comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.455952] audit: type=1130 audit(1785213477.323:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.457290] loop6: detected capacity change from 0 to 404728 [ 22.466172] loop6: p1 p2 p3 [ 22.492761] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.494265] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.496308] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.498582] device-mapper: ioctl: error adding target to table [ 22.505872] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.551858] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.570425] loop6: detected capacity change from 0 to 217752 [ 22.602872] loop6: detected capacity change from 0 to 300096 [ 22.606558] loop6: p1 p2 p3 [ 22.622154] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.623623] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.625399] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.627183] device-mapper: ioctl: error adding target to table [ 22.629909] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.664103] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.721270] loop6: detected capacity change from 0 to 183704 [ 22.725549] loop6: p1 p2 p3 [ 22.737181] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.740419] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.742063] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.744379] device-mapper: ioctl: error adding target to table [ 22.746932] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.790527] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.808564] loop6: detected capacity change from 0 to 404728 [ 22.812264] loop6: p1 p2 p3 [ 22.828215] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.829506] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.831140] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.832715] device-mapper: ioctl: error adding target to table [ 22.836578] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.879425] erofs: (device dm-5): mounted with root inode @ nid 39. [ 22.885173] loop7: detected capacity change from 0 to 217752 [ 22.907408] loop8: detected capacity change from 0 to 300096 [ 22.911543] loop8: p1 p2 p3 [ 22.922442] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.923642] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.925054] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 22.926452] device-mapper: ioctl: error adding target to table [ 22.929783] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.974737] erofs: (device dm-6): mounted with root inode @ nid 39. [ 22.977846] loop9: detected capacity change from 0 to 183704 [ 22.982718] loop9: p1 p2 p3 [ 22.992040] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.993148] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.994640] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 22.996324] device-mapper: ioctl: error adding target to table [ 22.998870] device-mapper: verity: sha256 using shash "sha256-avx2" [ 23.013727] audit: type=1130 audit(1785213477.880:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 23.054309] erofs: (device dm-7): mounted with root inode @ nid 39. [ 23.061492] audit: type=1130 audit(1785213477.928:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 23.148373] audit: type=1130 audit(1785213478.015:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 23.197421] audit: type=1127 audit(1785213478.064:168): pid=2247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' [ 23.209548] audit: type=1130 audit(1785213478.076:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 23.265191] audit: type=1305 audit(1785213478.132:170): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 [ 23.270525] audit: type=1300 audit(1785213478.132:170): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe3b43d3c0 a2=420 a3=0 items=0 ppid=2243 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 27.934712] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 28.069333] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/07/28 04:38:07Z: Amazon SSM Agent v3.3.0.0 is running 2026/07/28 04:38:07Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/07/28 04:38:07Z: OsVersion: 4774.0.0 [!p]104\[?7hP+q6E616D65\[ 34.642633] systemd-journald[1934]: Time jumped backwards, rotating. This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:38:10 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:38:10 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 42.240921] kauditd_printk_skb: 1 callbacks suppressed [ 42.240925] audit: type=1305 audit(1785213496.881:171): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 42.245702] audit: type=1300 audit(1785213496.881:171): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd21ebad40 a2=420 a3=0 items=0 ppid=2674 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 42.252096] audit: type=1327 audit(1785213496.881:171): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 42.253894] audit: type=1130 audit(1785213496.885:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.256780] audit: type=1131 audit(1785213496.885:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.259674] audit: type=1106 audit(1785213496.891:174): pid=2668 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.262897] audit: type=1104 audit(1785213496.891:175): pid=2668 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.413651] audit: type=1106 audit(1785213497.053:176): pid=2663 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 42.420784] audit: type=1104 audit(1785213497.053:177): pid=2663 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 42.425913] audit: type=1131 audit(1785213497.056:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.21.238:22-20.76.1.115:51690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.977603] Initializing XFRM netlink socket This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:38:21 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:38:21 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 56.470366] kauditd_printk_skb: 113 callbacks suppressed [ 56.470370] audit: type=1130 audit(1785213511.110:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.561191] audit: type=1131 audit(1785213511.201:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 59.882369] audit: type=1131 audit(1785213514.522:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.893780] audit: type=1334 audit(1785213514.534:227): prog-id=38 op=UNLOAD [ 63.049944] audit: type=1130 audit(1785213517.690:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.057182] audit: type=1131 audit(1785213517.690:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.266702] zram_generator::config[3221]: No configuration found. [ 63.649896] audit: type=1334 audit(1785213518.290:230): prog-id=42 op=LOAD [ 63.651277] audit: type=1334 audit(1785213518.290:231): prog-id=35 op=UNLOAD [ 63.652960] audit: type=1334 audit(1785213518.290:232): prog-id=43 op=LOAD [ 63.654392] audit: type=1334 audit(1785213518.290:233): prog-id=44 op=LOAD [ 63.655905] audit: type=1334 audit(1785213518.290:234): prog-id=36 op=UNLOAD [ 63.657353] audit: type=1334 audit(1785213518.290:235): prog-id=37 op=UNLOAD [ 63.658786] audit: type=1334 audit(1785213518.291:236): prog-id=45 op=LOAD [ 63.660213] audit: type=1334 audit(1785213518.291:237): prog-id=41 op=UNLOAD [ 70.135267] zram_generator::config[3625]: No configuration found. [ 70.575137] kauditd_printk_skb: 202 callbacks suppressed [ 70.575142] audit: type=1334 audit(1785213525.215:332): prog-id=92 op=LOAD [ 70.578045] audit: type=1334 audit(1785213525.215:333): prog-id=42 op=UNLOAD [ 70.579590] audit: type=1334 audit(1785213525.215:334): prog-id=93 op=LOAD [ 70.581402] audit: type=1334 audit(1785213525.215:335): prog-id=94 op=LOAD [ 70.582985] audit: type=1334 audit(1785213525.215:336): prog-id=43 op=UNLOAD [ 70.584623] audit: type=1334 audit(1785213525.215:337): prog-id=44 op=UNLOAD [ 70.586208] audit: type=1334 audit(1785213525.216:338): prog-id=95 op=LOAD [ 70.587777] audit: type=1334 audit(1785213525.216:339): prog-id=45 op=UNLOAD [ 70.589221] audit: type=1334 audit(1785213525.218:340): prog-id=96 op=LOAD [ 70.590909] audit: type=1334 audit(1785213525.218:341): prog-id=62 op=UNLOAD [ 76.468407] kauditd_printk_skb: 54 callbacks suppressed [ 76.468411] audit: type=1334 audit(1785213531.108:396): prog-id=118 op=LOAD [ 76.472251] audit: type=1334 audit(1785213531.111:397): prog-id=119 op=LOAD [ 76.474262] audit: type=1300 audit(1785213531.111:397): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=166707e4bfd8 a2=98 