mory (OOM) Killer Socket. [ 18.746648] systemd[1]: Listening on systemd-repart.socket - Disk Repartitioning Service Socket. [ 18.751325] systemd[1]: Listening on systemd-report-basic.socket - Report System Basic Metrics Socket. [ 18.754936] systemd[1]: Listening on systemd-report-cgroup.socket - CGroup Report Varlink Socket. [ 18.756897] systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. [ 18.759023] systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. [ 18.763082] systemd[1]: Listening on systemd-storage-block.socket - Simple Block Device Backed Storage Provider. [ 18.766387] systemd[1]: Listening on systemd-storage-fs.socket - Simple File System Backed Storage Provider. [ 18.769655] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 18.771457] systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. [ 18.774108] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 18.778183] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 18.780685] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 18.783324] systemd[1]: Mounting media.mount - External Media Directory... [ 18.784711] systemd[1]: proc-xen.mount - /proc/xen skipped, unmet condition check ConditionVirtualization=xen [ 18.787425] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 18.789836] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 18.792025] systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. [ 18.795000] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 18.797605] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 18.799316] systemd[1]: ignition-delete-config.service - Ignition (delete config) skipped, no trigger condition checks were met. [ 18.802433] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 18.805474] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 18.807170] systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm [ 18.809188] systemd[1]: modprobe@efi_pstore.service - Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore [ 18.812635] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 18.814239] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf skipped, unmet condition check ConditionPathExists=!/etc/nsswitch.conf [ 18.816430] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 18.817543] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 18.819249] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 [ 18.824702] systemd[1]: Starting systemd-journald.service - Journal Service... [ 18.828441] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 18.831023] systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... [ 18.833311] systemd[1]: Reached target time-set.target - System Time Set. [ 18.835734] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 18.838770] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 18.848195] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 18.855295] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer skipped, unmet condition check ConditionVirtualization=xen [ 18.893137] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 18.902179] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 18.904381] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 18.906485] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 18.945620] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 18.954169] systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... [ 18.963071] systemd[1]: Mounted media.mount - External Media Directory. [ 18.968889] systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. [ 18.982790] systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. [ 18.985843] systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... [ 19.012088] systemd-journald[1248]: Collecting audit messages is enabled. [ 19.013525] systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. [ 19.016991] systemd[1]: Reached target network-pre.target - Preparation for Network. [ 19.019485] systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. [ 19.029057] systemd[1]: Started systemd-journald.service - Journal Service. [ 19.129539] fuse: init (API version 7.45) [ 19.167282] systemd-journald[1248]: Received client request to flush runtime journal. [ 19.639378] tun: Universal TUN/TAP device driver, 1.6 [ 19.808351] set_capacity_and_notify: 2 callbacks suppressed [ 19.808354] loop6: detected capacity change from 0 to 44505 [ 19.823185] loop6: p1 p2 p3 [ 19.889454] device-mapper: verity: sha256 using "sha256-lib" [ 19.890559] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 19.892197] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 19.893787] device-mapper: ioctl: error adding target to table [ 19.903138] device-mapper: verity: sha256 using "sha256-lib" [ 20.989604] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 20.997090] ACPI: button: Power Button [PWRF] [ 21.002446] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 21.009670] mousedev: PS/2 mouse device common for all mice [ 21.015469] ACPI: button: Sleep Button [SLPF] [ 21.042277] vmclock AMZNC10C:00: vmclock0: registered miscdev [ 21.066955] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 21.578330] erofs (device dm-5): mounted with root inode @ nid 40. [ 21.613687] loop6: detected capacity change from 0 to 44505 [ 21.621147] loop6: p1 p2 p3 [ 21.625360] device-mapper: verity: sha256 using "sha256-lib" [ 