rvice - Setup OEM. [ OK ] Started amazon-ssm-agent.service - amazon-ssm-agent. [ OK ] Reached target system-config.targe…Load system-provided cloud configs. Starting systemd-hostnamed.service - Hostname Service... [ OK ] Reached target user-config.target - Load user-provided cloud configs. [ OK ] Started update-engine.service - Update Engine. [ OK ] Started locksmithd.service - Cluster reboot manager. [ OK ] Finished update-ssh-keys-after-ign…pdate-ssh-keys once after Ignition. Starting sshkeys.service... [ OK ] Started systemd-logind.service - User Login Management. [ OK ] Created slice system-coreos\x2dmet…ce /system/coreos-metadata-sshkeys. Starting coreos-metadata-sshkeys@c…latcar Metadata Agent (SSH Keys)... [ OK ] Started systemd-hostnamed.service - Hostname Service. Starting polkit.service - Authorization Manager... [ OK ] Finished coreos-metadata-sshkeys@c… Flatcar Metadata Agent (SSH Keys). [ OK ] Finished sshkeys.service. [ OK ] Started polkit.service - Authorization Manager. [ OK ] Started containerd.service - containerd container runtime. [ OK ] Finished prepare-helm.service - Unpack helm to /opt/bin. [ OK ] Started kubelet.service - kubelet: The Kubernetes Node Agent. [ OK ] Finished sshd-keygen.service - Generate sshd host keys. Starting issuegen.service - Generate /run/issue... [ OK ] Finished issuegen.service - Generate /run/issue. Starting systemd-user-sessions.service - Permit User Sessions... [ OK ] Finished systemd-user-sessions.service - Permit User Sessions. [ OK ] Started getty@tty1.service - Getty on tty1. [ OK ] Started serial-getty@ttyS0.service - Serial Getty on ttyS0. [ OK ] Reached target getty.target - Login Prompts. [ OK ] Reached target multi-user.target - Multi-User System. [!p]104\[?7h2026/09/02 14:25:04Z: Amazon SSM Agent v3.3.0.0 is running 2026/09/02 14:25:04Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/09/02 14:25:04Z: OsVersion: 9999.9.9 P+q6E616D65\ This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:25:06 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 46.996103] kauditd_printk_skb: 60 callbacks suppressed [ 46.996108] audit: type=1305 audit(1788359118.580:173): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 47.000490] audit: type=1300 audit(1788359118.580:173): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc3fdbd60 a2=420 a3=0 items=0 ppid=2701 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 47.008045] audit: type=1327 audit(1788359118.580:173): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 47.010707] audit: type=1130 audit(1788359118.598:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.014848] audit: type=1131 audit(1788359118.598:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.019068] audit: type=1106 audit(1788359118.599:176): pid=2695 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 47.023711] audit: type=1104 audit(1788359118.599:177): pid=2695 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 47.166258] audit: type=1106 audit(1788359118.759:178): pid=2690 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 47.174929] audit: type=1104 audit(1788359118.759:179): pid=2690 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 47.180723] audit: type=1131 audit(1788359118.764:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-5-172.31.23.178:22-20.101.212.173:53102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.688251] Initializing XFRM netlink socket This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:25:23 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:25:24 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 54.193693] kauditd_printk_skb: 111 callbacks suppressed [ 54.193699] audit: type=1130 audit(1788359125.787:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.331025] audit: type=1131 audit(1788359125.923:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 60.933040] audit: type=1131 audit(1788359132.526:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.952332] audit: type=1334 audit(1788359132.546:227): prog-id=38 op=UNLOAD [ 64.682005] audit: type=1130 audit(1788359136.275:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.801261] audit: type=1131 audit(1788359136.395:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 70.131842] audit: type=1130 audit(1788359141.725:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.137765] audit: type=1131 audit(1788359141.725:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.425640] zram_generator::config[3280]: No configuration found. [ 71.045549] audit: type=1334 audit(1788359142.639:232): prog-id=42 op=LOAD [ 71.046944] audit: type=1334 audit(1788359142.639:233): prog-id=26 op=UNLOAD [ 71.048798] audit: type=1334 audit(1788359142.641:234): prog-id=43 op=LOAD [ 71.050446] audit: type=1334 audit(1788359142.643:235): prog-id=44 op=LOAD [ 71.052044] audit: type=1334 audit(1788359142.643:236): prog-id=27 op=UNLOAD [ 71.053557] audit: type=1334 audit(1788359142.643:237): prog-id=28 op=UNLOAD [ 71.056895] audit: type=1334 audit(1788359142.650:238): prog-id=45 op=LOAD [ 71.058287] audit: type=1334 audit(1788359142.653:239): prog-id=46 op=LOAD [ 80.560718] zram_generator::config[3943]: No configuration found. [ 81.306704] kauditd_printk_skb: 