r Container Linux by Kinvolk 2025/11/24 00:05:30Z: OsVersion: 4515.0.1 [!p]104[?7h This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:05:33 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:05:33 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: [ 30.556816] kauditd_printk_skb: 107 callbacks suppressed [ 30.556820] audit: type=1305 audit(1763942735.138:243): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 30.560073] audit: type=1300 audit(1763942735.138:243): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd65c33240 a2=420 a3=0 items=0 ppid=2304 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 30.565619] audit: type=1327 audit(1763942735.138:243): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 30.567461] audit: type=1130 audit(1763942735.139:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 30.570329] audit: type=1131 audit(1763942735.139:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 30.573319] audit: type=1106 audit(1763942735.146:246): pid=2300 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 30.576678] audit: type=1104 audit(1763942735.146:247): pid=2300 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 30.591139] audit: type=1106 audit(1763942735.172:248): pid=2296 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 30.598727] audit: type=1104 audit(1763942735.172:249): pid=2296 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 30.603766] audit: type=1131 audit(1763942735.176:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.19.147:22-139.178.68.195:36068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 33.638909] Initializing XFRM netlink socket This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:05:39 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:05:39 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: [ 40.379885] kauditd_printk_skb: 132 callbacks suppressed [ 40.379889] audit: type=1130 audit(1763942744.961:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.467683] audit: type=1131 audit(1763942745.049:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 50.902898] audit: type=1130 audit(1763942755.484:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.997969] audit: type=1131 audit(1763942755.579:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 53.019258] audit: type=1130 audit(1763942757.601:305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.024488] audit: type=1131 audit(1763942757.601:306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.216747] zram_generator::config[2860]: No configuration found. [ 53.521055] audit: type=1334 audit(1763942758.100:307): prog-id=70 op=LOAD [ 53.522294] audit: type=1334 audit(1763942758.100:308): prog-id=71 op=LOAD [ 53.526117] audit: type=1334 audit(1763942758.100:309): prog-id=72 op=LOAD [ 53.527279] audit: type=1334 audit(1763942758.101:310): prog-id=66 op=UNLOAD [ 53.530036] audit: type=1334 audit(1763942758.101:311): prog-id=67 op=UNLOAD [ 53.531632] audit: type=1334 audit(1763942758.101:312): prog-id=68 op=UNLOAD [ 55.904229] kauditd_printk_skb: 87 callbacks suppressed [ 55.904233] audit: type=1334 audit(1763942760.483:372): prog-id=95 op=LOAD [ 55.906996] audit: type=1300 audit(1763942760.483:372): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000178488 a2=98 a3=0 items=0 ppid=2987 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.909412] audit: audit_backlog=65 > audit_backlog_limit=64 [ 55.913223] audit: type=1327 audit(1763942760.483:372): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365343165646435386434303535653430663832303036393265363438 [ 55.913837] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 55.913839] audit: backlog limit exceeded [ 55.921281] audit: type=1334 audit(1763942760.486:373): prog-id=96 op=LOAD [ 55.922771] audit: type=1300 audit(1763942760.486:373): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c000178218 a2=98 a3=0 items=0 ppid=2987 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.928742] audit: type=1327 audit(1763942760.486:373): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365343165646435386434303535653430663832303036393265363438 [ 55.934631] audit: type=1334 audit(1763942760.486:374): prog-id=96 op=UNLOAD [ 65.372619] zram_generator::config[3256]: No configuration found. [ 65.767073] kauditd_printk_skb: 115 callbacks suppressed [ 65.767077] audit: type=1131 audit(1763942770.349:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 65.776520] audit: type=1334 audit(1763942770.358:417): prog-id=123 op=LOAD [ 65.780250] audit: type=1334 audit(1763942770.358:418): prog-id=73 op=UNLOAD [ 65.783516] audit: type=1334 audit(1763942770.360:419): prog-id=124 op=LOAD [ 65.786933] audit: type=1334 audit(1763942770.360:420): prog-id=125 op=LOAD [ 65.788443] audit: type=1334 audit(1763942770.360:421): prog-id=74 op=UNLOAD [ 65.790272] audit: type=1334 audit(1763942770.360:422): prog-id=75 op=UNLOAD [ 65.791739] audit: type=1334 audit(1763942770.361:423): prog-id=126 op=LOAD [ 65.793076] audit: type=1334 audit(1763942770.361:424): prog-id=83 op=UNLOAD [ 65.796038] audit: type=1334 audit(1763942770.363:425): prog-id=127 op=LOAD [ 71.581169] kauditd_printk_skb: 32 callbacks suppressed [ 71.581172] audit: type=1334 audit(1763942776.162:458): prog-id=143 op=LOAD [ 71.583927] audit: type=1334 audit(1763942776.163:459): prog-id=144 op=LOAD [ 71.585395] audit: type=1300 audit(1763942776.163:459): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a0238 