21.626340] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.627971] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.629866] device-mapper: ioctl: error adding target to table [ 21.633774] device-mapper: verity: sha256 using "sha256-lib" [ 21.666164] erofs (device dm-5): mounted with root inode @ nid 40. [ 21.709001] loop6: detected capacity change from 0 to 169080 [ 21.714875] loop6: p1 p2 p3 [ 21.726396] device-mapper: verity: sha256 using "sha256-lib" [ 21.727464] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.729001] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.730594] device-mapper: ioctl: error adding target to table [ 21.737098] device-mapper: verity: sha256 using "sha256-lib" [ 21.772818] erofs (device dm-5): mounted with root inode @ nid 39. [ 21.774710] kauditd_printk_skb: 73 callbacks suppressed [ 21.774713] audit: type=1130 audit(1792421350.840:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.801960] loop6: detected capacity change from 0 to 431832 [ 21.809121] loop6: p1 p2 p3 [ 21.813951] device-mapper: verity: sha256 using "sha256-lib" [ 21.815005] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.816515] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.817958] device-mapper: ioctl: error adding target to table [ 21.820670] device-mapper: verity: sha256 using "sha256-lib" [ 21.857048] erofs (device dm-5): mounted with root inode @ nid 39. [ 21.916442] loop6: detected capacity change from 0 to 324328 [ 21.927167] loop6: p1 p2 p3 [ 21.932001] device-mapper: verity: sha256 using "sha256-lib" [ 21.933085] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.934442] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.935786] device-mapper: ioctl: error adding target to table [ 21.938071] device-mapper: verity: sha256 using "sha256-lib" [ 21.970495] erofs (device dm-5): mounted with root inode @ nid 39. [ 21.997239] loop6: detected capacity change from 0 to 221624 [ 22.042913] loop6: detected capacity change from 0 to 169080 [ 22.051301] loop6: p1 p2 p3 [ 22.056139] device-mapper: verity: sha256 using "sha256-lib" [ 22.057053] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.058382] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 22.059730] device-mapper: ioctl: error adding target to table [ 22.062249] device-mapper: verity: sha256 using "sha256-lib" [ 22.095422] erofs (device dm-5): mounted with root inode @ nid 39. [ 22.097994] loop7: detected capacity change from 0 to 431832 [ 22.110056] loop7: p1 p2 p3 [ 22.115165] device-mapper: verity: sha256 using "sha256-lib" [ 22.116144] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.117507] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 22.118847] device-mapper: ioctl: error adding target to table [ 22.121009] device-mapper: verity: sha256 using "sha256-lib" [ 22.153609] erofs (device dm-6): mounted with root inode @ nid 39. [ 22.162448] loop8: detected capacity change from 0 to 324328 [ 22.171950] loop8: p1 p2 p3 [ 22.182139] device-mapper: verity: sha256 using "sha256-lib" [ 22.183233] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 22.184763] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 22.186487] device-mapper: ioctl: error adding target to table [ 22.188830] device-mapper: verity: sha256 using "sha256-lib" [ 22.224208] erofs (device dm-7): mounted with root inode @ nid 39. [ 22.228457] loop9: detected capacity change from 0 to 221624 [ 22.254105] audit: type=1130 audit(1792421351.320:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.335897] audit: type=1130 audit(1792421351.401:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.377191] audit: type=1127 audit(1792421351.442:164): pid=1563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' [ 22.387071] audit: type=1130 audit(1792421351.452:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.463786] audit: type=1130 audit(1792421351.529:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.495013] audit: type=1305 audit(1792421351.560:167): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 [ 22.500164] audit: type=1300 audit(1792421351.560:167): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe57dc20a0 a2=420 a3=0 items=0 ppid=1559 pid=1585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 22.506509] audit: type=1327 audit(1792421351.560:167): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 26.597567] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 26.622182] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/10/19 14:49:18Z: Amazon SSM Agent v3.3.0.0 is running 2026/10/19 14:49:18Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/10/19 14:49:18Z: OsVersion: 9999.9.9 [!p]104\[?7h78P+q6E616D65\ This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:49:22 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 41.215132] audit: type=1305 audit(1792421371.037:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 41.217047] audit: type=1300 audit(1792421371.037:168): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffa8069470 a2=420 a3=0 items=0 ppid=1993 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 41.221211] audit: type=1327 audit(1792421371.037:168): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 41.225680] audit: type=1130 audit(1792421371.056:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.228988] audit: type=1131 audit(1792421371.056:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.232538] audit: type=1106 