21.827986] audit: type=1130 audit(1792473832.915:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.850387] loop6: detected capacity change from 0 to 219840 [ 21.903779] loop6: detected capacity change from 0 to 431832 [ 21.907102] audit: type=1130 audit(1792473832.994:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.915929] loop6: p1 p2 p3 [ 21.923357] device-mapper: verity: sha256 using "sha256-lib" [ 21.924410] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.925841] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.927300] device-mapper: ioctl: error adding target to table [ 21.933096] device-mapper: verity: sha256 using "sha256-lib" [ 21.970488] erofs (device dm-5): mounted with root inode @ nid 39. [ 21.997758] loop6: detected capacity change from 0 to 169080 [ 22.001587] loop6: p1 p2 p3 [ 22.006711] device-mapper: verity: sha256 using "sha256-lib" [ 22.007637] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.009003] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.010539] device-mapper: ioctl: error adding target to table [ 22.013741] device-mapper: verity: sha256 using "sha256-lib" [ 22.047450] erofs (device dm-5): mounted with root inode @ nid 39. [ 22.106778] loop6: detected capacity change from 0 to 324328 [ 22.116919] loop6: p1 p2 p3 [ 22.124158] device-mapper: verity: sha256 using "sha256-lib" [ 22.125069] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.126443] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.127818] device-mapper: ioctl: error adding target to table [ 22.131013] device-mapper: verity: sha256 using "sha256-lib" [ 22.166126] erofs (device dm-5): mounted with root inode @ nid 39. [ 22.184897] loop6: detected capacity change from 0 to 219840 [ 22.208030] loop7: detected capacity change from 0 to 431832 [ 22.217052] loop7: p1 p2 p3 [ 22.225263] device-mapper: verity: sha256 using "sha256-lib" [ 22.226368] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.227974] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.229266] device-mapper: ioctl: error adding target to table [ 22.231735] device-mapper: verity: sha256 using "sha256-lib" [ 22.269430] erofs (device dm-5): mounted with root inode @ nid 39. [ 22.275935] loop8: detected capacity change from 0 to 169080 [ 22.283880] loop8: p1 p2 p3 [ 22.290202] device-mapper: verity: sha256 using "sha256-lib" [ 22.291103] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.292546] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 22.294017] device-mapper: ioctl: error adding target to table [ 22.298941] device-mapper: verity: sha256 using "sha256-lib" [ 22.332943] erofs (device dm-6): mounted with root inode @ nid 39. [ 22.335672] loop9: detected capacity change from 0 to 324328 [ 22.344116] loop9: p1 p2 p3 [ 22.352467] device-mapper: verity: sha256 using "sha256-lib" [ 22.353495] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.355002] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 22.356766] device-mapper: ioctl: error adding target to table [ 22.360278] device-mapper: verity: sha256 using "sha256-lib" [ 22.392991] erofs (device dm-7): mounted with root inode @ nid 39. [ 22.401024] audit: type=1130 audit(1792473833.488:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.474820] audit: type=1130 audit(1792473833.561:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.533877] audit: type=1127 audit(1792473833.620:156): pid=1557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' [ 22.549187] audit: type=1130 audit(1792473833.636:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 26.391215] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 26.443515] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/10/20 05:24:01Z: Amazon SSM Agent v3.3.0.0 is running 2026/10/20 05:24:01Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/10/20 05:24:01Z: OsVersion: 4858.0.0 [!p]104\[?7h78P+q6E616D65\ This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:24:04 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 41.669963] kauditd_printk_skb: 4 callbacks suppressed [ 41.669968] audit: type=1305 audit(1792473854.067:160): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 41.672824] audit: type=1300 audit(1792473854.067:160): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc98c61350 a2=420 a3=0 items=0 ppid=1959 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 41.678331] audit: type=1327 audit(1792473854.067:160): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 41.680239] audit: type=1130 audit(1792473854.082:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.683122] audit: type=1131 audit(1792473854.082:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.686239] audit: type=1106 audit(1792473854.083:163): pid=1953 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.689470] audit: type=1104 audit(1792473854.083:164): pid=1953 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.837564] audit: type=1106 audit(1792473854.241:165): pid=1948 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 41.843273] audit: type=1104 audit(1792473854.242:166): pid=1948 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 41.848511] audit: type=1131 audit(1792473854.249:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4098-172.31.27.36:22-20.76.155.168:60920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.877216] kauditd_printk_skb: 13 callbacks suppressed [ 48.877220] audit: type=1325 audit(1792473861.282:179): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.880902] audit: type=1300 audit(1792473861.282:179): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff5052b010 a2=0 a3=0 items=0 ppid=2026 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.886671] audit: type=1327 audit(1792473861.282:179): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 48.889279] audit: type=1325 audit(1792473861.293:180): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.892268] audit: type=1300 audit(1792473861.293:180): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd273cc280 a2=0 a3=0 items=0 ppid=2026 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.898332] audit: type=1327 audit(1792473861.293:180): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 48.901203] audit: type=1325 audit(1792473861.296:181): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.903926] audit: type=1300 audit(1792473861.296:181): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc20c14db0 a2=0 a3=0 items=0 ppid=2026 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.909124] audit: type=1327 audit(1792473861.296:181): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 48.912766] audit: type=1325 audit(1792473861.298:182): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 49.153776] Initializing XFRM netlink socket This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:24:22 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:24:23 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 57.080747] kauditd_printk_skb: 92 callbacks suppressed [ 57.080751] audit: type=1131 audit(1792473869.485:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.094955] audit: type=1334 audit(1792473869.500:216): prog-id=35 op=UNLOAD [ 63.772839] audit: type=1130 audit(1792473876.176:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.886344] audit: type=1131 audit(1792473876.291:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 67.061027] audit: type=1130 audit(1792473879.466:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.066149] audit: type=1131 audit(1792473879.466:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.272423] zram_generator::config[2562]: No configuration found. [ 67.645222] audit: type=1334 audit(1792473880.050:221): prog-id=39 op=LOAD [ 67.646590] audit: type=1334 audit(1792473880.050:222): prog-id=31 op=UNLOAD [ 67.648224] audit: type=1334 audit(1792473880.050:223): prog-id=40 op=LOAD [ 67.649683] audit: type=1334 audit(1792473880.050:224): prog-id=23 op=UNLOAD [ 67.651106] audit: type=1334 audit(1792473880.050:225): prog-id=41 op=LOAD [ 67.652439] audit: type=1334 audit(1792473880.050:226): prog-id=42 op=LOAD [ 69.356460] kauditd_printk_skb: 72 callbacks suppressed [ 69.356475] audit: type=1334 audit(1792473881.761:275): prog-id=59 op=LOAD [ 69.368926] audit: type=1334 audit(1792473881.773:276): prog-id=60 op=LOAD [ 69.370179] audit: type=1300 audit(1792473881.773:276): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=26694262dfd8 a2=98 a3=0 items=0 ppid=2682 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 69.378415] audit: type=1327 audit(1792473881.773:276): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633562373563366634396638656438316161663736306564663366 [ 69.384806] audit: type=1334 audit(1792473881.773:277): prog-id=60 op=UNLOAD [ 69.388568] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.388881] audit: type=1300 audit(1792473881.773:277): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=2682 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 69.388957] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 69.390378] audit: type=1327 audit(1792473881.773:277): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633562373563366634396638656438316161663736306564663366 [ 69.390393] audit: backlog limit exceeded [ 74.911647] zram_generator::config[3227]: No configuration found. [ 75.334197] kauditd_printk_skb: 122 callbacks suppressed [ 75.334202] audit: type=1334 audit(1792473887.739:322): prog-id=89 op=LOAD [ 75.336980] audit: type=1334 audit(1792473887.739:323): prog-id=39 op=UNLOAD [ 75.338454] audit: type=1334 audit(1792473887.740:324): prog-id=90 op=LOAD [ 75.339959] audit: type=1334 audit(1792473887.740:325): prog-id=40 op=UNLOAD [ 75.341287] audit: type=1334 audit(1792473887.740:326): prog-id=91 op=LOAD [ 75.342724] audit: type=1334 audit(1792473887.740:327): prog-id=92 op=LOAD [ 75.344084] audit: type=1334 audit(1792473887.740:328): prog-id=41 op=UNLOAD [ 75.345481] audit: type=1334 audit(1792473887.740:329): prog-id=42 op=UNLOAD [ 75.346904] audit: type=1334 audit(1792473887.742:330): prog-id=93 op=LOAD [ 