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.483962] audit: type=1327 audit(1785213531.111:397): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263313065636263666433633033613633346665646132623936363733 [ 76.494025] audit: type=1334 audit(1785213531.112:398): prog-id=119 op=UNLOAD [ 76.496373] audit: type=1300 audit(1785213531.112:398): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.505363] audit: type=1327 audit(1785213531.112:398): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263313065636263666433633033613633346665646132623936363733 [ 76.515783] audit: type=1334 audit(1785213531.114:399): prog-id=120 op=LOAD [ 76.517434] audit: type=1300 audit(1785213531.114:399): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=166707e4c290 a2=98 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.523490] audit: type=1327 audit(1785213531.114:399): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263313065636263666433633033613633346665646132623936363733 [ 87.053851] kauditd_printk_skb: 224 callbacks suppressed [ 87.053855] audit: type=1334 audit(1785213541.693:476): prog-id=136 op=LOAD [ 87.058206] audit: type=1334 audit(1785213541.695:477): prog-id=137 op=LOAD [ 87.060249] audit: type=1300 audit(1785213541.695:477): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3d12f38affd8 a2=98 a3=0 items=0 ppid=4076 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.068251] audit: type=1327 audit(1785213541.695:477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632383031313031623631666333623838343830393663353931346537 [ 87.086095] audit: type=1334 audit(1785213541.695:478): prog-id=137 op=UNLOAD [ 87.087913] audit: type=1300 audit(1785213541.695:478): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4076 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.107149] audit: type=1327 audit(1785213541.695:478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632383031313031623631666333623838343830393663353931346537 [ 87.117703] audit: type=1334 audit(1785213541.696:479): prog-id=138 op=LOAD [ 87.119589] audit: type=1300 audit(1785213541.696:479): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3d12f38b0290 a2=98 a3=0 items=0 ppid=4076 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.146558] audit: type=1327 audit(1785213541.696:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632383031313031623631666333623838343830393663353931346537 [ 92.214177] kauditd_printk_skb: 122 callbacks suppressed [ 92.214181] audit: type=1334 audit(1785213546.854:528): prog-id=164 op=LOAD [ 92.216765] audit: type=1300 audit(1785213546.854:528): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcdde7480 a2=74 a3=7ffdcdde7480 items=0 ppid=4593 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.222844] audit: type=1327 audit(1785213546.854:528): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.224919] audit: type=1334 audit(1785213546.854:529): prog-id=164 op=UNLOAD [ 92.226241] audit: type=1300 audit(1785213546.854:529): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffdcdde7480 a2=74 a3=7ffdcdde7480 items=0 ppid=4593 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.231691] audit: type=1327 audit(1785213546.854:529): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.233859] audit: type=1334 audit(1785213546.855:530): prog-id=165 op=LOAD [ 92.235235] audit: type=1300 audit(1785213546.855:530): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcdde6500 a2=90 a3=2 items=0 ppid=4593 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.240592] audit: type=1327 audit(1785213546.855:530): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.242696] audit: type=1334 audit(1785213546.855:531): prog-id=165 op=UNLOAD [ 95.700683] NET: Registered PF_ALG protocol family This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:10 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:10 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:11 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:11 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 96.907421] eth0: renamed from tmp59d09 [ 96.972083] eth0: renamed from tmp31460 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:12 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:12 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 97.880639] kauditd_printk_skb: 5876 callbacks suppressed [ 97.880643] audit: type=1334 audit(1785213552.520:2490): prog-id=1123 op=LOAD [ 97.884335] audit: type=1300 audit(1785213552.520:2490): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffeb517d250 a2=74 a3=7ffeb517d250 items=0 ppid=4593 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.893386] audit: type=1327 audit(1785213552.520:2490): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333332385F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.899954] audit: type=1334 audit(1785213552.523:2491): prog-id=1123 op=UNLOAD [ 97.901600] audit: type=1300 audit(1785213552.523:2491): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffeb517d250 a2=74 a3=7ffeb517d250 items=0 ppid=4593 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.907284] audit: type=1327 audit(1785213552.523:2491): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333332385F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.909671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.912105] audit: type=1334 audit(1785213552.523:2492): prog-id=1124 op=LOAD [ 97.912108] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 97.912567] audit: type=1300 audit(1785213552.523:2492): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffeb517d1e0 a2=80 a3=0 items=0 ppid=4593 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:13 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:13 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:14 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:14 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 103.667431] kauditd_printk_skb: 579 callbacks suppressed [ 103.667435] audit: type=1325 audit(1785213558.307:2688): table=filter:148 family=2 entries=11 op=nft_register_rule pid=5261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.671313] audit: type=1300 audit(1785213558.307:2688): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff0a3f81b0 a2=0 a3=7fff0a3f819c items=0 ppid=4189 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.676886] audit: type=1327 audit(1785213558.307:2688): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 103.686157] audit: type=1325 audit(1785213558.326:2689): table=nat:149 family=2 entries=45 op=nft_register_chain pid=5261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.689257] audit: type=1300 audit(1785213558.326:2689): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7fff0a3f81b0 a2=0 a3=7fff0a3f819c items=0 ppid=4189 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.695700] audit: type=1327 audit(1785213558.326:2689): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 130.274672] audit: type=1130 audit(1785213584.914:2690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-3-172.31.21.238:22-20.76.1.115:33374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.168630] audit: type=1101 audit(1785213585.808:2691): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 131.175099] audit: type=1103 audit(1785213585.811:2692): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 131.181692] audit: type=1006 audit(1785213585.811:2693): pid=5284 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 131.185102] audit: type=1300 audit(1785213585.811:2693): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe3355ff10 a2=3 a3=0 items=0 ppid=1 pid=5284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.191436] audit: type=1327 audit(1785213585.811:2693): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 131.205720] audit: type=1105 audit(1785213585.846:2694): pid=5284 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 131.212564] audit: type=1103 audit(1785213585.849:2695): pid=5288 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 132.304477] audit: type=1106 audit(1785213586.944:2696): pid=5284 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 132.311565] audit: type=1104 audit(1785213586.944:2697): pid=5284 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 137.477422] kauditd_printk_skb: 1 callbacks suppressed [ 137.477425] audit: type=1130 audit(1785213592.117:2699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-172.31.21.238:22-20.76.1.115:53500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.346568] audit: type=1101 