sudo" hostname=? addr=? terminal=? res=success' [ 45.751853] audit: type=1106 audit(1784811283.725:180): pid=2660 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 45.762254] audit: type=1104 audit(1784811283.725:181): pid=2660 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 45.770424] audit: type=1131 audit(1784811283.733:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4098-172.31.20.131:22-20.76.1.115:37268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.182511] kauditd_printk_skb: 13 callbacks suppressed [ 53.182515] audit: type=1325 audit(1784811291.156:194): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2790 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.186499] audit: type=1300 audit(1784811291.156:194): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffce5c3cba0 a2=0 a3=0 items=0 ppid=2738 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.192743] audit: type=1327 audit(1784811291.156:194): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 53.195936] audit: type=1325 audit(1784811291.162:195): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.199270] audit: type=1300 audit(1784811291.162:195): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff1ce5fc10 a2=0 a3=0 items=0 ppid=2738 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.205927] audit: type=1327 audit(1784811291.162:195): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 53.208879] audit: type=1325 audit(1784811291.166:196): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.211805] audit: type=1300 audit(1784811291.166:196): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb8b91fd0 a2=0 a3=0 items=0 ppid=2738 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.217375] audit: type=1327 audit(1784811291.166:196): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 53.220392] audit: type=1325 audit(1784811291.170:197): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2796 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 53.470124] Initializing XFRM netlink socket This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:54:52 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:54:52 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: [ 60.202188] kauditd_printk_skb: 92 callbacks suppressed [ 60.202191] audit: type=1131 audit(1784811298.176:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.216848] audit: type=1334 audit(1784811298.191:231): prog-id=38 op=UNLOAD [ 68.408904] audit: type=1130 audit(1784811306.382:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.543261] audit: type=1131 audit(1784811306.517:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 74.263772] audit: type=1130 audit(1784811312.237:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.271066] audit: type=1131 audit(1784811312.237:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.545612] zram_generator::config[3310]: No configuration found. [ 75.175412] audit: type=1334 audit(1784811313.149:236): prog-id=42 op=LOAD [ 75.176802] audit: type=1334 audit(1784811313.149:237): prog-id=34 op=UNLOAD [ 75.178496] audit: type=1334 audit(1784811313.150:238): prog-id=43 op=LOAD [ 75.180040] audit: type=1334 audit(1784811313.151:239): prog-id=26 op=UNLOAD [ 75.181568] audit: type=1334 audit(1784811313.151:240): prog-id=44 op=LOAD [ 75.183196] audit: type=1334 audit(1784811313.151:241): prog-id=45 op=LOAD [ 75.184697] audit: type=1334 audit(1784811313.151:242): prog-id=27 op=UNLOAD [ 75.186233] audit: type=1334 audit(1784811313.151:243): prog-id=28 op=UNLOAD [ 83.093854] zram_generator::config[3847]: No configuration found. [ 83.561495] kauditd_printk_skb: 203 callbacks suppressed [ 83.561500] audit: type=1334 audit(1784811321.535:339): prog-id=92 op=LOAD [ 83.564511] audit: type=1334 audit(1784811321.535:340): prog-id=42 op=UNLOAD [ 83.566257] audit: type=1334 audit(1784811321.536:341): prog-id=93 op=LOAD [ 83.567963] audit: type=1334 audit(1784811321.536:342): prog-id=62 op=UNLOAD [ 83.569548] audit: type=1334 audit(1784811321.537:343): prog-id=94 op=LOAD [ 83.571172] audit: type=1334 audit(1784811321.537:344): prog-id=43 op=UNLOAD [ 83.572913] audit: type=1334 audit(1784811321.537:345): prog-id=95 op=LOAD [ 83.574299] audit: type=1334 audit(1784811321.538:346): prog-id=96 op=LOAD [ 83.575885] audit: type=1334 audit(1784811321.538:347): prog-id=44 op=UNLOAD [ 83.577258] audit: type=1334 audit(1784811321.538:348): prog-id=45 op=UNLOAD [ 89.108287] kauditd_printk_skb: 54 callbacks suppressed [ 89.108290] audit: type=1334 audit(1784811327.082:403): prog-id=118 op=LOAD [ 89.112769] audit: type=1334 audit(1784811327.085:404): prog-id=119 op=LOAD [ 89.117847] audit: type=1300 audit(1784811327.085:404): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=338eb9b7fd8 a2=98 a3=0 items=0 ppid=3995 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.125947] audit: type=1327 audit(1784811327.085:404): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062346563373363303939653361626331626564323661616437376534 [ 89.137823] audit: type=1334 audit(1784811327.086:405): prog-id=119 op=UNLOAD [ 89.140157] audit: type=1300 audit(1784811327.086:405): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3995 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.150992] audit: type=1327 audit(1784811327.086:405): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062346563373363303939653361626331626564323661616437376534 [ 89.159156] audit: type=1334 