75.348152] audit: type=1334 audit(1792473887.742:331): prog-id=43 op=UNLOAD [ 81.000151] kauditd_printk_skb: 54 callbacks suppressed [ 81.000155] audit: type=1334 audit(1792473893.405:386): prog-id=115 op=LOAD [ 81.003502] audit: type=1334 audit(1792473893.405:387): prog-id=116 op=LOAD [ 81.005317] audit: type=1300 audit(1792473893.405:387): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=9d0c70b1fd8 a2=98 a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.012455] audit: type=1327 audit(1792473893.405:387): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333338643464306362356365383930323965636562396263613534 [ 81.018479] audit: type=1334 audit(1792473893.405:388): prog-id=116 op=UNLOAD [ 81.020084] audit: type=1300 audit(1792473893.405:388): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.025364] audit: type=1327 audit(1792473893.405:388): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333338643464306362356365383930323965636562396263613534 [ 81.030739] audit: type=1334 audit(1792473893.405:389): prog-id=117 op=LOAD [ 81.032226] audit: type=1300 audit(1792473893.405:389): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=9d0c70b2290 a2=98 a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.037685] audit: type=1327 audit(1792473893.405:389): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333338643464306362356365383930323965636562396263613534 [ 89.930606] kauditd_printk_skb: 224 callbacks suppressed [ 89.930611] audit: type=1334 audit(1792473902.335:466): prog-id=133 op=LOAD [ 89.935179] audit: type=1334 audit(1792473902.338:467): prog-id=134 op=LOAD [ 89.938890] audit: type=1300 audit(1792473902.338:467): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=208d993e3fd8 a2=98 a3=0 items=0 ppid=3399 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.945137] audit: type=1327 audit(1792473902.338:467): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366363643739323965633839313532656461323533613239336436 [ 89.950796] audit: type=1334 audit(1792473902.338:468): prog-id=134 op=UNLOAD [ 89.952471] audit: type=1300 audit(1792473902.338:468): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3399 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.957731] audit: type=1327 audit(1792473902.338:468): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366363643739323965633839313532656461323533613239336436 [ 89.963440] audit: type=1334 audit(1792473902.339:469): prog-id=135 op=LOAD [ 89.964957] audit: type=1300 audit(1792473902.339:469): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=208d993e4290 a2=98 a3=0 items=0 ppid=3399 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.972048] audit: type=1327 audit(1792473902.339:469): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266366363643739323965633839313532656461323533613239336436 [ 95.490174] kauditd_printk_skb: 122 callbacks suppressed [ 95.490177] audit: type=1334 audit(1792473907.895:518): prog-id=161 op=LOAD [ 95.492731] audit: type=1300 audit(1792473907.895:518): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb3688870 a2=74 a3=7ffeb3688870 items=0 ppid=3922 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.501874] audit: type=1327 audit(1792473907.895:518): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 95.505003] audit: type=1334 audit(1792473907.895:519): prog-id=161 op=UNLOAD [ 95.507371] audit: type=1300 audit(1792473907.895:519): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffeb3688870 a2=74 a3=7ffeb3688870 items=0 ppid=3922 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.514053] audit: type=1327 audit(1792473907.895:519): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 95.517267] audit: type=1334 audit(1792473907.895:520): prog-id=162 op=LOAD [ 95.518760] audit: type=1300 audit(1792473907.895:520): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb36878f0 a2=90 a3=2 items=0 ppid=3922 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.524614] audit: type=1327 audit(1792473907.895:520): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 95.527277] audit: type=1334 audit(1792473907.895:521): prog-id=162 op=UNLOAD This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:25:11 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 99.338511] NET: Registered PF_ALG protocol family This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:25:12 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 100.433612] eth0: renamed from tmpee99b [ 100.451919] eth0: renamed from tmp8337e This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:25:13 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 101.657946] kauditd_printk_skb: 6758 callbacks suppressed [ 101.657950] audit: type=1334 audit(1792473914.062:2774): prog-id=1267 op=LOAD [ 101.661890] audit: type=1300 audit(1792473914.062:2774): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffec5574140 a2=74 a3=7ffec5574140 items=0 ppid=3922 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.668913] audit: type=1327 