audit(1792421371.063:171): pid=1987 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.237067] audit: type=1104 audit(1792421371.066:172): pid=1987 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.393143] audit: type=1106 audit(1792421371.223:173): pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 41.397755] audit: type=1104 audit(1792421371.223:174): pid=1982 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 41.404369] audit: type=1131 audit(1792421371.235:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.18.188:22-98.64.94.113:41590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.976570] kauditd_printk_skb: 13 callbacks suppressed [ 48.976574] audit: type=1325 audit(1792421378.807:187): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2120 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.980198] audit: type=1300 audit(1792421378.807:187): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcc1d853d0 a2=0 a3=0 items=0 ppid=2059 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.986901] audit: type=1327 audit(1792421378.807:187): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 48.989433] audit: type=1325 audit(1792421378.818:188): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2122 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.992440] audit: type=1300 audit(1792421378.818:188): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffca5d09900 a2=0 a3=0 items=0 ppid=2059 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.998520] audit: type=1327 audit(1792421378.818:188): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 49.001298] audit: type=1325 audit(1792421378.832:189): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2124 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 49.004365] audit: type=1300 audit(1792421378.832:189): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda053f640 a2=0 a3=0 items=0 ppid=2059 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 49.010415] audit: type=1327 audit(1792421378.832:189): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 49.013394] audit: type=1325 audit(1792421378.841:190): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 49.252419] Initializing XFRM netlink socket This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:49:40 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:49:41 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 54.108288] kauditd_printk_skb: 90 callbacks suppressed [ 54.108292] audit: type=1130 audit(1792421383.939:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.182331] audit: type=1131 audit(1792421384.013:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 57.639325] audit: type=1131 audit(1792421387.470:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.658128] audit: type=1334 audit(1792421387.489:224): prog-id=38 op=UNLOAD [ 65.018138] audit: type=1130 audit(1792421394.848:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 65.148119] audit: type=1131 audit(1792421394.978:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 66.594072] audit: type=1130 audit(1792421396.424:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.597847] audit: type=1131 audit(1792421396.424:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 66.804725] zram_generator::config[2546]: No configuration found. [ 67.179958] audit: type=1334 audit(1792421397.010:229): prog-id=42 op=LOAD [ 67.181273] audit: type=1334 audit(1792421397.010:230): prog-id=34 op=UNLOAD [ 67.182880] audit: type=1334 audit(1792421397.013:231): prog-id=43 op=LOAD [ 67.184356] audit: type=1334 audit(1792421397.013:232): prog-id=25 op=UNLOAD [ 67.187432] audit: type=1334 audit(1792421397.018:233): prog-id=44 op=LOAD [ 67.188870] audit: type=1334 audit(1792421397.018:234): prog-id=41 op=UNLOAD [ 75.372920] zram_generator::config[3123]: No configuration found. [ 75.773439] kauditd_printk_skb: 204 callbacks suppressed [ 75.773443] audit: type=1334 audit(1792421405.604:331): prog-id=92 op=LOAD [ 75.776305] audit: type=1334 audit(1792421405.604:332): prog-id=82 op=UNLOAD [ 75.777876] audit: type=1334 audit(1792421405.605:333): prog-id=93 op=LOAD [ 75.779435] audit: type=1334 audit(1792421405.605:334): prog-id=87 op=UNLOAD [ 75.780967] audit: type=1334 audit(1792421405.608:335): prog-id=94 op=LOAD [ 75.782421] audit: type=1334 audit(1792421405.608:336): prog-id=42 op=UNLOAD [ 75.783893] audit: type=1334 audit(1792421405.610:337): prog-id=95 op=LOAD [ 75.785310] audit: type=1334 audit(1792421405.611:338): prog-id=62 op=UNLOAD [ 75.786767] audit: type=1334 audit(1792421405.613:339): prog-id=96 op=LOAD [ 75.788188] audit: type=1334 audit(1792421405.613:340): prog-id=43 op=UNLOAD [ 84.793527] kauditd_printk_skb: 54 callbacks suppressed [ 84.793531] audit: type=1334 audit(1792421414.624:395): prog-id=118 op=LOAD [ 84.797729] audit: type=1334 audit(1792421414.627:396): prog-id=119 op=LOAD [ 84.798897] audit: type=1300 audit(1792421414.627:396): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3a8fbc98dfd8 a2=98 a3=0 items=0 ppid=3284 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.805273] audit: type=1327 audit(1792421414.627:396): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386439623464396332353866616133323939616361363631393037 [ 84.813470] audit: type=1334 audit(1792421414.627:397): prog-id=119 op=UNLOAD [ 84.814800] audit: type=1300 