0m] Finished prepare-helm.service - Unpack helm to /opt/bin. [ OK ] Started containerd.service - containerd container runtime. [ OK ] Started kubelet.service - kubelet: The Kubernetes Node Agent. [ OK ] Finished sshd-keygen.service - Generate sshd host keys. Starting issuegen.service - Generate /run/issue... [ OK ] Finished issuegen.service - Generate /run/issue. Starting systemd-user-sessions.service - Permit User Sessions... [ OK ] Finished systemd-user-sessions.service - Permit User Sessions. [ OK ] Started getty@tty1.service - Getty on tty1. [ OK ] Started serial-getty@ttyS0.service - Serial Getty on ttyS0. [ OK ] Reached target getty.target - Login Prompts. [ OK ] Reached target multi-user.target - Multi-User System. [!p]104\[?7h78P+q6E616D65\2026/09/15 04:43:59Z: Amazon SSM Agent v3.3.0.0 is running 2026/09/15 04:43:59Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/09/15 04:43:59Z: OsVersion: 4823.0.0 This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:44:00 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: [ 47.142909] kauditd_printk_skb: 58 callbacks suppressed [ 47.142914] audit: type=1305 audit(1789447451.946:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 47.148665] audit: type=1300 audit(1789447451.946:169): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeb08c150 a2=420 a3=0 items=0 ppid=2093 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 47.155744] audit: type=1327 audit(1789447451.946:169): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 47.158916] audit: type=1130 audit(1789447451.959:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.163264] audit: type=1131 audit(1789447451.959:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.167630] audit: type=1106 audit(1789447451.964:172): pid=2087 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 47.172487] audit: type=1104 audit(1789447451.964:173): pid=2087 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 47.327930] audit: type=1106 audit(1789447452.136:174): pid=2082 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 47.335518] audit: type=1104 audit(1789447452.136:175): pid=2082 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 47.343377] audit: type=1131 audit(1789447452.144:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.27.70:22-20.101.212.173:48240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.652181] kauditd_printk_skb: 11 callbacks suppressed [ 52.652186] audit: type=1325 audit(1789447457.461:186): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.656796] audit: type=1300 audit(1789447457.461:186): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffcc245aa0 a2=0 a3=0 items=0 ppid=2144 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.663407] audit: type=1327 audit(1789447457.461:186): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 52.668217] audit: type=1325 audit(1789447457.477:187): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.672467] audit: type=1300 audit(1789447457.477:187): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffeed159f0 a2=0 a3=0 items=0 ppid=2144 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.679021] audit: type=1327 audit(1789447457.477:187): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 52.682330] audit: type=1325 audit(1789447457.488:188): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.685807] audit: type=1300 audit(1789447457.488:188): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff207bcc0 a2=0 a3=0 items=0 ppid=2144 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.692432] audit: type=1327 audit(1789447457.488:188): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 52.695887] audit: type=1325 audit(1789447457.495:189): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.927777] Initializing XFRM netlink socket This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:44:18 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:44:19 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: [ 62.428911] kauditd_printk_skb: 92 callbacks suppressed [ 62.428918] audit: type=1131 audit(1789447467.237:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.444003] audit: type=1334 audit(1789447467.253:223): prog-id=38 op=UNLOAD [ 66.766106] audit: type=1130 audit(1789447471.575:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.862260] audit: type=1131 audit(1789447471.670:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 73.029401] audit: type=1130 audit(1789447477.837:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 73.036373] audit: type=1131 audit(1789447477.837:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 73.363720] zram_generator::config[2661]: No configuration found. [ 74.070119] audit: type=1334 audit(1789447478.879:228): prog-id=42 op=LOAD [ 74.071956] audit: type=1334 audit(1789447478.879:229): prog-id=26 op=UNLOAD [ 74.073488] audit: type=1334 audit(1789447478.880:230): prog-id=43 op=LOAD [ 74.075215] audit: type=1334 audit(1789447478.880:231): prog-id=44 op=LOAD [ 74.076965] audit: type=1334 audit(1789447478.880:232): prog-id=27 op=UNLOAD [ 74.078647] audit: type=1334 audit(1789447478.880:233): prog-id=28 op=UNLOAD [ 74.080301] audit: type=1334 audit(1789447478.887:234): prog-id=45 op=LOAD [ 74.082108] audit: type=1334 audit(1789447478.887:235): prog-id=46 op=LOAD [ 82.810566] zram_generator::config[3339]: No configuration found. [ 83.584952] kauditd_printk_skb: 202 callbacks suppressed [ 83.584957] audit: type=1334 audit(1789447488.394:330): prog-id=92 op=LOAD [ 83.588208] audit: type=1334 audit(1789447488.394:331): prog-id=42 op=UNLOAD [ 83.590018] audit: type=1334 audit(1789447488.395:332): prog-id=93 op=LOAD [ 83.591697] audit: type=1334 audit(1789447488.396:333): prog-id=94 op=LOAD [ 83.593456] audit: type=1334 audit(1789447488.396:334): prog-id=43 op=UNLOAD [ 83.595212] audit: type=1334 audit(1789447488.396:335): prog-id=44 op=UNLOAD [ 83.597152] audit: type=1334 audit(1789447488.404:336): prog-id=95 op=LOAD [ 83.598919] audit: type=1334 audit(1789447488.404:337): prog-id=96 op=LOAD [ 83.600346] audit: type=1334 audit(1789447488.404:338): prog-id=45 op=UNLOAD [ 83.602163] audit: type=1334 audit(1789447488.404:339): prog-id=46 op=UNLOAD [ 89.056476] kauditd_printk_skb: 54 callbacks suppressed [ 89.056481] audit: type=1334 audit(1789447493.865:394): prog-id=118 op=LOAD [ 89.064112] audit: type=1334 audit(1789447493.870:395): prog-id=119 op=LOAD [ 89.067927] audit: type=1300 audit(1789447493.870:395): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1419089d1f90 a2=98 a3=0 items=0 ppid=3499 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.075693] audit: type=1327 audit(1789447493.870:395): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665653235383535346238373866383864313732306333633330313431 [ 89.084955] audit: type=1334 audit(1789447493.876:396): prog-id=119 op=UNLOAD [ 89.086815] audit: type=1300 audit(1789447493.876:396): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3499 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.093781] audit: type=1327 audit(1789447493.876:396): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665653235383535346238373866383864313732306333633330313431 [ 89.102673] audit: type=1334 audit(1789447493.876:397): prog-id=120 op=LOAD [ 89.108140] audit: type=1300 audit(1789447493.876:397): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1419089d2268 a2=98 a3=0 items=0 ppid=3499 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.114958] audit: type=1327 audit(1789447493.876:397): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665653235383535346238373866383864313732306333633330313431 [ 99.003545] kauditd_printk_skb: 224 callbacks suppressed [ 99.003551] audit: type=1334 audit(1789447503.812:474): prog-id=136 op=LOAD [ 99.006889] audit: type=1334 audit(1789447503.815:475): prog-id=137 op=LOAD [ 99.008329] audit: type=1300 audit(1789447503.815:475): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2ee20da31f90 a2=98 a3=0 items=0 ppid=3499 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.014555] audit: type=1327 audit(1789447503.815:475): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383338313363383738356430633161393239326262393136396332 [ 99.021275] audit: type=1334 audit(1789447503.816:476): prog-id=137 op=UNLOAD [ 99.023069] audit: type=1300 audit(1789447503.816:476): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3499 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.028892] audit: type=1327 audit(1789447503.816:476): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383338313363383738356430633161393239326262393136396332 [ 99.037645] audit: type=1334 audit(1789447503.816:477): prog-id=138 op=LOAD [ 99.040197] audit: type=1300 audit(1789447503.816:477): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2ee20da32268 a2=98 a3=0 items=0 ppid=3499 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.046909] audit: type=1327 audit(1789447503.816:477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383338313363383738356430633161393239326262393136396332 [ 104.311511] kauditd_printk_skb: 122 callbacks suppressed [ 104.311516] audit: type=1334 audit(1789447509.120:526): prog-id=164 op=LOAD [ 104.314296] audit: type=1300 audit(1789447509.120:526): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe8e08978 a2=74 a3=0 items=0 ppid=4034 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.320509] audit: type=1327 audit(1789447509.120:526): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 104.322759] audit: type=1334 audit(1789447509.124:527): prog-id=164 op=UNLOAD [ 104.324405] audit: type=1300 audit(1789447509.124:527): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff89b19f10 a2=74 a3=0 items=0 ppid=4034 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.331445] audit: type=1327 audit(1789447509.124:527): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 104.333736] audit: type=1334 audit(1789447509.124:528): prog-id=165 op=LOAD [ 104.335336] audit: type=1300 audit(1789447509.124:528): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe8e079b8 a2=90 a3=2 items=0 ppid=4034 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.342534] audit: type=1327 audit(1789447509.124:528): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 104.344711] audit: type=1334 audit(1789447509.139:529): prog-id=165 op=UNLOAD [ 108.133275] NET: Registered PF_ALG protocol family This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:45:13 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: [ 109.314582] kauditd_printk_skb: 5825 callbacks suppressed [ 109.314587] audit: type=1325 audit(1789447514.123:2454): table=filter:129 family=2 entries=1 op=nft_register_rule pid=4432 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 109.319302] audit: type=1300 audit(1789447514.123:2454): arch=c00000b7 syscall=211 success=yes exit=852 a0=3 a1=ffffed0f1a80 a2=0 a3=ffffae5b25c0 items=0 ppid=4034 pid=4432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.326454] audit: type=1327 audit(1789447514.123:2454): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F4F5554505554002D6D006D61726B0000002D2D6D61726B00307830303030306530302F30783030303030663030002D6D006D61726B0000002D2D6D61726B00307830303030306430302F30783030303030663030002D6D006D61726B [ 109.334906] audit: type=1325 audit(1789447514.128:2455): table=nat:130 family=2 entries=1 op=nft_register_rule pid=4433 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 109.339009] audit: type=1300 audit(1789447514.128:2455): arch=c00000b7 syscall=211 success=yes exit=976 a0=3 a1=ffffeb487bb0 a2=0 a3=ffff8f75e5c0 items=0 ppid=4034 pid=4433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.353202] audit: type=1327 audit(1789447514.128:2455): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F504F53545F6E61740000002D64003139322E3136382E302E302F3234002D73003139322E3136382E302E302F32340000002D6F0063696C69756D5F2B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D206D61737175657261 [ 109.364496] audit: type=1325 audit(1789447514.138:2456): table=nat:131 family=2 entries=1 op=nft_register_rule pid=4434 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:45:14 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp[ 109.373625] audit: type=1300 audit(1789447514.138:2456): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff08030f0 a2=0 a3=ffff9a4935c0 items=0 ppid=4034 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) 9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 [ 109.387487] audit: type=1327 audit(1789447514.138:2456): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F504F53545F6E6174002D6D006D61726B002D2D6D61726B00307830303030306130302F30783030303030653030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C7564652070726F78792072657475726E20747261666669632066 ip-172-31-27-70[ 109.394074] audit: type=1325 audit(1789447514.145:2457): table=nat:132 family=2 entries=1 op=nft_register_rule pid=4435 subj=system_u:system_r:spc_t:s0 comm="iptables" login: [ 110.176106] eth0: renamed from tmp4215b [ 110.245691] eth0: renamed from tmp9871a This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:45:15 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:45:16 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:45:17 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:45:18 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: [ 118.657430] kauditd_printk_skb: 158 callbacks suppressed [ 118.657436] audit: type=1334 audit(1789447523.466:2510): prog-id=1147 op=LOAD [ 118.660757] audit: type=1300 audit(1789447523.466:2510): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffff4a0ed8 a2=74 a3=11 items=0 ppid=4034 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 118.668994] audit: type=1327 audit(1789447523.466:2510): proctitle=74630066696C746572007265706C61636500646576006C786365653139306663316636313400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003133305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 118.677937] audit: type=1334 audit(1789447523.470:2511): prog-id=1147 op=UNLOAD [ 118.679921] audit: type=1300 audit(1789447523.470:2511): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff9c836f50 a2=74 a3=11 items=0 ppid=4034 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 118.688933] audit: type=1327 audit(1789447523.470:2511): proctitle=74630066696C746572007265706C61636500646576006C786365653139306663316636313400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003133305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 118.697903] audit: type=1334 audit(1789447523.470:2512): prog-id=1148 op=LOAD [ 118.700938] audit: type=1300 audit(1789447523.470:2512): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffff4a0eb8 a2=80 a3=0 items=0 ppid=4034 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 118.708926] audit: type=1327 audit(1789447523.470:2512): proctitle=74630066696C746572007265706C61636500646576006C786365653139306663316636313400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003133305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 118.716915] audit: type=1334 audit(1789447523.470:2513): prog-id=1148 op=UNLOAD [ 152.037436] kauditd_printk_skb: 468 callbacks suppressed [ 152.037442] audit: type=1130 audit(1789447556.847:2672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4101-172.31.27.70:22-20.101.212.173:49412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.921434] audit: type=1101 audit(1789447557.731:2673): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 152.929324] audit: type=1103 