audit(1784811327.086:406): prog-id=120 op=LOAD [ 89.161765] audit: type=1300 audit(1784811327.086:406): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=338eb9b8290 a2=98 a3=0 items=0 ppid=3995 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.171766] audit: type=1327 audit(1784811327.086:406): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062346563373363303939653361626331626564323661616437376534 [ 98.338632] kauditd_printk_skb: 224 callbacks suppressed [ 98.338637] audit: type=1334 audit(1784811336.312:483): prog-id=136 op=LOAD [ 98.341824] audit: type=1334 audit(1784811336.315:484): prog-id=137 op=LOAD [ 98.343199] audit: type=1300 audit(1784811336.315:484): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=d334c1cffd8 a2=98 a3=0 items=0 ppid=4027 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.348755] audit: type=1327 audit(1784811336.315:484): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763633236623031383437643732383639643236626436333735623539 [ 98.358316] audit: type=1334 audit(1784811336.315:485): prog-id=137 op=UNLOAD [ 98.360372] audit: type=1300 audit(1784811336.315:485): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4027 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.366611] audit: type=1327 audit(1784811336.315:485): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763633236623031383437643732383639643236626436333735623539 [ 98.372327] audit: type=1334 audit(1784811336.322:486): prog-id=138 op=LOAD [ 98.373998] audit: type=1300 audit(1784811336.322:486): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=d334c1d0290 a2=98 a3=0 items=0 ppid=4027 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.380208] audit: type=1327 audit(1784811336.322:486): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763633236623031383437643732383639643236626436333735623539 [ 103.513578] kauditd_printk_skb: 122 callbacks suppressed [ 103.513582] audit: type=1334 audit(1784811341.487:535): prog-id=164 op=LOAD [ 103.517415] audit: type=1300 audit(1784811341.487:535): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd8f8a97c0 a2=74 a3=7ffd8f8a97c0 items=0 ppid=4547 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.523279] audit: type=1327 audit(1784811341.487:535): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.525713] audit: type=1334 audit(1784811341.487:536): prog-id=164 op=UNLOAD [ 103.527134] audit: type=1300 audit(1784811341.487:536): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffd8f8a97c0 a2=74 a3=7ffd8f8a97c0 items=0 ppid=4547 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.532936] audit: type=1327 audit(1784811341.487:536): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.535140] audit: type=1334 audit(1784811341.488:537): prog-id=165 op=LOAD [ 103.536362] audit: type=1300 audit(1784811341.488:537): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd8f8a8840 a2=90 a3=2 items=0 ppid=4547 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.541946] audit: type=1327 audit(1784811341.488:537): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.544410] audit: type=1334 audit(1784811341.488:538): prog-id=165 op=UNLOAD This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:44 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:44 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: [ 107.069655] NET: Registered PF_ALG protocol family This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:45 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:45 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: [ 108.646447] eth0: renamed from tmp74d74 [ 108.662162] eth0: renamed from tmpe547d This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:46 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:46 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: [ 109.432899] kauditd_printk_skb: 5876 callbacks suppressed [ 109.432903] audit: type=1334 audit(1784811347.407:2497): prog-id=1123 op=LOAD [ 109.437766] audit: type=1300 audit(1784811347.407:2497): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd1f84fb10 a2=74 a3=7ffd1f84fb10 items=0 ppid=4547 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.443443] audit: type=1327 audit(1784811347.407:2497): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003434315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 109.448053] audit: type=1334 audit(1784811347.407:2498): prog-id=1123 op=UNLOAD [ 109.449530] audit: type=1300 audit(1784811347.407:2498): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd1f84fb10 a2=74 a3=7ffd1f84fb10 items=0 ppid=4547 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.455666] audit: type=1327 audit(1784811347.407:2498): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003434315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 109.460494] audit: type=1334 audit(1784811347.407:2499): prog-id=1124 op=LOAD [ 109.462183] audit: type=1300 audit(1784811347.407:2499): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd1f84faa0 a2=80 a3=0 items=0 ppid=4547 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 109.468310] audit: type=1327 audit(1784811347.407:2499): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003434315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 109.473244] audit: type=1334 audit(1784811347.407:2500): prog-id=1124 op=UNLOAD This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:48 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:48 