audit(1785213592.986:2700): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.352911] audit: type=1103 audit(1785213592.989:2701): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.358941] audit: type=1006 audit(1785213592.989:2702): pid=5308 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 138.362804] audit: type=1300 audit(1785213592.989:2702): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffedab88a10 a2=3 a3=0 items=0 ppid=1 pid=5308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.368923] audit: type=1327 audit(1785213592.989:2702): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 138.375100] audit: type=1105 audit(1785213593.015:2703): pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.381715] audit: type=1103 audit(1785213593.018:2704): pid=5312 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.916691] audit: type=1106 audit(1785213593.556:2705): pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.924006] audit: type=1104 audit(1785213593.556:2706): pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.086227] kauditd_printk_skb: 1 callbacks suppressed [ 144.086231] audit: type=1130 audit(1785213598.725:2708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-5-172.31.21.238:22-20.76.1.115:53516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 144.929106] audit: type=1101 audit(1785213599.569:2709): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.936224] audit: type=1103 audit(1785213599.569:2710): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.942862] audit: type=1006 audit(1785213599.569:2711): pid=5325 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 144.946125] audit: type=1300 audit(1785213599.569:2711): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd5078d860 a2=3 a3=0 items=0 ppid=1 pid=5325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.951557] audit: type=1327 audit(1785213599.569:2711): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 144.959898] audit: type=1105 audit(1785213599.600:2712): pid=5325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.966720] audit: type=1103 audit(1785213599.603:2713): pid=5329 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 145.482498] audit: type=1106 audit(1785213600.121:2714): pid=5325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 145.495349] audit: type=1104 audit(1785213600.121:2715): pid=5325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 150.650779] kauditd_printk_skb: 1 callbacks suppressed [ 150.650790] audit: type=1130 audit(1785213605.290:2717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-172.31.21.238:22-20.76.1.115:35478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.520947] audit: type=1101 audit(1785213606.161:2718): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 151.527597] audit: type=1103 audit(1785213606.164:2719): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 151.533449] audit: type=1006 audit(1785213606.164:2720): pid=5342 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 151.536895] audit: type=1300 audit(1785213606.164:2720): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeca525b50 a2=3 a3=0 items=0 ppid=1 pid=5342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.543072] audit: type=1327 audit(1785213606.164:2720): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 151.561529] audit: type=1105 audit(1785213606.201:2721): pid=5342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 151.569731] audit: type=1103 audit(1785213606.209:2722): pid=5346 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 152.089665] audit: type=1106 audit(1785213606.729:2723): pid=5342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 152.096658] audit: type=1104 audit(1785213606.729:2724): pid=5342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 160.557840] kauditd_printk_skb: 23 callbacks suppressed [ 160.557844] audit: type=1130 audit(1785213615.198:2744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-172.31.21.238:22-20.76.1.115:47178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.425657] audit: type=1101 audit(1785213616.065:2745): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.431823] audit: type=1103 audit(1785213616.067:2746): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.437943] audit: type=1006 audit(1785213616.067:2747): pid=5390 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 161.441256] audit: type=1300 audit(1785213616.067:2747): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1a3784b0 a2=3 a3=0 items=0 ppid=1 pid=5390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.447500] audit: type=1327 audit(1785213616.067:2747): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.455026] audit: type=1105 audit(1785213616.095:2748): pid=5390 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.462377] audit: type=1103 audit(1785213616.102:2749): pid=5394 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.987887] audit: type=1106 audit(1785213616.627:2750): pid=5390 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.996719] audit: type=1104 audit(1785213616.627:2751): pid=5390 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 167.157564] kauditd_printk_skb: 1 callbacks suppressed [ 167.157567] audit: type=1130 audit(1785213621.797:2753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-7-172.31.21.238:22-20.76.1.115:50470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.054908] audit: type=1101 audit(1785213622.695:2754): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.060957] audit: type=1103 audit(1785213622.698:2755): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.066774] audit: type=1006 audit(1785213622.698:2756): pid=5407 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 168.070536] audit: type=1300 audit(1785213622.698:2756): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe689d1d00 a2=3 a3=0 items=0 ppid=1 pid=5407 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.076690] audit: type=1327 audit(1785213622.698:2756): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 168.084002] audit: type=1105 audit(1785213622.724:2757): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.091041] audit: type=1103 audit(1785213622.727:2758): pid=5413 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.642286] audit: type=1106 audit(1785213623.282:2759): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.649412] audit: type=1104 audit(1785213623.282:2760): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 172.656661] kauditd_printk_skb: 20 callbacks suppressed [ 172.656666] audit: type=1325 audit(1785213627.296:2777): table=filter:150 family=2 entries=20 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.661679] audit: type=1300 audit(1785213627.296:2777): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffffb6beb0 a2=0 a3=7fffffb6be9c items=0 ppid=4189 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.668103] audit: type=1327 audit(1785213627.296:2777): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 172.671506] audit: type=1325 audit(1785213627.304:2778): table=nat:151 family=2 entries=18 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.674967] audit: type=1300 audit(1785213627.304:2778): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7fffffb6beb0 a2=0 a3=0 items=0 ppid=4189 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.681291] audit: type=1327 audit(1785213627.304:2778): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 172.849770] audit: type=1106 audit(1785213627.488:2779): pid=5438 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 172.857359] audit: type=1104 audit(1785213627.488:2780): pid=5438 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 172.865069] audit: type=1131 audit(1785213627.494:2781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4106-172.31.21.238:22-20.76.1.115:50494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.020661] audit: type=1130 audit(1785213627.660:2782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-172.31.21.238:22-20.76.1.115:50508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.898491] kauditd_printk_skb: 27 callbacks suppressed [ 178.898495] audit: type=1325 audit(1785213633.538:2802): table=filter:154 family=2 entries=20 op=nft_register_rule pid=5489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.902599] audit: type=1300 audit(1785213633.538:2802): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd74ce38d0 a2=0 a3=7ffd74ce38bc items=0 ppid=4189 pid=5489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.908543] audit: type=1327 