ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:36:40 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 ip-172-31-20-193 login: [ 34.750521] kauditd_printk_skb: 150 callbacks suppressed [ 34.750525] audit: type=1305 audit(1769042204.035:245): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 34.755625] audit: type=1300 audit(1769042204.035:245): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe2bfc9b30 a2=420 a3=0 items=0 ppid=2222 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 34.759802] audit: type=1327 audit(1769042204.035:245): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 34.762269] audit: type=1106 audit(1769042204.040:246): pid=2218 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 34.765641] audit: type=1104 audit(1769042204.040:247): pid=2218 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 34.768705] audit: type=1130 audit(1769042204.040:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.771677] audit: type=1131 audit(1769042204.040:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.849080] audit: type=1106 audit(1769042204.134:250): pid=2213 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 34.855127] audit: type=1104 audit(1769042204.134:251): pid=2213 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 34.859548] audit: type=1131 audit(1769042204.137:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.193:22-68.220.241.50:50378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 38.151427] Initializing XFRM netlink socket This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:36:48 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:36:48 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 ip-172-31-20-193 login: [ 44.359310] kauditd_printk_skb: 132 callbacks suppressed [ 44.359315] audit: type=1130 audit(1769042213.644:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.420961] audit: type=1131 audit(1769042213.705:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 54.992045] audit: type=1130 audit(1769042224.275:305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.087501] audit: type=1131 audit(1769042224.372:306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.105471] audit: type=1334 audit(1769042224.390:307): prog-id=66 op=UNLOAD [ 55.141259] audit: type=1131 audit(1769042224.426:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 57.902901] audit: type=1130 audit(1769042227.187:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.907211] audit: type=1131 audit(1769042227.188:310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.100079] zram_generator::config[2777]: No configuration found. [ 58.414803] audit: type=1334 audit(1769042227.699:311): prog-id=70 op=LOAD [ 58.416054] audit: type=1334 audit(1769042227.699:312): prog-id=63 op=UNLOAD [ 58.420041] audit: type=1334 audit(1769042227.699:313): prog-id=71 op=LOAD [ 58.421186] audit: type=1334 audit(1769042227.699:314): prog-id=72 op=LOAD [ 60.054372] kauditd_printk_skb: 74 callbacks suppressed [ 60.054376] audit: type=1334 audit(1769042229.339:365): prog-id=90 op=LOAD [ 60.057531] audit: type=1334 audit(1769042229.341:366): prog-id=91 op=LOAD [ 60.059232] audit: type=1334 audit(1769042229.342:367): prog-id=92 op=LOAD [ 60.060901] audit: type=1300 audit(1769042229.342:367): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b0238 a2=98 a3=0 items=0 ppid=2901 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.066644] audit: type=1327 audit(1769042229.342:367): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664366338353261663166616663386263393339613130386362386634 [ 60.071888] audit: type=1334 audit(1769042229.342:368): prog-id=92 op=UNLOAD [ 60.073404] audit: type=1300 audit(1769042229.342:368): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2901 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.079283] audit: type=1327 audit(1769042229.342:368): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664366338353261663166616663386263393339613130386362386634 [ 60.085271] audit: type=1334 audit(1769042229.343:369): prog-id=93 op=LOAD [ 60.086777] audit: type=1300 audit(1769042229.343:369): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b0238 a2=98 a3=0 items=0 ppid=2902 pid=2933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.058721] zram_generator::config[3432]: No configuration found. [ 70.559972] kauditd_printk_skb: 122 callbacks suppressed [ 70.559976] audit: type=1131 audit(1769042239.843:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.570965] audit: type=1334 audit(1769042239.855:414): prog-id=120 op=LOAD [ 70.574092] audit: type=1334 audit(1769042239.855:415): prog-id=76 op=UNLOAD [ 70.577983] audit: type=1334 audit(1769042239.855:416): prog-id=121 op=LOAD [ 70.580985] audit: type=1334 audit(1769042239.855:417): prog-id=122 op=LOAD [ 70.584957] audit: type=1334 audit(1769042239.855:418): prog-id=77 op=UNLOAD [ 70.586298] audit: type=1334 audit(1769042239.855:419): prog-id=78 op=UNLOAD [ 70.589476] audit: type=1334 audit(1769042239.861:420): prog-id=123 op=LOAD [ 70.591962] audit: type=1334 audit(1769042239.861:421): prog-id=84 op=UNLOAD [ 70.593436] audit: type=1334 audit(1769042239.861:422): prog-id=124 op=LOAD [ 76.314207] kauditd_printk_skb: 69 callbacks suppressed [ 76.314221] audit: type=1334 audit(1769042245.599:468): prog-id=148 op=LOAD [ 76.317149] audit: type=1334 audit(1769042245.601:469): prog-id=149 op=LOAD [ 76.318360] audit: type=1300 audit(1769042245.601:469): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000178238 a2=98 a3=0 items=0 ppid=3633 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.323311] audit: type=1327 audit(1769042245.601:469): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134356439633934663734373137346232663430643466653534326533 [ 76.328298] audit: type=1334 audit(1769042245.601:470): prog-id=149 op=UNLOAD [ 76.329692] audit: type=1300 audit(1769042245.601:470): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3633 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.334750] audit: type=1327 audit(1769042245.601:470): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134356439633934663734373137346232663430643466653534326533 [ 76.339801] audit: type=1334 audit(1769042245.601:471): prog-id=150 op=LOAD [ 76.341175] audit: type=1300 audit(1769042245.601:471): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000178488 a2=98 a3=0 items=0 ppid=3633 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.346285] audit: type=1327 audit(1769042245.601:471): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134356439633934663734373137346232663430643466653534326533 [ 87.561960] kauditd_printk_skb: 187 callbacks suppressed [ 87.561964] audit: type=1106 audit(1769042256.845:535): pid=2254 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 87.572985] audit: type=1104 audit(1769042256.845:536): pid=2254 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 87.652001] audit: type=1106 audit(1769042256.934:537): pid=2250 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 87.669733] audit: type=1104 audit(1769042256.934:538): pid=2250 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 87.680465] audit: type=1131 audit(1769042256.946:539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.193:22-68.220.241.50:50382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 88.239312] audit: type=1325 audit(1769042257.523:540): table=filter:105 family=2 entries=15 op=nft_register_rule pid=3890 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.244098] audit: type=1300 audit(1769042257.523:540): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc5acf5940 a2=0 a3=7ffc5acf592c items=0 ppid=3603 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.254937] audit: type=1327 audit(1769042257.523:540): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.260004] audit: type=1325 audit(1769042257.531:541): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3890 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.264860] audit: type=1300 audit(1769042257.531:541): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc5acf5940 a2=0 a3=0 items=0 ppid=3603 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.155577] kauditd_printk_skb: 25 callbacks suppressed [ 93.155580] audit: type=1325 audit(1769042262.439:550): table=filter:115 family=2 entries=21 op=nft_register_rule pid=3901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.161278] audit: type=1300 audit(1769042262.439:550): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe742901b0 a2=0 a3=7ffe7429019c items=0 ppid=3603 pid=3901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.170943] audit: type=1327 audit(1769042262.439:550): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 93.175043] audit: type=1325 audit(1769042262.450:551): table=nat:116 family=2 entries=12 op=nft_register_rule pid=3901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.178195] audit: type=1300 audit(1769042262.450:551): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe742901b0 a2=0 a3=0 items=0 ppid=3603 pid=3901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.185267] audit: type=1327 audit(1769042262.450:551): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 93.694969] audit: type=1334 audit(1769042262.978:552): prog-id=158 op=LOAD [ 93.698484] audit: type=1334 audit(1769042262.980:553): prog-id=159 op=LOAD [ 93.701411] audit: type=1300 audit(1769042262.980:553): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0238 a2=98 a3=0 items=0 ppid=3919 pid=3934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.714142] audit: type=1327 audit(1769042262.980:553): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566383038613238643333656435373539653366393765333231393638 [ 104.028191] kauditd_printk_skb: 84 callbacks suppressed [ 104.028194] audit: type=1334 audit(1769042273.312:584): prog-id=176 op=LOAD [ 104.030804] audit: type=1300 audit(1769042273.312:584): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000178488 a2=98 a3=0 items=0 ppid=4003 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.036449] audit: type=1327 audit(1769042273.312:584): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373533393834343337313331646238373365613935316361333466 [ 104.043672] audit: type=1334 audit(1769042273.313:585): prog-id=177 op=LOAD [ 104.045561] audit: type=1300 audit(1769042273.313:585): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c000178218 a2=98 a3=0 items=0 ppid=4003 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.052674] audit: type=1327 audit(1769042273.313:585): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373533393834343337313331646238373365613935316361333466 [ 104.059296] audit: type=1334 audit(1769042273.313:586): prog-id=177 op=UNLOAD [ 104.061093] audit: type=1300 audit(1769042273.313:586): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4003 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.066904] audit: type=1327 audit(1769042273.313:586): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932373533393834343337313331646238373365613935316361333466 [ 104.073303] audit: type=1334 audit(1769042273.313:587): prog-id=176 op=UNLOAD [ 