a2=98 a3=0 items=0 ppid=3556 pid=3567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.591634] audit: type=1327 audit(1763942776.163:459): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531366233333732643834366235623261323065613063393234333266 [ 71.603439] audit: type=1334 audit(1763942776.163:460): prog-id=144 op=UNLOAD [ 71.604841] audit: type=1300 audit(1763942776.163:460): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3556 pid=3567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.610724] audit: type=1327 audit(1763942776.163:460): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531366233333732643834366235623261323065613063393234333266 [ 71.617050] audit: type=1334 audit(1763942776.163:461): prog-id=145 op=LOAD [ 71.618612] audit: type=1300 audit(1763942776.163:461): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a0488 a2=98 a3=0 items=0 ppid=3556 pid=3567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.624824] audit: type=1327 audit(1763942776.163:461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531366233333732643834366235623261323065613063393234333266 [ 82.861968] kauditd_printk_skb: 224 callbacks suppressed [ 82.861973] audit: type=1106 audit(1763942787.442:538): pid=2336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 82.868205] audit: type=1104 audit(1763942787.442:539): pid=2336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 82.892208] audit: type=1106 audit(1763942787.472:540): pid=2332 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 82.904055] audit: type=1104 audit(1763942787.472:541): pid=2332 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 82.911571] audit: type=1131 audit(1763942787.485:542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.19.147:22-139.178.68.195:36084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 84.334075] audit: type=1325 audit(1763942788.915:543): table=filter:105 family=2 entries=15 op=nft_register_rule pid=3892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 84.339590] audit: type=1300 audit(1763942788.915:543): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdd3bd5010 a2=0 a3=7ffdd3bd4ffc items=0 ppid=3607 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.352536] audit: type=1327 audit(1763942788.915:543): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 84.358664] audit: type=1325 audit(1763942788.924:544): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 84.364508] audit: type=1300 audit(1763942788.924:544): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdd3bd5010 a2=0 a3=0 items=0 ppid=3607 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.794976] kauditd_printk_skb: 13 callbacks suppressed [ 88.794981] audit: type=1325 audit(1763942793.376:549): table=filter:111 family=2 entries=19 op=nft_register_rule pid=3900 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.799309] audit: type=1300 audit(1763942793.376:549): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff504a0970 a2=0 a3=7fff504a095c items=0 ppid=3607 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.806225] audit: type=1327 audit(1763942793.376:549): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 88.812837] audit: type=1325 audit(1763942793.394:550): table=nat:112 family=2 entries=12 op=nft_register_rule pid=3900 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.816399] audit: type=1300 audit(1763942793.394:550): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff504a0970 a2=0 a3=0 items=0 ppid=3607 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.823358] audit: type=1327 audit(1763942793.394:550): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 89.881442] audit: type=1325 audit(1763942794.463:551): table=filter:113 family=2 entries=21 op=nft_register_rule pid=3902 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 89.885601] audit: type=1300 audit(1763942794.463:551): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffc9a6d330 a2=0 a3=7fffc9a6d31c items=0 ppid=3607 pid=3902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.894999] audit: type=1327 audit(1763942794.463:551): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 89.898254] audit: type=1325 audit(1763942794.476:552): table=nat:114 family=2 entries=12 op=nft_register_rule pid=3902 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.600856] kauditd_printk_skb: 68 callbacks suppressed [ 94.600860] audit: type=1325 audit(1763942799.182:577): table=filter:115 family=2 entries=21 op=nft_register_rule pid=4217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.605845] audit: type=1300 audit(1763942799.182:577): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe711a18b0 a2=0 a3=7ffe711a189c items=0 ppid=3607 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.611735] audit: type=1327 audit(1763942799.182:577): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 94.615581] audit: type=1325 audit(1763942799.194:578): table=nat:116 family=2 entries=19 op=nft_register_chain pid=4217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.618577] audit: type=1300 audit(1763942799.194:578): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe711a18b0 a2=0 a3=7ffe711a189c items=0 ppid=3607 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.624690] audit: type=1327 audit(1763942799.194:578): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 94.633839] audit: type=1334 audit(1763942799.215:579): prog-id=176 op=LOAD [ 94.635414] audit: type=1300 audit(1763942799.215:579): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00010c488 a2=98 a3=0 items=0 ppid=4009 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.641034] audit: type=1327 audit(1763942799.215:579): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237343264353637356635643264383037316366386161636466633166 [ 94.647023] audit: type=1334 audit(1763942799.215:580): prog-id=177 op=LOAD [ 101.242726] kauditd_printk_skb: 12 callbacks suppressed [ 101.242729] audit: type=1334 audit(1763942805.824:585): prog-id=179 op=LOAD [ 101.245250] audit: type=1300 audit(1763942805.824:585): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000106488 a2=98 a3=0 items=0 ppid=4009 pid=4257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.251088] audit: type=1327 audit(1763942805.824:585): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763373866343936653734313931643161333163666336376134623636 [ 101.257153] audit: type=1334 audit(1763942805.824:586): prog-id=180 op=LOAD [ 101.258857] audit: type=1300 audit(1763942805.824:586): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c000106218 a2=98 a3=0 items=0 ppid=4009 pid=4257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.265270] audit: type=1327 audit(1763942805.824:586): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763373866343936653734313931643161333163666336376134623636 [ 101.271568] audit: type=1334 audit(1763942805.824:587): prog-id=180 op=UNLOAD [ 101.273388] audit: type=1300 audit(1763942805.824:587): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4009 pid=4257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.285203] audit: type=1327 audit(1763942805.824:587): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763373866343936653734313931643161333163666336376134623636 [ 101.290630] audit: type=1334 audit(1763942805.824:588): prog-id=179 op=UNLOAD [ 111.077288] kauditd_printk_skb: 6 callbacks suppressed [ 111.077292] audit: type=1334 audit(1763942815.658:591): prog-id=182 op=LOAD [ 111.081667] audit: type=1300 audit(1763942815.658:591): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000178488 a2=98 a3=0 items=0 ppid=4009 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.087163] audit: type=1327 audit(1763942815.658:591): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613537356639343264303165386333643539333461366131653965 [ 111.092591] audit: type=1334 audit(1763942815.659:592): prog-id=183 op=LOAD [ 111.094062] audit: type=1300 audit(1763942815.659:592): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c000178218 a2=98 a3=0 items=0 ppid=4009 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.100342] audit: type=1327 audit(1763942815.659:592): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613537356639343264303165386333643539333461366131653965 [ 111.105851] audit: type=1334 audit(1763942815.659:593): prog-id=183 op=UNLOAD [ 111.113029] audit: type=1300 audit(1763942815.659:593): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4009 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.124291] audit: type=1327 audit(1763942815.659:593): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613537356639343264303165386333643539333461366131653965 [ 111.132004] audit: type=1334 audit(1763942815.659:594): prog-id=182 op=UNLOAD [ 111.674722] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 111.676159] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:00 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:00 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:02 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:02 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: [ 118.061896] kauditd_printk_skb: 203 callbacks suppressed [ 118.061900] audit: type=1325 audit(1763942822.603:662): table=filter:121 family=2 entries=59 op=nft_register_chain pid=4906 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 118.075033] audit: type=1300 audit(1763942822.603:662): arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffe769fd690 a2=0 a3=7ffe769fd67c items=0 ppid=4666 pid=4906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.086038] audit: type=1327 audit(1763942822.603:662): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 118.491990] audit: type=1334 audit(1763942823.073:663): prog-id=216 op=LOAD [ 118.495859] audit: type=1334 audit(1763942823.077:664): prog-id=217 op=LOAD [ 118.497317] audit: type=1300 audit(1763942823.077:664): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=4941 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.504242] audit: type=1327 audit(1763942823.077:664): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633061643561656238636665383739343438633434633363356337 [ 118.510282] audit: type=1334 audit(1763942823.084:665): prog-id=217 op=UNLOAD [ 118.511943] audit: type=1300 audit(1763942823.084:665): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4941 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.520110] audit: type=1327 audit(1763942823.084:665): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633061643561656238636665383739343438633434633363356337 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:05 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:05 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:06 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:06 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:07 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:07 