OsProductName: Flatcar Container Linux by Kinvolk 2026/09/15 04:45:31Z: OsVersion: 4823.0.0 [ OK ] Started kubelet.service - kubelet: The Kubernetes Node Agent. [ OK ] Reached target multi-user.target - Multi-User System. [!p]104\[?7h78P+q6E616D65\ This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:45:35 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 47.232226] kauditd_printk_skb: 58 callbacks suppressed [ 47.232231] audit: type=1305 audit(1789447544.698:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 47.237232] audit: type=1300 audit(1789447544.698:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffc882d90 a2=420 a3=0 items=0 ppid=1988 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 47.243438] audit: type=1327 audit(1789447544.698:163): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 47.246195] audit: type=1130 audit(1789447544.712:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.250815] audit: type=1131 audit(1789447544.712:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.255233] audit: type=1106 audit(1789447544.717:166): pid=1982 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 47.260043] audit: type=1104 audit(1789447544.717:167): pid=1982 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 47.417033] audit: type=1106 audit(1789447544.888:168): pid=1977 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 47.425017] audit: type=1104 audit(1789447544.888:169): pid=1977 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 47.431177] audit: type=1131 audit(1789447544.896:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-172.31.18.118:22-20.101.212.173:46148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.922720] kauditd_printk_skb: 13 callbacks suppressed [ 55.922726] audit: type=1325 audit(1789447553.397:182): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2118 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 55.928358] audit: type=1300 audit(1789447553.397:182): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe585eba0 a2=0 a3=0 items=0 ppid=2056 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.935183] audit: type=1327 audit(1789447553.397:182): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 55.938328] audit: type=1325 audit(1789447553.403:183): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2120 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 55.941766] audit: type=1300 audit(1789447553.403:183): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc87e1ec0 a2=0 a3=0 items=0 ppid=2056 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.948614] audit: type=1327 audit(1789447553.403:183): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 55.951859] audit: type=1325 audit(1789447553.413:184): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2122 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 55.955229] audit: type=1300 audit(1789447553.413:184): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb7a0eb0 a2=0 a3=0 items=0 ppid=2056 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.961989] audit: type=1327 audit(1789447553.413:184): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 55.965240] audit: type=1325 audit(1789447553.417:185): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2124 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 56.253226] Initializing XFRM netlink socket This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:45:54 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:45:55 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 62.723462] kauditd_printk_skb: 92 callbacks suppressed [ 62.723468] audit: type=1131 audit(1789447560.201:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.739563] audit: type=1334 audit(1789447560.218:219): prog-id=35 op=UNLOAD [ 69.434384] audit: type=1130 audit(1789447566.917:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.573708] audit: type=1131 audit(1789447567.056:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 78.115781] audit: type=1130 audit(1789447575.601:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 78.120530] audit: type=1131 audit(1789447575.601:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 78.454449] zram_generator::config[2868]: No configuration found. [ 79.164990] audit: type=1334 audit(1789447576.652:224): prog-id=39 op=LOAD [ 79.167257] audit: type=1334 audit(1789447576.654:225): prog-id=22 op=UNLOAD [ 79.169136] audit: type=1334 audit(1789447576.656:226): prog-id=40 op=LOAD [ 79.170805] audit: type=1334 audit(1789447576.656:227): prog-id=41 op=LOAD [ 79.172440] audit: type=1334 audit(1789447576.656:228): prog-id=29 op=UNLOAD [ 79.174016] audit: type=1334 audit(1789447576.656:229): prog-id=30 op=UNLOAD [ 79.175687] audit: type=1334 audit(1789447576.660:230): prog-id=42 op=LOAD [ 79.177282] audit: type=1334 audit(1789447576.660:231): prog-id=38 op=UNLOAD [ 88.499840] zram_generator::config[3262]: No configuration found. [ 89.284181] kauditd_printk_skb: 202 callbacks suppressed [ 89.284186] audit: type=1334 audit(1789447586.776:326): prog-id=89 op=LOAD [ 89.286691] audit: type=1334 audit(1789447586.779:327): prog-id=74 op=UNLOAD [ 89.289362] audit: type=1334 audit(1789447586.781:328): prog-id=90 op=LOAD [ 