pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.574757] audit: type=1103 audit(1784762553.536:2821): pid=5460 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.129600] audit: type=1106 audit(1784762554.090:2822): pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.138843] audit: type=1104 audit(1784762554.091:2823): pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 230.815102] kauditd_printk_skb: 9 callbacks suppressed [ 230.815107] audit: type=1334 audit(1784762558.777:2831): prog-id=140 op=UNLOAD [ 230.820458] audit: type=1334 audit(1784762558.777:2832): prog-id=144 op=UNLOAD [ 230.869137] audit: type=1334 audit(1784762558.831:2833): prog-id=1202 op=UNLOAD [ 230.872646] audit: type=1334 audit(1784762558.831:2834): prog-id=1228 op=UNLOAD [ 230.997151] audit: type=1334 audit(1784762558.959:2835): prog-id=122 op=UNLOAD [ 231.000019] audit: type=1334 audit(1784762558.959:2836): prog-id=126 op=UNLOAD [ 231.003757] audit: type=1334 audit(1784762558.965:2837): prog-id=112 op=UNLOAD [ 231.006208] audit: type=1334 audit(1784762558.965:2838): prog-id=116 op=UNLOAD This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:39 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:39 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 232.786327] audit: type=1106 audit(1784762560.748:2839): pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 232.793955] audit: type=1104 audit(1784762560.748:2840): pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.129877] kauditd_printk_skb: 9 callbacks suppressed [ 236.129884] audit: type=1106 audit(1784762564.089:2848): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.146281] audit: type=1104 audit(1784762564.090:2849): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.158433] audit: type=1131 audit(1784762564.106:2850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4112-172.31.21.196:22-20.103.240.199:34732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 236.339992] audit: type=1130 audit(1784762564.302:2851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4113-172.31.21.196:22-20.103.240.199:34734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 236.831594] audit: type=1334 audit(1784762564.793:2852): prog-id=1239 op=LOAD [ 236.835050] audit: type=1334 audit(1784762564.797:2853): prog-id=1240 op=LOAD [ 236.837092] audit: type=1300 audit(1784762564.797:2853): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=44878ca2ff80 a2=98 a3=0 items=0 ppid=5651 pid=5663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 236.844530] audit: type=1327 audit(1784762564.797:2853): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635326161363735313730323965653737326137653531323062393232 [ 236.851299] audit: type=1334 audit(1784762564.797:2854): prog-id=1240 op=UNLOAD [ 236.854170] audit: type=1300 audit(1784762564.797:2854): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5651 pid=5663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.362338] kauditd_printk_skb: 122 callbacks suppressed [ 241.362344] audit: type=1334 audit(1784762569.324:2910): prog-id=1262 op=LOAD [ 241.369196] audit: type=1334 audit(1784762569.330:2911): prog-id=1263 op=LOAD [ 241.371210] audit: type=1300 audit(1784762569.330:2911): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=542a9af71f80 a2=98 a3=0 items=0 ppid=5651 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.381503] audit: type=1327 audit(1784762569.330:2911): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613566346262373036333264613264613764363466396661343661 [ 241.388598] audit: type=1334 audit(1784762569.330:2912): prog-id=1263 op=UNLOAD [ 241.390771] audit: type=1300 audit(1784762569.330:2912): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5651 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.397986] audit: type=1327 audit(1784762569.330:2912): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613566346262373036333264613264613764363466396661343661 [ 241.405303] audit: type=1334 audit(1784762569.330:2913): prog-id=1264 op=LOAD [ 241.408066] audit: type=1300 audit(1784762569.330:2913): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=542a9af72258 a2=98 a3=0 items=0 ppid=5651 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.416206] audit: type=1327 audit(1784762569.330:2913): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613566346262373036333264613264613764363466396661343661 [ 242.406635] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 246.363907] kauditd_printk_skb: 5984 callbacks suppressed [ 246.363912] audit: type=1325 audit(1784762574.326:4910): table=nat:227 family=2 entries=1 op=nft_unregister_rule pid=6344 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 246.368193] audit: type=1300 audit(1784762574.326:4910): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=ffffff05b5a0 a2=0 a3=ffffa1de15c0 items=0 ppid=5893 pid=6344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.375926] audit: type=1327 audit(1784762574.326:4910): proctitle=69707461626C6573002D770035002D74006E6174002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F6E6174002D6A004F4C445F43494C49554D5F5052455F6E6174 [ 246.381234] audit: type=1325 audit(1784762574.338:4911): table=nat:228 family=2 entries=1 op=nft_unregister_rule