e=1106 audit(1789169964.488:172): pid=1939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 42.918715] audit: type=1104 audit(1789169964.489:173): pid=1939 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 42.922907] audit: type=1131 audit(1789169964.494:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.30.17:22-20.76.204.135:60054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 49.807857] kauditd_printk_skb: 13 callbacks suppressed [ 49.807862] audit: type=1325 audit(1789169971.385:186): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 49.811752] audit: type=1300 audit(1789169971.385:186): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffdf1d2c20 a2=0 a3=0 items=0 ppid=2017 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 49.818055] audit: type=1327 audit(1789169971.385:186): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 49.821365] audit: type=1325 audit(1789169971.392:187): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 49.824782] audit: type=1300 audit(1789169971.392:187): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd7395e3a0 a2=0 a3=0 items=0 ppid=2017 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 49.831196] audit: type=1327 audit(1789169971.392:187): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 49.833917] audit: type=1325 audit(1789169971.396:188): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 49.836643] audit: type=1300 audit(1789169971.396:188): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9d956240 a2=0 a3=0 items=0 ppid=2017 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 49.842630] audit: type=1327 audit(1789169971.396:188): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 49.845450] audit: type=1325 audit(1789169971.399:189): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.119887] Initializing XFRM netlink socket This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:39:32 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:39:33 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 55.702154] kauditd_printk_skb: 90 callbacks suppressed [ 55.702158] audit: type=1130 audit(1789169977.279:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.757360] audit: type=1131 audit(1789169977.334:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 58.995045] audit: type=1131 audit(1789169980.572:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.009781] audit: type=1334 audit(1789169980.587:223): prog-id=38 op=UNLOAD [ 66.168194] audit: type=1130 audit(1789169987.745:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.275061] audit: type=1131 audit(1789169987.852:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 69.020632] audit: type=1130 audit(1789169990.597:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.025669] audit: type=1131 audit(1789169990.597:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.224639] zram_generator::config[2459]: No configuration found. [ 69.666598] audit: type=1334 audit(1789169991.243:228): prog-id=42 op=LOAD [ 69.668236] audit: type=1334 audit(1789169991.243:229): prog-id=25 op=UNLOAD [ 69.669998] audit: type=1334 audit(1789169991.246:230): prog-id=43 op=LOAD [ 69.671582] audit: type=1334 audit(1789169991.246:231): prog-id=34 op=UNLOAD [ 69.673311] audit: type=1334 audit(1789169991.247:232): prog-id=44 op=LOAD [ 69.674881] audit: type=1334 audit(1789169991.247:233): prog-id=45 op=LOAD [ 71.440740] kauditd_printk_skb: 72 callbacks suppressed [ 71.440743] audit: type=1334 audit(1789169993.018:282): prog-id=62 op=LOAD [ 71.443328] audit: type=1334 audit(1789169993.019:283): prog-id=63 op=LOAD [ 71.444738] audit: type=1300 audit(1789169993.019:283): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3ab278bd3fd8 a2=98 a3=0 items=0 ppid=2581 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.454712] audit: type=1327 audit(1789169993.019:283): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393235663836653262313263383032653335363338346665313736 [ 71.460043] audit: type=1334 audit(1789169993.019:284): prog-id=63 op=UNLOAD [ 71.461786] audit: type=1300 audit(1789169993.019:284): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=2581 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.467883] audit: type=1327 audit(1789169993.019:284): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393235663836653262313263383032653335363338346665313736 [ 71.473829] audit: type=1334 audit(1789169993.029:285): prog-id=64 op=LOAD [ 71.475359] audit: type=1300 audit(1789169993.029:285): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3ab278bd4290 a2=98 a3=0 items=0 ppid=2581 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.485873] audit: type=1327 audit(1789169993.029:285): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766393235663836653262313263383032653335363338346665313736 [ 77.123761] zram_generator::config[3119]: No configuration found. [ 77.598784] kauditd_printk_skb: 122 callbacks suppressed [ 77.598787] audit: type=1334 