audit(1792421414.627:397): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3284 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.820073] audit: type=1327 audit(1792421414.627:397): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386439623464396332353866616133323939616361363631393037 [ 84.832125] audit: type=1334 audit(1792421414.628:398): prog-id=120 op=LOAD [ 84.833374] audit: type=1300 audit(1792421414.628:398): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3a8fbc98e290 a2=98 a3=0 items=0 ppid=3284 pid=3303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.839472] audit: type=1327 audit(1792421414.628:398): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386439623464396332353866616133323939616361363631393037 [ 93.267792] kauditd_printk_skb: 224 callbacks suppressed [ 93.267794] audit: type=1334 audit(1792421423.098:475): prog-id=136 op=LOAD [ 93.270605] audit: type=1334 audit(1792421423.101:476): prog-id=137 op=LOAD [ 93.271992] audit: type=1300 audit(1792421423.101:476): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1d8254eb1fd8 a2=98 a3=0 items=0 ppid=3284 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.277275] audit: type=1327 audit(1792421423.101:476): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393461356637643866313939353763653839303639393261643738 [ 93.282453] audit: type=1334 audit(1792421423.101:477): prog-id=137 op=UNLOAD [ 93.283772] audit: type=1300 audit(1792421423.101:477): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3284 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.289029] audit: type=1327 audit(1792421423.101:477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393461356637643866313939353763653839303639393261643738 [ 93.294442] audit: type=1334 audit(1792421423.101:478): prog-id=138 op=LOAD [ 93.296372] audit: type=1300 audit(1792421423.101:478): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1d8254eb2290 a2=98 a3=0 items=0 ppid=3284 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.303176] audit: type=1327 audit(1792421423.101:478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631393461356637643866313939353763653839303639393261643738 [ 98.459185] kauditd_printk_skb: 122 callbacks suppressed [ 98.459193] audit: type=1334 audit(1792421428.289:527): prog-id=164 op=LOAD [ 98.461363] audit: type=1300 audit(1792421428.289:527): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffefb902be0 a2=74 a3=7ffefb902be0 items=0 ppid=3809 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 98.466651] audit: type=1327 audit(1792421428.289:527): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 98.468512] audit: type=1334 audit(1792421428.289:528): prog-id=164 op=UNLOAD [ 98.469815] audit: type=1300 audit(1792421428.289:528): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffefb902be0 a2=74 a3=7ffefb902be0 items=0 ppid=3809 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 98.475482] audit: type=1327 audit(1792421428.289:528): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 98.477615] audit: type=1334 audit(1792421428.289:529): prog-id=165 op=LOAD [ 98.478905] audit: type=1300 audit(1792421428.289:529): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffefb901c60 a2=90 a3=2 items=0 ppid=3809 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 98.484489] audit: type=1327 audit(1792421428.289:529): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 98.486650] audit: type=1334 audit(1792421428.289:530): prog-id=165 op=UNLOAD This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:50:32 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 102.685501] NET: Registered PF_ALG protocol family This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:50:33 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 103.975915] eth0: renamed from tmpb91e8 [ 103.980058] eth0: renamed from tmp05771 This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:50:34 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 104.953609] kauditd_printk_skb: 6758 callbacks suppressed [ 104.953613] audit: type=1334 audit(1792421434.784:2783): prog-id=1270 op=LOAD [ 104.958060] audit: type=1300 audit(1792421434.784:2783): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe77e05040 a2=74 a3=7ffe77e05040 items=0 ppid=3809 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.966032] audit: type=1327 audit(1792421434.784:2783): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313639305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 104.972114] audit: type=1334 audit(1792421434.787:2784): prog-id=1270 op=UNLOAD [ 104.973576] audit: type=1300 audit(1792421434.787:2784): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe77e05040 a2=74 a3=7ffe77e05040 items=0 ppid=3809 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.979482] audit: type=1327 audit(1792421434.787:2784): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313639305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 104.983805] audit: type=1334 audit(1792421434.787:2785): prog-id=1271 op=LOAD [ 104.985355] audit: type=1300 audit(1792421434.787:2785): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe77e04fd0 a2=80 a3=0 items=0 ppid=3809 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.990870] audit: type=1327 audit(1792421434.787:2785): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313639305F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 