audit(1792473914.062:2774): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323038355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.673470] audit: type=1334 audit(1792473914.063:2775): prog-id=1267 op=UNLOAD [ 101.675134] audit: type=1300 audit(1792473914.063:2775): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffec5574140 a2=74 a3=7ffec5574140 items=0 ppid=3922 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.680804] audit: type=1327 audit(1792473914.063:2775): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323038355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.685315] audit: type=1334 audit(1792473914.063:2776): prog-id=1268 op=LOAD [ 101.686788] audit: type=1300 audit(1792473914.063:2776): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffec55740d0 a2=80 a3=0 items=0 ppid=3922 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.692438] audit: type=1327 audit(1792473914.063:2776): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323038355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 101.696687] audit: type=1334 audit(1792473914.063:2777): prog-id=1268 op=UNLOAD This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:25:14 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:25:15 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:25:16 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 106.865776] kauditd_printk_skb: 579 callbacks suppressed [ 106.865780] audit: type=1325 audit(1792473919.270:2973): table=filter:148 family=2 entries=11 op=nft_register_rule pid=4585 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.869501] audit: type=1300 audit(1792473919.270:2973): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff03d79f50 a2=0 a3=7fff03d79f3c items=0 ppid=3512 pid=4585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.875180] audit: type=1327 audit(1792473919.270:2973): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 106.881783] audit: type=1325 audit(1792473919.286:2974): table=nat:149 family=2 entries=45 op=nft_register_chain pid=4585 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.884574] audit: type=1300 audit(1792473919.286:2974): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7fff03d79f50 a2=0 a3=7fff03d79f3c items=0 ppid=3512 pid=4585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.890313] audit: type=1327 audit(1792473919.286:2974): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 137.587800] audit: type=1130 audit(1792473949.992:2975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-172.31.27.36:22-20.76.155.168:53106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.479945] audit: type=1101 audit(1792473950.885:2976): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 138.485410] audit: type=1103 audit(1792473950.887:2977): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 138.490428] audit: type=1006 audit(1792473950.887:2978): pid=4596 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 138.493317] audit: type=1300 audit(1792473950.887:2978): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe314fd7e0 a2=3 a3=0 items=0 ppid=1 pid=4596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.499023] audit: type=1327 audit(1792473950.887:2978): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 138.515144] audit: type=1105 audit(1792473950.920:2979): pid=4596 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 138.521137] audit: type=1103 audit(1792473950.924:2980): pid=4600 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 139.642886] audit: type=1106 audit(1792473952.047:2981): pid=4596 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 139.649206] audit: type=1104 audit(1792473952.049:2982): pid=4596 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 144.803885] kauditd_printk_skb: 1 callbacks suppressed [ 144.803889] audit: type=1130 audit(1792473957.208:2984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4100-172.31.27.36:22-20.76.155.168:50186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.641096] audit: type=1101 audit(1792473958.046:2985): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 145.646708] audit: type=1103 audit(1792473958.048:2986): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 145.652932] audit: type=1006 audit(1792473958.048:2987): pid=4614 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 145.656277] audit: type=1300 audit(1792473958.048:2987): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe77468ca0 a2=3 a3=0 items=0 ppid=1 pid=4614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.661763] audit: type=1327 audit(1792473958.048:2987): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 145.674307] audit: type=1105 audit(1792473958.079:2988): pid=4614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 145.680373] audit: type=1103 audit(1792473958.081:2989): pid=4618 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 146.192428] audit: type=1106 audit(1792473958.597:2990): pid=4614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 146.198771] audit: type=1104 audit(1792473958.599:2991): pid=4614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 