audit(1789447557.739:2674): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 152.934850] audit: type=1006 audit(1789447557.739:2675): pid=4715 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 152.938551] audit: type=1300 audit(1789447557.739:2675): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe5ba9ce0 a2=3 a3=0 items=0 ppid=1 pid=4715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.945075] audit: type=1327 audit(1789447557.739:2675): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 152.961391] audit: type=1105 audit(1789447557.771:2676): pid=4715 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 152.969326] audit: type=1103 audit(1789447557.779:2677): pid=4719 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 153.578029] audit: type=1106 audit(1789447558.388:2678): pid=4715 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 153.587597] audit: type=1104 audit(1789447558.388:2679): pid=4715 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 158.766780] kauditd_printk_skb: 1 callbacks suppressed [ 158.766785] audit: type=1130 audit(1789447563.576:2681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4102-172.31.27.70:22-20.101.212.173:51284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.696688] audit: type=1101 audit(1789447564.506:2682): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 159.704626] audit: type=1103 audit(1789447564.514:2683): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 159.710819] audit: type=1006 audit(1789447564.514:2684): pid=4733 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 159.714537] audit: type=1300 audit(1789447564.514:2684): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffef905c60 a2=3 a3=0 items=0 ppid=1 pid=4733 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.721930] audit: type=1327 audit(1789447564.514:2684): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 159.742639] audit: type=1105 audit(1789447564.552:2685): pid=4733 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 159.750741] audit: type=1103 audit(1789447564.560:2686): pid=4737 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 160.341144] audit: type=1106 audit(1789447565.151:2687): pid=4733 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 160.348909] audit: type=1104 audit(1789447565.151:2688): pid=4733 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 165.531141] kauditd_printk_skb: 1 callbacks suppressed [ 165.531146] audit: type=1130 audit(1789447570.341:2690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4-172.31.27.70:22-20.101.212.173:55148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.450653] audit: type=1101 audit(1789447571.260:2691): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.457818] audit: type=1103 audit(1789447571.267:2692): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.463912] audit: type=1006 audit(1789447571.267:2693): pid=4751 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 166.467481] audit: type=1300 audit(1789447571.267:2693): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffff4f3f40 a2=3 a3=0 items=0 ppid=1 pid=4751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.474816] audit: type=1327 audit(1789447571.267:2693): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 166.486173] audit: type=1105 audit(1789447571.296:2694): pid=4751 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.494082] audit: type=1103 audit(1789447571.303:2695): pid=4755 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 167.100445] audit: type=1106 audit(1789447571.910:2696): pid=4751 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 167.108624] audit: type=1104 audit(1789447571.910:2697): pid=4751 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 172.281813] kauditd_printk_skb: 1 callbacks suppressed [ 172.281818] audit: type=1130 audit(1789447577.091:2699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4103-172.31.27.70:22-20.101.212.173:55160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.188306] audit: type=1101 audit(1789447577.998:2700): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.196205] audit: type=1103 audit(1789447578.006:2701): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.203464] audit: type=1006 audit(1789447578.006:2702): pid=4768 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 173.207389] audit: type=1300 audit(1789447578.006:2702): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffee1ffaa0 a2=3 a3=0 items=0 ppid=1 pid=4768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.214217] audit: type=1327 audit(1789447578.006:2702): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 173.234178] audit: type=1105 audit(1789447578.044:2703): pid=4768 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.241911] audit: type=1103 audit(1789447578.051:2704): pid=4772 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.832924] audit: type=1106 audit(1789447578.642:2705): pid=4768 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.840166] audit: type=1104 audit(1789447578.642:2706): pid=4768 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 177.325944] kauditd_printk_skb: 20 callbacks suppressed [ 177.325951] audit: type=1106 audit(1789447582.134:2723): pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 177.334950] audit: type=1104 audit(1789447582.134:2724): pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 177.340714] audit: type=1131 audit(1789447582.145:2725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4104-172.31.27.70:22-20.101.212.173:60532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.505761] audit: type=1130 audit(1789447587.315:2726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4105-172.31.27.70:22-20.101.212.173:60542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.409727] audit: type=1101 audit(1789447588.219:2727): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 183.418913] audit: type=1103 audit(1789447588.228:2728): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 183.424457] audit: type=1006 audit(1789447588.228:2729): pid=4817 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 183.429257] audit: type=1300 audit(1789447588.228:2729): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe3c13040 a2=3 a3=0 items=0 ppid=1 pid=4817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.437287] audit: type=1327 audit(1789447588.228:2729): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 183.464746] audit: type=1105 audit(1789447588.274:2730): pid=4817 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 183.472841] audit: type=1103 audit(1789447588.282:2731): pid=4821 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 184.037986] audit: type=1106 audit(1789447588.847:2732): pid=4817 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 184.045279] audit: type=1104 audit(1789447588.847:2733): pid=4817 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 189.215732] kauditd_printk_skb: 1 callbacks suppressed [ 189.215737] audit: type=1130 audit(1789447594.025:2735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4106-172.31.27.70:22-20.101.212.173:35666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.114519] audit: type=1101 audit(1789447594.924:2736): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 190.121905] audit: type=1103 audit(1789447594.931:2737): pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 190.128978] audit: type=1006 audit(1789447594.931:2738): pid=4833 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 190.133659] audit: type=1300 audit(1789447594.931:2738): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe4825590 a2=3 a3=0 items=0 ppid=1 pid=4833 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.140690] audit: type=1327 audit(1789447594.931:2738): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 190.160008] audit: type=1105 audit(1789447594.969:2739): pid=4833 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 190.167663] audit: type=1103 audit(1789447594.977:2740): pid=4837 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 190.741762] audit: type=1106 audit(1789447595.551:2741): pid=4833 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 190.749002] audit: type=1104 audit(1789447595.552:2742): pid=4833 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 195.065419] kauditd_printk_skb: 20 callbacks suppressed [ 195.065425] audit: type=1325 audit(1789447599.875:2759): table=filter:150 family=2 entries=20 op=nft_register_rule pid=4876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 195.074286] audit: type=1300 audit(1789447599.875:2759): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffc0dbc200 a2=0 a3=1 items=0 ppid=3623 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.084050] audit: type=1327 audit(1789447599.875:2759): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 195.090590] audit: type=1325 audit(1789447599.882:2760): table=nat:151 family=2 entries=18 op=nft_register_rule pid=4876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 195.094433] audit: type=1300 audit(1789447599.882:2760): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffc0dbc200 a2=0 a3=1 items=0 ppid=3623 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.101444] audit: type=1327 audit(1789447599.882:2760): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 195.267116] audit: type=1106 audit(1789447600.075:2761): pid=4862 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 195.274447] audit: type=1104 audit(1789447600.075:2762): pid=4862 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 195.281785] audit: type=1131 audit(1789447600.091:2763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-6-172.31.27.70:22-20.101.212.173:35684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.442283] audit: type=1130 audit(1789447600.252:2764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-7-172.31.27.70:22-20.101.212.173:60752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.165097] kauditd_printk_skb: 27 callbacks suppressed [ 203.165102] audit: type=1325 audit(1789447607.975:2784): table=filter:154 family=2 entries=20 op=nft_register_rule pid=4913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 203.170416] audit: type=1300 audit(1789447607.975:2784): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe0175890 a2=0 a3=1 items=0 ppid=3623 