104.995317] audit: type=1334 audit(1792421434.787:2786): prog-id=1271 op=UNLOAD This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:50:35 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:50:36 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 110.187455] kauditd_printk_skb: 579 callbacks suppressed [ 110.187459] audit: type=1325 audit(1792421440.018:2982): table=filter:148 family=2 entries=11 op=nft_register_rule pid=4467 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.191245] audit: type=1300 audit(1792421440.018:2982): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc674015b0 a2=0 a3=7ffc6740159c items=0 ppid=3400 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.196722] audit: type=1327 audit(1792421440.018:2982): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 110.214464] audit: type=1325 audit(1792421440.045:2983): table=nat:149 family=2 entries=45 op=nft_register_chain pid=4467 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.217061] audit: type=1300 audit(1792421440.045:2983): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffc674015b0 a2=0 a3=7ffc6740159c items=0 ppid=3400 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.222513] audit: type=1327 audit(1792421440.045:2983): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 137.390506] audit: type=1130 audit(1792421467.221:2984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4102-172.31.18.188:22-98.64.94.113:44260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.289200] audit: type=1101 audit(1792421468.120:2985): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 138.295925] audit: type=1103 audit(1792421468.126:2986): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 138.301448] audit: type=1006 audit(1792421468.127:2987): pid=4475 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 138.306641] audit: type=1300 audit(1792421468.127:2987): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffb4afb990 a2=3 a3=0 items=0 ppid=1 pid=4475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.313856] audit: type=1327 audit(1792421468.127:2987): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 138.329014] audit: type=1105 audit(1792421468.159:2988): pid=4475 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 138.336544] audit: type=1103 audit(1792421468.167:2989): pid=4484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 139.498532] audit: type=1106 audit(1792421469.329:2990): pid=4475 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 139.505309] audit: type=1104 audit(1792421469.329:2991): pid=4475 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 144.661524] kauditd_printk_skb: 1 callbacks suppressed [ 144.661529] audit: type=1130 audit(1792421474.492:2993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4103-172.31.18.188:22-98.64.94.113:50490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.513700] audit: type=1101 audit(1792421475.344:2994): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 145.519993] audit: type=1103 audit(1792421475.350:2995): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 145.525220] audit: type=1006 audit(1792421475.351:2996): pid=4497 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 145.528067] audit: type=1300 audit(1792421475.351:2996): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe373cfa20 a2=3 a3=0 items=0 ppid=1 pid=4497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.533918] audit: type=1327 audit(1792421475.351:2996): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 145.553614] audit: type=1105 audit(1792421475.384:2997): pid=4497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 145.561627] audit: type=1103 audit(1792421475.392:2998): pid=4501 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 146.081109] audit: type=1106 audit(1792421475.912:2999): pid=4497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 146.087614] audit: type=1104 audit(1792421475.912:3000): pid=4497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 151.252282] kauditd_printk_skb: 1 callbacks suppressed [ 151.252286] audit: type=1130 audit(1792421481.082:3002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-3-172.31.18.188:22-98.64.94.113:60442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.103148] audit: type=1101 audit(1792421481.934:3003): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 152.109732] audit: type=1103 audit(1792421481.940:3004): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 152.114897] audit: type=1006 audit(1792421481.940:3005): pid=4517 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 152.117949] audit: type=1300 audit(1792421481.940:3005): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe0e736aa0 a2=3 a3=0 items=0 ppid=1 pid=4517 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.123771] audit: type=1327 audit(1792421481.940:3005): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 152.139128] audit: type=1105 audit(1792421481.970:3006): pid=4517 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 152.148005] audit: type=1103 audit(1792421481.978:3007): pid=4521 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 152.676022] audit: type=1106 audit(1792421482.507:3008): pid=4517 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 152.682505] audit: type=1104 audit(1792421482.507:3009): pid=4517 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.016004] kauditd_printk_skb: 