audit(1789169999.176:330): prog-id=92 op=LOAD [ 77.603675] audit: type=1334 audit(1789169999.178:331): prog-id=82 op=UNLOAD [ 77.605437] audit: type=1334 audit(1789169999.179:332): prog-id=93 op=LOAD [ 77.607178] audit: type=1334 audit(1789169999.179:333): prog-id=67 op=UNLOAD [ 77.608823] audit: type=1334 audit(1789169999.183:334): prog-id=94 op=LOAD [ 77.610349] audit: type=1334 audit(1789169999.183:335): prog-id=42 op=UNLOAD [ 77.612427] audit: type=1334 audit(1789169999.187:336): prog-id=95 op=LOAD [ 77.614315] audit: type=1334 audit(1789169999.187:337): prog-id=43 op=UNLOAD [ 77.615914] audit: type=1334 audit(1789169999.189:338): prog-id=96 op=LOAD [ 77.617558] audit: type=1334 audit(1789169999.189:339): prog-id=62 op=UNLOAD [ 82.811427] kauditd_printk_skb: 49 callbacks suppressed [ 82.811431] audit: type=1130 audit(1789170004.388:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4102-172.31.30.17:22-88.231.244.215:52752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 82.898938] audit: type=1131 audit(1789170004.476:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4102-172.31.30.17:22-88.231.244.215:52752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 85.100457] audit: type=1106 audit(1789170006.677:391): pid=1983 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 85.105510] audit: type=1104 audit(1789170006.677:392): pid=1983 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 85.136353] audit: type=1334 audit(1789170006.713:393): prog-id=118 op=LOAD [ 85.138820] audit: type=1334 audit(1789170006.716:394): prog-id=119 op=LOAD [ 85.141427] audit: type=1300 audit(1789170006.716:394): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2967a1db1fd8 a2=98 a3=0 items=0 ppid=3266 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.147563] audit: type=1327 audit(1789170006.716:394): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430313538323465353165333830336338396235303032393138363663 [ 85.153535] audit: type=1334 audit(1789170006.718:395): prog-id=119 op=UNLOAD [ 85.154957] audit: type=1300 audit(1789170006.718:395): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3266 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.886102] kauditd_printk_skb: 78 callbacks suppressed [ 87.886107] audit: type=1325 audit(1789170009.463:425): table=mangle:47 family=10 entries=1 op=nft_register_chain pid=3480 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 87.894069] audit: type=1300 audit(1789170009.463:425): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff051f7d80 a2=0 a3=7fff051f7d6c items=0 ppid=3419 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.904870] audit: type=1327 audit(1789170009.463:425): proctitle=6970367461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 87.909790] audit: type=1325 audit(1789170009.464:426): table=mangle:48 family=2 entries=1 op=nft_register_chain pid=3479 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 87.913306] audit: type=1300 audit(1789170009.464:426): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9d3f2c00 a2=0 a3=7ffd9d3f2bec items=0 ppid=3419 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.920007] audit: type=1327 audit(1789170009.464:426): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 87.923125] audit: type=1325 audit(1789170009.467:427): table=nat:49 family=2 entries=1 op=nft_register_chain pid=3485 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 87.926438] audit: type=1300 audit(1789170009.467:427): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbe2cfbf0 a2=0 a3=7ffdbe2cfbdc items=0 ppid=3419 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.933048] audit: type=1327 audit(1789170009.467:427): proctitle=69707461626C6573002D770035002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 87.936051] audit: type=1325 audit(1789170009.471:428): table=filter:50 family=2 entries=1 op=nft_register_chain pid=3486 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 97.042685] kauditd_printk_skb: 165 callbacks suppressed [ 97.042690] audit: type=1334 audit(1789170018.620:484): prog-id=141 op=LOAD [ 97.045993] audit: type=1334 audit(1789170018.623:485): prog-id=142 op=LOAD [ 97.047387] audit: type=1300 audit(1789170018.623:485): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3812b27b1fd8 a2=98 a3=0 items=0 ppid=3344 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.053500] audit: type=1327 audit(1789170018.623:485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435613861663436643066336364306339363839333765666564353134 [ 97.059163] audit: type=1334 audit(1789170018.623:486): prog-id=142 op=UNLOAD [ 97.061232] audit: type=1300 audit(1789170018.623:486): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3344 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.067511] audit: type=1327 audit(1789170018.623:486): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435613861663436643066336364306339363839333765666564353134 [ 97.073170] audit: type=1334 