202 callbacks suppressed [ 81.306709] audit: type=1334 audit(1788359152.900:334): prog-id=92 op=LOAD [ 81.309393] audit: type=1334 audit(1788359152.904:335): prog-id=42 op=UNLOAD [ 81.310844] audit: type=1334 audit(1788359152.905:336): prog-id=93 op=LOAD [ 81.312399] audit: type=1334 audit(1788359152.907:337): prog-id=94 op=LOAD [ 81.313809] audit: type=1334 audit(1788359152.907:338): prog-id=43 op=UNLOAD [ 81.315272] audit: type=1334 audit(1788359152.907:339): prog-id=44 op=UNLOAD [ 81.316726] audit: type=1334 audit(1788359152.910:340): prog-id=95 op=LOAD [ 81.318188] audit: type=1334 audit(1788359152.910:341): prog-id=69 op=UNLOAD [ 81.319655] audit: type=1334 audit(1788359152.913:342): prog-id=96 op=LOAD [ 81.321041] audit: type=1334 audit(1788359152.913:343): prog-id=87 op=UNLOAD [ 87.760231] kauditd_printk_skb: 54 callbacks suppressed [ 87.760238] audit: type=1334 audit(1788359159.353:398): prog-id=118 op=LOAD [ 87.766316] audit: type=1334 audit(1788359159.357:399): prog-id=119 op=LOAD [ 87.769609] audit: type=1300 audit(1788359159.357:399): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=12a36f0aff90 a2=98 a3=0 items=0 ppid=4089 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.776466] audit: type=1327 audit(1788359159.357:399): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362353638623135353336343938643664356266363536386261386338 [ 87.782491] audit: type=1334 audit(1788359159.357:400): prog-id=119 op=UNLOAD [ 87.784220] audit: type=1300 audit(1788359159.357:400): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4089 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.791379] audit: type=1327 audit(1788359159.357:400): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362353638623135353336343938643664356266363536386261386338 [ 87.797937] audit: type=1334 audit(1788359159.357:401): prog-id=120 op=LOAD [ 87.799612] audit: type=1300 audit(1788359159.357:401): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=12a36f0b0268 a2=98 a3=0 items=0 ppid=4089 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.805538] audit: type=1327 audit(1788359159.357:401): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362353638623135353336343938643664356266363536386261386338 [ 96.283281] kauditd_printk_skb: 224 callbacks suppressed [ 96.283286] audit: type=1334 audit(1788359167.878:478): prog-id=136 op=LOAD [ 96.287533] audit: type=1334 audit(1788359167.882:479): prog-id=137 op=LOAD [ 96.289921] audit: type=1300 audit(1788359167.882:479): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=75610731f90 a2=98 a3=0 items=0 ppid=4121 pid=4411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.297650] audit: type=1327 audit(1788359167.882:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653236613036623135396264366638636165386539363432313163 [ 96.307769] audit: type=1334 audit(1788359167.883:480): prog-id=137 op=UNLOAD [ 96.310634] audit: type=1300 audit(1788359167.883:480): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4121 pid=4411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.316463] audit: type=1327 audit(1788359167.883:480): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653236613036623135396264366638636165386539363432313163 [ 96.323322] audit: type=1334 audit(1788359167.883:481): prog-id=138 op=LOAD [ 96.324795] audit: type=1300 audit(1788359167.883:481): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=75610732268 a2=98 a3=0 items=0 ppid=4121 pid=4411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.330869] audit: type=1327 audit(1788359167.883:481): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164653236613036623135396264366638636165386539363432313163 [ 101.443063] kauditd_printk_skb: 122 callbacks suppressed [ 101.443069] audit: type=1334 audit(1788359173.037:530): prog-id=164 op=LOAD [ 101.447878] audit: type=1300 audit(1788359173.037:530): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff4b9b1a8 a2=74 a3=0 items=0 ppid=4638 pid=4696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.460241] audit: type=1327 audit(1788359173.037:530): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 101.462872] audit: type=1334 audit(1788359173.038:531): prog-id=164 op=UNLOAD [ 101.466036] audit: type=1300 audit(1788359173.038:531): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffb92e6f10 a2=74 a3=0 items=0 ppid=4638 pid=4696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.473114] audit: type=1327 audit(1788359173.038:531): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 101.477249] audit: type=1334 audit(1788359173.038:532): prog-id=165 op=LOAD [ 101.479346] audit: type=1300 audit(1788359173.038:532): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff4b9a1e8 a2=90 a3=2 items=0 ppid=4638 pid=4696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.485821] audit: type=1327 audit(1788359173.038:532): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 101.488398] audit: type=1334 audit(1788359173.039:533): prog-id=165 op=UNLOAD [ 105.830485] NET: Registered PF_ALG protocol family This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:26:17 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 106.752257] kauditd_printk_skb: 6614 callbacks