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:49 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:55:49 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: [ 115.242354] kauditd_printk_skb: 579 callbacks suppressed [ 115.242357] audit: type=1325 audit(1784811353.216:2696): table=filter:148 family=2 entries=14 op=nft_register_rule pid=5216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.246138] audit: type=1300 audit(1784811353.216:2696): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc22b12260 a2=0 a3=7ffc22b1224c items=0 ppid=4116 pid=5216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.251475] audit: type=1327 audit(1784811353.216:2696): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.254017] audit: type=1325 audit(1784811353.222:2697): table=nat:149 family=2 entries=12 op=nft_register_rule pid=5216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.256765] audit: type=1300 audit(1784811353.222:2697): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc22b12260 a2=0 a3=0 items=0 ppid=4116 pid=5216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.262002] audit: type=1327 audit(1784811353.222:2697): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 125.006677] audit: type=1325 audit(1784811362.980:2698): table=filter:150 family=2 entries=11 op=nft_register_rule pid=5221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.018495] audit: type=1300 audit(1784811362.980:2698): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff70ecd440 a2=0 a3=7fff70ecd42c items=0 ppid=4116 pid=5221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.082381] audit: type=1327 audit(1784811362.980:2698): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 125.131328] audit: type=1325 audit(1784811363.105:2699): table=nat:151 family=2 entries=33 op=nft_register_chain pid=5221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.139167] audit: type=1300 audit(1784811363.105:2699): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7fff70ecd440 a2=0 a3=7fff70ecd42c items=0 ppid=4116 pid=5221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.154803] audit: type=1327 audit(1784811363.105:2699): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 126.211485] audit: type=1325 audit(1784811364.185:2700): table=filter:152 family=2 entries=8 op=nft_register_rule pid=5223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.214838] audit: type=1300 audit(1784811364.185:2700): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffca911c8c0 a2=0 a3=7ffca911c8ac items=0 ppid=4116 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.223314] audit: type=1327 audit(1784811364.185:2700): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 126.247531] audit: type=1325 audit(1784811364.221:2701): table=nat:153 family=2 entries=54 op=nft_register_chain pid=5223 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 151.554955] kauditd_printk_skb: 2 callbacks suppressed [ 151.554959] audit: type=1130 audit(1784811389.528:2702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-172.31.20.131:22-20.76.1.115:38778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.500300] audit: type=1101 audit(1784811390.474:2703): pid=5234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 152.509965] audit: type=1103 audit(1784811390.482:2704): pid=5234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 152.515693] audit: type=1006 audit(1784811390.483:2705): pid=5234 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 152.518997] audit: type=1300 audit(1784811390.483:2705): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffee93a04b0 a2=3 a3=0 items=0 ppid=1 pid=5234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.525755] audit: type=1327 audit(1784811390.483:2705): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 152.557515] audit: type=1105 audit(1784811390.531:2706): pid=5234 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 152.566547] audit: type=1103 audit(1784811390.539:2707): pid=5238 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 153.760682] audit: type=1106 audit(1784811391.734:2708): pid=5234 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 153.769676] audit: type=1104 audit(1784811391.735:2709): pid=5234 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 158.929178] kauditd_printk_skb: 1 callbacks suppressed [ 158.929183] audit: type=1130 audit(1784811396.903:2711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-6-172.31.20.131:22-20.76.1.115:45718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.818874] audit: type=1101 audit(1784811397.793:2712): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 159.825071] audit: type=1103 audit(1784811397.795:2713): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 159.831286] audit: type=1006 audit(1784811397.795:2714): pid=5252 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 159.834792] audit: type=1300 audit(1784811397.795:2714): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc4531bbf0 a2=3 a3=0 items=0 ppid=1 pid=5252 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.840917] audit: type=1327 audit(1784811397.795:2714): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 159.847593] audit: type=1105 audit(1784811397.821:2715): pid=5252 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 159.854391] audit: type=1103 audit(1784811397.825:2716): pid=5256 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 