111.980452] kauditd_printk_skb: 6 callbacks suppressed [ 111.980456] audit: type=1325 audit(1769042281.264:590): table=filter:119 family=2 entries=21 op=nft_register_rule pid=4482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 111.985771] audit: type=1300 audit(1769042281.264:590): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe171c2b00 a2=0 a3=7ffe171c2aec items=0 ppid=3603 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.992292] audit: type=1327 audit(1769042281.264:590): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 111.995236] audit: type=1325 audit(1769042281.272:591): table=nat:120 family=2 entries=19 op=nft_register_chain pid=4482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.000038] audit: type=1300 audit(1769042281.272:591): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe171c2b00 a2=0 a3=7ffe171c2aec items=0 ppid=3603 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.007802] audit: type=1327 audit(1769042281.272:591): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 115.396461] audit: type=1334 audit(1769042284.680:592): prog-id=179 op=LOAD [ 115.399308] audit: type=1300 audit(1769042284.680:592): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000128488 a2=98 a3=0 items=0 ppid=4003 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.406312] audit: type=1327 audit(1769042284.680:592): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653735636263623038326362343036653362383365633132393938 [ 115.411967] audit: type=1334 audit(1769042284.680:593): prog-id=180 op=LOAD [ 118.170516] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 118.171871] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 120.772261] kauditd_printk_skb: 11 callbacks suppressed [ 120.772266] audit: type=1334 audit(1769042290.056:597): prog-id=182 op=LOAD [ 120.775321] audit: type=1300 audit(1769042290.056:597): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe13a61b50 a2=98 a3=1fffffffffffffff items=0 ppid=4690 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.781719] audit: type=1327 audit(1769042290.056:597): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 120.788392] audit: type=1334 audit(1769042290.056:598): prog-id=182 op=UNLOAD [ 120.790684] audit: type=1300 audit(1769042290.056:598): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=8 a2=7ffe13a61b20 a3=0 items=0 ppid=4690 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.797288] audit: type=1327 audit(1769042290.056:598): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 120.803694] audit: type=1334 audit(1769042290.057:599): prog-id=183 op=LOAD [ 120.805477] audit: type=1300 audit(1769042290.057:599): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe13a61a30 a2=94 a3=3 items=0 ppid=4690 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.814176] audit: type=1327 audit(1769042290.057:599): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 120.823322] audit: type=1334 audit(1769042290.057:600): prog-id=183 op=UNLOAD This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:11 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:11 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 ip-172-31-20-193 login: This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:12 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:12 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 ip-172-31-20-193 login: [ 125.811432] kauditd_printk_skb: 332 callbacks suppressed [ 125.811436] audit: type=1325 audit(1769042295.093:715): table=filter:129 family=2 entries=52 op=nft_register_chain pid=5364 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 125.818103] audit: type=1300 audit(1769042295.093:715): arch=c000003e syscall=46 success=yes exit=23908 a0=3 a1=7ffc224cb180 a2=0 a3=7ffc224cb16c items=0 ppid=4690 pid=5364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.825634] audit: type=1327 audit(1769042295.093:715): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 125.830293] audit: type=1334 audit(1769042295.110:716): prog-id=243 op=LOAD [ 125.836941] audit: type=1334 audit(1769042295.111:717): prog-id=244 op=LOAD [ 125.840651] audit: type=1300 audit(1769042295.111:717): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000220238 a2=98 a3=0 items=0 ppid=5309 pid=5323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.855892] audit: type=1327 audit(1769042295.111:717): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136363865363861316134356435313337653465613038666332396138 [ 125.855901] audit: type=1334 audit(1769042295.111:718): prog-id=244 op=UNLOAD [ 125.855904] audit: type=1300 audit(1769042295.111:718): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5309 pid=5323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.855908] audit: type=1327 audit(1769042295.111:718): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136363865363861316134356435313337653465613038666332396138 This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:15 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:15 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 ip-172-31-20-193 login: This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:16 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:16 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 ip-172-31-20-193 login: This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:17 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 This is ip-172-31-20-193 (Linux x86_64 6.12.66-flatcar) 00:38:17 SSH host key: SHA256:fRemqFkfcQPIme2j2aNv5mh7+inNub8NGcLT05A+8Jg (ECDSA) SSH host key: SHA256:tGV9vzih6IyM+DCquQKklNbJ4L2iBRS0SUQzaaSRWMI (ED25519) SSH host key: SHA256:NGGLiMSngNu8ZsPrqHLFTfItGbvdAP/8ayFsJZGdn4E (RSA) eth0: 172.31.20.193 fe80::478:cbff:fea2:d1b9 ip-172-31-20-193 login: [ 138.047712] kauditd_printk_skb: 114 callbacks suppressed [ 138.047715] audit: type=1130 audit(1769042307.331:759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.193:22-68.220.241.50:33714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.546228] audit: type=1101 audit(1769042307.830:760): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 138.551122] audit: type=1103 audit(1769042307.831:761): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 138.556146] audit: type=1006 audit(1769042307.831:762): pid=5534 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 138.559159] audit: type=1300 audit(1769042307.831:762): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc81e57240 a2=3 a3=0 items=0 ppid=1 pid=5534 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.564244] audit: type=1327 audit(1769042307.831:762): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 138.579391] audit: type=1105 audit(1769042307.863:763): pid=5534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 138.585921] audit: type=1103 audit(1769042307.869:764): pid=5537 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 139.589111] audit: type=1106 audit(1769042308.873:765): pid=5534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 139.599185] audit: type=1104 audit(1769042308.873:766): pid=5534 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 144.680653] kauditd_printk_skb: 1 callbacks suppressed [ 144.680656] audit: type=1130 audit(1769042313.964:768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.193:22-68.220.241.50:37616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.164936] audit: type=1101 audit(1769042314.448:769): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 145.174397] audit: type=1103 audit(1769042314.458:770): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 145.182977] audit: type=1006 audit(1769042314.458:771): pid=5561 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 145.186437] audit: type=1300 audit(1769042314.458:771): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe56fc39e0 a2=3 a3=0 items=0 ppid=1 pid=5561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.192281] audit: type=1327 audit(1769042314.458:771): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 145.209086] audit: type=1105 audit(1769042314.493:772): pid=5561 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 145.215842] audit: type=1103 audit(1769042314.497:773): pid=5564 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 145.501222] audit: type=1106 audit(1769042314.785:774): pid=5561 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 145.507572] audit: type=1104 audit(1769042314.785:775): pid=5561 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 150.581010] kauditd_printk_skb: 1 callbacks suppressed [ 150.581013] audit: type=1130 audit(1769042319.864:777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.193:22-68.220.241.50:37622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.064184] audit: type=1101 audit(1769042320.348:778): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.070270] audit: type=1103 audit(1769042320.350:779): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.075995] audit: type=1006 audit(1769042320.350:780): pid=5605 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 151.079058] audit: type=1300 audit(1769042320.350:780): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdd052e7d0 a2=3 a3=0 items=0 ppid=1 pid=5605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.085120] audit: type=1327 audit(1769042320.350:780): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 151.117036] audit: type=1105 audit(1769042320.400:781): pid=5605 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.124661] audit: type=1103 audit(1769042320.403:782): pid=5608 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.440388] audit: type=1106 audit(1769042320.724:783): pid=5605 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 151.448954] audit: type=1104 audit(1769042320.724:784): pid=5605 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 158.243836] kauditd_printk_skb: 23 callbacks suppressed [ 158.243839] audit: type=1130 audit(1769042327.527:804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.193:22-68.220.241.50:49448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.786519] audit: type=1101 audit(1769042328.070:805): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 158.795839] audit: type=1103 audit(1769042328.073:806): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 158.801167] audit: type=1006 audit(1769042328.073:807): pid=5655 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 158.804109] audit: type=1300 audit(1769042328.073:807): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc832c4fe0 a2=3 a3=0 items=0 ppid=1 pid=5655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.809432] audit: type=1327 audit(1769042328.073:807): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 158.832238] audit: type=1105 audit(1769042328.115:808): pid=5655 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 158.844559] audit: type=1103 audit(1769042328.127:809): pid=5658 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 159.140578] audit: type=1106 audit(1769042328.424:810): pid=5655 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 159.146868] audit: type=1104 audit(1769042328.424:811): pid=5655 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 