suppressed [ 106.752262] audit: type=1325 audit(1788359178.347:2738): table=nat:98 family=2 entries=1 op=nft_register_chain pid=4964 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 106.756751] audit: type=1300 audit(1788359178.347:2738): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=ffffe4d98e90 a2=0 a3=ffffab69b5c0 items=0 ppid=4638 pid=4964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 106.763512] audit: type=1327 audit(1788359178.347:2738): proctitle=69707461626C6573002D770035002D74006E6174002D53 [ 106.766165] audit: type=1325 audit(1788359178.353:2739): table=nat:99 family=10 entries=1 op=nft_register_chain pid=4965 subj=system_u:system_r:spc_t:s0 comm="ip6tables" [ 106.769408] audit: type=1300 audit(1788359178.353:2739): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=ffffee3496b0 a2=0 a3=ffff97fdb5c0 items=0 ppid=4638 pid=4965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 106.775924] audit: type=1327 audit(1788359178.353:2739): proctitle=6970367461626C6573002D770035002D74006E6174002D53 [ 106.778389] audit: type=1325 audit(1788359178.356:2740): table=mangle:100 family=2 entries=5 op=nft_register_chain pid=4966 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 106.781878] audit: type=1300 audit(1788359178.356:2740): arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffec16cb20 a2=0 a3=ffff940585c0 items=0 ppid=4638 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 106.788307] audit: type=1327 audit(1788359178.356:2740): proctitle=69707461626C6573002D770035002D74006D616E676C65002D53 [ 106.790761] audit: type=1325 audit(1788359178.360:2741): table=mangle:101 family=10 entries=5 op=nft_register_chain pid=4967 subj=system_u:system_r:spc_t:s0 comm="ip6tables" This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:26:18 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 107.513463] eth0: renamed from tmp74313 [ 107.548335] eth0: renamed from tmp1901d This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:26:19 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:26:20 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:26:21 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:26:22 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 116.043197] kauditd_printk_skb: 251 callbacks suppressed [ 116.043202] audit: type=1334 audit(1788359187.635:2826): prog-id=1295 op=LOAD [ 116.046130] audit: type=1334 audit(1788359187.635:2825): prog-id=1294 op=LOAD [ 116.047857] audit: type=1300 audit(1788359187.635:2825): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdd0b8638 a2=74 a3=11 items=0 ppid=4638 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.053920] audit: type=1327 audit(1788359187.635:2825): proctitle=74630066696C746572007265706C61636500646576006C786336373133633032643934623200696E6772657373007072696F00310068616E646C65003100627066006461006F626A003137315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 116.060269] audit: type=1334 audit(1788359187.635:2827): prog-id=1294 op=UNLOAD [ 116.062971] audit: type=1300 audit(1788359187.635:2827): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff88fe8f50 a2=74 a3=11 items=0 ppid=4638 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.068701] audit: type=1327 audit(1788359187.635:2827): proctitle=74630066696C746572007265706C61636500646576006C786336373133633032643934623200696E6772657373007072696F00310068616E646C65003100627066006461006F626A003137315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 116.074341] audit: type=1334 audit(1788359187.635:2828): prog-id=1296 op=LOAD [ 116.076187] audit: type=1300 audit(1788359187.635:2828): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdd0b8618 a2=80 a3=0 items=0 ppid=4638 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.083320] audit: type=1327 audit(1788359187.635:2828): proctitle=74630066696C746572007265706C61636500646576006C786336373133633032643934623200696E6772657373007072696F00310068616E646C65003100627066006461006F626A003137315F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 127.497614] kauditd_printk_skb: 468 callbacks suppressed [ 127.497620] audit: type=1325 audit(1788359199.090:2987): table=filter:150 family=2 entries=11 op=nft_register_rule pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 127.504237] audit: type=1300 audit(1788359199.090:2987): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe594b8b0 a2=0 a3=1 items=0 ppid=4224 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.510596] audit: type=1327 audit(1788359199.090:2987): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 127.513724] audit: type=1325 audit(1788359199.099:2988): table=nat:151 family=2 entries=33 op=nft_register_chain pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 127.517528] audit: type=1300 audit(1788359199.099:2988): arch=c00000b7 syscall=211 success=yes exit=13428 a0=3 a1=ffffe594b8b0 a2=0 a3=1 items=0 ppid=4224 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.524113] audit: type=1327 audit(1788359199.099:2988): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 128.532666] audit: type=1325 audit(1788359200.126:2989): table=filter:152 family=2 entries=8 op=nft_register_rule pid=5304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 