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:08 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 This is ip-172-31-19-147 (Linux x86_64 6.12.58-flatcar) 00:07:08 SSH host key: SHA256:tKbvmo1xwy+3UNIi4gTBAmLZ/XYmMOA4+dHLz2KmiSY (ECDSA) SSH host key: SHA256:Ve3dkD+aqtitQ9JQyjAXvMSGNW7mRT9tPbxWc9jamYs (ED25519) SSH host key: SHA256:PKpumXRNvXMsU4QhbrnjXVJSlcWAxOsHYA5VtQloy9M (RSA) eth0: 172.31.19.147 fe80::4d1:91ff:fef1:d495 ip-172-31-19-147 login: [ 131.898800] kauditd_printk_skb: 243 callbacks suppressed [ 131.898804] audit: type=1325 audit(1763942836.480:753): table=filter:132 family=2 entries=17 op=nft_register_rule pid=5522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.902254] audit: type=1300 audit(1763942836.480:753): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff0be04a50 a2=0 a3=7fff0be04a3c items=0 ppid=3607 pid=5522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.907983] audit: type=1327 audit(1763942836.480:753): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 131.910885] audit: type=1325 audit(1763942836.492:754): table=nat:133 family=2 entries=35 op=nft_register_chain pid=5522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.913588] audit: type=1300 audit(1763942836.492:754): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff0be04a50 a2=0 a3=7fff0be04a3c items=0 ppid=3607 pid=5522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.919192] audit: type=1327 audit(1763942836.492:754): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 132.934848] audit: type=1325 audit(1763942837.516:755): table=filter:134 family=2 entries=14 op=nft_register_rule pid=5524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 132.937618] audit: type=1300 audit(1763942837.516:755): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe7f25e800 a2=0 a3=7ffe7f25e7ec items=0 ppid=3607 pid=5524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 132.943671] audit: type=1327 audit(1763942837.516:755): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 132.954144] audit: type=1325 audit(1763942837.535:756): table=nat:135 family=2 entries=56 op=nft_register_chain pid=5524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 141.166512] kauditd_printk_skb: 2 callbacks suppressed [ 141.166516] audit: type=1130 audit(1763942845.748:757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.19.147:22-139.178.68.195:39972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.390389] audit: type=1101 audit(1763942845.972:758): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.395710] audit: type=1103 audit(1763942845.974:759): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.401133] audit: type=1006 audit(1763942845.974:760): pid=5541 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 141.403970] audit: type=1300 audit(1763942845.974:760): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffcab3d4c0 a2=3 a3=0 items=0 ppid=1 pid=5541 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.409317] audit: type=1327 audit(1763942845.974:760): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 141.421019] audit: type=1105 audit(1763942846.002:761): pid=5541 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.427240] audit: type=1103 audit(1763942846.005:762): pid=5546 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 142.277830] audit: type=1106 audit(1763942846.859:763): pid=5541 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 142.284415] audit: type=1104 audit(1763942846.860:764): pid=5541 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.308962] kauditd_printk_skb: 1 callbacks suppressed [ 147.308965] audit: type=1130 audit(1763942851.890:766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.19.147:22-139.178.68.195:38718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.492500] audit: type=1101 audit(1763942852.074:767): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.497863] audit: type=1103 audit(1763942852.075:768): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.503000] audit: type=1006 audit(1763942852.075:769): pid=5585 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 147.505769] audit: type=1300 audit(1763942852.075:769): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd20b34120 a2=3 a3=0 items=0 ppid=1 pid=5585 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.510980] audit: type=1327 audit(1763942852.075:769): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 147.514220] audit: type=1105 audit(1763942852.096:770): pid=5585 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.520230] audit: type=1103 audit(1763942852.101:771): pid=5588 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.678179] audit: type=1106 audit(1763942852.260:772): pid=5585 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.685814] audit: type=1104 audit(1763942852.260:773): pid=5585 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.711195] kauditd_printk_skb: 1 callbacks suppressed [ 152.711198] audit: type=1130 audit(1763942857.292:775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.19.147:22-139.178.68.195:38734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.949803] audit: type=1101 audit(1763942857.531:776): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.955541] audit: type=1103 audit(1763942857.533:777): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.961043] audit: type=1006 audit(1763942857.533:778): pid=5603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 