8] audit: type=1325 audit(1765888287.247:523): table=filter:105 family=2 entries=15 op=nft_register_rule pid=3987 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 91.836396] audit: type=1300 audit(1765888287.247:523): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcdf944b0 a2=0 a3=1 items=0 ppid=3724 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.846723] audit: type=1327 audit(1765888287.247:523): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 91.852957] audit: type=1325 audit(1765888287.270:524): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3987 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 91.856855] audit: type=1300 audit(1765888287.270:524): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcdf944b0 a2=0 a3=1 items=0 ppid=3724 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.781967] kauditd_printk_skb: 7 callbacks suppressed [ 97.781972] audit: type=1325 audit(1765888293.198:527): table=filter:109 family=2 entries=17 op=nft_register_rule pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.790810] audit: type=1300 audit(1765888293.198:527): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe0b422b0 a2=0 a3=1 items=0 ppid=3724 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.800755] audit: type=1327 audit(1765888293.198:527): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 97.804583] audit: type=1325 audit(1765888293.207:528): table=nat:110 family=2 entries=12 op=nft_register_rule pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.808440] audit: type=1300 audit(1765888293.207:528): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe0b422b0 a2=0 a3=1 items=0 ppid=3724 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.815277] audit: type=1327 audit(1765888293.207:528): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 97.818721] audit: type=1325 audit(1765888293.232:529): table=filter:111 family=2 entries=18 op=nft_register_rule pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.822718] audit: type=1300 audit(1765888293.232:529): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd9d60a80 a2=0 a3=1 items=0 ppid=3724 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.832580] audit: type=1327 audit(1765888293.232:529): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 97.836997] audit: type=1325 audit(1765888293.249:530): table=nat:112 family=2 entries=12 op=nft_register_rule pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.135714] kauditd_printk_skb: 8 callbacks suppressed [ 103.135720] audit: type=1325 audit(1765888298.552:533): table=filter:115 family=2 entries=21 op=nft_register_rule pid=3998 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.142767] audit: type=1300 audit(1765888298.552:533): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffcf0849e0 a2=0 a3=1 items=0 ppid=3724 pid=3998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.152587] audit: type=1327 audit(1765888298.552:533): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 103.157609] audit: type=1325 audit(1765888298.560:534): table=nat:116 family=2 entries=12 op=nft_register_rule pid=3998 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.161582] audit: type=1300 audit(1765888298.560:534): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcf0849e0 a2=0 a3=1 items=0 ppid=3724 pid=3998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.170587] audit: type=1327 audit(1765888298.560:534): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 103.282787] audit: type=1325 audit(1765888298.699:535): table=filter:117 family=2 entries=22 op=nft_register_rule pid=4000 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.286807] audit: type=1300 audit(1765888298.699:535): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffc02b0a40 a2=0 a3=1 items=0 ppid=3724 pid=4000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.293622] audit: type=1327 audit(1765888298.699:535): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 103.301511] audit: type=1325 audit(1765888298.717:536): table=nat:118 family=2 entries=12 op=nft_register_rule pid=4000 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.265428] kauditd_printk_skb: 90 callbacks suppressed [ 110.265433] audit: type=1325 audit(1765888305.682:569): table=filter:121 family=2 entries=21 op=nft_register_rule pid=4334 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.270645] audit: type=1300 audit(1765888305.682:569): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe3ccdf80 a2=0 a3=1 items=0 ppid=3724 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.280010] audit: type=1327 audit(1765888305.682:569): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 110.285282] audit: type=1325 audit(1765888305.696:570): table=nat:122 family=2 entries=19 op=nft_register_chain pid=4334 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.288812] audit: type=1300 audit(1765888305.696:570): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe3ccdf80 a2=0 a3=1 items=0 ppid=3724 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.295893] audit: type=1327 audit(1765888305.696:570): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 111.093924] audit: type=1334 audit(1765888306.511:571): prog-id=172 op=LOAD [ 111.095614] audit: type=1300 audit(1765888306.511:571): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001763e8 a2=98 a3=0 items=0 ppid=4135 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.101735] audit: type=1327 audit(1765888306.511:571): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838653733643966326239623933376439393035393237643732383837 [ 111.107455] audit: type=1334 audit(1765888306.512:572): prog-id=173 op=LOAD [ 119.595192] kauditd_printk_skb: 12 callbacks suppressed [ 119.595197] audit: type=1334 audit(1765888315.012:577): prog-id=175 