pid=4913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.177275] audit: type=1327 audit(1789447607.975:2784): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 203.183028] audit: type=1325 audit(1789447607.991:2785): table=nat:155 family=2 entries=102 op=nft_register_chain pid=4913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 203.186541] audit: type=1300 audit(1789447607.991:2785): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=ffffe0175890 a2=0 a3=1 items=0 ppid=3623 pid=4913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.193559] audit: type=1327 audit(1789447607.991:2785): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 204.203798] audit: type=1130 audit(1789447609.013:2786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4108-172.31.27.70:22-20.101.212.173:52158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.104289] audit: type=1101 audit(1789447609.914:2787): pid=4915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 205.112532] audit: type=1103 audit(1789447609.922:2788): pid=4915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 205.119218] audit: type=1006 audit(1789447609.922:2789): pid=4915 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 210.920578] kauditd_printk_skb: 7 callbacks suppressed [ 210.920584] audit: type=1130 audit(1789447615.730:2795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-9-172.31.27.70:22-20.101.212.173:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.823894] audit: type=1101 audit(1789447616.633:2796): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 211.831909] audit: type=1103 audit(1789447616.641:2797): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 211.837763] audit: type=1006 audit(1789447616.642:2798): pid=4937 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 211.842578] audit: type=1300 audit(1789447616.642:2798): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe30f5a80 a2=3 a3=0 items=0 ppid=1 pid=4937 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.849119] audit: type=1327 audit(1789447616.642:2798): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 211.865199] audit: type=1105 audit(1789447616.675:2799): pid=4937 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 211.873110] audit: type=1103 audit(1789447616.683:2800): pid=4941 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 212.449545] audit: type=1106 audit(1789447617.258:2801): pid=4937 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 212.457301] audit: type=1104 audit(1789447617.259:2802): pid=4937 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 216.978912] kauditd_printk_skb: 9 callbacks suppressed [ 216.978919] audit: type=1334 audit(1789447621.787:2810): prog-id=146 op=UNLOAD [ 216.984152] audit: type=1334 audit(1789447621.787:2811): prog-id=150 op=UNLOAD [ 217.084490] audit: type=1334 audit(1789447621.894:2812): prog-id=1208 op=UNLOAD [ 217.086716] audit: type=1334 audit(1789447621.894:2813): prog-id=1234 op=UNLOAD [ 217.155539] audit: type=1334 audit(1789447621.965:2814): prog-id=128 op=UNLOAD [ 217.158251] audit: type=1334 audit(1789447621.965:2815): prog-id=132 op=UNLOAD [ 217.246311] audit: type=1334 audit(1789447622.056:2816): prog-id=118 op=UNLOAD [ 217.249549] audit: type=1334 audit(1789447622.056:2817): prog-id=122 op=UNLOAD This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:47:02 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: [ 218.965626] audit: type=1106 audit(1789447623.775:2818): pid=4953 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 218.973615] audit: type=1104 audit(1789447623.778:2819): pid=4953 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:47:03 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: [ 222.066084] kauditd_printk_skb: 9 callbacks suppressed [ 222.066090] audit: type=1106 audit(1789447626.876:2827): pid=5103 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 222.077100] audit: type=1104 audit(1789447626.876:2828): pid=5103 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 222.083688] audit: type=1131 audit(1789447626.883:2829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4110-172.31.27.70:22-20.101.212.173:59026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 222.250643] audit: type=1130 audit(1789447627.060:2830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10-172.31.27.70:22-20.101.212.173:59038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 222.406287] audit: type=1334 audit(1789447627.216:2831): prog-id=1245 op=LOAD [ 222.408343] audit: type=1334 audit(1789447627.218:2832): prog-id=1246 op=LOAD [ 222.410403] audit: type=1300 audit(1789447627.218:2832): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=43483f45df90 a2=98 a3=0 items=0 ppid=5132 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.416833] audit: type=1327 audit(1789447627.218:2832): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732343666306464343730333561343961396631356336663636313761 [ 222.422829] audit: type=1334 audit(1789447627.218:2833): prog-id=1246 op=UNLOAD [ 222.424949] audit: type=1300 audit(1789447627.218:2833): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5132 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 