89.291889] audit: type=1334 audit(1789447586.781:329): prog-id=39 op=UNLOAD [ 89.293820] audit: type=1334 audit(1789447586.783:330): prog-id=91 op=LOAD [ 89.295675] audit: type=1334 audit(1789447586.783:331): prog-id=69 op=UNLOAD [ 89.297266] audit: type=1334 audit(1789447586.784:332): prog-id=92 op=LOAD [ 89.298617] audit: type=1334 audit(1789447586.784:333): prog-id=93 op=LOAD [ 89.300638] audit: type=1334 audit(1789447586.784:334): prog-id=40 op=UNLOAD [ 89.302414] audit: type=1334 audit(1789447586.784:335): prog-id=41 op=UNLOAD [ 94.925976] kauditd_printk_skb: 54 callbacks suppressed [ 94.925981] audit: type=1334 audit(1789447592.420:390): prog-id=115 op=LOAD [ 94.932678] audit: type=1334 audit(1789447592.427:391): prog-id=116 op=LOAD [ 94.935007] audit: type=1300 audit(1789447592.427:391): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=48bd09cb9f90 a2=98 a3=0 items=0 ppid=3405 pid=3417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.945143] audit: type=1327 audit(1789447592.427:391): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436643230346537653433373534653139663762343232623438613730 [ 94.951775] audit: type=1334 audit(1789447592.427:392): prog-id=116 op=UNLOAD [ 94.953473] audit: type=1300 audit(1789447592.427:392): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3405 pid=3417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.960285] audit: type=1327 audit(1789447592.427:392): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436643230346537653433373534653139663762343232623438613730 [ 94.969748] audit: type=1334 audit(1789447592.437:393): prog-id=117 op=LOAD [ 94.972251] audit: type=1300 audit(1789447592.437:393): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=48bd09cba268 a2=98 a3=0 items=0 ppid=3405 pid=3417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.982280] audit: type=1327 audit(1789447592.437:393): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436643230346537653433373534653139663762343232623438613730 [ 103.261589] kauditd_printk_skb: 224 callbacks suppressed [ 103.261594] audit: type=1334 audit(1789447600.760:470): prog-id=133 op=LOAD [ 103.265378] audit: type=1334 audit(1789447600.764:471): prog-id=134 op=LOAD [ 103.268080] audit: type=1300 audit(1789447600.764:471): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6add21a29f90 a2=98 a3=0 items=0 ppid=3438 pid=3724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.276496] audit: type=1327 audit(1789447600.764:471): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653064333230373561353061383536666430333666656131393732 [ 103.283987] audit: type=1334 audit(1789447600.764:472): prog-id=134 op=UNLOAD [ 103.285655] audit: type=1300 audit(1789447600.764:472): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3438 pid=3724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.292394] audit: type=1327 audit(1789447600.764:472): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653064333230373561353061383536666430333666656131393732 [ 103.298223] audit: type=1334 audit(1789447600.764:473): prog-id=135 op=LOAD [ 103.299730] audit: type=1300 audit(1789447600.764:473): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6add21a2a268 a2=98 a3=0 items=0 ppid=3438 pid=3724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.305948] audit: type=1327 audit(1789447600.764:473): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963653064333230373561353061383536666430333666656131393732 [ 108.318662] kauditd_printk_skb: 122 callbacks suppressed [ 108.318667] audit: type=1334 audit(1789447605.818:522): prog-id=161 op=LOAD [ 108.322719] audit: type=1300 audit(1789447605.818:522): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc73289d8 a2=74 a3=0 items=0 ppid=3952 pid=4012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.330974] audit: type=1327 audit(1789447605.818:522): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.333917] audit: type=1334 audit(1789447605.823:523): prog-id=161 op=UNLOAD [ 108.335880] audit: type=1300 audit(1789447605.823:523): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff90a71f10 a2=74 a3=0 items=0 ppid=3952 pid=4012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.343545] audit: type=1327 audit(1789447605.823:523): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.347007] audit: type=1334 audit(1789447605.823:524): prog-id=162 op=LOAD [ 108.349951] audit: type=1300 audit(1789447605.823:524): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc7327a18 a2=90 a3=2 items=0 ppid=3952 pid=4012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.359119] audit: type=1327 audit(1789447605.823:524): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 108.362724] audit: type=1334 audit(1789447605.823:525): prog-id=162 op=UNLOAD [ 112.287707] NET: Registered PF_ALG protocol family This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:46:49 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 113.363504] kauditd_printk_skb: 5750 callbacks suppressed [ 113.363510] audit: type=1325 audit(1789447610.867:2442): table=filter:104 family=2 entries=1 op=nft_register_chain pid=4323 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 113.368507] audit: type=1300 