op=LOAD [ 119.598136] audit: type=1300 audit(1765888315.012:577): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001763e8 a2=98 a3=0 items=0 ppid=4135 pid=4611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.606332] audit: type=1327 audit(1765888315.012:577): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363434316139383938353663303630336462336333303861336434 [ 119.613594] audit: type=1334 audit(1765888315.015:578): prog-id=176 op=LOAD [ 119.615673] audit: type=1300 audit(1765888315.015:578): arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4000176168 a2=98 a3=0 items=0 ppid=4135 pid=4611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.621964] audit: type=1327 audit(1765888315.015:578): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363434316139383938353663303630336462336333303861336434 [ 119.628154] audit: type=1334 audit(1765888315.015:579): prog-id=176 op=UNLOAD [ 119.630180] audit: type=1300 audit(1765888315.015:579): arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4135 pid=4611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.636922] audit: type=1327 audit(1765888315.015:579): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363434316139383938353663303630336462336333303861336434 [ 119.644114] audit: type=1334 audit(1765888315.015:580): prog-id=175 op=UNLOAD [ 120.189467] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 120.191156] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:31:59 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:31:59 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 ip-172-31-28-226 login: This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:00 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:00 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 ip-172-31-28-226 login: [ 125.235610] kauditd_printk_skb: 278 callbacks suppressed [ 125.235616] audit: type=1325 audit(1765888320.652:675): table=filter:130 family=2 entries=20 op=nft_register_rule pid=5100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.240790] audit: type=1300 audit(1765888320.652:675): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffffabeb960 a2=0 a3=1 items=0 ppid=3724 pid=5100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.250023] audit: type=1327 audit(1765888320.652:675): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 125.254789] audit: type=1325 audit(1765888320.671:676): table=nat:131 family=2 entries=14 op=nft_register_rule pid=5100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.258185] audit: type=1300 audit(1765888320.671:676): arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffffabeb960 a2=0 a3=1 items=0 ppid=3724 pid=5100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.264894] audit: type=1327 audit(1765888320.671:676): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 125.287955] audit: type=1325 audit(1765888320.705:677): table=filter:132 family=2 entries=17 op=nft_register_rule pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.291251] audit: type=1300 audit(1765888320.705:677): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe2f8ffa0 a2=0 a3=1 items=0 ppid=3724 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.297617] audit: type=1327 audit(1765888320.705:677): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 125.303613] audit: type=1325 audit(1765888320.720:678): table=nat:133 family=2 entries=35 op=nft_register_chain pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:01 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:01 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 ip-172-31-28-226 login: This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:02 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:02 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 ip-172-31-28-226 login: This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:05 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:05 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 ip-172-31-28-226 login: [ 130.322724] kauditd_printk_skb: 180 callbacks suppressed [ 130.322731] audit: type=1325 audit(1765888325.739:743): table=filter:142 family=2 entries=14 op=nft_register_rule pid=5599 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 130.331595] audit: type=1300 audit(1765888325.739:743): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffba51b80 a2=0 a3=1 items=0 ppid=3724 pid=5599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.341575] audit: type=1327 audit(1765888325.739:743): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 130.386471] audit: type=1325 audit(1765888325.803:744): table=nat:143 family=2 entries=44 op=nft_register_rule pid=5599 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 130.391451] audit: type=1300 audit(1765888325.803:744): arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffffba51b80 a2=0 a3=1 items=0 ppid=3724 pid=5599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.399628] audit: type=1327 audit(1765888325.803:744): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 130.439261] audit: type=1325 audit(1765888325.856:745): table=filter:144 family=2 entries=14 op=nft_register_rule pid=5601 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 130.443694] audit: type=1300 audit(1765888325.856:745): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffedad8b30 a2=0 a3=1 items=0 ppid=3724 pid=5601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.451177] audit: type=1327 audit(1765888325.856:745): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 130.465698] audit: type=1325 audit(1765888325.882:746): table=nat:145 family=2 entries=56 op=nft_register_chain pid=5601 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:06 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:06 