23 callbacks suppressed [ 161.016008] audit: type=1130 audit(1792421490.846:3029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-5-172.31.18.188:22-98.64.94.113:46952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.851731] audit: type=1101 audit(1792421491.682:3030): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.857936] audit: type=1103 audit(1792421491.688:3031): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.863764] audit: type=1006 audit(1792421491.688:3032): pid=4564 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 161.867006] audit: type=1300 audit(1792421491.688:3032): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffca51254c0 a2=3 a3=0 items=0 ppid=1 pid=4564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.873140] audit: type=1327 audit(1792421491.688:3032): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 161.892395] audit: type=1105 audit(1792421491.723:3033): pid=4564 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 161.899917] audit: type=1103 audit(1792421491.730:3034): pid=4568 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.406997] audit: type=1106 audit(1792421492.236:3035): pid=4564 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.412813] audit: type=1104 audit(1792421492.236:3036): pid=4564 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 167.571053] kauditd_printk_skb: 1 callbacks suppressed [ 167.571057] audit: type=1130 audit(1792421497.401:3038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4105-172.31.18.188:22-98.64.94.113:46964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.397856] audit: type=1101 audit(1792421498.228:3039): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 168.404259] audit: type=1103 audit(1792421498.235:3040): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 168.409409] audit: type=1006 audit(1792421498.235:3041): pid=4580 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 168.412453] audit: type=1300 audit(1792421498.235:3041): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe1d8e2ed0 a2=3 a3=0 items=0 ppid=1 pid=4580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.418391] audit: type=1327 audit(1792421498.235:3041): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 168.436122] audit: type=1105 audit(1792421498.267:3042): pid=4580 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 168.444097] audit: type=1103 audit(1792421498.275:3043): pid=4584 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 168.950749] audit: type=1106 audit(1792421498.781:3044): pid=4580 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 168.958071] audit: type=1104 audit(1792421498.782:3045): pid=4580 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 173.036811] kauditd_printk_skb: 20 callbacks suppressed [ 173.036815] audit: type=1325 audit(1792421502.867:3062): table=filter:150 family=2 entries=20 op=nft_register_rule pid=4624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 173.041595] audit: type=1300 audit(1792421502.867:3062): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd8b2f52d0 a2=0 a3=7ffd8b2f52bc items=0 ppid=3400 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.050171] audit: type=1327 audit(1792421502.867:3062): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 173.053732] audit: type=1325 audit(1792421502.879:3063): table=nat:151 family=2 entries=18 op=nft_register_rule pid=4624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 173.056944] audit: type=1300 audit(1792421502.879:3063): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffd8b2f52d0 a2=0 a3=0 items=0 ppid=3400 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.063729] audit: type=1327 audit(1792421502.879:3063): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 173.226854] audit: type=1106 audit(1792421503.057:3064): pid=4610 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 173.233112] audit: type=1104 audit(1792421503.057:3065): pid=4610 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 173.244868] audit: type=1131 audit(1792421503.075:3066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4107-172.31.18.188:22-98.64.94.113:36448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.385155] audit: type=1130 audit(1792421503.216:3067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-6-172.31.18.188:22-98.64.94.113:36452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.052312] kauditd_printk_skb: 27 callbacks suppressed [ 179.052316] audit: type=1325 audit(1792421508.883:3087): table=filter:154 family=2 entries=20 op=nft_register_rule pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 179.056526] audit: type=1300 audit(1792421508.883:3087): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe69546aa0 a2=0 a3=7ffe69546a8c items=0 ppid=3400 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.062148] audit: type=1327 audit(1792421508.883:3087): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 179.067241] audit: type=1325 audit(1792421508.897:3088): table=nat:155 family=2 entries=102 op=nft_register_chain pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 179.070182] audit: type=1300 audit(1792421508.897:3088): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffe69546aa0 a2=0 a3=7ffe69546a8c items=0 ppid=3400 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.076059] audit: type=1327 