audit(1789170018.627:487): prog-id=143 op=LOAD [ 97.074617] audit: type=1300 audit(1789170018.627:487): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3812b27b2290 a2=98 a3=0 items=0 ppid=3344 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.080509] audit: type=1327 audit(1789170018.627:487): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435613861663436643066336364306339363839333765666564353134 [ 102.138432] kauditd_printk_skb: 3882 callbacks suppressed [ 102.138436] audit: type=1334 audit(1789170023.715:1790): prog-id=794 op=LOAD [ 102.141165] audit: type=1300 audit(1789170023.715:1790): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd9a09b8b0 a2=74 a3=7ffd9a09b8b0 items=0 ppid=3830 pid=3949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 102.146832] audit: type=1327 audit(1789170023.715:1790): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 102.148923] audit: type=1334 audit(1789170023.715:1791): prog-id=794 op=UNLOAD [ 102.150261] audit: type=1300 audit(1789170023.715:1791): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffd9a09b8b0 a2=74 a3=7ffd9a09b8b0 items=0 ppid=3830 pid=3949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 102.155783] audit: type=1327 audit(1789170023.715:1791): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 102.158050] audit: type=1334 audit(1789170023.715:1792): prog-id=795 op=LOAD [ 102.159304] audit: type=1300 audit(1789170023.715:1792): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd9a09a930 a2=90 a3=2 items=0 ppid=3830 pid=3949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 102.164976] audit: type=1327 audit(1789170023.715:1792): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 102.167430] audit: type=1334 audit(1789170023.715:1793): prog-id=795 op=UNLOAD This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:40:26 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 105.824481] NET: Registered PF_ALG protocol family This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:40:27 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:40:28 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 107.427002] eth0: renamed from tmp01bda [ 107.437621] eth0: renamed from tmp3cb3c This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:40:29 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 108.340675] kauditd_printk_skb: 2096 callbacks suppressed [ 108.340679] audit: type=1334 audit(1789170029.917:2492): prog-id=1123 op=LOAD [ 108.344514] audit: type=1300 audit(1789170029.917:2492): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcd427be00 a2=74 a3=7ffcd427be00 items=0 ppid=3830 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.353435] audit: type=1327 audit(1789170029.917:2492): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323135375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 108.360550] audit: type=1334 audit(1789170029.917:2493): prog-id=1123 op=UNLOAD [ 108.363298] audit: type=1300 audit(1789170029.917:2493): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffcd427be00 a2=74 a3=7ffcd427be00 items=0 ppid=3830 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.370096] audit: type=1327 audit(1789170029.917:2493): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323135375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 108.373834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.375696] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 108.377041] audit: backlog limit exceeded [ 108.378680] audit: type=1334 audit(1789170029.917:2494): prog-id=1124 op=LOAD This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:40:30 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:40:31 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:40:32 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 113.989074] kauditd_printk_skb: 579 callbacks suppressed [ 113.989078] audit: type=1325 audit(1789170035.566:2690): table=filter:148 family=2 entries=14 op=nft_register_rule pid=4497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.993158] audit: type=1300 audit(1789170035.566:2690): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffeeac4d430 a2=0 a3=7ffeeac4d41c items=0 ppid=3419 pid=4497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.998851] audit: type=1327 audit(1789170035.566:2690): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 114.001480] audit: type=1325 audit(1789170035.577:2691): table=nat:149 family=2 entries=12 op=nft_register_rule pid=4497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.004389] audit: type=1300 audit(1789170035.577:2691): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeeac4d430 a2=0 a3=0 items=0 ppid=3419 pid=4497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.010610] audit: type=1327 audit(1789170035.577:2691): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.019729] audit: type=1325 audit(1789170036.596:2692): table=filter:150 family=2 entries=11 op=nft_register_rule