pid=6345 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 246.384206] audit: type=1300 audit(1784762574.338:4911): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=fffffe5654a0 a2=0 a3=ffffacfe15c0 items=0 ppid=5893 pid=6345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.390285] audit: type=1327 audit(1784762574.338:4911): proctitle=69707461626C6573002D770035002D74006E6174002D4400504F5354524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F504F53545F6E6174002D6A004F4C445F43494C49554D5F504F53545F6E6174 [ 246.399444] audit: type=1325 audit(1784762574.361:4912): table=nat:229 family=2 entries=1 op=nft_unregister_rule pid=6346 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 246.402378] audit: type=1300 audit(1784762574.361:4912): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=ffffc4040200 a2=0 a3=ffff941035c0 items=0 ppid=5893 pid=6346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.408880] audit: type=1327 audit(1784762574.361:4912): proctitle=69707461626C6573002D770035002D74006E6174002D44004F5554505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F4F55545055545F6E6174002D6A004F4C445F43494C49554D5F4F55545055545F6E6174 [ 246.420732] audit: type=1325 audit(1784762574.382:4913): table=nat:230 family=2 entries=1 op=nft_unregister_rule pid=6347 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:57 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:57 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:19:30 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 50.088969] audit: type=1305 audit(1784762378.050:165): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 50.092769] audit: type=1300 audit(1784762378.050:165): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeebd80f0 a2=420 a3=0 items=0 ppid=2642 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.100727] audit: type=1327 audit(1784762378.050:165): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 50.105057] audit: type=1130 audit(1784762378.061:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.109173] audit: type=1131 audit(1784762378.061:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.113541] audit: type=1106 audit(1784762378.065:168): pid=2636 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 50.117999] audit: type=1104 audit(1784762378.065:169): pid=2636 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 50.272087] audit: type=1106 audit(1784762378.232:170): pid=2631 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 50.280931] audit: type=1104 audit(1784762378.232:171): pid=2631 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 50.285877] audit: type=1131 audit(1784762378.245:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-172.31.21.196:22-20.103.240.199:33736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.717792] Initializing XFRM netlink socket [ 59.869949] kauditd_printk_skb: 13 callbacks suppressed [ 59.869955] audit: type=1325 audit(1784762387.831:184): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.874261] audit: type=1300 audit(1784762387.831:184): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc0c44030 a2=0 a3=0 items=0 ppid=2710 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.881130] audit: type=1327 audit(1784762387.831:184): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 59.884075] audit: type=1325 audit(1784762387.844:185): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.887359] audit: type=1300 audit(1784762387.844:185): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc6024f50 a2=0 a3=0 items=0 ppid=2710 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.894041] audit: type=1327 audit(1784762387.844:185): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 59.897236] audit: type=1325 audit(1784762387.856:186): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.900867] audit: type=1300 audit(1784762387.856:186): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3d19ff0 a2=0 a3=0 items=0 ppid=2710 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 59.907263] audit: type=1327 audit(1784762387.856:186): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 59.910772] audit: type=1325 audit(1784762387.864:187): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:19:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:19:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 67.241789] kauditd_printk_skb: 107 callbacks suppressed [ 67.241794] audit: type=1131 audit(1784762395.203:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.268043] audit: type=1334 audit(1784762395.229:226): prog-id=32 op=UNLOAD [ 74.885748] audit: type=1130 audit(1784762402.846:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.986741] audit: type=1131 audit(1784762402.947:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 81.039942] audit: type=1130 audit(1784762409.000:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 81.047271] audit: type=1131 audit(1784762409.000:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 81.451659] zram_generator::config[3275]: No configuration found. [ 82.421443] audit: type=1334 audit(1784762410.382:231): prog-id=36 op=LOAD [ 82.422908] audit: type=1334 audit(1784762410.382:232): prog-id=20 op=UNLOAD [ 82.424468] audit: type=1334 