audit(1789447610.867:2442): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffcf6fd900 a2=0 a3=ffffb78705c0 items=0 ppid=3952 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.375688] audit: type=1327 audit(1789447610.867:2442): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F494E505554 [ 113.380206] audit: type=1325 audit(1789447610.872:2443): table=filter:105 family=2 entries=1 op=nft_register_chain pid=4324 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 113.383935] audit: type=1300 audit(1789447610.872:2443): arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffea9e5740 a2=0 a3=ffffb3b2b5c0 items=0 ppid=3952 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.390564] audit: type=1327 audit(1789447610.872:2443): proctitle=69707461626C6573002D770035002D740066696C746572002D4E0043494C49554D5F4F5554505554 [ 113.393582] audit: type=1325 audit(1789447610.879:2444): table=raw:106 family=2 entries=1 op=nft_register_chain pid=4325 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 113.396876] audit: type=1300 audit(1789447610.879:2444): arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe09f1310 a2=0 a3=ffffa0e5b5c0 items=0 ppid=3952 pid=4325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 113.403521] audit: type=1327 audit(1789447610.879:2444): proctitle=69707461626C6573002D770035002D7400726177002D4E0043494C49554D5F4F55545055545F726177 [ 113.406480] audit: type=1325 audit(1789447610.884:2445): table=nat:107 family=2 entries=1 op=nft_register_chain pid=4326 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:46:50 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 114.036229] eth0: renamed from tmp1db97 This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:46:51 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 114.523881] eth0: renamed from tmp784d0 This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:46:53 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:46:54 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:46:55 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 122.427087] kauditd_printk_skb: 233 callbacks suppressed [ 122.427093] audit: type=1334 audit(1789447619.935:2523): prog-id=1144 op=LOAD [ 122.431769] audit: type=1334 audit(1789447619.935:2524): prog-id=1145 op=LOAD [ 122.433559] audit: type=1300 audit(1789447619.935:2523): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffffd6e7b8 a2=74 a3=11 items=0 ppid=3952 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 122.440282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.441684] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 122.443349] audit: backlog limit exceeded [ 122.444599] audit: type=1327 audit(1789447619.935:2523): proctitle=74630066696C746572007265706C61636500646576006C786330383062353761353738343900696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333638365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 122.450135] audit: type=1334 audit(1789447619.935:2525): prog-id=1144 op=UNLOAD [ 122.452248] audit: type=1300 audit(1789447619.935:2525): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffb13a8f50 a2=74 a3=11 items=0 ppid=3952 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 122.459128] audit: type=1327 audit(1789447619.935:2525): proctitle=74630066696C746572007265706C61636500646576006C786330383062353761353738343900696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333638365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 133.444050] kauditd_printk_skb: 468 callbacks suppressed [ 133.444056] audit: type=1325 audit(1789447630.957:2684): table=filter:150 family=2 entries=8 op=nft_register_rule pid=4623 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.449416] audit: type=1300 audit(1789447630.957:2684): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff7dec320 a2=0 a3=1 items=0 ppid=3536 pid=4623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.456346] audit: type=1327 audit(1789447630.957:2684): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 133.467940] audit: type=1325 audit(1789447630.981:2685): table=nat:151 family=2 entries=54 op=nft_register_chain pid=4623 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.471270] audit: type=1300 audit(1789447630.981:2685): arch=c00000b7 syscall=211 success=yes exit=19092 a0=3 a1=fffff7dec320 a2=0 a3=1 items=0 ppid=3536 pid=4623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.477765] audit: type=1327 audit(1789447630.981:2685): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 158.022972] audit: type=1130 audit(1789447655.546:2686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4101-172.31.18.118:22-20.101.212.173:52960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.950392] audit: type=1101 audit(1789447656.473:2687): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 158.958390] audit: type=1103 audit(1789447656.480:2688): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 158.964717] audit: type=1006 audit(1789447656.480:2689): pid=4634 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 158.968251] audit: type=1300 audit(1789447656.480:2689): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffeb7ba3d0 a2=3 a3=0 items=0 ppid=1 pid=4634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.975454] audit: type=1327 audit(1789447656.480:2689): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 159.031000] audit: type=1105 audit(1789447656.554:2690): pid=4634 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 159.039012] audit: type=1103 audit(1789447656.562:2691): pid=4638 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 159.603378] audit: type=1106 audit(1789447657.126:2692): pid=4634 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 159.611384] audit: type=1104 audit(1789447657.127:2693): pid=4634 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 164.793264] kauditd_printk_skb: 1 callbacks suppressed [ 164.793270] audit: type=1130 audit(1789447662.316:2695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-172.31.18.118:22-20.101.212.173:56544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.724687] audit: type=1101 audit(1789447663.248:2696): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 165.731665] audit: type=1103 audit(1789447663.254:2697): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 165.738553] audit: type=1006 audit(1789447663.254:2698): pid=4651 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 165.742535] audit: type=1300 audit(1789447663.254:2698): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff8939de0 a2=3 a3=0 items=0 ppid=1 pid=4651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.749403] audit: type=1327 audit(1789447663.254:2698): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 165.768593] audit: type=1105 audit(1789447663.292:2699): pid=4651 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 165.776113] audit: type=1103 audit(1789447663.299:2700): pid=4655 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.382575] audit: type=1106 audit(1789447663.906:2701): pid=4651 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.389878] audit: type=1104 audit(1789447663.906:2702): pid=4651 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 171.570310] kauditd_printk_skb: 1 callbacks suppressed [ 171.570316] audit: type=1130 audit(1789447669.093:2704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-5-172.31.18.118:22-20.101.212.173:46310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.499207] audit: type=1101 audit(1789447670.022:2705): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 172.506622] audit: type=1103 audit(1789447670.030:2706): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 172.512122] audit: type=1006 audit(1789447670.030:2707): pid=4669 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 172.515823] audit: type=1300 audit(1789447670.030:2707): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc79899b0 a2=3 a3=0 items=0 ppid=1 pid=4669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.522798] audit: type=1327 audit(1789447670.030:2707): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 172.546523] audit: type=1105 audit(1789447670.070:2708): pid=4669 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 172.554592] audit: type=1103 audit(1789447670.078:2709): pid=4673 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.152546] audit: type=1106 audit(1789447670.676:2710): pid=4669 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.162008] audit: type=1104 audit(1789447670.676:2711): pid=4669 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 176.646397] kauditd_printk_skb: 20 callbacks suppressed [ 176.646405] audit: type=1106 audit(1789447674.168:2728): pid=4699 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 176.654659] audit: type=1104 audit(1789447674.169:2729): pid=4699 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 176.660107] audit: type=1131 audit(1789447674.181:2730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-4103-172.31.18.118:22-20.101.212.173:46328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.824188] audit: type=1130 audit(1789447679.347:2731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-6-172.31.18.118:22-20.101.212.173:60590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.723142] audit: type=1101 audit(1789447680.246:2732): pid=4716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 182.733922] audit: type=1103 audit(1789447680.254:2733): pid=4716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 182.743357] audit: type=1006 audit(1789447680.254:2734): pid=4716 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 182.747573] audit: type=1300 audit(1789447680.254:2734): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd21301e0 a2=3 a3=0 items=0 ppid=1 pid=4716 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.754866] audit: type=1327 audit(1789447680.254:2734): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 182.768777] audit: type=1105 audit(1789447680.291:2735): pid=4716 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 182.777874] audit: type=1103 audit(1789447680.300:2736): pid=4720 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 183.354566] audit: type=1106 audit(1789447680.877:2737): pid=4716 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 183.363793] audit: type=1104 audit(1789447680.877:2738): pid=4716 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 188.538113] kauditd_printk_skb: 1 callbacks