pid=4506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.023013] audit: type=1300 audit(1789170036.596:2692): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe7c021c80 a2=0 a3=7ffe7c021c6c items=0 ppid=3419 pid=4506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.028916] audit: type=1327 audit(1789170036.596:2692): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.032760] audit: type=1325 audit(1789170036.608:2693): table=nat:151 family=2 entries=33 op=nft_register_chain pid=4506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.682575] kauditd_printk_skb: 2 callbacks suppressed [ 123.682579] audit: type=1325 audit(1789170045.259:2694): table=filter:152 family=2 entries=8 op=nft_register_rule pid=4512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.686573] audit: type=1300 audit(1789170045.259:2694): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc67f8d380 a2=0 a3=7ffc67f8d36c items=0 ppid=3419 pid=4512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.692333] audit: type=1327 audit(1789170045.259:2694): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 123.701683] audit: type=1325 audit(1789170045.278:2695): table=nat:153 family=2 entries=54 op=nft_register_chain pid=4512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.705212] audit: type=1300 audit(1789170045.278:2695): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffc67f8d380 a2=0 a3=7ffc67f8d36c items=0 ppid=3419 pid=4512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.711827] audit: type=1327 audit(1789170045.278:2695): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 144.140339] audit: type=1130 audit(1789170065.717:2696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-3-172.31.30.17:22-20.76.204.135:40312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.060736] audit: type=1101 audit(1789170066.638:2697): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 145.067995] audit: type=1103 audit(1789170066.638:2698): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 145.074727] audit: type=1006 audit(1789170066.638:2699): pid=4519 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 145.078384] audit: type=1300 audit(1789170066.638:2699): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffd0db7b00 a2=3 a3=0 items=0 ppid=1 pid=4519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.086466] audit: type=1327 audit(1789170066.638:2699): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 145.103614] audit: type=1105 audit(1789170066.680:2700): pid=4519 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 145.111310] audit: type=1103 audit(1789170066.684:2701): pid=4523 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 146.344422] audit: type=1106 audit(1789170067.921:2702): pid=4519 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 146.352450] audit: type=1104 audit(1789170067.921:2703): pid=4519 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 151.517420] kauditd_printk_skb: 1 callbacks suppressed [ 151.517423] audit: type=1130 audit(1789170073.094:2705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4104-172.31.30.17:22-20.76.204.135:57836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.352831] audit: type=1101 audit(1789170073.930:2706): pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 152.360248] audit: type=1103 audit(1789170073.937:2707): pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 152.367948] audit: type=1006 audit(1789170073.937:2708): pid=4540 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 152.372778] audit: type=1300 audit(1789170073.937:2708): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe0cf31e30 a2=3 a3=0 items=0 ppid=1 pid=4540 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.379809] audit: type=1327 audit(1789170073.937:2708): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 152.387753] audit: type=1105 audit(1789170073.965:2709): pid=4540 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 152.394645] audit: type=1103 audit(1789170073.968:2710): pid=4544 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 152.935660] audit: type=1106 audit(1789170074.512:2711): pid=4540 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 152.942993] audit: type=1104 audit(1789170074.512:2712): pid=4540 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 158.103649] kauditd_printk_skb: 1 callbacks suppressed [ 158.103653] audit: type=1130 audit(1789170079.680:2714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-4105-172.31.30.17:22-20.76.204.135:55786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.956426] audit: type=1101 audit(1789170080.533:2715): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 158.962589] audit: type=1103 audit(1789170080.536:2716): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 158.969295] audit: type=1006 audit(1789170080.536:2717): pid=4558 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 158.972554] audit: type=1300 audit(1789170080.536:2717): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffccc6579f0 