164.238072] kauditd_printk_skb: 1 callbacks suppressed [ 164.238076] audit: type=1130 audit(1769042333.522:813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.193:22-68.220.241.50:37410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.677294] audit: type=1101 audit(1769042333.961:814): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 164.682615] audit: type=1103 audit(1769042333.963:815): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 164.687961] audit: type=1006 audit(1769042333.963:816): pid=5680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 164.691053] audit: type=1300 audit(1769042333.963:816): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd587de540 a2=3 a3=0 items=0 ppid=1 pid=5680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.696464] audit: type=1327 audit(1769042333.963:816): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.702837] audit: type=1105 audit(1769042333.986:817): pid=5680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 164.708479] audit: type=1103 audit(1769042333.988:818): pid=5683 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 165.010922] audit: type=1106 audit(1769042334.294:819): pid=5680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 165.018332] audit: type=1104 audit(1769042334.294:820): pid=5680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 170.096732] kauditd_printk_skb: 1 callbacks suppressed [ 170.096736] audit: type=1130 audit(1769042339.380:822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.193:22-68.220.241.50:37420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.543475] audit: type=1101 audit(1769042339.827:823): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 170.549012] audit: type=1103 audit(1769042339.829:824): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 170.554034] audit: type=1006 audit(1769042339.829:825): pid=5699 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 170.557072] audit: type=1300 audit(1769042339.829:825): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff811ff890 a2=3 a3=0 items=0 ppid=1 pid=5699 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.562531] audit: type=1327 audit(1769042339.829:825): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.573808] audit: type=1105 audit(1769042339.857:826): pid=5699 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 170.579494] audit: type=1103 audit(1769042339.860:827): pid=5702 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 171.089096] audit: type=1106 audit(1769042340.371:828): pid=5699 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 171.096615] audit: type=1104 audit(1769042340.371:829): pid=5699 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.111878] kauditd_printk_skb: 41 callbacks suppressed [ 175.111883] audit: type=1105 audit(1769042344.395:857): pid=5764 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.119751] audit: type=1103 audit(1769042344.399:858): pid=5767 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.761123] audit: type=1106 audit(1769042345.045:859): pid=5764 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.768363] audit: type=1104 audit(1769042345.045:860): pid=5764 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 175.773194] audit: type=1131 audit(1769042345.055:861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.193:22-68.220.241.50:53032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.857957] audit: type=1130 audit(1769042345.140:862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.193:22-68.220.241.50:53042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.327396] audit: type=1101 audit(1769042345.611:863): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 176.335029] audit: type=1103 audit(1769042345.611:864): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 176.340749] audit: type=1006 audit(1769042345.611:865): pid=5778 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 176.344082] audit: type=1300 audit(1769042345.611:865): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff9cc440b0 a2=3 a3=0 items=0 ppid=1 pid=5778 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.029204] kauditd_printk_skb: 6 callbacks suppressed [ 181.029208] audit: type=1325 audit(1769042350.313:871): table=filter:145 family=2 entries=26 op=nft_register_rule pid=5817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.033151] audit: type=1300 audit(1769042350.313:871): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff6cc32dc0 a2=0 a3=7fff6cc32dac items=0 ppid=3603 pid=5817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.038994] audit: type=1327 audit(1769042350.313:871): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 181.041756] audit: type=1325 audit(1769042350.318:872): table=nat:146 family=2 entries=104 op=nft_register_chain pid=5817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.045989] audit: type=1300 audit(1769042350.318:872): arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7fff6cc32dc0 a2=0 a3=7fff6cc32dac items=0 ppid=3603 pid=5817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.051759] audit: type=1327 audit(1769042350.318:872): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 181.739531] audit: type=1130 audit(1769042351.023:873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.193:22-68.220.241.50:53058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.209763] audit: type=1101 audit(1769042351.493:874): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 182.215772] audit: type=1103 audit(1769042351.496:875): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 