audit(1792421508.897:3088): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 181.659833] audit: type=1130 audit(1792421511.490:3089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4108-172.31.18.188:22-98.64.94.113:32782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.490760] audit: type=1101 audit(1792421512.321:3090): pid=4665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 182.498239] audit: type=1103 audit(1792421512.328:3091): pid=4665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 182.503745] audit: type=1006 audit(1792421512.328:3092): pid=4665 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 188.206985] kauditd_printk_skb: 7 callbacks suppressed [ 188.206988] audit: type=1130 audit(1792421518.037:3098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4109-172.31.18.188:22-98.64.94.113:32794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.035650] audit: type=1101 audit(1792421518.866:3099): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 189.042577] audit: type=1103 audit(1792421518.873:3100): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 189.048428] audit: type=1006 audit(1792421518.873:3101): pid=4680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 189.051791] audit: type=1300 audit(1792421518.873:3101): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff0150feb0 a2=3 a3=0 items=0 ppid=1 pid=4680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.058188] audit: type=1327 audit(1792421518.873:3101): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 189.073930] audit: type=1105 audit(1792421518.904:3102): pid=4680 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 189.081940] audit: type=1103 audit(1792421518.912:3103): pid=4684 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 189.574920] audit: type=1106 audit(1792421519.405:3104): pid=4680 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 189.581072] audit: type=1104 audit(1792421519.405:3105): pid=4680 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 193.264101] kauditd_printk_skb: 13 callbacks suppressed [ 193.264104] audit: type=1334 audit(1792421523.095:3117): prog-id=128 op=UNLOAD [ 193.266900] audit: type=1334 audit(1792421523.095:3118): prog-id=132 op=UNLOAD [ 193.347266] audit: type=1334 audit(1792421523.178:3119): prog-id=118 op=UNLOAD [ 193.351026] audit: type=1334 audit(1792421523.178:3120): prog-id=122 op=UNLOAD This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:52:03 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 194.739320] audit: type=1106 audit(1792421524.570:3121): pid=4696 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 194.747211] audit: type=1104 audit(1792421524.576:3122): pid=4696 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 194.757017] audit: type=1131 audit(1792421524.586:3123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4110-172.31.18.188:22-98.64.94.113:32802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.906108] audit: type=1130 audit(1792421524.736:3124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-8-172.31.18.188:22-98.64.94.113:35690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-18-188 (Linux x86_64 6.18.45-flatcar) 14:52:04 SSH host key: SHA256:JbfSGkJli+nLN3GMXMIeMGBcMEg+xXJ3WzLKiOMUiHI (ECDSA) SSH host key: SHA256:vhkBlcyJK0mjQSHb3h7DTRimpGho4/uAEVmhjCTitDY (RSA) SSH host key: SHA256:HyAAzqGlX26KWl09pY4KcDEXphPAvgbImX273YY/8Ro (MLDSA44-ED25519) SSH host key: SHA256:/7eTQYkoh1R2geLt4IbohX26TEsX2oRTOo1i5GYSkBo (ED25519) eth0: 172.31.18.188 fe80::4ff:eeff:fe05:f1bb%eth0 ip-172-31-18-188 login: [ 195.770424] audit: type=1101 audit(1792421525.601:3125): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 195.776811] audit: type=1103 audit(1792421525.607:3126): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 198.522733] kauditd_printk_skb: 86 callbacks suppressed [ 198.522737] audit: type=1106 audit(1792421528.353:3167): pid=4864 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 198.529858] audit: type=1104 audit(1792421528.360:3168): pid=4864 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 198.537648] audit: type=1131 audit(1792421528.368:3169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-9-172.31.18.188:22-98.64.94.113:35706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.687668] audit: type=1130 audit(1792421528.518:3170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10-172.31.18.188:22-98.64.94.113:35722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.070046] audit: type=1334 audit(1792421528.900:3171): prog-id=1407 op=LOAD [ 199.071464] audit: type=1300 audit(1792421528.900:3171): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=2a044590e290 a2=98 a3=0 items=0 ppid=4876 pid=5014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.076678] audit: type=1327 audit(1792421528.900:3171): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863636134383333353933363362353935313435323463353464306236 [ 199.081940] audit: type=1334 audit(1792421528.901:3172): prog-id=1408 op=LOAD [ 199.083690] audit: type=1300 audit(1792421528.901:3172): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2a044590dfe8 a2=98 a3=0 items=0 ppid=4876 pid=5014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.090837] audit: type=1327 audit(1792421528.901:3172): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863636134383333353933363362353935313435323463353464306236