a2=3 a3=0 items=0 ppid=1 pid=4558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.979049] audit: type=1327 audit(1789170080.536:2717): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 158.987080] audit: type=1105 audit(1789170080.564:2718): pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 158.993964] audit: type=1103 audit(1789170080.568:2719): pid=4562 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 159.502322] audit: type=1106 audit(1789170081.079:2720): pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 159.512064] audit: type=1104 audit(1789170081.079:2721): pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 167.890268] kauditd_printk_skb: 23 callbacks suppressed [ 167.890272] audit: type=1130 audit(1789170089.467:2741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-5-172.31.30.17:22-20.76.204.135:46074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.719492] audit: type=1101 audit(1789170090.296:2742): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 168.726584] audit: type=1103 audit(1789170090.298:2743): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 168.733344] audit: type=1006 audit(1789170090.298:2744): pid=4605 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 168.736548] audit: type=1300 audit(1789170090.298:2744): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe625a5a00 a2=3 a3=0 items=0 ppid=1 pid=4605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.742084] audit: type=1327 audit(1789170090.298:2744): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 168.746865] audit: type=1105 audit(1789170090.324:2745): pid=4605 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 168.755506] audit: type=1103 audit(1789170090.331:2746): pid=4609 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 169.260280] audit: type=1106 audit(1789170090.836:2747): pid=4605 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 169.269322] audit: type=1104 audit(1789170090.836:2748): pid=4605 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 174.429655] kauditd_printk_skb: 1 callbacks suppressed [ 174.429659] audit: type=1130 audit(1789170096.006:2750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-6-172.31.30.17:22-20.76.204.135:45774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.294695] audit: type=1101 audit(1789170096.872:2751): pid=4621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 175.301407] audit: type=1103 audit(1789170096.872:2752): pid=4621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 175.307058] audit: type=1006 audit(1789170096.872:2753): pid=4621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 175.310312] audit: type=1300 audit(1789170096.872:2753): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff18ce85b0 a2=3 a3=0 items=0 ppid=1 pid=4621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.316306] audit: type=1327 audit(1789170096.872:2753): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 175.322859] audit: type=1105 audit(1789170096.900:2754): pid=4621 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 175.330254] audit: type=1103 audit(1789170096.907:2755): pid=4625 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 175.877423] audit: type=1106 audit(1789170097.454:2756): pid=4621 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 175.885434] audit: type=1104 audit(1789170097.455:2757): pid=4621 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 180.132029] kauditd_printk_skb: 9 callbacks suppressed [ 180.132033] audit: type=1106 audit(1789170101.709:2765): pid=4637 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 180.140666] audit: type=1104 audit(1789170101.717:2766): pid=4637 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 180.148721] audit: type=1131 audit(1789170101.726:2767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-7-172.31.30.17:22-20.76.204.135:45784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.295466] audit: type=1130 audit(1789170101.872:2768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-172.31.30.17:22-20.76.204.135:45798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.148559] audit: type=1101 audit(1789170102.725:2769): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 181.154626] audit: type=1103 audit(1789170102.725:2770): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 181.160781] audit: type=1006 audit(1789170102.725:2771): pid=4654 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 181.164488] audit: type=1300 audit(1789170102.725:2771): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc856f0c30 a2=3 a3=0 items=0 ppid=1 pid=4654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.170587] audit: type=1327 audit(1789170102.725:2771): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 181.176334] audit: type=1105 audit(1789170102.753:2772): pid=4654 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 185.266825] kauditd_printk_skb: 28 callbacks