suppressed [ 188.538119] audit: type=1130 audit(1789447686.061:2740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-7-172.31.18.118:22-20.101.212.173:60592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.455014] audit: type=1101 audit(1789447686.978:2741): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 189.462372] audit: type=1103 audit(1789447686.985:2742): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 189.468390] audit: type=1006 audit(1789447686.985:2743): pid=4735 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 189.472128] audit: type=1300 audit(1789447686.985:2743): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdf8de650 a2=3 a3=0 items=0 ppid=1 pid=4735 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.479383] audit: type=1327 audit(1789447686.985:2743): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 189.497118] audit: type=1105 audit(1789447687.020:2744): pid=4735 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 189.504947] audit: type=1103 audit(1789447687.028:2745): pid=4739 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 190.116619] audit: type=1106 audit(1789447687.640:2746): pid=4735 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 190.124741] audit: type=1104 audit(1789447687.640:2747): pid=4735 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 195.302085] kauditd_printk_skb: 1 callbacks suppressed [ 195.302090] audit: type=1130 audit(1789447692.825:2749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4104-172.31.18.118:22-20.101.212.173:34250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.221109] audit: type=1101 audit(1789447693.744:2750): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 196.228850] audit: type=1103 audit(1789447693.752:2751): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 196.234835] audit: type=1006 audit(1789447693.752:2752): pid=4751 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 196.238119] audit: type=1300 audit(1789447693.752:2752): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffcb80e40 a2=3 a3=0 items=0 ppid=1 pid=4751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.244872] audit: type=1327 audit(1789447693.752:2752): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 196.266724] audit: type=1105 audit(1789447693.790:2753): pid=4751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 196.274836] audit: type=1103 audit(1789447693.798:2754): pid=4755 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 196.879460] audit: type=1106 audit(1789447694.402:2755): pid=4751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 196.887313] audit: type=1104 audit(1789447694.403:2756): pid=4751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 201.189779] kauditd_printk_skb: 20 callbacks suppressed [ 201.189784] audit: type=1325 audit(1789447698.712:2773): table=filter:152 family=2 entries=20 op=nft_register_rule pid=4796 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 201.198616] audit: type=1300 audit(1789447698.712:2773): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdca3e650 a2=0 a3=1 items=0 ppid=3536 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.209550] audit: type=1327 audit(1789447698.712:2773): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 201.219179] audit: type=1325 audit(1789447698.742:2774): table=nat:153 family=2 entries=18 op=nft_register_rule pid=4796 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 201.222907] audit: type=1300 audit(1789447698.742:2774): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffdca3e650 a2=0 a3=1 items=0 ppid=3536 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.230848] audit: type=1327 audit(1789447698.742:2774): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 201.384228] audit: type=1106 audit(1789447698.907:2775): pid=4781 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 201.394934] audit: type=1104 audit(1789447698.907:2776): pid=4781 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 201.402031] audit: type=1131 audit(1789447698.916:2777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-8-172.31.18.118:22-20.101.212.173:34270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.574113] audit: type=1130 audit(1789447699.097:2778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-9-172.31.18.118:22-20.101.212.173:38598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 208.614602] kauditd_printk_skb: 27 callbacks suppressed [ 208.614607] audit: type=1325 audit(1789447706.138:2798): table=filter:156 family=2 entries=20 op=nft_register_rule pid=4833 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 208.619024] audit: type=1300 audit(1789447706.138:2798): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffcb8ab6c0 a2=0 a3=1 items=0 ppid=3536 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.625805] audit: type=1327 audit(1789447706.138:2798): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 208.634397] audit: type=1325 audit(1789447706.156:2799): table=nat:157 family=2 entries=102 op=nft_register_chain pid=4833 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 208.637661] audit: type=1300 audit(1789447706.156:2799): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=ffffcb8ab6c0 