128.535815] audit: type=1300 audit(1788359200.126:2989): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd807c740 a2=0 a3=1 items=0 ppid=4224 pid=5304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.542123] audit: type=1327 audit(1788359200.126:2989): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 128.553046] audit: type=1325 audit(1788359200.146:2990): table=nat:153 family=2 entries=54 op=nft_register_chain pid=5304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.335269] kauditd_printk_skb: 2 callbacks suppressed [ 147.335275] audit: type=1130 audit(1788359218.928:2991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4098-172.31.23.178:22-20.101.212.173:52932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.211129] audit: type=1101 audit(1788359219.804:2992): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 148.218198] audit: type=1103 audit(1788359219.812:2993): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 148.223551] audit: type=1006 audit(1788359219.812:2994): pid=5312 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 148.227307] audit: type=1300 audit(1788359219.812:2994): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd2e61020 a2=3 a3=0 items=0 ppid=1 pid=5312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.233343] audit: type=1327 audit(1788359219.812:2994): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 148.247315] audit: type=1105 audit(1788359219.841:2995): pid=5312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 148.254842] audit: type=1103 audit(1788359219.848:2996): pid=5317 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 148.838716] audit: type=1106 audit(1788359220.431:2997): pid=5312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 148.849240] audit: type=1104 audit(1788359220.431:2998): pid=5312 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 154.009163] kauditd_printk_skb: 1 callbacks suppressed [ 154.009169] audit: type=1130 audit(1788359225.603:3000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4099-172.31.23.178:22-20.101.212.173:52936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 154.873767] audit: type=1101 audit(1788359226.467:3001): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 154.881260] audit: type=1103 audit(1788359226.474:3002): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 154.886495] audit: type=1006 audit(1788359226.474:3003): pid=5336 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 154.891184] audit: type=1300 audit(1788359226.474:3003): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdcf47e20 a2=3 a3=0 items=0 ppid=1 pid=5336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.897412] audit: type=1327 audit(1788359226.474:3003): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 154.914506] audit: type=1105 audit(1788359226.508:3004): pid=5336 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 154.921943] audit: type=1103 audit(1788359226.515:3005): pid=5341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 155.466922] audit: type=1106 audit(1788359227.060:3006): pid=5336 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 155.473931] audit: type=1104 audit(1788359227.060:3007): pid=5336 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 160.631247] kauditd_printk_skb: 1 callbacks suppressed [ 160.631252] audit: type=1130 audit(1788359232.225:3009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4100-172.31.23.178:22-20.101.212.173:37014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.495489] audit: type=1101 audit(1788359233.089:3010): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 161.502546] audit: type=1103 audit(1788359233.095:3011): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 161.508235] audit: type=1006 audit(1788359233.095:3012): pid=5354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 161.511604] audit: type=1300 audit(1788359233.095:3012): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff17f1390 a2=3 a3=0 items=0 ppid=1 pid=5354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.517469] audit: type=1327 audit(1788359233.095:3012): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.530671] audit: type=1105 audit(1788359233.124:3013): pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 161.538155] audit: type=1103 audit(1788359233.129:3014): pid=5358 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 162.108069] audit: type=1106 audit(1788359233.701:3015): pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 162.114816] audit: type=1104 audit(1788359233.701:3016): pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 167.277307] kauditd_printk_skb: 1 callbacks suppressed [ 167.277313] audit: type=1130 audit(1788359238.870:3018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-172.31.23.178:22-20.101.212.173:35698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.143131] audit: type=1101 audit(1788359239.737:3019): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 168.149943] audit: type=1103 audit(1788359239.743:3020): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 168.156345] audit: type=1006 audit(1788359239.743:3021): pid=5372 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 