suppressed [ 185.266829] audit: type=1101 audit(1789170106.844:2791): pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 185.273671] audit: type=1103 audit(1789170106.850:2792): pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 185.279117] audit: type=1006 audit(1789170106.850:2793): pid=4689 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 185.282560] audit: type=1300 audit(1789170106.850:2793): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc546b8b40 a2=3 a3=0 items=0 ppid=1 pid=4689 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.288057] audit: type=1327 audit(1789170106.850:2793): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 185.304222] audit: type=1105 audit(1789170106.881:2794): pid=4689 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 185.310984] audit: type=1103 audit(1789170106.884:2795): pid=4693 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 185.827046] audit: type=1106 audit(1789170107.404:2796): pid=4689 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 185.833970] audit: type=1104 audit(1789170107.404:2797): pid=4689 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 185.839782] audit: type=1131 audit(1789170107.407:2798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-172.31.30.17:22-20.76.204.135:36690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.994638] kauditd_printk_skb: 6 callbacks suppressed [ 190.994642] audit: type=1130 audit(1789170112.571:2801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4110-172.31.30.17:22-20.76.204.135:36698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.834096] audit: type=1101 audit(1789170113.411:2802): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 191.841415] audit: type=1103 audit(1789170113.414:2803): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 191.848674] audit: type=1006 audit(1789170113.414:2804): pid=4707 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 191.852032] audit: type=1300 audit(1789170113.414:2804): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdd2e6c1b0 a2=3 a3=0 items=0 ppid=1 pid=4707 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.858057] audit: type=1327 audit(1789170113.414:2804): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 191.862383] audit: type=1105 audit(1789170113.439:2805): pid=4707 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 191.869373] audit: type=1103 audit(1789170113.442:2806): pid=4711 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 192.376888] audit: type=1106 audit(1789170113.954:2807): pid=4707 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 192.385325] audit: type=1104 audit(1789170113.954:2808): pid=4707 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 197.544995] kauditd_printk_skb: 1 callbacks suppressed [ 197.544999] audit: type=1130 audit(1789170119.122:2810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4111-172.31.30.17:22-20.76.204.135:48242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.381750] audit: type=1101 audit(1789170119.959:2811): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 198.388326] audit: type=1103 audit(1789170119.961:2812): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 198.394573] audit: type=1006 audit(1789170119.961:2813): pid=4723 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 198.397517] audit: type=1300 audit(1789170119.961:2813): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffec5e71b40 a2=3 a3=0 items=0 ppid=1 pid=4723 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.403573] audit: type=1327 audit(1789170119.961:2813): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 198.414494] audit: type=1105 audit(1789170119.991:2814): pid=4723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 198.429622] audit: type=1103 audit(1789170119.995:2815): pid=4729 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 198.968616] audit: type=1106 audit(1789170120.545:2816): pid=4723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 198.975229] audit: type=1104 audit(1789170120.548:2817): pid=4723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 202.966993] kauditd_printk_skb: 9 callbacks suppressed [ 202.966997] audit: type=1334 audit(1789170124.544:2825): prog-id=136 op=UNLOAD [ 202.969934] audit: type=1334 audit(1789170124.544:2826): prog-id=140 op=UNLOAD [ 203.049075] audit: type=1334 audit(1789170124.626:2827): prog-id=1208 op=UNLOAD [ 203.049081] audit: type=1334 audit(1789170124.626:2828): prog-id=1224 op=UNLOAD [ 203.185873] audit: type=1334 audit(1789170124.763:2829): prog-id=128 op=UNLOAD [ 203.188970] audit: type=1334 audit(1789170124.763:2830): prog-id=132 op=UNLOAD [ 203.190651] audit: type=1334 audit(1789170124.767:2831): prog-id=118 op=UNLOAD [ 203.192140] audit: type=1334 audit(1789170124.767:2832): prog-id=122 op=UNLOAD This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:42:05 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 204.955802] audit: type=1106 