a2=0 a3=1 items=0 ppid=3536 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.644244] audit: type=1327 audit(1789447706.156:2799): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 210.298361] audit: type=1130 audit(1789447707.821:2800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4107-172.31.18.118:22-20.101.212.173:38620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.219940] audit: type=1101 audit(1789447708.743:2801): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 211.227843] audit: type=1103 audit(1789447708.749:2802): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 211.233526] audit: type=1006 audit(1789447708.750:2803): pid=4837 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 217.035557] kauditd_printk_skb: 7 callbacks suppressed [ 217.035563] audit: type=1130 audit(1789447714.558:2809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10-172.31.18.118:22-20.101.212.173:45094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 217.957226] audit: type=1101 audit(1789447715.480:2810): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 217.964426] audit: type=1103 audit(1789447715.488:2811): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 217.970019] audit: type=1006 audit(1789447715.488:2812): pid=4855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 217.974131] audit: type=1300 audit(1789447715.488:2812): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe03be7e0 a2=3 a3=0 items=0 ppid=1 pid=4855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.980777] audit: type=1327 audit(1789447715.488:2812): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 218.000142] audit: type=1105 audit(1789447715.523:2813): pid=4855 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 218.007720] audit: type=1103 audit(1789447715.531:2814): pid=4860 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 218.593542] audit: type=1106 audit(1789447716.117:2815): pid=4855 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 218.601773] audit: type=1104 audit(1789447716.117:2816): pid=4855 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 223.841643] kauditd_printk_skb: 9 callbacks suppressed [ 223.841649] audit: type=1334 audit(1789447721.365:2824): prog-id=146 op=UNLOAD [ 223.847089] audit: type=1334 audit(1789447721.365:2825): prog-id=150 op=UNLOAD [ 223.930487] audit: type=1334 audit(1789447721.454:2826): prog-id=1205 op=UNLOAD [ 223.933587] audit: type=1334 audit(1789447721.454:2827): prog-id=1231 op=UNLOAD [ 224.039021] audit: type=1334 audit(1789447721.562:2828): prog-id=125 op=UNLOAD [ 224.042764] audit: type=1334 audit(1789447721.562:2829): prog-id=129 op=UNLOAD [ 224.061805] audit: type=1334 audit(1789447721.585:2830): prog-id=120 op=UNLOAD [ 224.064207] audit: type=1334 audit(1789447721.585:2831): prog-id=124 op=UNLOAD This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:48:42 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 225.811917] audit: type=1106 audit(1789447723.336:2832): pid=4872 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 225.821399] audit: type=1104 audit(1789447723.340:2833): pid=4872 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:48:43 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 229.335071] kauditd_printk_skb: 9 callbacks suppressed [ 229.335078] audit: type=1106 audit(1789447726.858:2841): pid=5020 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 229.351404] audit: type=1104 audit(1789447726.858:2842): pid=5020 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 229.359969] audit: type=1131 audit(1789447726.876:2843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4108-172.31.18.118:22-20.101.212.173:38244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 229.525242] audit: type=1130 audit(1789447727.049:2844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4109-172.31.18.118:22-20.101.212.173:38256 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 229.697224] audit: type=1334 audit(1789447727.221:2845): prog-id=1242 op=LOAD [ 229.699464] audit: type=1334 audit(1789447727.223:2846): prog-id=1243 op=LOAD [ 229.701117] audit: type=1300 audit(1789447727.223:2846): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=78b6b8f63f90 a2=98 a3=0 items=0 ppid=5050 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 229.707345] audit: type=1327 audit(1789447727.223:2846): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665363536653262643765326436623133643465633338323831313137 [ 229.713560] audit: type=1334 audit(1789447727.224:2847): prog-id=1243 op=UNLOAD [ 229.715280] audit: type=1300 audit(1789447727.224:2847): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5050 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 234.335404] kauditd_printk_skb: 841 callbacks suppressed [ 234.335410] audit: type=1300 audit(1789447731.859:3143): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9ec1c18 a2=90 a3=2 items=0 ppid=5287 pid=5345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 234.343643] audit: type=1327 audit(1789447731.859:3143): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 234.346098] audit: type=1334 audit(1789447731.859:3144): prog-id=1386 op=UNLOAD [ 234.348014] audit: type=1300 