168.160916] audit: type=1300 audit(1788359239.743:3021): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc8a2c9d0 a2=3 a3=0 items=0 ppid=1 pid=5372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.166758] audit: type=1327 audit(1788359239.743:3021): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 168.184632] audit: type=1105 audit(1788359239.778:3022): pid=5372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 168.191675] audit: type=1103 audit(1788359239.785:3023): pid=5376 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 168.744074] audit: type=1106 audit(1788359240.337:3024): pid=5372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 168.751547] audit: type=1104 audit(1788359240.337:3025): pid=5372 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 177.258104] kauditd_printk_skb: 23 callbacks suppressed [ 177.258110] audit: type=1130 audit(1788359248.852:3045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4103-172.31.23.178:22-20.101.212.173:57292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.125413] audit: type=1101 audit(1788359249.719:3046): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 178.132435] audit: type=1103 audit(1788359249.725:3047): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 178.138418] audit: type=1006 audit(1788359249.725:3048): pid=5420 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 178.141790] audit: type=1300 audit(1788359249.725:3048): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff5020f90 a2=3 a3=0 items=0 ppid=1 pid=5420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.147919] audit: type=1327 audit(1788359249.725:3048): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 178.162397] audit: type=1105 audit(1788359249.756:3049): pid=5420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 178.169434] audit: type=1103 audit(1788359249.761:3050): pid=5424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 178.721133] audit: type=1106 audit(1788359250.315:3051): pid=5420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 178.730323] audit: type=1104 audit(1788359250.315:3052): pid=5420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 183.890745] kauditd_printk_skb: 1 callbacks suppressed [ 183.890751] audit: type=1130 audit(1788359255.484:3054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-8-172.31.23.178:22-20.101.212.173:57302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.759944] audit: type=1101 audit(1788359256.353:3055): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 184.766568] audit: type=1103 audit(1788359256.359:3056): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 184.771878] audit: type=1006 audit(1788359256.360:3057): pid=5438 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 184.776606] audit: type=1300 audit(1788359256.360:3057): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffad819d0 a2=3 a3=0 items=0 ppid=1 pid=5438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.782519] audit: type=1327 audit(1788359256.360:3057): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.795588] audit: type=1105 audit(1788359256.389:3058): pid=5438 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 184.802273] audit: type=1103 audit(1788359256.393:3059): pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 185.369028] audit: type=1106 audit(1788359256.962:3060): pid=5438 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 185.375685] audit: type=1104 audit(1788359256.962:3061): pid=5438 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 189.277010] kauditd_printk_skb: 20 callbacks suppressed [ 189.277017] audit: type=1325 audit(1788359260.870:3078): table=filter:154 family=2 entries=20 op=nft_register_rule pid=5482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 189.282371] audit: type=1300 audit(1788359260.870:3078): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe0e2b230 a2=0 a3=1 items=0 ppid=4224 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.289326] audit: type=1327 audit(1788359260.870:3078): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 189.295066] audit: type=1325 audit(1788359260.888:3079): table=nat:155 family=2 entries=18 op=nft_register_rule pid=5482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 189.303796] audit: type=1300 audit(1788359260.888:3079): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffe0e2b230 a2=0 a3=1 items=0 ppid=4224 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.310776] audit: type=1327 audit(1788359260.888:3079): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 189.464830] audit: type=1106 audit(1788359261.058:3080): pid=5468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 189.472120] audit: type=1104 audit(1788359261.059:3081): pid=5468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 189.478751] audit: type=1131 audit(1788359261.064:3082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-9-172.31.23.178:22-20.101.212.173:41610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.638050] audit: type=1130 audit(1788359261.231:3083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10-172.31.23.178:22-20.101.212.173:41626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.415478] kauditd_printk_skb: 