182.221088] audit: type=1006 audit(1769042351.496:876): pid=5819 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 187.621771] kauditd_printk_skb: 7 callbacks suppressed [ 187.621774] audit: type=1130 audit(1769042356.905:882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.193:22-68.220.241.50:35760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.070302] audit: type=1101 audit(1769042357.354:883): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 188.075990] audit: type=1103 audit(1769042357.355:884): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 188.081144] audit: type=1006 audit(1769042357.355:885): pid=5837 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 188.084409] audit: type=1300 audit(1769042357.355:885): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcb14e6ee0 a2=3 a3=0 items=0 ppid=1 pid=5837 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.090605] audit: type=1327 audit(1769042357.355:885): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 188.098844] audit: type=1105 audit(1769042357.382:886): pid=5837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 188.105924] audit: type=1103 audit(1769042357.389:887): pid=5840 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 188.384880] audit: type=1106 audit(1769042357.668:888): pid=5837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 188.394060] audit: type=1104 audit(1769042357.669:889): pid=5837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 193.477836] kauditd_printk_skb: 1 callbacks suppressed [ 193.477841] audit: type=1130 audit(1769042362.761:891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.193:22-68.220.241.50:58344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.060021] audit: type=1101 audit(1769042363.344:892): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 194.077544] audit: type=1103 audit(1769042363.346:893): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 194.092957] audit: type=1006 audit(1769042363.346:894): pid=5854 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 194.100951] audit: type=1300 audit(1769042363.346:894): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd7285e0b0 a2=3 a3=0 items=0 ppid=1 pid=5854 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.111920] audit: type=1327 audit(1769042363.346:894): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 194.114675] audit: type=1105 audit(1769042363.382:895): pid=5854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 194.125920] audit: type=1103 audit(1769042363.392:896): pid=5857 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 194.579771] audit: type=1106 audit(1769042363.863:897): pid=5854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 194.592833] audit: type=1104 audit(1769042363.863:898): pid=5854 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 199.680906] kauditd_printk_skb: 1 callbacks suppressed [ 199.680909] audit: type=1130 audit(1769042368.964:900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.193:22-68.220.241.50:58354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.160553] audit: type=1101 audit(1769042369.444:901): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 200.166614] audit: type=1103 audit(1769042369.444:902): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 200.175031] audit: type=1006 audit(1769042369.444:903): pid=5874 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 200.188017] audit: type=1300 audit(1769042369.444:903): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd33775840 a2=3 a3=0 items=0 ppid=1 pid=5874 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.196278] audit: type=1327 audit(1769042369.444:903): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 200.201336] audit: type=1105 audit(1769042369.484:904): pid=5874 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 200.209258] audit: type=1103 audit(1769042369.493:905): pid=5877 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 200.653535] audit: type=1106 audit(1769042369.937:906): pid=5874 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 200.660277] audit: type=1104 audit(1769042369.937:907): pid=5874 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 205.744164] kauditd_printk_skb: 1 callbacks suppressed [ 205.744167] audit: type=1130 audit(1769042375.028:909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.193:22-68.220.241.50:51632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.218692] audit: type=1101 audit(1769042375.501:910): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 206.229630] audit: type=1103 audit(1769042375.509:911): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 206.237951] audit: type=1006 audit(1769042375.509:912): pid=5895 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 206.242911] audit: type=1300 audit(1769042375.509:912): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd1d9976d0 a2=3 a3=0 items=0 ppid=1 pid=5895 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.250323] audit: type=1327 audit(1769042375.509:912): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 206.265550] audit: type=1105 audit(1769042375.549:913): pid=5895 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 206.276264] audit: type=1103 audit(1769042375.560:914): pid=5900 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 206.611913] audit: type=1106 audit(1769042375.894:915): pid=5895 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 206.621906] audit: type=1104 audit(1769042375.894:916): pid=5895 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success'