152.963919] audit: type=1300 audit(1763942857.533:778): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc605289e0 a2=3 a3=0 items=0 ppid=1 pid=5603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.970186] audit: type=1327 audit(1763942857.533:778): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 152.987888] audit: type=1105 audit(1763942857.569:779): pid=5603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.995341] audit: type=1103 audit(1763942857.576:780): pid=5606 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.235645] audit: type=1106 audit(1763942857.817:781): pid=5603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.242858] audit: type=1104 audit(1763942857.817:782): pid=5603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.062682] kauditd_printk_skb: 23 callbacks suppressed [ 159.062685] audit: type=1130 audit(1763942863.644:802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.19.147:22-139.178.68.195:60802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.251289] audit: type=1101 audit(1763942863.833:803): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.256725] audit: type=1103 audit(1763942863.834:804): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.262471] audit: type=1006 audit(1763942863.834:805): pid=5656 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 159.265603] audit: type=1300 audit(1763942863.834:805): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd2df24670 a2=3 a3=0 items=0 ppid=1 pid=5656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.270984] audit: type=1327 audit(1763942863.834:805): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 159.274022] audit: type=1105 audit(1763942863.855:806): pid=5656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.279724] audit: type=1103 audit(1763942863.858:807): pid=5660 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.525673] audit: type=1106 audit(1763942864.107:808): pid=5656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.533673] audit: type=1104 audit(1763942864.107:809): pid=5656 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.557460] kauditd_printk_skb: 1 callbacks suppressed [ 164.557464] audit: type=1130 audit(1763942869.139:811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.19.147:22-139.178.68.195:60814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.727897] audit: type=1101 audit(1763942869.309:812): pid=5674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.734777] audit: type=1103 audit(1763942869.311:813): pid=5674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.742827] audit: type=1006 audit(1763942869.311:814): pid=5674 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 164.747927] audit: type=1300 audit(1763942869.311:814): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeeec39950 a2=3 a3=0 items=0 ppid=1 pid=5674 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.760120] audit: type=1327 audit(1763942869.311:814): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.766975] audit: type=1105 audit(1763942869.348:815): pid=5674 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.774459] audit: type=1103 audit(1763942869.356:816): pid=5679 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.970663] audit: type=1106 audit(1763942869.552:817): pid=5674 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.985056] audit: type=1104 audit(1763942869.552:818): pid=5674 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.002782] kauditd_printk_skb: 1 callbacks suppressed [ 170.002786] audit: type=1130 audit(1763942874.584:820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.19.147:22-139.178.68.195:57342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.162303] audit: type=1101 audit(1763942874.744:821): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.167681] audit: type=1103 audit(1763942874.746:822): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.173175] audit: type=1006 audit(1763942874.746:823): pid=5691 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 170.175975] audit: type=1300 audit(1763942874.746:823): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdd22c5130 a2=3 a3=0 items=0 ppid=1 pid=5691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.181289] audit: type=1327 audit(1763942874.746:823): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.187854] audit: type=1105 audit(1763942874.769:824): pid=5691 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.193841] audit: type=1103 audit(1763942874.771:825): pid=5694 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.327848] audit: type=1106 audit(1763942874.909:826): pid=5691 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.334875] audit: type=1104 audit(1763942874.909:827): pid=5691 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.373665] kauditd_printk_skb: 1 callbacks suppressed [ 175.373669] audit: type=1130 audit(1763942879.955:829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.19.147:22-139.178.68.195:57350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.582932] audit: type=1101 audit(1763942880.164:830): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.594935] audit: type=1103 audit(1763942880.172:831): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.607729] audit: type=1006 audit(1763942880.172:832): pid=5730 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 175.611060] audit: type=1300 