audit(1789170126.533:2833): pid=4741 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 204.963047] audit: type=1104 audit(1789170126.533:2834): pid=4741 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:42:06 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 208.299473] kauditd_printk_skb: 59 callbacks suppressed [ 208.299477] audit: type=1101 audit(1789170129.876:2864): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 208.306834] audit: type=1103 audit(1789170129.878:2865): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 208.312674] audit: type=1006 audit(1789170129.878:2866): pid=4908 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 208.316329] audit: type=1300 audit(1789170129.878:2866): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb4af8d50 a2=3 a3=0 items=0 ppid=1 pid=4908 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.322716] audit: type=1327 audit(1789170129.878:2866): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 208.336073] audit: type=1105 audit(1789170129.913:2867): pid=4908 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 208.342705] audit: type=1103 audit(1789170129.916:2868): pid=5003 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 208.774526] audit: type=1106 audit(1789170130.351:2869): pid=4908 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 208.782017] audit: type=1104 audit(1789170130.351:2870): pid=4908 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.204.135 addr=20.76.204.135 terminal=ssh res=success' [ 208.787532] audit: type=1131 audit(1789170130.354:2871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-8-172.31.30.17:22-20.76.204.135:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 214.545340] kauditd_printk_skb: 94 callbacks suppressed [ 214.545344] audit: type=1334 audit(1789170136.122:2912): prog-id=1273 op=LOAD [ 214.548065] audit: type=1300 audit(1789170136.122:2912): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd040baa70 a2=74 a3=7ffd040baa70 items=0 ppid=5156 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.553822] audit: type=1327 audit(1789170136.122:2912): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 214.556051] audit: type=1334 audit(1789170136.122:2913): prog-id=1273 op=UNLOAD [ 214.557428] audit: type=1300 audit(1789170136.122:2913): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffd040baa70 a2=74 a3=7ffd040baa70 items=0 ppid=5156 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.562888] audit: type=1327 audit(1789170136.122:2913): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 214.565142] audit: type=1334 audit(1789170136.123:2914): prog-id=1274 op=LOAD [ 214.566415] audit: type=1300 audit(1789170136.123:2914): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd040b9af0 a2=90 a3=2 items=0 ppid=5156 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 214.571913] audit: type=1327 audit(1789170136.123:2914): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 214.573999] audit: type=1334 audit(1789170136.123:2915): prog-id=1274 op=UNLOAD [ 215.137087] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:42:20 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: [ 220.325387] kauditd_printk_skb: 6098 callbacks suppressed [ 220.325392] audit: type=1334 audit(1789170141.902:4933): prog-id=2232 op=LOAD [ 220.329631] audit: type=1300 audit(1789170141.902:4933): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff49b45a90 a2=74 a3=7fff49b45a90 items=0 ppid=5156 pid=5776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.337627] audit: type=1327 audit(1789170141.902:4933): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323135375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 220.344160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.345413] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 220.346819] audit: backlog limit exceeded [ 220.348026] audit: type=1334 audit(1789170141.902:4934): prog-id=2232 op=UNLOAD [ 220.349520] audit: type=1300 audit(1789170141.902:4934): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fff49b45a90 a2=74 a3=7fff49b45a90 items=0 ppid=5156 pid=5776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.355479] audit: type=1327 audit(1789170141.902:4934): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323135375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 220.364901] audit: type=1334 audit(1789170141.902:4935): prog-id=2233 op=LOAD This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:42:21 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0 ip-172-31-30-17 login: This is ip-172-31-30-17 (Linux x86_64 6.12.109-flatcar) 23:42:23 SSH host key: SHA256:vn/nRGZPtf/TZK8jqj2V/bpGJ/J/n2hRsAXosBCuAow (RSA) SSH host key: SHA256:ZLr5QZgGBe5kh+05zVDH+1cYMmZXpk2+Jpi7WKDdFPE (ED25519) SSH host key: SHA256:NKkGGwzbU6NpBrwdZSz4qYJtqcKTr6nhNi+BnzxBKxw (MLDSA44-ED25519) SSH host key: SHA256:TcHOZ+cDPHU8YiBmsBrz5bmDv91HuNJ6Urw0IfRrHSg (ECDSA) eth0: 172.31.30.17 fe80::4ff:d5ff:fedb:edc3%eth0