151.354284] kauditd_printk_skb: 1 callbacks suppressed [ 151.354288] audit: type=1130 audit(1792473963.759:2993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.27.36:22-20.76.155.168:50196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.184112] audit: type=1101 audit(1792473964.589:2994): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 152.190661] audit: type=1103 audit(1792473964.591:2995): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 152.196078] audit: type=1006 audit(1792473964.591:2996): pid=4632 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 152.199614] audit: type=1300 audit(1792473964.591:2996): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc5a9ef7f0 a2=3 a3=0 items=0 ppid=1 pid=4632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.204706] audit: type=1327 audit(1792473964.591:2996): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 152.210934] audit: type=1105 audit(1792473964.616:2997): pid=4632 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 152.217178] audit: type=1103 audit(1792473964.621:2998): pid=4636 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 152.739768] audit: type=1106 audit(1792473965.144:2999): pid=4632 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 152.746961] audit: type=1104 audit(1792473965.145:3000): pid=4632 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 161.104741] kauditd_printk_skb: 23 callbacks suppressed [ 161.104745] audit: type=1130 audit(1792473973.509:3020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4103-172.31.27.36:22-20.76.155.168:45056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.931074] audit: type=1101 audit(1792473974.336:3021): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 161.936745] audit: type=1103 audit(1792473974.338:3022): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 161.942121] audit: type=1006 audit(1792473974.338:3023): pid=4681 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 161.945307] audit: type=1300 audit(1792473974.338:3023): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1d5d17a0 a2=3 a3=0 items=0 ppid=1 pid=4681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.951216] audit: type=1327 audit(1792473974.338:3023): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 161.959928] audit: type=1105 audit(1792473974.365:3024): pid=4681 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 161.966260] audit: type=1103 audit(1792473974.368:3025): pid=4685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 162.472374] audit: type=1106 audit(1792473974.877:3026): pid=4681 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 162.478959] audit: type=1104 audit(1792473974.877:3027): pid=4681 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 167.632484] kauditd_printk_skb: 1 callbacks suppressed [ 167.632488] audit: type=1130 audit(1792473980.037:3029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4104-172.31.27.36:22-20.76.155.168:39850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.453059] audit: type=1101 audit(1792473980.858:3030): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 168.459457] audit: type=1103 audit(1792473980.864:3031): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 168.464758] audit: type=1006 audit(1792473980.864:3032): pid=4697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 168.467689] audit: type=1300 audit(1792473980.864:3032): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd78ffe8c0 a2=3 a3=0 items=0 ppid=1 pid=4697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.473368] audit: type=1327 audit(1792473980.864:3032): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 168.480532] audit: type=1105 audit(1792473980.885:3033): pid=4697 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 168.487380] audit: type=1103 audit(1792473980.892:3034): pid=4701 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 168.989103] audit: type=1106 audit(1792473981.394:3035): pid=4697 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 168.996178] audit: type=1104 audit(1792473981.394:3036): pid=4697 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 173.155766] kauditd_printk_skb: 20 callbacks suppressed [ 173.155770] audit: type=1325 audit(1792473985.560:3053): table=filter:150 family=2 entries=20 op=nft_register_rule pid=4742 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 173.159989] audit: type=1300 audit(1792473985.560:3053): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd8563b1f0 a2=0 a3=7ffd8563b1dc items=0 ppid=3512 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.165612] audit: type=1327 audit(1792473985.560:3053): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 173.168775] audit: type=1325 audit(1792473985.567:3054): table=nat:151 family=2 entries=18 op=nft_register_rule pid=4742 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 173.173158] audit: type=1300 audit(1792473985.567:3054): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffd8563b1f0 a2=0 a3=0 items=0 