audit(1785213633.538:2802): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 178.911093] audit: type=1325 audit(1785213633.547:2803): table=nat:155 family=2 entries=102 op=nft_register_chain pid=5489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.915720] audit: type=1300 audit(1785213633.547:2803): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffd74ce38d0 a2=0 a3=7ffd74ce38bc items=0 ppid=4189 pid=5489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.922269] audit: type=1327 audit(1785213633.547:2803): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 181.335579] audit: type=1130 audit(1785213635.974:2804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-172.31.21.238:22-20.76.1.115:40370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.178120] audit: type=1101 audit(1785213636.817:2805): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 182.184134] audit: type=1103 audit(1785213636.819:2806): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 182.189654] audit: type=1006 audit(1785213636.819:2807): pid=5491 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 187.908557] kauditd_printk_skb: 7 callbacks suppressed [ 187.908561] audit: type=1130 audit(1785213642.547:2813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-8-172.31.21.238:22-20.76.1.115:42614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.778205] audit: type=1101 audit(1785213643.417:2814): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 188.785777] audit: type=1103 audit(1785213643.421:2815): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 188.791794] audit: type=1006 audit(1785213643.421:2816): pid=5506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 188.795140] audit: type=1300 audit(1785213643.421:2816): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff9047b410 a2=3 a3=0 items=0 ppid=1 pid=5506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.801170] audit: type=1327 audit(1785213643.421:2816): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 188.807224] audit: type=1105 audit(1785213643.446:2817): pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 188.814330] audit: type=1103 audit(1785213643.453:2818): pid=5510 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 189.352492] audit: type=1106 audit(1785213643.991:2819): pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 189.358993] audit: type=1104 audit(1785213643.992:2820): pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:40:48 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:40:48 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 194.387493] kauditd_printk_skb: 17 callbacks suppressed [ 194.387497] audit: type=1106 audit(1785213649.026:2836): pid=5522 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 194.394484] audit: type=1104 audit(1785213649.026:2837): pid=5522 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 194.399228] audit: type=1131 audit(1785213649.035:2838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-9-172.31.21.238:22-20.76.1.115:42620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.553640] audit: type=1130 audit(1785213649.192:2839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4110-172.31.21.238:22-20.76.1.115:42632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.410870] audit: type=1101 audit(1785213650.050:2840): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 195.416669] audit: type=1103 audit(1785213650.050:2841): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 195.422922] audit: type=1006 audit(1785213650.052:2842): pid=5676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 195.426080] audit: type=1300 audit(1785213650.052:2842): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcc0a15570 a2=3 a3=0 items=0 ppid=1 pid=5676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.432031] audit: type=1327 audit(1785213650.052:2842): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 195.440363] audit: type=1105 audit(1785213650.079:2843): pid=5676 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 199.954277] kauditd_printk_skb: 109 callbacks suppressed [ 199.954281] audit: type=1334 audit(1785213654.593:2897): prog-id=1263 op=LOAD [ 199.958368] audit: type=1334 audit(1785213654.597:2898): prog-id=1264 op=LOAD [ 199.960269] audit: type=1300 audit(1785213654.597:2898): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=30d87fb1bfd8 a2=98 a3=0 items=0 ppid=5705 pid=5888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.967683] audit: type=1327 audit(1785213654.597:2898): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393565313662633439666334666234343234353636326132393934 [ 199.975579] audit: type=1334 audit(1785213654.599:2899): prog-id=1264 op=UNLOAD [ 199.977480] audit: type=1300 audit(1785213654.599:2899): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5705 pid=5888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.985158] audit: type=1327 audit(1785213654.599:2899): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393565313662633439666334666234343234353636326132393934 [ 199.994430] audit: type=1334 audit(1785213654.606:2900): prog-id=1265 op=LOAD [ 199.999644] audit: type=1300 audit(1785213654.606:2900): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=30d87fb1c290 a2=98 a3=0 items=0 ppid=5705 pid=5888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.009268] audit: type=1327 audit(1785213654.606:2900): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393565313662633439666334666234343234353636326132393934 [ 202.051007] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 204.961589] kauditd_printk_skb: 6062 callbacks suppressed [ 204.961593] audit: type=1325 audit(1785213659.600:4906): table=raw:240 family=2 entries=1 op=nft_unregister_rule pid=6410 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 204.967792] audit: type=1300 audit(1785213659.600:4906): arch=c000003e syscall=46 success=yes exit=632 a0=3 a1=7ffca7f933c0 a2=0 a3=7ffca7f933ac items=0 ppid=5938 pid=6410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 204.975316] audit: type=1327 audit(1785213659.600:4906): proctitle=69707461626C6573002D770035002D7400726177002D44004F4C445F43494C49554D5F5052455F726177002D6D006D61726B002D2D6D61726B0030783230302F3078663030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A204E4F545241434B20666F722070726F78792074726166666963002D6A [ 204.981317] audit: type=1325 audit(1785213659.617:4907): table=filter:241 family=2 entries=1 op=nft_unregister_rule pid=6413 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 204.986844] audit: type=1300 audit(1785213659.617:4907): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffcdf3c51f0 a2=0 a3=7ffcdf3c51dc items=0 ppid=5938 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 204.992925] audit: type=1327 audit(1785213659.617:4907): proctitle=69707461626C6573002D770035002D740066696C746572002D4400494E505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F494E505554002D6A004F4C445F43494C49554D5F494E505554 [ 204.997532] audit: type=1325 audit(1785213659.626:4908): table=filter:242 family=2 entries=1 op=nft_unregister_rule pid=6414 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 205.000637] audit: type=1300 audit(1785213659.626:4908): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffe9fb07560 a2=0 a3=7ffe9fb0754c items=0 ppid=5938 pid=6414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 205.006436] audit: type=1327 audit(1785213659.626:4908): proctitle=69707461626C6573002D770035002D740066696C746572002D4400464F5257415244002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F464F5257415244002D6A004F4C445F43494C49554D5F464F5257415244 [ 205.013737] audit: type=1325 audit(1785213659.653:4909): table=filter:243 family=2 entries=1 op=nft_unregister_rule pid=6415 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:41:02 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:41:02 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 42.240921] kauditd_printk_skb: 1 callbacks suppressed [ 42.240925] audit: type=1305 audit(1785213496.881:171): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 42.245702] audit: type=1300 audit(1785213496.881:171): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd21ebad40 a2=420 a3=0 items=0 ppid=2674 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 42.252096] audit: type=1327 audit(1785213496.881:171): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 42.253894] audit: type=1130 audit(1785213496.885:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.256780] audit: type=1131 audit(1785213496.885:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.259674] audit: type=1106 audit(1785213496.891:174): pid=2668 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.262897] audit: type=1104 audit(1785213496.891:175): pid=2668 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.413651] audit: type=1106 audit(1785213497.053:176): pid=2663 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 42.420784] audit: type=1104 audit(1785213497.053:177): pid=2663 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 42.425913] audit: type=1131 audit(1785213497.056:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.21.238:22-20.76.1.115:51690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.977603] Initializing XFRM netlink socket This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:38:21 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:38:21 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 56.470366] kauditd_printk_skb: 113 callbacks suppressed [ 56.470370] audit: type=1130 audit(1785213511.110:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.561191] audit: type=1131 audit(1785213511.201:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 59.882369] audit: type=1131 audit(1785213514.522:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.893780] audit: type=1334 audit(1785213514.534:227): prog-id=38 op=UNLOAD [ 63.049944] audit: type=1130 audit(1785213517.690:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.057182] audit: type=1131 audit(1785213517.690:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.266702] zram_generator::config[3221]: No configuration found. [ 63.649896] audit: type=1334 audit(1785213518.290:230): prog-id=42 op=LOAD [ 63.651277] audit: type=1334 audit(1785213518.290:231): prog-id=35 op=UNLOAD [ 63.652960] audit: type=1334 audit(1785213518.290:232): prog-id=43 op=LOAD [ 63.654392] audit: type=1334 audit(1785213518.290:233): prog-id=44 op=LOAD [ 63.655905] audit: type=1334 audit(1785213518.290:234): prog-id=36 op=UNLOAD [ 63.657353] audit: type=1334 audit(1785213518.290:235): prog-id=37 op=UNLOAD [ 63.658786] audit: type=1334 audit(1785213518.291:236): prog-id=45 op=LOAD [ 63.660213] audit: type=1334 audit(1785213518.291:237): prog-id=41 op=UNLOAD [ 70.135267] zram_generator::config[3625]: No configuration found. [ 70.575137] kauditd_printk_skb: 202 callbacks suppressed [ 70.575142] audit: type=1334 audit(1785213525.215:332): prog-id=92 op=LOAD [ 70.578045] audit: type=1334 audit(1785213525.215:333): prog-id=42 op=UNLOAD [ 70.579590] audit: type=1334 audit(1785213525.215:334): prog-id=93 op=LOAD [ 70.581402] audit: type=1334 audit(1785213525.215:335): prog-id=94 op=LOAD [ 70.582985] audit: type=1334 audit(1785213525.215:336): prog-id=43 op=UNLOAD [ 70.584623] audit: type=1334 audit(1785213525.215:337): prog-id=44 op=UNLOAD [ 70.586208] audit: type=1334 audit(1785213525.216:338): prog-id=95 op=LOAD [ 70.587777] audit: type=1334 audit(1785213525.216:339): prog-id=45 op=UNLOAD [ 70.589221] audit: type=1334 audit(1785213525.218:340): prog-id=96 op=LOAD [ 70.590909] audit: type=1334 audit(1785213525.218:341): prog-id=62 op=UNLOAD [ 76.468407] kauditd_printk_skb: 54 callbacks suppressed [ 76.468411] audit: type=1334 audit(1785213531.108:396): prog-id=118 op=LOAD [ 76.472251] audit: type=1334 audit(1785213531.111:397): prog-id=119 op=LOAD [ 76.474262] audit: type=1300 audit(1785213531.111:397): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=166707e4bfd8 a2=98 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.483962] audit: type=1327 audit(1785213531.111:397): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263313065636263666433633033613633346665646132623936363733 [ 76.494025] audit: type=1334 audit(1785213531.112:398): prog-id=119 op=UNLOAD [ 76.496373] audit: type=1300 audit(1785213531.112:398): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.505363] audit: type=1327 audit(1785213531.112:398): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263313065636263666433633033613633346665646132623936363733 [ 76.515783] audit: type=1334 audit(1785213531.114:399): prog-id=120 op=LOAD [ 76.517434] audit: type=1300 audit(1785213531.114:399): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=166707e4c290 a2=98 a3=0 items=0 ppid=4049 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.523490] audit: type=1327 audit(1785213531.114:399): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263313065636263666433633033613633346665646132623936363733 [ 87.053851] kauditd_printk_skb: 224 callbacks suppressed [ 87.053855] audit: type=1334 audit(1785213541.693:476): prog-id=136 op=LOAD [ 87.058206] audit: type=1334 audit(1785213541.695:477): prog-id=137 op=LOAD [ 87.060249] audit: type=1300 audit(1785213541.695:477): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3d12f38affd8 a2=98 a3=0 items=0 ppid=4076 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.068251] audit: type=1327 audit(1785213541.695:477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632383031313031623631666333623838343830393663353931346537 [ 87.086095] audit: type=1334 audit(1785213541.695:478): prog-id=137 op=UNLOAD [ 87.087913] audit: type=1300 audit(1785213541.695:478): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4076 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.107149] audit: type=1327 audit(1785213541.695:478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632383031313031623631666333623838343830393663353931346537 [ 87.117703] audit: type=1334 audit(1785213541.696:479): prog-id=138 op=LOAD [ 87.119589] audit: type=1300 audit(1785213541.696:479): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3d12f38b0290 a2=98 a3=0 items=0 ppid=4076 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.146558] audit: type=1327 audit(1785213541.696:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632383031313031623631666333623838343830393663353931346537 [ 92.214177] kauditd_printk_skb: 122 callbacks suppressed [ 92.214181] audit: type=1334 audit(1785213546.854:528): prog-id=164 op=LOAD [ 92.216765] audit: type=1300 audit(1785213546.854:528): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcdde7480 a2=74 a3=7ffdcdde7480 items=0 ppid=4593 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.222844] audit: type=1327 audit(1785213546.854:528): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.224919] audit: type=1334 audit(1785213546.854:529): prog-id=164 op=UNLOAD [ 92.226241] audit: type=1300 audit(1785213546.854:529): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffdcdde7480 a2=74 a3=7ffdcdde7480 items=0 ppid=4593 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.231691] audit: type=1327 audit(1785213546.854:529): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.233859] audit: type=1334 audit(1785213546.855:530): prog-id=165 op=LOAD [ 92.235235] audit: type=1300 audit(1785213546.855:530): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdcdde6500 a2=90 a3=2 items=0 ppid=4593 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 92.240592] audit: type=1327 audit(1785213546.855:530): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 92.242696] audit: type=1334 audit(1785213546.855:531): prog-id=165 op=UNLOAD [ 95.700683] NET: Registered PF_ALG protocol family This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:10 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:10 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:11 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:11 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 96.907421] eth0: renamed from tmp59d09 [ 96.972083] eth0: renamed from tmp31460 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:12 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:12 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 97.880639] kauditd_printk_skb: 5876 callbacks suppressed [ 97.880643] audit: type=1334 audit(1785213552.520:2490): prog-id=1123 op=LOAD [ 97.884335] audit: type=1300 audit(1785213552.520:2490): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffeb517d250 a2=74 a3=7ffeb517d250 items=0 ppid=4593 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.893386] audit: type=1327 audit(1785213552.520:2490): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333332385F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.899954] audit: type=1334 audit(1785213552.523:2491): prog-id=1123 op=UNLOAD [ 97.901600] audit: type=1300 audit(1785213552.523:2491): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffeb517d250 a2=74 a3=7ffeb517d250 items=0 ppid=4593 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 