audit(1784762410.385:233): prog-id=37 op=LOAD [ 82.426027] audit: type=1334 audit(1784762410.387:234): prog-id=38 op=LOAD [ 82.427378] audit: type=1334 audit(1784762410.387:235): prog-id=21 op=UNLOAD [ 82.428839] audit: type=1334 audit(1784762410.387:236): prog-id=22 op=UNLOAD [ 82.430319] audit: type=1334 audit(1784762410.391:237): prog-id=39 op=LOAD [ 82.431849] audit: type=1334 audit(1784762410.393:238): prog-id=40 op=LOAD [ 91.735888] zram_generator::config[3856]: No configuration found. [ 92.515224] kauditd_printk_skb: 203 callbacks suppressed [ 92.515229] audit: type=1334 audit(1784762420.476:334): prog-id=86 op=LOAD [ 92.518782] audit: type=1334 audit(1784762420.479:335): prog-id=76 op=UNLOAD [ 92.520991] audit: type=1334 audit(1784762420.481:336): prog-id=87 op=LOAD [ 92.523130] audit: type=1334 audit(1784762420.481:337): prog-id=36 op=UNLOAD [ 92.525305] audit: type=1334 audit(1784762420.481:338): prog-id=88 op=LOAD [ 92.526893] audit: type=1334 audit(1784762420.481:339): prog-id=89 op=LOAD [ 92.529063] audit: type=1334 audit(1784762420.482:340): prog-id=37 op=UNLOAD [ 92.531032] audit: type=1334 audit(1784762420.482:341): prog-id=38 op=UNLOAD [ 92.533022] audit: type=1334 audit(1784762420.484:342): prog-id=90 op=LOAD [ 92.535156] audit: type=1334 audit(1784762420.484:343): prog-id=56 op=UNLOAD [ 97.864855] kauditd_printk_skb: 49 callbacks suppressed [ 97.864861] audit: type=1334 audit(1784762425.826:393): prog-id=112 op=LOAD [ 97.868634] audit: type=1334 audit(1784762425.829:394): prog-id=113 op=LOAD [ 97.871289] audit: type=1300 audit(1784762425.829:394): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3d92a9eb7f80 a2=98 a3=0 items=0 ppid=3995 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.878577] audit: type=1327 audit(1784762425.829:394): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931303537316432393038333032633238633934646465636337373436 [ 97.888832] audit: type=1334 audit(1784762425.831:395): prog-id=113 op=UNLOAD [ 97.892723] audit: type=1300 audit(1784762425.831:395): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3995 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.901944] audit: type=1327 audit(1784762425.831:395): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931303537316432393038333032633238633934646465636337373436 [ 97.909029] audit: type=1334 audit(1784762425.831:396): prog-id=114 op=LOAD [ 97.913106] audit: type=1300 audit(1784762425.831:396): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3d92a9eb8258 a2=98 a3=0 items=0 ppid=3995 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.923814] audit: type=1327 audit(1784762425.831:396): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931303537316432393038333032633238633934646465636337373436 [ 107.131132] kauditd_printk_skb: 229 callbacks suppressed [ 107.131137] audit: type=1334 audit(1784762435.092:478): prog-id=130 op=LOAD [ 107.135885] audit: type=1334 audit(1784762435.096:479): prog-id=131 op=LOAD [ 107.138797] audit: type=1300 audit(1784762435.096:479): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=53ae09fbff80 a2=98 a3=0 items=0 ppid=3995 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.145023] audit: type=1327 audit(1784762435.096:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656230313064306163653937366237346533313238356431346138 [ 107.150888] audit: type=1334 audit(1784762435.096:480): prog-id=131 op=UNLOAD [ 107.152912] audit: type=1300 audit(1784762435.096:480): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3995 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.160757] audit: type=1327 audit(1784762435.096:480): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656230313064306163653937366237346533313238356431346138 [ 107.170226] audit: type=1334 audit(1784762435.098:481): prog-id=132 op=LOAD [ 107.171936] audit: type=1300 audit(1784762435.098:481): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=53ae09fc0258 a2=98 a3=0 items=0 ppid=3995 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.178391] audit: type=1327 audit(1784762435.098:481): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656230313064306163653937366237346533313238356431346138 [ 112.847805] kauditd_printk_skb: 100 callbacks suppressed [ 112.847811] audit: type=1334 audit(1784762440.809:522): prog-id=153 op=LOAD [ 112.854036] audit: type=1334 audit(1784762440.815:523): prog-id=154 op=LOAD [ 112.856834] audit: type=1300 audit(1784762440.815:523): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=18c05b837f80 a2=98 a3=0 items=0 ppid=3995 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.866020] audit: type=1327 audit(1784762440.815:523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656435376637626635396534646435356263653839633837363730 [ 112.874543] audit: type=1334 audit(1784762440.817:524): prog-id=154 op=UNLOAD [ 112.877143] audit: type=1300 audit(1784762440.817:524): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3995 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.886151] audit: type=1327 audit(1784762440.817:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656435376637626635396534646435356263653839633837363730 [ 112.892395] audit: type=1334 audit(1784762440.817:525): prog-id=155 op=LOAD [ 