160.395122] audit: type=1106 audit(1784811398.368:2717): pid=5252 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 160.402495] audit: type=1104 audit(1784811398.368:2718): pid=5252 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 165.566417] kauditd_printk_skb: 1 callbacks suppressed [ 165.566421] audit: type=1130 audit(1784811403.540:2720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4100-172.31.20.131:22-20.76.1.115:35260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.423279] audit: type=1101 audit(1784811404.397:2721): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 166.430469] audit: type=1103 audit(1784811404.399:2722): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 166.436448] audit: type=1006 audit(1784811404.399:2723): pid=5268 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 166.439851] audit: type=1300 audit(1784811404.399:2723): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe02c999f0 a2=3 a3=0 items=0 ppid=1 pid=5268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.445926] audit: type=1327 audit(1784811404.399:2723): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 166.454293] audit: type=1105 audit(1784811404.428:2724): pid=5268 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 166.461006] audit: type=1103 audit(1784811404.433:2725): pid=5272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 166.987700] audit: type=1106 audit(1784811404.961:2726): pid=5268 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 166.993959] audit: type=1104 audit(1784811404.961:2727): pid=5268 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 172.159654] kauditd_printk_skb: 1 callbacks suppressed [ 172.159658] audit: type=1130 audit(1784811410.133:2729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4101-172.31.20.131:22-20.76.1.115:35274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.010041] audit: type=1101 audit(1784811410.984:2730): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 173.017302] audit: type=1103 audit(1784811410.986:2731): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 173.023919] audit: type=1006 audit(1784811410.986:2732): pid=5285 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 173.027150] audit: type=1300 audit(1784811410.986:2732): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc59cc66b0 a2=3 a3=0 items=0 ppid=1 pid=5285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.032694] audit: type=1327 audit(1784811410.986:2732): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 173.038538] audit: type=1105 audit(1784811411.012:2733): pid=5285 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 173.045278] audit: type=1103 audit(1784811411.015:2734): pid=5289 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 173.577014] audit: type=1106 audit(1784811411.551:2735): pid=5285 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 173.585593] audit: type=1104 audit(1784811411.551:2736): pid=5285 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 182.151205] kauditd_printk_skb: 23 callbacks suppressed [ 182.151209] audit: type=1130 audit(1784811420.125:2756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4102-172.31.20.131:22-20.76.1.115:39162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.012371] audit: type=1101 audit(1784811420.986:2757): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 183.019232] audit: type=1103 audit(1784811420.988:2758): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 183.024985] audit: type=1006 audit(1784811420.988:2759): pid=5334 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 183.028425] audit: type=1300 audit(1784811420.988:2759): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeec363440 a2=3 a3=0 items=0 ppid=1 pid=5334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.035291] audit: type=1327 audit(1784811420.988:2759): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 183.042327] audit: type=1105 audit(1784811421.016:2760): pid=5334 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 183.049059] audit: type=1103 audit(1784811421.023:2761): pid=5338 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 183.736202] audit: type=1106 audit(1784811421.710:2762): pid=5334 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 183.758102] audit: type=1104 audit(1784811421.727:2763): pid=5334 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 188.897064] kauditd_printk_skb: 1 callbacks suppressed [ 188.897067] audit: type=1130 audit(1784811426.871:2765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-9-172.31.20.131:22-20.76.1.115:50432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.769515] audit: type=1101 audit(1784811427.743:2766): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 189.775840] audit: type=1103 audit(1784811427.743:2767): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 189.781352] audit: type=1006 audit(1784811427.743:2768): pid=5350 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 189.784610] audit: type=1300 audit(1784811427.743:2768): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe94d4ccf0 a2=3 a3=0 items=0 ppid=1 pid=5350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.790823] audit: type=1327 audit(1784811427.743:2768): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 189.799062] audit: type=1105 audit(1784811427.773:2769): pid=5350 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 189.807220] audit: type=1103 