ppid=3512 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.179525] audit: type=1327 audit(1792473985.567:3054): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 173.349218] audit: type=1106 audit(1792473985.754:3055): pid=4726 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 173.357104] audit: type=1104 audit(1792473985.754:3056): pid=4726 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 173.362791] audit: type=1131 audit(1792473985.757:3057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-172.31.27.36:22-20.76.155.168:39862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.510561] audit: type=1130 audit(1792473985.915:3058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-8-172.31.27.36:22-20.76.155.168:39864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.064685] kauditd_printk_skb: 27 callbacks suppressed [ 180.064689] audit: type=1325 audit(1792473992.469:3078): table=filter:154 family=2 entries=20 op=nft_register_rule pid=4779 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 180.068459] audit: type=1300 audit(1792473992.469:3078): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff8b9687e0 a2=0 a3=7fff8b9687cc items=0 ppid=3512 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.074509] audit: type=1327 audit(1792473992.469:3078): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 180.076905] audit: type=1325 audit(1792473992.476:3079): table=nat:155 family=2 entries=102 op=nft_register_chain pid=4779 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 180.079978] audit: type=1300 audit(1792473992.476:3079): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7fff8b9687e0 a2=0 a3=7fff8b9687cc items=0 ppid=3512 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.085923] audit: type=1327 audit(1792473992.476:3079): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 181.730288] audit: type=1130 audit(1792473994.134:3080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-9-172.31.27.36:22-20.76.155.168:51714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.545193] audit: type=1101 audit(1792473994.950:3081): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 182.551770] audit: type=1103 audit(1792473994.952:3082): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 182.556961] audit: type=1006 audit(1792473994.952:3083): pid=4781 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 188.246996] kauditd_printk_skb: 7 callbacks suppressed [ 188.247000] audit: type=1130 audit(1792474000.652:3089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10-172.31.27.36:22-20.76.155.168:49872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.079751] audit: type=1101 audit(1792474001.484:3090): pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 189.085343] audit: type=1103 audit(1792474001.487:3091): pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 189.090585] audit: type=1006 audit(1792474001.487:3092): pid=4798 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 189.093334] audit: type=1300 audit(1792474001.487:3092): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffb38f04d0 a2=3 a3=0 items=0 ppid=1 pid=4798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.098966] audit: type=1327 audit(1792474001.487:3092): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 189.105288] audit: type=1105 audit(1792474001.510:3093): pid=4798 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 189.111360] audit: type=1103 audit(1792474001.514:3094): pid=4802 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 189.615891] audit: type=1106 audit(1792474002.020:3095): pid=4798 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 189.622461] audit: type=1104 audit(1792474002.020:3096): pid=4798 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:26:46 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 194.747391] kauditd_printk_skb: 17 callbacks suppressed [ 194.747394] audit: type=1106 audit(1792474007.152:3112): pid=4813 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 194.754714] audit: type=1104 audit(1792474007.153:3113): pid=4813 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 194.759981] audit: type=1131 audit(1792474007.160:3114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4107-172.31.27.36:22-20.76.155.168:49874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:26:47 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 194.908300] audit: type=1130 audit(1792474007.313:3115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-11-172.31.27.36:22-20.76.155.168:52966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.771781] audit: type=1101 audit(1792474008.176:3116): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 195.778346] audit: type=1103 audit(1792474008.183:3117): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 195.783631] audit: type=1006 audit(1792474008.183:3118): pid=4964 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 195.786574] audit: type=1300 audit(1792474008.183:3118): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd1a9671a0 