112.894564] audit: type=1300 audit(1784762440.817:525): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=18c05b838258 a2=98 a3=0 items=0 ppid=3995 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.900737] audit: type=1327 audit(1784762440.817:525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837656435376637626635396534646435356263653839633837363730 [ 117.349231] NET: Registered PF_ALG protocol family This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:45 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:45 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 117.879033] kauditd_printk_skb: 5715 callbacks suppressed [ 117.879038] audit: type=1334 audit(1784762445.839:2431): prog-id=1110 op=LOAD [ 117.881968] audit: type=1300 audit(1784762445.839:2431): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffeb215718 a2=74 a3=d items=0 ppid=4684 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.887628] audit: type=1327 audit(1784762445.839:2431): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 117.892606] audit: type=1334 audit(1784762445.843:2432): prog-id=1110 op=UNLOAD [ 117.894160] audit: type=1300 audit(1784762445.843:2432): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff9adcff50 a2=74 a3=d items=0 ppid=4684 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.900023] audit: type=1327 audit(1784762445.843:2432): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 117.904628] audit: type=1334 audit(1784762445.843:2433): prog-id=1111 op=LOAD [ 117.906238] audit: type=1300 audit(1784762445.843:2433): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffeb2156f8 a2=80 a3=0 items=0 ppid=4684 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.912157] audit: type=1327 audit(1784762445.843:2433): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 117.916794] audit: type=1334 audit(1784762445.854:2434): prog-id=1111 op=UNLOAD This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:46 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:46 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 119.163331] eth0: renamed from tmp947c4 [ 119.201249] eth0: renamed from tmpaebe8 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:47 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:47 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:49 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:50 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:20:50 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 127.917758] kauditd_printk_skb: 290 callbacks suppressed [ 127.917764] audit: type=1334 audit(1784762455.878:2531): prog-id=1141 op=LOAD [ 127.923183] audit: type=1300 audit(1784762455.878:2531): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd2028c68 a2=74 a3=11 items=0 ppid=4548 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 127.934013] audit: type=1327 audit(1784762455.878:2531): proctitle=74630066696C746572007265706C61636500646576006C786330343465313135316438656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333231305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 127.940931] audit: type=1334 audit(1784762455.878:2532): prog-id=1141 op=UNLOAD [ 127.943102] audit: type=1300 audit(1784762455.878:2532): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff966b4f50 a2=74 a3=11 items=0 ppid=4548 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 127.950199] audit: type=1327 audit(1784762455.878:2532): proctitle=74630066696C746572007265706C61636500646576006C786330343465313135316438656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333231305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 127.955852] audit: type=1334 audit(1784762455.878:2533): prog-id=1142 op=LOAD [ 127.957655] audit: type=1300 audit(1784762455.878:2533): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd2028c48 a2=80 a3=0 items=0 ppid=4548 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 127.964020] audit: type=1327 audit(1784762455.878:2533): proctitle=74630066696C746572007265706C61636500646576006C786330343465313135316438656300696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333231305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 127.969410] audit: type=1334 audit(1784762455.878:2534): prog-id=1142 op=UNLOAD [ 166.453469] kauditd_printk_skb: 468 callbacks suppressed [ 166.453475] audit: type=1130 audit(1784762494.414:2693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4-172.31.21.196:22-20.103.240.199:36992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.381741] audit: type=1101 audit(1784762495.341:2694): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.392742] audit: type=1103 audit(1784762495.352:2695): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.402759] audit: type=1006 audit(1784762495.353:2696): pid=5235 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 167.408186] audit: type=1300 audit(1784762495.353:2696): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffef8c9bb0 a2=3 a3=0 items=0 ppid=1 pid=5235 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.418796] audit: type=1327 audit(1784762495.353:2696): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.445148] audit: type=1105 audit(1784762495.406:2697): pid=5235 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.455747] audit: type=1103 audit(1784762495.416:2698): pid=5239 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.062924] audit: type=1106 audit(1784762496.024:2699): pid=5235 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.072769] audit: type=1104 audit(1784762496.024:2700): pid=5235 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 173.228219] kauditd_printk_skb: 1 callbacks suppressed [ 173.228225] audit: type=1130 audit(1784762501.189:2702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.21.196:22-20.103.240.199:43568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 174.109843] audit: type=1101 audit(1784762502.071:2703): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.119136] audit: type=1103 audit(1784762502.078:2704): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.125272] audit: type=1006 audit(1784762502.078:2705): pid=5253 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 174.130475] audit: type=1300 audit(1784762502.078:2705): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe26e8400 a2=3 a3=0 items=0 ppid=1 pid=5253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.136513] audit: type=1327 audit(1784762502.078:2705): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 174.155731] audit: type=1105 audit(1784762502.116:2706): pid=5253 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.163126] audit: type=1103 audit(1784762502.120:2707): pid=5257 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.711094] audit: type=1106 audit(1784762502.672:2708): pid=5253 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.719169] audit: type=1104 audit(1784762502.672:2709): pid=5253 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 179.886353] kauditd_printk_skb: 1 callbacks suppressed [ 179.886359] audit: type=1130 audit(1784762507.847:2711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-172.31.21.196:22-20.103.240.199:43576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.768020] audit: type=1101 audit(1784762508.729:2712): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 180.778000] audit: type=1103 audit(1784762508.736:2713): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 180.788768] audit: type=1006 audit(1784762508.736:2714): pid=5270 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 180.793426] audit: type=1300 audit(1784762508.736:2714): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdc13f700 a2=3 a3=0 items=0 ppid=1 pid=5270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.800933] audit: type=1327 audit(1784762508.736:2714): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 180.828829] audit: type=1105 audit(1784762508.790:2715): pid=5270 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 180.838902] audit: type=1103 audit(1784762508.800:2716): pid=5274 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.392935] audit: type=1106 audit(1784762509.354:2717): pid=5270 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.400963] audit: type=1104 audit(1784762509.354:2718): pid=5270 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 186.568932] kauditd_printk_skb: 1 callbacks suppressed [ 186.568937] audit: type=1130 audit(1784762514.529:2720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-172.31.21.196:22-20.103.240.199:46810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.442982] audit: type=1101 audit(1784762515.404:2721): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.450165] audit: type=1103 audit(1784762515.410:2722): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.458425] audit: type=1006 audit(1784762515.410:2723): pid=5288 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 187.464297] audit: type=1300 audit(1784762515.410:2723): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff25d0c30 a2=3 a3=0 items=0 ppid=1 pid=5288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.471149] audit: type=1327 audit(1784762515.410:2723): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.489933] audit: type=1105 audit(1784762515.450:2724): pid=5288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.498050] audit: type=1103 audit(1784762515.459:2725): pid=5292 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.051484] audit: type=1106 audit(1784762516.011:2726): pid=5288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.063731] audit: type=1104 audit(1784762516.012:2727): pid=5288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.645027] kauditd_printk_skb: 23 callbacks suppressed [ 196.645033] audit: type=1130 audit(1784762524.606:2747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-172.31.21.196:22-20.103.240.199:56328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.564681] audit: type=1101 audit(1784762525.526:2748): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 197.572273] audit: type=1103 audit(1784762525.533:2749): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 197.577547] audit: type=1006 audit(1784762525.533:2750): pid=5337 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 197.581553] audit: type=1300 audit(1784762525.533:2750): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcb494ce0 a2=3 a3=0 items=0 ppid=1 pid=5337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.587949] audit: type=1327 audit(1784762525.533:2750): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.612105] audit: type=1105 audit(1784762525.573:2751): pid=5337 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 197.621841] audit: type=1103 audit(1784762525.582:2752): pid=5341 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.214964] audit: type=1106 audit(1784762526.175:2753): pid=5337 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.223483] audit: type=1104 audit(1784762526.176:2754): pid=5337 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 203.375752] kauditd_printk_skb: 1 callbacks suppressed [ 203.375758] audit: type=1130 audit(1784762531.337:2756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-7-172.31.21.196:22-20.103.240.199:59142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.251618] audit: type=1101 audit(1784762532.213:2757): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.260004] audit: type=1103 audit(1784762532.222:2758): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.266304] audit: type=1006 audit(1784762532.222:2759): pid=5353 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 204.270057] audit: type=1300 audit(1784762532.222:2759): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffee8cba30 a2=3 a3=0 items=0 ppid=1 pid=5353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.277594] audit: type=1327 audit(1784762532.222:2759): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.298736] audit: type=1105 audit(1784762532.260:2760): pid=5353 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.309592] audit: type=1103 audit(1784762532.271:2761): pid=5357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.863496] audit: type=1106 audit(1784762532.825:2762): pid=5353 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.871543] audit: type=1104 audit(1784762532.826:2763): pid=5353 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.994265] kauditd_printk_skb: 20 callbacks suppressed [ 208.994271] audit: type=1325 audit(1784762536.954:2780): table=filter:155 family=2 entries=20 op=nft_register_rule pid=5396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 208.999754] audit: type=1300 audit(1784762536.954:2780): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffcc26fa60 a2=0 a3=1 items=0 ppid=4117 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.006633] audit: type=1327 audit(1784762536.954:2780): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 209.021467] audit: type=1325 audit(1784762536.983:2781): table=nat:156 family=2 entries=18 op=nft_register_rule pid=5396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 209.024777] audit: type=1300 audit(1784762536.983:2781): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffcc26fa60 a2=0 a3=1 items=0 ppid=4117 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.031722] audit: type=1327 audit(1784762536.983:2781): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 209.151777] audit: type=1106 audit(1784762537.113:2782): pid=5383 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 209.162880] audit: type=1104 audit(1784762537.113:2783): pid=5383 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 209.170071] audit: type=1131 audit(1784762537.123:2784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4106-172.31.21.196:22-20.103.240.199:59152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.345082] audit: type=1130 audit(1784762537.307:2785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-172.31.21.196:22-20.103.240.199:59166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.601180] kauditd_printk_skb: 27 callbacks suppressed [ 216.601186] audit: type=1325 audit(1784762544.563:2805): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5434 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 216.605734] audit: type=1300 audit(1784762544.563:2805): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff39b6b10 a2=0 a3=1 items=0 ppid=4117 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.611887] audit: type=1327 audit(1784762544.563:2805): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 216.614819] audit: type=1325 audit(1784762544.573:2806): table=nat:160 family=2 entries=102 op=nft_register_chain pid=5434 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 216.617917] audit: type=1300 audit(1784762544.573:2806): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=fffff39b6b10 a2=0 a3=1 items=0 ppid=4117 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.624435] audit: type=1327 audit(1784762544.573:2806): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 217.988973] audit: type=1130 audit(1784762545.951:2807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-172.31.21.196:22-20.103.240.199:47420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 218.862568] audit: type=1101 audit(1784762546.824:2808): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 218.871765] audit: type=1103 audit(1784762546.833:2809): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 218.877470] audit: type=1006 audit(1784762546.833:2810): pid=5436 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 224.648795] kauditd_printk_skb: 7 callbacks suppressed [ 224.648801] audit: type=1130 