audit(1784811427.781:2770): pid=5354 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 190.340850] audit: type=1106 audit(1784811428.315:2771): pid=5350 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 190.348493] audit: type=1104 audit(1784811428.315:2772): pid=5350 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 194.851231] kauditd_printk_skb: 9 callbacks suppressed [ 194.851235] audit: type=1106 audit(1784811432.825:2780): pid=5366 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 194.862264] audit: type=1104 audit(1784811432.826:2781): pid=5366 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 194.867448] audit: type=1131 audit(1784811432.835:2782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10-172.31.20.131:22-20.76.1.115:50438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.019482] audit: type=1130 audit(1784811432.993:2783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-11-172.31.20.131:22-20.76.1.115:41808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.925101] audit: type=1101 audit(1784811433.899:2784): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 195.931342] audit: type=1103 audit(1784811433.901:2785): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 195.936776] audit: type=1006 audit(1784811433.901:2786): pid=5380 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 195.940136] audit: type=1300 audit(1784811433.901:2786): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffed458f510 a2=3 a3=0 items=0 ppid=1 pid=5380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.946183] audit: type=1327 audit(1784811433.901:2786): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 195.956274] audit: type=1105 audit(1784811433.930:2787): pid=5380 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 200.160139] kauditd_printk_skb: 28 callbacks suppressed [ 200.160143] audit: type=1101 audit(1784811438.134:2806): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 200.168170] audit: type=1103 audit(1784811438.136:2807): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 200.174209] audit: type=1006 audit(1784811438.136:2808): pid=5415 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 200.177436] audit: type=1300 audit(1784811438.136:2808): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcb3d87f70 a2=3 a3=0 items=0 ppid=1 pid=5415 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.183329] audit: type=1327 audit(1784811438.136:2808): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 200.198343] audit: type=1105 audit(1784811438.172:2809): pid=5415 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 200.206375] audit: type=1103 audit(1784811438.175:2810): pid=5419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 200.726943] audit: type=1106 audit(1784811438.700:2811): pid=5415 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 200.734005] audit: type=1104 audit(1784811438.700:2812): pid=5415 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 200.740140] audit: type=1131 audit(1784811438.708:2813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-13-172.31.20.131:22-20.76.1.115:41830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.900554] kauditd_printk_skb: 6 callbacks suppressed [ 205.900558] audit: type=1130 audit(1784811443.874:2816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4103-172.31.20.131:22-20.76.1.115:48784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.751278] audit: type=1101 audit(1784811444.725:2817): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 206.757835] audit: type=1103 audit(1784811444.727:2818): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 206.763664] audit: type=1006 audit(1784811444.727:2819): pid=5435 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 206.767095] audit: type=1300 audit(1784811444.727:2819): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffa1b64940 a2=3 a3=0 items=0 ppid=1 pid=5435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.773774] audit: type=1327 audit(1784811444.727:2819): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 206.782553] audit: type=1105 audit(1784811444.756:2820): pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 206.789560] audit: type=1103 audit(1784811444.761:2821): pid=5439 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 207.317717] audit: type=1106 audit(1784811445.290:2822): pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 207.324341] audit: type=1104 audit(1784811445.290:2823): pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 212.507729] kauditd_printk_skb: 1 callbacks suppressed [ 212.507733] audit: type=1130 audit(1784811450.481:2825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4104-172.31.20.131:22-20.76.1.115:48798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 213.409135] audit: type=1101 audit(1784811451.383:2826): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 213.415302] audit: type=1103 audit(1784811451.385:2827): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 213.421624] audit: type=1006 audit(1784811451.385:2828): pid=5453 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 213.425678] audit: type=1300 audit(1784811451.385:2828): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd05f84a30 a2=3 a3=0 items=0 ppid=1 pid=5453 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 213.431102] audit: type=1327 audit(1784811451.385:2828): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 