97.907284] audit: type=1327 audit(1785213552.523:2491): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333332385F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 97.909671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.912105] audit: type=1334 audit(1785213552.523:2492): prog-id=1124 op=LOAD [ 97.912108] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 97.912567] audit: type=1300 audit(1785213552.523:2492): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffeb517d1e0 a2=80 a3=0 items=0 ppid=4593 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:13 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:13 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:14 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:39:14 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 103.667431] kauditd_printk_skb: 579 callbacks suppressed [ 103.667435] audit: type=1325 audit(1785213558.307:2688): table=filter:148 family=2 entries=11 op=nft_register_rule pid=5261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.671313] audit: type=1300 audit(1785213558.307:2688): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff0a3f81b0 a2=0 a3=7fff0a3f819c items=0 ppid=4189 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.676886] audit: type=1327 audit(1785213558.307:2688): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 103.686157] audit: type=1325 audit(1785213558.326:2689): table=nat:149 family=2 entries=45 op=nft_register_chain pid=5261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.689257] audit: type=1300 audit(1785213558.326:2689): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7fff0a3f81b0 a2=0 a3=7fff0a3f819c items=0 ppid=4189 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.695700] audit: type=1327 audit(1785213558.326:2689): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 130.274672] audit: type=1130 audit(1785213584.914:2690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-3-172.31.21.238:22-20.76.1.115:33374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.168630] audit: type=1101 audit(1785213585.808:2691): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 131.175099] audit: type=1103 audit(1785213585.811:2692): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 131.181692] audit: type=1006 audit(1785213585.811:2693): pid=5284 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 131.185102] audit: type=1300 audit(1785213585.811:2693): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe3355ff10 a2=3 a3=0 items=0 ppid=1 pid=5284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.191436] audit: type=1327 audit(1785213585.811:2693): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 131.205720] audit: type=1105 audit(1785213585.846:2694): pid=5284 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 131.212564] audit: type=1103 audit(1785213585.849:2695): pid=5288 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 132.304477] audit: type=1106 audit(1785213586.944:2696): pid=5284 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 132.311565] audit: type=1104 audit(1785213586.944:2697): pid=5284 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 137.477422] kauditd_printk_skb: 1 callbacks suppressed [ 137.477425] audit: type=1130 audit(1785213592.117:2699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-172.31.21.238:22-20.76.1.115:53500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.346568] audit: type=1101 audit(1785213592.986:2700): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.352911] audit: type=1103 audit(1785213592.989:2701): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.358941] audit: type=1006 audit(1785213592.989:2702): pid=5308 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 138.362804] audit: type=1300 audit(1785213592.989:2702): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffedab88a10 a2=3 a3=0 items=0 ppid=1 pid=5308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.368923] audit: type=1327 audit(1785213592.989:2702): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 138.375100] audit: type=1105 audit(1785213593.015:2703): pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.381715] audit: type=1103 audit(1785213593.018:2704): pid=5312 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.916691] audit: type=1106 audit(1785213593.556:2705): pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 138.924006] audit: type=1104 audit(1785213593.556:2706): pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.086227] kauditd_printk_skb: 1 callbacks suppressed [ 144.086231] audit: type=1130 audit(1785213598.725:2708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-5-172.31.21.238:22-20.76.1.115:53516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 144.929106] audit: type=1101 audit(1785213599.569:2709): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.936224] audit: type=1103 audit(1785213599.569:2710): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.942862] audit: type=1006 audit(1785213599.569:2711): pid=5325 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 144.946125] audit: type=1300 audit(1785213599.569:2711): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd5078d860 a2=3 a3=0 items=0 ppid=1 pid=5325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.951557] audit: type=1327 audit(1785213599.569:2711): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 144.959898] audit: type=1105 audit(1785213599.600:2712): pid=5325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 144.966720] audit: type=1103 audit(1785213599.603:2713): pid=5329 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 145.482498] audit: type=1106 audit(1785213600.121:2714): pid=5325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 145.495349] audit: type=1104 audit(1785213600.121:2715): pid=5325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 150.650779] kauditd_printk_skb: 1 callbacks suppressed [ 150.650790] audit: type=1130 audit(1785213605.290:2717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-172.31.21.238:22-20.76.1.115:35478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.520947] audit: type=1101 audit(1785213606.161:2718): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 151.527597] audit: type=1103 audit(1785213606.164:2719): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 151.533449] audit: type=1006 audit(1785213606.164:2720): pid=5342 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 151.536895] audit: type=1300 audit(1785213606.164:2720): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeca525b50 a2=3 a3=0 items=0 ppid=1 pid=5342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.543072] audit: type=1327 audit(1785213606.164:2720): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 151.561529] audit: type=1105 audit(1785213606.201:2721): pid=5342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 151.569731] audit: type=1103 audit(1785213606.209:2722): pid=5346 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 152.089665] audit: type=1106 audit(1785213606.729:2723): pid=5342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 152.096658] audit: type=1104 audit(1785213606.729:2724): pid=5342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 160.557840] kauditd_printk_skb: 23 callbacks suppressed [ 160.557844] audit: type=1130 audit(1785213615.198:2744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-172.31.21.238:22-20.76.1.115:47178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.425657] audit: type=1101 audit(1785213616.065:2745): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.431823] audit: type=1103 audit(1785213616.067:2746): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.437943] audit: type=1006 audit(1785213616.067:2747): pid=5390 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 161.441256] audit: type=1300 audit(1785213616.067:2747): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1a3784b0 a2=3 a3=0 items=0 ppid=1 pid=5390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.447500] audit: type=1327 audit(1785213616.067:2747): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.455026] audit: type=1105 audit(1785213616.095:2748): pid=5390 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.462377] audit: type=1103 audit(1785213616.102:2749): pid=5394 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.987887] audit: type=1106 audit(1785213616.627:2750): pid=5390 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 161.996719] audit: type=1104 audit(1785213616.627:2751): pid=5390 