audit(1763942880.172:832): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffefa43cdd0 a2=3 a3=0 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.617104] audit: type=1327 audit(1763942880.172:832): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.624770] audit: type=1105 audit(1763942880.206:833): pid=5730 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.634072] audit: type=1103 audit(1763942880.215:834): pid=5734 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.812265] audit: type=1106 audit(1763942880.394:835): pid=5730 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.818210] audit: type=1104 audit(1763942880.396:836): pid=5730 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 180.747074] kauditd_printk_skb: 20 callbacks suppressed [ 180.747078] audit: type=1325 audit(1763942885.328:853): table=filter:136 family=2 entries=26 op=nft_register_rule pid=5788 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 180.752279] audit: type=1300 audit(1763942885.328:853): arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffce761b460 a2=0 a3=7ffce761b44c items=0 ppid=3607 pid=5788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.761590] audit: type=1327 audit(1763942885.328:853): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 180.765959] audit: type=1325 audit(1763942885.343:854): table=nat:137 family=2 entries=20 op=nft_register_rule pid=5788 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 180.781480] audit: type=1300 audit(1763942885.343:854): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffce761b460 a2=0 a3=0 items=0 ppid=3607 pid=5788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.793068] audit: type=1327 audit(1763942885.343:854): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 180.797754] audit: type=1106 audit(1763942885.345:855): pid=5762 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 180.809235] audit: type=1104 audit(1763942885.345:856): pid=5762 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 180.818033] audit: type=1131 audit(1763942885.352:857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.19.147:22-139.178.68.195:32998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.826037] audit: type=1130 audit(1763942885.388:858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.19.147:22-139.178.68.195:33004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.107376] kauditd_printk_skb: 27 callbacks suppressed [ 187.107380] audit: type=1130 audit(1763942891.689:878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.19.147:22-139.178.68.195:48014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.406494] audit: type=1101 audit(1763942891.988:879): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.420036] audit: type=1103 audit(1763942891.988:880): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.431562] audit: type=1006 audit(1763942891.988:881): pid=5825 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 187.440775] audit: type=1300 audit(1763942891.988:881): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc1c0ad770 a2=3 a3=0 items=0 ppid=1 pid=5825 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.450123] audit: type=1327 audit(1763942891.988:881): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.453102] audit: type=1105 audit(1763942892.019:882): pid=5825 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.460234] audit: type=1103 audit(1763942892.029:883): pid=5828 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.498710] audit: type=1325 audit(1763942892.080:884): table=filter:140 family=2 entries=26 op=nft_register_rule pid=5833 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 187.502148] audit: type=1300 audit(1763942892.080:884): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff62f27270 a2=0 a3=7fff62f2725c items=0 ppid=3607 pid=5833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.912068] kauditd_printk_skb: 7 callbacks suppressed [ 192.912073] audit: type=1130 audit(1763942897.494:889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.19.147:22-139.178.68.195:48022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.137803] audit: type=1101 audit(1763942897.719:890): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 193.152132] audit: type=1103 audit(1763942897.721:891): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 193.166550] audit: type=1006 audit(1763942897.721:892): pid=5842 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 193.170998] audit: type=1300 audit(1763942897.721:892): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffff9c68600 a2=3 a3=0 items=0 ppid=1 pid=5842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 193.179051] audit: type=1327 audit(1763942897.721:892): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 193.181718] audit: type=1105 audit(1763942897.747:893): pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 193.189590] audit: type=1103 audit(1763942897.752:894): pid=5845 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 193.371049] audit: type=1106 audit(1763942897.952:895): pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 193.383661] audit: type=1104 audit(1763942897.952:896): pid=5842 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.420247] kauditd_printk_skb: 1 callbacks suppressed [ 198.420252] audit: type=1130 audit(1763942902.997:898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.19.147:22-139.178.68.195:51958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.615073] audit: type=1101 audit(1763942903.197:899): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.624131] audit: type=1103 audit(1763942903.200:900): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.639512] audit: type=1006 audit(1763942903.200:901): pid=5865 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 198.643269] audit: type=1300 audit(1763942903.200:901): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffed1ffc730 a2=3 a3=0 items=0 ppid=1 pid=5865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.649630] audit: type=1327 audit(1763942903.200:901): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 198.660629] audit: type=1105 audit(1763942903.241:902): pid=5865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.670202] audit: type=1103 audit(1763942903.250:903): pid=5868 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.852412] audit: type=1106 audit(1763942903.434:904): pid=5865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.864823] audit: type=1104 audit(1763942903.434:905): pid=5865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 203.886759] kauditd_printk_skb: 1 callbacks suppressed [ 203.886762] audit: type=1130 audit(1763942908.468:907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.19.147:22-139.178.68.195:51972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.086922] audit: type=1101 audit(1763942908.668:908): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 204.099830] audit: type=1103 audit(1763942908.677:909): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 204.111032] audit: type=1006 audit(1763942908.678:910): pid=5906 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 204.117450] audit: type=1300 audit(1763942908.678:910): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff57626b80 a2=3 a3=0 items=0 ppid=1 pid=5906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.128033] audit: type=1327 audit(1763942908.678:910): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.134266] audit: type=1105 audit(1763942908.716:911): pid=5906 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 204.144042] audit: type=1103 audit(1763942908.724:912): pid=5909 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 204.435158] audit: type=1106 audit(1763942909.017:913): pid=5906 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 204.447417] audit: type=1104 audit(1763942909.017:914): pid=5906 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.468027] kauditd_printk_skb: 1 callbacks suppressed [ 209.468031] audit: type=1130 audit(1763942914.049:916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.19.147:22-139.178.68.195:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.652073] audit: type=1101 audit(1763942914.234:917): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.661034] audit: type=1103 audit(1763942914.236:918): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.668854] audit: type=1006 audit(1763942914.236:919): pid=5929 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 209.672216] audit: type=1300 audit(1763942914.236:919): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc2bdc3b80 a2=3 a3=0 items=0 ppid=1 pid=5929 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.681707] audit: type=1327 audit(1763942914.236:919): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 209.689826] audit: type=1105 audit(1763942914.271:920): pid=5929 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.697364] audit: type=1103 audit(1763942914.279:921): pid=5932 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.901434] audit: type=1106 audit(1763942914.483:922): pid=5929 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.910276] audit: type=1104 audit(1763942914.483:923): pid=5929 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 224.669381] kauditd_printk_skb: 1 callbacks suppressed [ 224.669386] audit: type=1334 audit(1763942929.251:925): prog-id=156 op=UNLOAD [ 224.673816] audit: type=1334 audit(1763942929.251:926): prog-id=160 op=UNLOAD [ 225.538648] audit: type=1334 audit(1763942930.120:927): prog-id=266 op=LOAD [ 225.541735] audit: type=1334 audit(1763942930.120:928): prog-id=267 op=LOAD [ 225.544320] audit: type=1300 audit(1763942930.120:928): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000178238 a2=98 a3=0 items=0 ppid=3621 pid=5970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.551384] audit: type=1327 audit(1763942930.120:928): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130636265393137663464396566333537646236336365333961623762 [ 225.558509] audit: type=1334 audit(1763942930.121:929): prog-id=267 op=UNLOAD [ 225.559971] audit: type=1300 audit(1763942930.121:929): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3621 pid=5970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.565869] audit: type=1327 audit(1763942930.121:929): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130636265393137663464396566333537646236336365333961623762 [ 225.572526] audit: type=1334 audit(1763942930.121:930): prog-id=268 op=LOAD [ 230.302287] kauditd_printk_skb: 40 callbacks suppressed [ 230.302292] audit: type=1334 audit(1763942934.884:947): prog-id=277 op=LOAD [ 230.308314] audit: type=1334 audit(1763942934.887:948): prog-id=98 op=UNLOAD [ 230.309937] audit: type=1334 audit(1763942934.889:949): prog-id=118 op=UNLOAD [ 230.312078] audit: type=1334 audit(1763942934.889:950): prog-id=122 op=UNLOAD