audit(1789447731.859:3144): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffb8075f10 a2=0 a3=2 items=0 ppid=5287 pid=5345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 234.354640] audit: type=1327 audit(1789447731.859:3144): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 234.357147] audit: type=1334 audit(1789447731.859:3145): prog-id=1387 op=LOAD [ 234.359021] audit: type=1300 audit(1789447731.859:3145): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9ec1c18 a2=90 a3=2 items=0 ppid=5287 pid=5345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 234.365796] audit: type=1327 audit(1789447731.859:3145): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 234.368233] audit: type=1334 audit(1789447731.867:3146): prog-id=1387 op=UNLOAD [ 234.370111] audit: type=1300 audit(1789447731.867:3146): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffb8075f10 a2=0 a3=2 items=0 ppid=5287 pid=5345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 235.192889] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 239.342593] kauditd_printk_skb: 5367 callbacks suppressed [ 239.342598] audit: type=1325 audit(1789447736.867:4937): table=raw:258 family=2 entries=1 op=nft_unregister_chain pid=5782 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 239.347404] audit: type=1300 audit(1789447736.867:4937): arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffe590d90 a2=0 a3=ffffb3d7f5c0 items=0 ppid=5287 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 239.354422] audit: type=1327 audit(1789447736.867:4937): proctitle=69707461626C6573002D770035002D7400726177002D58004F4C445F43494C49554D5F4F55545055545F726177 [ 239.364385] audit: type=1325 audit(1789447736.888:4938): table=nat:259 family=2 entries=1 op=nft_unregister_chain pid=5786 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 239.367579] audit: type=1300 audit(1789447736.888:4938): arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe9a4ddb0 a2=0 a3=ffffa987a5c0 items=0 ppid=5287 pid=5786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 239.374132] audit: type=1327 audit(1789447736.888:4938): proctitle=69707461626C6573002D770035002D74006E6174002D58004F4C445F43494C49554D5F504F53545F6E6174 [ 239.387145] audit: type=1325 audit(1789447736.911:4939): table=nat:260 family=2 entries=1 op=nft_unregister_chain pid=5790 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 239.390449] audit: type=1300 audit(1789447736.911:4939): arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff2d19970 a2=0 a3=ffff9c6995c0 items=0 ppid=5287 pid=5790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 239.397069] audit: type=1327 audit(1789447736.911:4939): proctitle=69707461626C6573002D770035002D74006E6174002D58004F4C445F43494C49554D5F4F55545055545F6E6174 [ 239.449116] audit: type=1325 audit(1789447736.973:4940): table=nat:261 family=2 entries=1 op=nft_unregister_chain pid=5793 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:48:58 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:48:59 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: This is ip-172-31-18-118 (Linux aarch64 6.12.109-flatcar) 04:49:00 SSH host key: SHA256:B+pIDNWkxJ5fv0bniOECswV12OR/liW5VMbC+/iDQ6A (RSA) SSH host key: SHA256:bj+kO5eGgDHuUQ6T1doNRPHxzjZOhBXSP8+ZnG+epIk (MLDSA44-ED25519) SSH host key: SHA256:0qPGh1ovtD6BHfEvr+zKXGBkS4G3nZIXKF9zJpjbBE8 (ECDSA) SSH host key: SHA256:svXfgu5ArE+NBnYGLZLr0jo5nL3Esu3alngYRddhvfE (ED25519) eth0: 172.31.18.118 fe80::4ff:e0ff:fe3c:bb57%eth0 ip-172-31-18-118 login: [ 246.850739] kauditd_printk_skb: 162 callbacks suppressed [ 246.850744] audit: type=1106 audit(1789447744.375:5001): pid=5186 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 246.866469] audit: type=1104 audit(1789447744.384:5002): pid=5186 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 246.874132] audit: type=1131 audit(1789447744.392:5003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4110-172.31.18.118:22-20.101.212.173:55026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 248.704986] audit: type=1334 audit(1789447746.229:5004): prog-id=2253 op=LOAD [ 248.707682] audit: type=1300 audit(1789447746.229:5004): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffcb354998 a2=74 a3=11 items=0 ppid=5287 pid=5954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 248.716290] audit: type=1327 audit(1789447746.229:5004): proctitle=74630066696C746572007265706C61636500646576006C786335343165363365383861653500696E6772657373007072696F00310068616E646C65003100627066006461006F626A003832365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 248.721918] audit: type=1334 audit(1789447746.229:5005): prog-id=2253 op=UNLOAD [ 248.723991] audit: type=1300 audit(1789447746.229:5005): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff96a3df50 a2=74 a3=11 items=0 ppid=5287 pid=5954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 248.730319] audit: type=1327 audit(1789447746.229:5005): proctitle=74630066696C746572007265706C61636500646576006C786335343165363365383861653500696E6772657373007072696F00310068616E646C65003100627066006461006F626A003832365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 248.735685] audit: type=1334 audit(1789447746.229:5006): prog-id=2254 op=LOAD