27 callbacks suppressed [ 196.415484] audit: type=1325 audit(1788359268.009:3103): table=filter:158 family=2 entries=20 op=nft_register_rule pid=5518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 196.421614] audit: type=1300 audit(1788359268.009:3103): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffce5aeb80 a2=0 a3=1 items=0 ppid=4224 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.431251] audit: type=1327 audit(1788359268.009:3103): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 196.439405] audit: type=1325 audit(1788359268.031:3104): table=nat:159 family=2 entries=102 op=nft_register_chain pid=5518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 196.443383] audit: type=1300 audit(1788359268.031:3104): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=ffffce5aeb80 a2=0 a3=1 items=0 ppid=4224 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.451082] audit: type=1327 audit(1788359268.031:3104): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 198.139747] audit: type=1130 audit(1788359269.733:3105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4105-172.31.23.178:22-20.101.212.173:48154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.010046] audit: type=1101 audit(1788359270.603:3106): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 199.018622] audit: type=1103 audit(1788359270.611:3107): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 199.024167] audit: type=1006 audit(1788359270.611:3108): pid=5520 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 204.775255] kauditd_printk_skb: 7 callbacks suppressed [ 204.775260] audit: type=1130 audit(1788359276.369:3114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4106-172.31.23.178:22-20.101.212.173:48162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.640033] audit: type=1101 audit(1788359277.233:3115): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 205.647027] audit: type=1103 audit(1788359277.240:3116): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 205.652608] audit: type=1006 audit(1788359277.241:3117): pid=5538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 205.656957] audit: type=1300 audit(1788359277.241:3117): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff3778cc0 a2=3 a3=0 items=0 ppid=1 pid=5538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.663434] audit: type=1327 audit(1788359277.241:3117): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 205.674724] audit: type=1105 audit(1788359277.268:3118): pid=5538 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 205.681953] audit: type=1103 audit(1788359277.268:3119): pid=5542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 206.242980] audit: type=1106 audit(1788359277.836:3120): pid=5538 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 206.249589] audit: type=1104 audit(1788359277.836:3121): pid=5538 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 209.961609] kauditd_printk_skb: 9 callbacks suppressed [ 209.961615] audit: type=1334 audit(1788359281.555:3129): prog-id=149 op=UNLOAD [ 209.965039] audit: type=1334 audit(1788359281.555:3130): prog-id=153 op=UNLOAD [ 210.037071] audit: type=1334 audit(1788359281.631:3131): prog-id=1355 op=UNLOAD [ 210.038862] audit: type=1334 audit(1788359281.632:3132): prog-id=1381 op=UNLOAD [ 210.122272] audit: type=1334 audit(1788359281.715:3133): prog-id=128 op=UNLOAD [ 210.124063] audit: type=1334 audit(1788359281.715:3134): prog-id=132 op=UNLOAD [ 210.205934] audit: type=1334 audit(1788359281.799:3135): prog-id=123 op=UNLOAD [ 210.209356] audit: type=1334 audit(1788359281.801:3136): prog-id=127 op=UNLOAD This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:28:02 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 211.885359] audit: type=1106 audit(1788359283.479:3137): pid=5554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 211.893340] audit: type=1104 audit(1788359283.480:3138): pid=5554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 215.426394] kauditd_printk_skb: 59 callbacks suppressed [ 215.426399] audit: type=1101 audit(1788359287.020:3168): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 215.439066] audit: type=1103 audit(1788359287.028:3169): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 215.444320] audit: type=1006 audit(1788359287.028:3170): pid=5722 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 215.448359] audit: type=1300 audit(1788359287.028:3170): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff96df7d0 a2=3 a3=0 items=0 ppid=1 pid=5722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 215.454714] audit: type=1327 audit(1788359287.028:3170): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 215.463281] audit: type=1105 audit(1788359287.057:3171): pid=5722 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 215.470220] audit: type=1103 audit(1788359287.063:3172): pid=5818 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 215.841265] audit: type=1334 audit(1788359287.435:3173): prog-id=1402 op=LOAD [ 215.843360] audit: type=1334 audit(1788359287.436:3174): prog-id=1403 op=LOAD [ 215.845831] audit: type=1300 audit(1788359287.436:3174): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7612bb831f90 