227.068593] kauditd_printk_skb: 2472 callbacks suppressed [ 227.068599] audit: type=1334 audit(1789447631.878:3673): prog-id=1661 op=LOAD [ 227.071792] audit: type=1300 audit(1789447631.878:3673): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7af0098 a2=90 a3=2 items=0 ppid=5370 pid=5433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.079941] audit: type=1327 audit(1789447631.878:3673): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 227.082671] audit: type=1334 audit(1789447631.878:3674): prog-id=1661 op=UNLOAD [ 227.085085] audit: type=1300 audit(1789447631.878:3674): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffa78aef10 a2=0 a3=2 items=0 ppid=5370 pid=5433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.092188] audit: type=1327 audit(1789447631.878:3674): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 227.094953] audit: type=1334 audit(1789447631.880:3675): prog-id=1662 op=LOAD [ 227.096548] audit: type=1300 audit(1789447631.880:3675): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7af0098 a2=90 a3=2 items=0 ppid=5370 pid=5433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.102942] audit: type=1327 audit(1789447631.880:3675): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 227.105347] audit: type=1334 audit(1789447631.881:3676): prog-id=1662 op=UNLOAD [ 227.549056] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:47:17 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:47:18 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: This is ip-172-31-27-70 (Linux aarch64 6.12.109-flatcar) 04:47:20 SSH host key: SHA256:VnuhmQ6h3dFZWlxZZN0NS7tkqxpx6R6HMUlA7bsQ9RE (RSA) SSH host key: SHA256:VVLbfwHNv3RIuKh0JIWhiOotkeN+9XCMeJewxEP/NGU (MLDSA44-ED25519) SSH host key: SHA256:HgdRyo7IZbXjQp9ZYMPu9WvNBCl2OqhuwhjiujCKo5s (ECDSA) SSH host key: SHA256:pgm/0nQWtVXYs05dp6904e571kEm04WBDTYrIkPa3zY (ED25519) eth0: 172.31.27.70 fe80::4f0:69ff:fe6f:f57d%eth0 ip-172-31-27-70 login: [ 237.506416] kauditd_printk_skb: 3770 callbacks suppressed [ 237.506422] audit: type=1106 audit(1789447642.316:4939): pid=5268 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 237.527219] audit: type=1104 audit(1789447642.325:4940): pid=5268 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 237.542064] audit: type=1131 audit(1789447642.329:4941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4111-172.31.27.70:22-20.101.212.173:45848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 240.838763] audit: type=1334 audit(1789447645.648:4942): prog-id=2232 op=LOAD [ 240.840383] audit: type=1300 audit(1789447645.648:4942): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdcb9f8f8 a2=74 a3=11 items=0 ppid=5370 pid=6008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 240.847541] audit: type=1327 audit(1789447645.648:4942): proctitle=74630066696C746572007265706C61636500646576006C786365653139306663316636313400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003133305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 240.854378] audit: type=1334 audit(1789447645.649:4943): prog-id=2232 op=UNLOAD [ 240.856453] audit: type=1300 audit(1789447645.649:4943): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff97795f50 a2=74 a3=11 items=0 ppid=5370 pid=6008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 240.864371] audit: type=1327 audit(1789447645.649:4943): proctitle=74630066696C746572007265706C61636500646576006C786365653139306663316636313400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003133305F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 240.869826] audit: type=1334 audit(1789447645.649:4944): prog-id=2233 op=LOAD [ 243.376617] kauditd_printk_skb: 423 callbacks suppressed [ 243.376623] audit: type=1334 audit(1789447648.186:5088): prog-id=2310 op=LOAD [ 243.379362] audit: type=1300 audit(1789447648.186:5088): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffed259108 a2=74 a3=10 items=0 ppid=5370 pid=6023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 243.387247] audit: type=1327 audit(1789447648.186:5088): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003436355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 243.393780] audit: type=1334 audit(1789447648.189:5089): prog-id=2310 op=UNLOAD [ 243.395446] audit: type=1300 audit(1789447648.189:5089): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff9dfeaf50 a2=74 a3=10 items=0 ppid=5370 pid=6023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 243.401806] audit: type=1327 audit(1789447648.189:5089): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003436355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 243.407060] audit: type=1334 audit(1789447648.189:5090): prog-id=2311 op=LOAD [ 243.410517] audit: type=1300 audit(1789447648.189:5090): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffed2590e8 a2=80 a3=0 items=0 ppid=5370 pid=6023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 243.416717] audit: type=1327 audit(1789447648.189:5090): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003436355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 243.421811] audit: type=1334 audit(1789447648.189:5091): prog-id=2311 op=UNLOAD