213.437967] audit: type=1105 audit(1784811451.412:2829): pid=5453 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 213.445429] audit: type=1103 audit(1784811451.419:2830): pid=5457 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 213.991428] audit: type=1106 audit(1784811451.965:2831): pid=5453 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 214.000260] audit: type=1104 audit(1784811451.965:2832): pid=5453 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:57:36 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:57:36 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: [ 219.062975] kauditd_printk_skb: 17 callbacks suppressed [ 219.062979] audit: type=1106 audit(1784811457.037:2848): pid=5469 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 219.071731] audit: type=1104 audit(1784811457.037:2849): pid=5469 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 219.077293] audit: type=1131 audit(1784811457.045:2850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4105-172.31.20.131:22-20.76.1.115:51264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 219.236906] audit: type=1130 audit(1784811457.210:2851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4106-172.31.20.131:22-20.76.1.115:51278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 220.135142] audit: type=1101 audit(1784811458.109:2852): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 220.140918] audit: type=1103 audit(1784811458.111:2853): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 220.146547] audit: type=1006 audit(1784811458.111:2854): pid=5621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 220.149715] audit: type=1300 audit(1784811458.111:2854): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd1f121580 a2=3 a3=0 items=0 ppid=1 pid=5621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 220.156522] audit: type=1327 audit(1784811458.111:2854): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 220.165168] audit: type=1105 audit(1784811458.139:2855): pid=5621 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 224.086837] kauditd_printk_skb: 109 callbacks suppressed [ 224.086841] audit: type=1334 audit(1784811462.061:2909): prog-id=1263 op=LOAD [ 224.090457] audit: type=1334 audit(1784811462.063:2910): prog-id=1264 op=LOAD [ 224.091899] audit: type=1300 audit(1784811462.063:2910): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2170c1431fd8 a2=98 a3=0 items=0 ppid=5652 pid=5833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.099365] audit: type=1327 audit(1784811462.063:2910): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166626361313162323032356436633564656434663631343837323963 [ 224.107558] audit: type=1334 audit(1784811462.063:2911): prog-id=1264 op=UNLOAD [ 224.109042] audit: type=1300 audit(1784811462.063:2911): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5652 pid=5833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.116738] audit: type=1327 audit(1784811462.063:2911): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166626361313162323032356436633564656434663631343837323963 [ 224.123577] audit: type=1334 audit(1784811462.064:2912): prog-id=1265 op=LOAD [ 224.125333] audit: type=1300 audit(1784811462.064:2912): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2170c1432290 a2=98 a3=0 items=0 ppid=5652 pid=5833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.131365] audit: type=1327 audit(1784811462.064:2912): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166626361313162323032356436633564656434663631343837323963 [ 226.240726] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 229.090181] kauditd_printk_skb: 5888 callbacks suppressed [ 229.090185] audit: type=1325 audit(1784811467.064:4879): table=filter:186 family=2 entries=1 op=nft_register_rule pid=6301 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 229.099616] audit: type=1300 audit(1784811467.064:4879): arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffeac5273b0 a2=0 a3=7ffeac52739c items=0 ppid=5889 pid=6301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 229.109777] audit: type=1327 audit(1784811467.064:4879): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F4F5554505554002D6D006D61726B002D2D6D61726B00307830303030306130302F30786666666666656666002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A2041434345505420666F722070726F78792072657475 [ 229.118078] audit: type=1325 audit(1784811467.073:4880): table=filter:187 family=2 entries=1 op=nft_register_rule pid=6303 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 229.123719] audit: type=1300 audit(1784811467.073:4880): arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff7d396060 a2=0 a3=7fff7d39604c items=0 ppid=5889 pid=6303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 229.132727] audit: type=1327 audit(1784811467.073:4880): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F4F5554505554002D6D006D61726B002D2D6D61726B00307830303030303830302F30783030303030653030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A2041434345505420666F72206C372070726F78792075 [ 229.139745] audit: type=1325 audit(1784811467.086:4881): table=mangle:188 family=2 entries=1 op=nft_register_rule pid=6309 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 229.145624] audit: type=1300 audit(1784811467.086:4881): arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd3a402f10 a2=0 a3=7ffd3a402efc items=0 ppid=5889 