audit(1784762552.611:2816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4110-172.31.21.196:22-20.103.240.199:41934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 225.524193] audit: type=1101 audit(1784762553.486:2817): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.531647] audit: type=1103 audit(1784762553.493:2818): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.537160] audit: type=1006 audit(1784762553.493:2819): pid=5456 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 225.542582] audit: type=1300 audit(1784762553.493:2819): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffccda9270 a2=3 a3=0 items=0 ppid=1 pid=5456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.549842] audit: type=1327 audit(1784762553.493:2819): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 225.566660] audit: type=1105 audit(1784762553.528:2820): pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.574757] audit: type=1103 audit(1784762553.536:2821): pid=5460 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.129600] audit: type=1106 audit(1784762554.090:2822): pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.138843] audit: type=1104 audit(1784762554.091:2823): pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 230.815102] kauditd_printk_skb: 9 callbacks suppressed [ 230.815107] audit: type=1334 audit(1784762558.777:2831): prog-id=140 op=UNLOAD [ 230.820458] audit: type=1334 audit(1784762558.777:2832): prog-id=144 op=UNLOAD [ 230.869137] audit: type=1334 audit(1784762558.831:2833): prog-id=1202 op=UNLOAD [ 230.872646] audit: type=1334 audit(1784762558.831:2834): prog-id=1228 op=UNLOAD [ 230.997151] audit: type=1334 audit(1784762558.959:2835): prog-id=122 op=UNLOAD [ 231.000019] audit: type=1334 audit(1784762558.959:2836): prog-id=126 op=UNLOAD [ 231.003757] audit: type=1334 audit(1784762558.965:2837): prog-id=112 op=UNLOAD [ 231.006208] audit: type=1334 audit(1784762558.965:2838): prog-id=116 op=UNLOAD This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:39 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:39 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 232.786327] audit: type=1106 audit(1784762560.748:2839): pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 232.793955] audit: type=1104 audit(1784762560.748:2840): pid=5472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.129877] kauditd_printk_skb: 9 callbacks suppressed [ 236.129884] audit: type=1106 audit(1784762564.089:2848): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.146281] audit: type=1104 audit(1784762564.090:2849): pid=5623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.158433] audit: type=1131 audit(1784762564.106:2850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4112-172.31.21.196:22-20.103.240.199:34732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 236.339992] audit: type=1130 audit(1784762564.302:2851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4113-172.31.21.196:22-20.103.240.199:34734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 236.831594] audit: type=1334 audit(1784762564.793:2852): prog-id=1239 op=LOAD [ 236.835050] audit: type=1334 audit(1784762564.797:2853): prog-id=1240 op=LOAD [ 236.837092] audit: type=1300 audit(1784762564.797:2853): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=44878ca2ff80 a2=98 a3=0 items=0 ppid=5651 pid=5663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 236.844530] audit: type=1327 audit(1784762564.797:2853): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635326161363735313730323965653737326137653531323062393232 [ 236.851299] audit: type=1334 audit(1784762564.797:2854): prog-id=1240 op=UNLOAD [ 236.854170] audit: type=1300 audit(1784762564.797:2854): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5651 pid=5663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.362338] kauditd_printk_skb: 122 callbacks suppressed [ 241.362344] audit: type=1334 audit(1784762569.324:2910): prog-id=1262 op=LOAD [ 241.369196] audit: type=1334 audit(1784762569.330:2911): prog-id=1263 op=LOAD [ 241.371210] audit: type=1300 audit(1784762569.330:2911): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=542a9af71f80 a2=98 a3=0 items=0 ppid=5651 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.381503] audit: type=1327 audit(1784762569.330:2911): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613566346262373036333264613264613764363466396661343661 [ 241.388598] audit: type=1334 audit(1784762569.330:2912): prog-id=1263 op=UNLOAD [ 241.390771] audit: type=1300 audit(1784762569.330:2912): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5651 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.397986] audit: type=1327 audit(1784762569.330:2912): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613566346262373036333264613264613764363466396661343661 [ 241.405303] audit: type=1334 audit(1784762569.330:2913): prog-id=1264 op=LOAD [ 241.408066] audit: type=1300 audit(1784762569.330:2913): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=542a9af72258 a2=98 a3=0 items=0 ppid=5651 pid=5879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.416206] audit: type=1327 audit(1784762569.330:2913): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464613566346262373036333264613264613764363466396661343661 [ 242.406635] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 246.363907] kauditd_printk_skb: 5984 callbacks suppressed [ 246.363912] audit: type=1325 audit(1784762574.326:4910): table=nat:227 family=2 entries=1 op=nft_unregister_rule pid=6344 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 246.368193] audit: type=1300 audit(1784762574.326:4910): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=ffffff05b5a0 a2=0 a3=ffffa1de15c0 items=0 ppid=5893 pid=6344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.375926] audit: type=1327 audit(1784762574.326:4910): proctitle=69707461626C6573002D770035002D74006E6174002D4400505245524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F5052455F6E6174002D6A004F4C445F43494C49554D5F5052455F6E6174 [ 246.381234] audit: type=1325 audit(1784762574.338:4911): table=nat:228 family=2 entries=1 op=nft_unregister_rule pid=6345 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 246.384206] audit: type=1300 audit(1784762574.338:4911): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=fffffe5654a0 a2=0 a3=ffffacfe15c0 items=0 ppid=5893 pid=6345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.390285] audit: type=1327 audit(1784762574.338:4911): proctitle=69707461626C6573002D770035002D74006E6174002D4400504F5354524F5554494E47002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F504F53545F6E6174002D6A004F4C445F43494C49554D5F504F53545F6E6174 [ 246.399444] audit: type=1325 audit(1784762574.361:4912): table=nat:229 family=2 entries=1 op=nft_unregister_rule pid=6346 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 246.402378] audit: type=1300 audit(1784762574.361:4912): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=ffffc4040200 a2=0 a3=ffff941035c0 items=0 ppid=5893 pid=6346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 246.408880] audit: type=1327 audit(1784762574.361:4912): proctitle=69707461626C6573002D770035002D74006E6174002D44004F5554505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F4F55545055545F6E6174002D6A004F4C445F43494C49554D5F4F55545055545F6E6174 [ 246.420732] audit: type=1325 audit(1784762574.382:4913): table=nat:230 family=2 entries=1 op=nft_unregister_rule pid=6347 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:57 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 This is ip-172-31-21-196 (Linux aarch64 6.12.96-flatcar) 23:22:57 SSH host key: SHA256:w2r5XgfeniRLQEejGHCPmwz0Zb5SLQEGjF9EhMZeloE (ECDSA) SSH host key: SHA256:cdKnl/BNA6mwhSk02Jka9oA8KIxWZc9RE883quws9EE (ED25519) SSH host key: SHA256:ZgAuDqJYi8w4wfqrnWBaodZgJmaHib16D3wWwC99dQw (RSA) eth0: 172.31.21.196 fe80::433:40ff:fe24:4c47 ip-172-31-21-196 login: [ 253.152016] kauditd_printk_skb: 126 callbacks suppressed [ 253.152022] audit: type=1106 audit(1784762581.114:4960): pid=5742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 253.169970] audit: type=1104 audit(1784762581.123:4961): pid=5742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 253.182258] audit: type=1131 audit(1784762581.130:4962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4114-172.31.21.196:22-20.103.240.199:34748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 255.312526] audit: type=1334 audit(1784762583.274:4963): prog-id=2226 op=LOAD [ 255.315029] audit: type=1300 audit(1784762583.274:4963): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffeb289858 a2=74 a3=11 items=0 ppid=5893 pid=6534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 255.323401] audit: type=1327 audit(1784762583.274:4963): proctitle=74630066696C746572007265706C61636500646576006C786362323233303031636662663200696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313235375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 255.329628] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.330982] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 255.332544] audit: type=1334 audit(1784762583.276:4964): prog-id=2226 op=UNLOAD [ 255.332835] audit: backlog limit exceeded [ 281.899997] kauditd_printk_skb: 561 callbacks suppressed [ 281.900003] audit: type=1334 audit(1784762609.862:5156): prog-id=81 op=UNLOAD [ 281.902805] audit: type=1334 audit(1784762609.862:5157): prog-id=86 op=UNLOAD [ 282.475555] audit: type=1334 audit(1784762610.437:5158): prog-id=2328 op=LOAD [ 282.478225] audit: type=1334 audit(1784762610.440:5159): prog-id=2329 op=LOAD [ 282.479905] audit: type=1300 audit(1784762610.440:5159): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=34a7fc049f80 a2=98 a3=0 items=0 ppid=3583 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 282.485904] audit: type=1327 audit(1784762610.440:5159): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533396533646333373966666336616530613739353738343731346432 [ 282.491585] audit: type=1334 audit(1784762610.440:5160): prog-id=2329 op=UNLOAD [ 282.493222] audit: type=1300 audit(1784762610.440:5160): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3583 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 282.499052] audit: type=1327 audit(1784762610.440:5160): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533396533646333373966666336616530613739353738343731346432 [ 282.504946] audit: type=1334 audit(1784762610.440:5161): prog-id=2330 op=LOAD