a2=98 a3=0 items=0 ppid=5734 pid=5822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 220.221867] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 220.427490] kauditd_printk_skb: 5464 callbacks suppressed [ 220.427496] audit: type=1334 audit(1788359292.021:4993): prog-id=2314 op=LOAD [ 220.430127] audit: type=1300 audit(1788359292.021:4993): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6787648 a2=90 a3=2 items=0 ppid=5969 pid=6083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.436473] audit: type=1327 audit(1788359292.021:4993): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 220.439186] audit: type=1334 audit(1788359292.021:4994): prog-id=2314 op=UNLOAD [ 220.441291] audit: type=1300 audit(1788359292.021:4994): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff81095f10 a2=0 a3=2 items=0 ppid=5969 pid=6083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.448143] audit: type=1327 audit(1788359292.021:4994): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 220.450431] audit: type=1334 audit(1788359292.021:4995): prog-id=2315 op=LOAD [ 220.451939] audit: type=1300 audit(1788359292.021:4995): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6787648 a2=90 a3=2 items=0 ppid=5969 pid=6083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.458211] audit: type=1327 audit(1788359292.021:4995): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 220.458431] audit: audit_backlog=65 > audit_backlog_limit=64 This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:28:17 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 225.784346] kauditd_printk_skb: 1610 callbacks suppressed [ 225.784368] audit: type=1130 audit(1788359297.377:5538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4110-172.31.23.178:22-182.53.137.27:56412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 225.895038] audit: type=1131 audit(1788359297.488:5539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4110-172.31.23.178:22-182.53.137.27:56412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:28:18 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 227.451576] audit: type=1334 audit(1788359299.045:5540): prog-id=2526 op=LOAD [ 227.453624] audit: type=1300 audit(1788359299.045:5540): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe85bca88 a2=74 a3=10 items=0 ppid=5969 pid=6579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.463035] audit: type=1327 audit(1788359299.045:5540): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313433355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 227.469306] audit: type=1334 audit(1788359299.053:5541): prog-id=2526 op=UNLOAD [ 227.472322] audit: type=1300 audit(1788359299.053:5541): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff8c70cf50 a2=74 a3=10 items=0 ppid=5969 pid=6579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 227.478291] audit: type=1327 audit(1788359299.053:5541): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313433355F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 227.483419] audit: type=1334 audit(1788359299.053:5542): prog-id=2527 op=LOAD [ 227.488923] audit: type=1300 audit(1788359299.053:5542): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe85bca68 a2=80 a3=0 items=0 ppid=5969 pid=6579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-23-178 (Linux aarch64 6.18.45-flatcar) 14:28:19 SSH host key: SHA256:H+BEfuIy3rbwmThja1LNWkYhjkdrrv/sOVuibk22Ak8 (ED25519) SSH host key: SHA256:u9kK6VfXoGQH3h4bxW3K961OgU7iH4mDraWjfQfC6qs (ECDSA) SSH host key: SHA256:SH9rAbJLjKOUbg+GP1bBG5PQnqpmHVPb05UuZ5hKobg (MLDSA44-ED25519) SSH host key: SHA256:pCWTdk4AfdfLfTV7TJIfqo9YLEh0bIoFu5oEDPDShSE (RSA) eth0: 172.31.23.178 fe80::406:e3ff:fe21:e713%eth0 ip-172-31-23-178 login: [ 231.439402] kauditd_printk_skb: 130 callbacks suppressed [ 231.439407] audit: type=1106 audit(1788359303.033:5588): pid=5871 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 231.456297] audit: type=1104 audit(1788359303.041:5589): pid=5871 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 231.468248] audit: type=1131 audit(1788359303.046:5590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-4109-172.31.23.178:22-20.101.212.173:37148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 234.347383] audit: type=1334 audit(1788359305.940:5591): prog-id=2550 op=LOAD [ 234.349950] audit: type=1300 audit(1788359305.940:5591): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe58331f8 a2=74 a3=11 items=0 ppid=5969 pid=6633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 234.357377] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.358058] audit: type=1327 audit(1788359305.940:5591): proctitle=74630066696C746572007265706C61636500646576006C78635F6865616C746800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003532355F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 234.363653] audit: type=1334 audit(1788359305.940:5592): prog-id=2550 op=UNLOAD [ 234.364130] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 [ 234.365133] audit: type=1300 audit(1788359305.940:5592): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff82156f50 a2=74 a3=11 items=0 ppid=5969 pid=6633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null)