a2=3 a3=0 items=0 ppid=1 pid=4964 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.791783] audit: type=1327 audit(1792474008.183:3118): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 195.805054] audit: type=1105 audit(1792474008.210:3119): pid=4964 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 199.753979] kauditd_printk_skb: 102 callbacks suppressed [ 199.753983] audit: type=1101 audit(1792474012.159:3168): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 199.764637] audit: type=1103 audit(1792474012.163:3169): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 199.779174] audit: type=1006 audit(1792474012.163:3170): pid=5130 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 199.782172] audit: type=1300 audit(1792474012.163:3170): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffb6af7370 a2=3 a3=0 items=0 ppid=1 pid=5130 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.787809] audit: type=1327 audit(1792474012.163:3170): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 199.791755] audit: type=1105 audit(1792474012.196:3171): pid=5130 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 199.798163] audit: type=1103 audit(1792474012.200:3172): pid=5168 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 200.671317] audit: type=1334 audit(1792474013.076:3173): prog-id=1407 op=LOAD [ 200.673927] audit: type=1334 audit(1792474013.076:3174): prog-id=1408 op=LOAD [ 200.676874] audit: type=1300 audit(1792474013.076:3174): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=238122431fd8 a2=98 a3=0 items=0 ppid=4997 pid=5182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.848229] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 204.787180] kauditd_printk_skb: 6601 callbacks suppressed [ 204.787184] audit: type=1334 audit(1792474017.192:5377): prog-id=2509 op=LOAD [ 204.790327] audit: type=1300 audit(1792474017.192:5377): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcfe117750 a2=74 a3=7ffcfe117750 items=0 ppid=5371 pid=5470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 204.795583] audit: type=1327 audit(1792474017.192:5377): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 204.800419] audit: type=1334 audit(1792474017.192:5378): prog-id=2509 op=UNLOAD [ 204.801957] audit: type=1300 audit(1792474017.192:5378): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffcfe117750 a2=74 a3=7ffcfe117750 items=0 ppid=5371 pid=5470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 204.808410] audit: type=1327 audit(1792474017.192:5378): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 204.812793] audit: type=1334 audit(1792474017.192:5379): prog-id=2510 op=LOAD [ 204.814243] audit: type=1300 audit(1792474017.192:5379): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcfe1176e0 a2=80 a3=0 items=0 ppid=5371 pid=5470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 204.819826] audit: type=1327 audit(1792474017.192:5379): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 204.824346] audit: type=1334 audit(1792474017.192:5380): prog-id=2510 op=UNLOAD This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:26:59 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:27:00 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: This is ip-172-31-27-36 (Linux x86_64 6.18.57-flatcar) 05:27:01 SSH host key: SHA256:VWoJfFEaXix+T33X497PX3ubDyATheo7qbmX80tJkPk (MLDSA44-ED25519) SSH host key: SHA256:d8ftbSJvUs3jwxFWER1uqMFn7uuyz2k+ibaQIV504fA (RSA) SSH host key: SHA256:BRuDgM+qDbsrSnklsev+kCfu9sz8/AiGhyRKJTBqD/I (ED25519) SSH host key: SHA256:zK9yCadNuXnvjgHWOQuzNXghS3mqiJTFzRquQ8/tVfQ (ECDSA) eth0: 172.31.27.36 fe80::4ff:d9ff:fe61:6127%eth0 ip-172-31-27-36 login: [ 211.541409] kauditd_printk_skb: 560 callbacks suppressed [ 211.541413] audit: type=1106 audit(1792474023.946:5575): pid=5130 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 211.549232] audit: type=1104 audit(1792474023.946:5576): pid=5130 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.155.168 addr=20.76.155.168 terminal=ssh res=success' [ 211.554213] audit: type=1131 audit(1792474023.949:5577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-12-172.31.27.36:22-20.76.155.168:52984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.872686] audit: type=1334 audit(1792474024.277:5578): prog-id=2547 op=LOAD [ 211.875113] audit: type=1300 audit(1792474024.277:5578): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc73a16910 a2=74 a3=7ffc73a16910 items=0 ppid=5230 pid=5902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 211.883382] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.884405] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 211.885580] audit: backlog limit exceeded [ 211.886257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.886666] audit: type=1327 audit(1792474024.277:5578): proctitle=74630066696C746572007265706C61636500646576006C786339333638386533646562656500696E6772657373007072696F00310068616E646C65003100627066006461006F626A003432365F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572