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 167.157564] kauditd_printk_skb: 1 callbacks suppressed [ 167.157567] audit: type=1130 audit(1785213621.797:2753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-7-172.31.21.238:22-20.76.1.115:50470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.054908] audit: type=1101 audit(1785213622.695:2754): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.060957] audit: type=1103 audit(1785213622.698:2755): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.066774] audit: type=1006 audit(1785213622.698:2756): pid=5407 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 168.070536] audit: type=1300 audit(1785213622.698:2756): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe689d1d00 a2=3 a3=0 items=0 ppid=1 pid=5407 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.076690] audit: type=1327 audit(1785213622.698:2756): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 168.084002] audit: type=1105 audit(1785213622.724:2757): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.091041] audit: type=1103 audit(1785213622.727:2758): pid=5413 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.642286] audit: type=1106 audit(1785213623.282:2759): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 168.649412] audit: type=1104 audit(1785213623.282:2760): pid=5407 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 172.656661] kauditd_printk_skb: 20 callbacks suppressed [ 172.656666] audit: type=1325 audit(1785213627.296:2777): table=filter:150 family=2 entries=20 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.661679] audit: type=1300 audit(1785213627.296:2777): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffffb6beb0 a2=0 a3=7fffffb6be9c items=0 ppid=4189 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.668103] audit: type=1327 audit(1785213627.296:2777): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 172.671506] audit: type=1325 audit(1785213627.304:2778): table=nat:151 family=2 entries=18 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.674967] audit: type=1300 audit(1785213627.304:2778): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7fffffb6beb0 a2=0 a3=0 items=0 ppid=4189 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.681291] audit: type=1327 audit(1785213627.304:2778): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 172.849770] audit: type=1106 audit(1785213627.488:2779): pid=5438 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 172.857359] audit: type=1104 audit(1785213627.488:2780): pid=5438 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 172.865069] audit: type=1131 audit(1785213627.494:2781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4106-172.31.21.238:22-20.76.1.115:50494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.020661] audit: type=1130 audit(1785213627.660:2782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-172.31.21.238:22-20.76.1.115:50508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.898491] kauditd_printk_skb: 27 callbacks suppressed [ 178.898495] audit: type=1325 audit(1785213633.538:2802): table=filter:154 family=2 entries=20 op=nft_register_rule pid=5489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.902599] audit: type=1300 audit(1785213633.538:2802): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd74ce38d0 a2=0 a3=7ffd74ce38bc items=0 ppid=4189 pid=5489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.908543] audit: type=1327 audit(1785213633.538:2802): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 178.911093] audit: type=1325 audit(1785213633.547:2803): table=nat:155 family=2 entries=102 op=nft_register_chain pid=5489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.915720] audit: type=1300 audit(1785213633.547:2803): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffd74ce38d0 a2=0 a3=7ffd74ce38bc items=0 ppid=4189 pid=5489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.922269] audit: type=1327 audit(1785213633.547:2803): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 181.335579] audit: type=1130 audit(1785213635.974:2804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-172.31.21.238:22-20.76.1.115:40370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.178120] audit: type=1101 audit(1785213636.817:2805): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 182.184134] audit: type=1103 audit(1785213636.819:2806): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 182.189654] audit: type=1006 audit(1785213636.819:2807): pid=5491 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 187.908557] kauditd_printk_skb: 7 callbacks suppressed [ 187.908561] audit: type=1130 audit(1785213642.547:2813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-8-172.31.21.238:22-20.76.1.115:42614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.778205] audit: type=1101 audit(1785213643.417:2814): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 188.785777] audit: type=1103 audit(1785213643.421:2815): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 188.791794] audit: type=1006 audit(1785213643.421:2816): pid=5506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 188.795140] audit: type=1300 audit(1785213643.421:2816): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff9047b410 a2=3 a3=0 items=0 ppid=1 pid=5506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.801170] audit: type=1327 audit(1785213643.421:2816): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 188.807224] audit: type=1105 audit(1785213643.446:2817): pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 188.814330] audit: type=1103 audit(1785213643.453:2818): pid=5510 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 189.352492] audit: type=1106 audit(1785213643.991:2819): pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 189.358993] audit: type=1104 audit(1785213643.992:2820): pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:40:48 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:40:48 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 194.387493] kauditd_printk_skb: 17 callbacks suppressed [ 194.387497] audit: type=1106 audit(1785213649.026:2836): pid=5522 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 194.394484] audit: type=1104 audit(1785213649.026:2837): pid=5522 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 194.399228] audit: type=1131 audit(1785213649.035:2838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-9-172.31.21.238:22-20.76.1.115:42620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.553640] audit: type=1130 audit(1785213649.192:2839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4110-172.31.21.238:22-20.76.1.115:42632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.410870] audit: type=1101 audit(1785213650.050:2840): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 195.416669] audit: type=1103 audit(1785213650.050:2841): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 195.422922] audit: type=1006 audit(1785213650.052:2842): pid=5676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 195.426080] audit: type=1300 audit(1785213650.052:2842): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcc0a15570 a2=3 a3=0 items=0 ppid=1 pid=5676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.432031] audit: type=1327 audit(1785213650.052:2842): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 195.440363] audit: type=1105 audit(1785213650.079:2843): pid=5676 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 199.954277] kauditd_printk_skb: 109 callbacks suppressed [ 199.954281] audit: type=1334 audit(1785213654.593:2897): prog-id=1263 op=LOAD [ 199.958368] audit: type=1334 audit(1785213654.597:2898): prog-id=1264 op=LOAD [ 199.960269] audit: type=1300 audit(1785213654.597:2898): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=30d87fb1bfd8 a2=98 a3=0 items=0 ppid=5705 pid=5888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.967683] audit: type=1327 audit(1785213654.597:2898): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393565313662633439666334666234343234353636326132393934 [ 199.975579] audit: type=1334 audit(1785213654.599:2899): prog-id=1264 op=UNLOAD [ 199.977480] audit: type=1300 audit(1785213654.599:2899): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5705 pid=5888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.985158] audit: type=1327 audit(1785213654.599:2899): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393565313662633439666334666234343234353636326132393934 [ 199.994430] audit: type=1334 