pid=6309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 229.151920] audit: type=1327 audit(1784811467.086:4881): proctitle=69707461626C6573002D770035002D74006D616E676C65002D410043494C49554D5F5052455F6D616E676C65002D6D00736F636B6574002D2D7472616E73706172656E74002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E706F642072656469726563742070726F786965642074726166 [ 229.158183] audit: type=1325 audit(1784811467.092:4882): table=filter:189 family=2 entries=1 op=nft_register_rule pid=6312 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:57:50 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed This is ip-172-31-20-131 (Linux x86_64 6.12.95-flatcar) 12:57:50 SSH host key: SHA256:qDWu6kcbTFcsrF7aepe2PBXiPFQHSIlGfHZx0ZRfJCo (ECDSA) SSH host key: SHA256:im061d5sZbQDhuX34cYdm9XiXWIhN3j3G7IhkQpaOcY (RSA) SSH host key: SHA256:rct841RiJV6EDNurTVFTbNGYpWsqUK6+Am+WufqXTjw (ED25519) eth0: 172.31.20.131 fe80::4a0:d1ff:feae:deed ip-172-31-20-131 login: [ 235.333363] kauditd_printk_skb: 384 callbacks suppressed [ 235.333367] audit: type=1334 audit(1784811473.307:5017): prog-id=2256 op=LOAD [ 235.336000] audit: type=1300 audit(1784811473.307:5017): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcdb3462d0 a2=74 a3=7ffcdb3462d0 items=0 ppid=5889 pid=6534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 235.344705] audit: type=1327 audit(1784811473.307:5017): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003539395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 235.350816] audit: type=1334 audit(1784811473.307:5018): prog-id=2256 op=UNLOAD [ 235.352399] audit: type=1300 audit(1784811473.307:5018): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffcdb3462d0 a2=74 a3=7ffcdb3462d0 items=0 ppid=5889 pid=6534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 235.358393] audit: type=1327 audit(1784811473.307:5018): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003539395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 235.362630] audit: type=1334 audit(1784811473.307:5019): prog-id=2257 op=LOAD [ 235.363830] audit: type=1300 audit(1784811473.307:5019): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcdb346260 a2=80 a3=0 items=0 ppid=5889 pid=6534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 235.368994] audit: type=1327 audit(1784811473.307:5019): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003539395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 235.373221] audit: type=1334 audit(1784811473.307:5020): prog-id=2257 op=UNLOAD [ 251.209745] kauditd_printk_skb: 423 callbacks suppressed [ 251.209749] audit: type=1334 audit(1784811489.184:5166): prog-id=86 op=UNLOAD [ 251.214601] audit: type=1334 audit(1784811489.184:5167): prog-id=97 op=UNLOAD [ 252.182164] audit: type=1334 audit(1784811490.156:5168): prog-id=2334 op=LOAD [ 252.183874] audit: type=1334 audit(1784811490.158:5169): prog-id=2335 op=LOAD [ 252.185415] audit: type=1300 audit(1784811490.158:5169): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3e495b1dffd8 a2=98 a3=0 items=0 ppid=3586 pid=6582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 252.190906] audit: type=1327 audit(1784811490.158:5169): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932643534346263643634376230386531376433626462663338636237 [ 252.196492] audit: type=1334 audit(1784811490.158:5170): prog-id=2335 op=UNLOAD [ 252.198324] audit: type=1300 audit(1784811490.158:5170): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3586 pid=6582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 252.204619] audit: type=1327 audit(1784811490.158:5170): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932643534346263643634376230386531376433626462663338636237 [ 252.210891] audit: type=1334 audit(1784811490.158:5171): prog-id=2336 op=LOAD [ 274.203787] kauditd_printk_skb: 38 callbacks suppressed [ 274.203790] audit: type=1106 audit(1784811512.177:5186): pid=2596 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 274.224559] audit: type=1104 audit(1784811512.177:5187): pid=2596 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.76.1.115 addr=20.76.1.115 terminal=ssh res=success' [ 274.239403] audit: type=1334 audit(1784811512.213:5188): prog-id=2270 op=UNLOAD [ 274.239407] audit: type=1334 audit(1784811512.213:5189): prog-id=2301 op=UNLOAD [ 274.281512] audit: type=1131 audit(1784811512.255:5190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.317747] audit: type=1131 audit(1784811512.292:5191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=nvidia comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.330627] audit: type=1131 audit(1784811512.299:5192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.366952] audit: type=1131 audit(1784811512.338:5193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshkeys comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.366958] audit: type=1131 audit(1784811512.340:5194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.401271] audit: type=1131 audit(1784811512.375:5195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [!p]104\[?7h[ 279.211021] kauditd_printk_skb: 36 callbacks suppressed [ 279.211024] audit: type=1334 audit(1784811517.185:5232): prog-id=1240 op=UNLOAD [ 279.214102] audit: type=1334 audit(1784811517.185:5233): prog-id=1244 op=UNLOAD [ 279.224110] audit: type=1334 audit(1784811517.198:5234): prog-id=1235 op=UNLOAD [ 279.226226] audit: type=1334 audit(1784811517.198:5235): prog-id=1239 op=UNLOAD