audit(1785213654.606:2900): prog-id=1265 op=LOAD [ 199.999644] audit: type=1300 audit(1785213654.606:2900): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=30d87fb1c290 a2=98 a3=0 items=0 ppid=5705 pid=5888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.009268] audit: type=1327 audit(1785213654.606:2900): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163393565313662633439666334666234343234353636326132393934 [ 202.051007] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 204.961589] kauditd_printk_skb: 6062 callbacks suppressed [ 204.961593] audit: type=1325 audit(1785213659.600:4906): table=raw:240 family=2 entries=1 op=nft_unregister_rule pid=6410 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 204.967792] audit: type=1300 audit(1785213659.600:4906): arch=c000003e syscall=46 success=yes exit=632 a0=3 a1=7ffca7f933c0 a2=0 a3=7ffca7f933ac items=0 ppid=5938 pid=6410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 204.975316] audit: type=1327 audit(1785213659.600:4906): proctitle=69707461626C6573002D770035002D7400726177002D44004F4C445F43494C49554D5F5052455F726177002D6D006D61726B002D2D6D61726B0030783230302F3078663030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A204E4F545241434B20666F722070726F78792074726166666963002D6A [ 204.981317] audit: type=1325 audit(1785213659.617:4907): table=filter:241 family=2 entries=1 op=nft_unregister_rule pid=6413 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 204.986844] audit: type=1300 audit(1785213659.617:4907): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffcdf3c51f0 a2=0 a3=7ffcdf3c51dc items=0 ppid=5938 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 204.992925] audit: type=1327 audit(1785213659.617:4907): proctitle=69707461626C6573002D770035002D740066696C746572002D4400494E505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F494E505554002D6A004F4C445F43494C49554D5F494E505554 [ 204.997532] audit: type=1325 audit(1785213659.626:4908): table=filter:242 family=2 entries=1 op=nft_unregister_rule pid=6414 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 205.000637] audit: type=1300 audit(1785213659.626:4908): arch=c000003e syscall=46 success=yes exit=536 a0=3 a1=7ffe9fb07560 a2=0 a3=7ffe9fb0754c items=0 ppid=5938 pid=6414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 205.006436] audit: type=1327 audit(1785213659.626:4908): proctitle=69707461626C6573002D770035002D740066696C746572002D4400464F5257415244002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F464F5257415244002D6A004F4C445F43494C49554D5F464F5257415244 [ 205.013737] audit: type=1325 audit(1785213659.653:4909): table=filter:243 family=2 entries=1 op=nft_unregister_rule pid=6415 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:41:02 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 This is ip-172-31-21-238 (Linux x86_64 6.12.96-flatcar) 04:41:02 SSH host key: SHA256:g9s++K+55J/LCJSWqqVDRZxG9b9A0QSVAUxS2VweGUE (RSA) SSH host key: SHA256:Ivo87GjcB9GchUo4pV+2yKKhBFy4xeBWUqleSl40bds (ECDSA) SSH host key: SHA256:OTT36kRi8jmmHEUMz9XGzMav+KvuFvVn3hPexsnHSqM (ED25519) eth0: 172.31.21.238 fe80::4d2:48ff:fef7:3aa9 ip-172-31-21-238 login: [ 211.025033] kauditd_printk_skb: 210 callbacks suppressed [ 211.025037] audit: type=1106 audit(1785213665.664:4986): pid=5839 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 211.038860] audit: type=1104 audit(1785213665.677:4987): pid=5839 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 211.054130] audit: type=1131 audit(1785213665.693:4988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10-172.31.21.238:22-20.76.1.115:51052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.254466] audit: type=1334 audit(1785213665.893:4989): prog-id=2256 op=LOAD [ 211.256194] audit: type=1300 audit(1785213665.893:4989): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff28b0a9e0 a2=74 a3=7fff28b0a9e0 items=0 ppid=5938 pid=6592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 211.262839] audit: type=1327 audit(1785213665.893:4989): proctitle=74630066696C746572007265706C61636500646576006C786337623332626462353238646500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313832325F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 211.267869] audit: type=1334 audit(1785213665.893:4990): prog-id=2256 op=UNLOAD [ 211.269689] audit: type=1300 audit(1785213665.893:4990): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fff28b0a9e0 a2=74 a3=7fff28b0a9e0 items=0 ppid=5938 pid=6592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 211.275420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.275428] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 225.443980] kauditd_printk_skb: 423 callbacks suppressed [ 225.443985] audit: type=1334 audit(1785213680.083:5134): prog-id=91 op=UNLOAD [ 225.447795] audit: type=1334 audit(1785213680.083:5135): prog-id=117 op=UNLOAD [ 226.051049] audit: type=1334 audit(1785213680.690:5136): prog-id=2334 op=LOAD [ 226.052440] audit: type=1334 audit(1785213680.691:5137): prog-id=2335 op=LOAD [ 226.053996] audit: type=1300 audit(1785213680.691:5137): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1e0395431fd8 a2=98 a3=0 items=0 ppid=3346 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.059359] audit: type=1327 audit(1785213680.691:5137): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031623032613934633565386230656133323837303136646333316362 [ 226.065318] audit: type=1334 audit(1785213680.691:5138): prog-id=2335 op=UNLOAD [ 226.067054] audit: type=1300 audit(1785213680.691:5138): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3346 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.073169] audit: type=1327 audit(1785213680.691:5138): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031623032613934633565386230656133323837303136646333316362 [ 226.079323] audit: type=1334 audit(1785213680.691:5139): prog-id=2336 op=LOAD [ 231.062787] kauditd_printk_skb: 16 callbacks suppressed [ 231.062790] audit: type=1334 audit(1785213685.702:5146): prog-id=2339 op=LOAD [ 231.065942] audit: type=1334 audit(1785213685.705:5147): prog-id=2340 op=LOAD [ 231.067882] audit: type=1300 audit(1785213685.705:5147): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3c533c66bfd8 a2=98 a3=0 items=0 ppid=3343 pid=6659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 231.074107] audit: type=1327 audit(1785213685.705:5147): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030313461653436653766346331313061386539613239663137626635 [ 231.080100] audit: type=1334 audit(1785213685.705:5148): prog-id=2340 op=UNLOAD [ 231.081752] audit: type=1300 audit(1785213685.705:5148): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3343 pid=6659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 231.087542] audit: type=1327 audit(1785213685.705:5148): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030313461653436653766346331313061386539613239663137626635 [ 231.093688] audit: type=1334 audit(1785213685.705:5149): prog-id=2341 op=LOAD [ 231.095290] audit: type=1300 audit(1785213685.705:5149): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3c533c66c290 a2=98 a3=0 items=0 ppid=3343 pid=6659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 231.101351] audit: type=1327 audit(1785213685.705:5149): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030313461653436653766346331313061386539613239663137626635 [ 249.276631] kauditd_printk_skb: 12 callbacks suppressed [ 249.276635] audit: type=1106 audit(1785213703.915:5154): pid=2586 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 249.276640] audit: type=1104 audit(1785213703.915:5155): pid=2586 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 249.319366] audit: type=1334 audit(1785213703.958:5156): prog-id=2317 op=UNLOAD [ 249.322795] audit: type=1334 audit(1785213703.958:5157): prog-id=2333 op=UNLOAD [ 249.378744] audit: type=1131 audit(1785213704.016:5158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.407447] audit: type=1131 audit(1785213704.046:5159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=nvidia comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.420752] audit: type=1131 audit(1785213704.054:5160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.437784] audit: type=1131 audit(1785213704.070:5161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshkeys comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.437790] audit: type=1131 audit(1785213704.074:5162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.527262] audit: type=1131 audit(1785213704.164:5163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'