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 ip-172-31-28-226 login: This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:07 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 This is ip-172-31-28-226 (Linux aarch64 6.12.61-flatcar) 12:32:07 SSH host key: SHA256:X5VMFMaKteZLpjkhSjTJa4rBJ4q/3FJ7v165geJoRRY (RSA) SSH host key: SHA256:3Ugg1JmeG7XA+yW81/6r7uFGpeSmca9ktvbMDPjCPkk (ECDSA) SSH host key: SHA256:iu7ltgxFt99X7Np8noWsIdjoDmLI5qmTHyHr0DgJhTM (ED25519) eth0: 172.31.28.226 fe80::44b:5bff:fef8:9183 ip-172-31-28-226 login: [ 135.832573] kauditd_printk_skb: 2 callbacks suppressed [ 135.832579] audit: type=1130 audit(1765888331.249:747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.226:22-139.178.68.195:36882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.031089] audit: type=1101 audit(1765888331.448:748): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.039409] audit: type=1103 audit(1765888331.456:749): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.045603] audit: type=1006 audit(1765888331.456:750): pid=5618 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 136.049577] audit: type=1300 audit(1765888331.456:750): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffffc663e0 a2=3 a3=0 items=0 ppid=1 pid=5618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.057250] audit: type=1327 audit(1765888331.456:750): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 136.079595] audit: type=1105 audit(1765888331.496:751): pid=5618 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.088324] audit: type=1103 audit(1765888331.505:752): pid=5621 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.336621] audit: type=1106 audit(1765888331.754:753): pid=5618 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.347086] audit: type=1104 audit(1765888331.754:754): pid=5618 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.374614] kauditd_printk_skb: 1 callbacks suppressed [ 141.375520] audit: type=1130 audit(1765888336.791:756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.226:22-139.178.68.195:36892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.560787] audit: type=1101 audit(1765888336.977:757): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.567939] audit: type=1103 audit(1765888336.983:758): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.574338] audit: type=1006 audit(1765888336.984:759): pid=5641 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 141.579633] audit: type=1300 audit(1765888336.984:759): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc6153ae0 a2=3 a3=0 items=0 ppid=1 pid=5641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.585989] audit: type=1327 audit(1765888336.984:759): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 141.615482] audit: type=1105 audit(1765888337.031:760): pid=5641 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.625601] audit: type=1103 audit(1765888337.040:761): pid=5644 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.821864] audit: type=1106 audit(1765888337.238:762): pid=5641 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.832276] audit: type=1104 audit(1765888337.238:763): pid=5641 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 146.861983] kauditd_printk_skb: 1 callbacks suppressed [ 146.861988] audit: type=1130 audit(1765888342.278:765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.226:22-139.178.68.195:50760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.057085] audit: type=1101 audit(1765888342.473:766): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.063756] audit: type=1103 audit(1765888342.480:767): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.070168] audit: type=1006 audit(1765888342.480:768): pid=5664 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 147.074762] audit: type=1300 audit(1765888342.480:768): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc8facd70 a2=3 a3=0 items=0 ppid=1 pid=5664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.081332] audit: type=1327 audit(1765888342.480:768): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 147.099921] audit: type=1105 audit(1765888342.516:769): pid=5664 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.107256] audit: type=1103 audit(1765888342.523:770): pid=5667 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.306598] audit: type=1106 audit(1765888342.723:771): pid=5664 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 147.313334] audit: type=1104 audit(1765888342.724:772): pid=5664 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.344317] kauditd_printk_skb: 23 callbacks suppressed [ 153.344322] audit: type=1130 audit(1765888348.760:792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.226:22-139.178.68.195:50790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.558326] audit: type=1101 audit(1765888348.974:793): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.565192] audit: type=1103 audit(1765888348.981:794): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.571233] audit: type=1006 audit(1765888348.981:795): pid=5739 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 153.575158] audit: type=1300 audit(1765888348.981:795): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffffcae440 a2=3 a3=0 items=0 ppid=1 pid=5739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.583809] audit: type=1327 audit(1765888348.981:795): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 153.616284] audit: type=1105 audit(1765888349.032:796): pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.626569] audit: type=1103 audit(1765888349.042:797): pid=5742 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.806585] audit: type=1106 audit(1765888349.222:798): pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 153.814031] audit: type=1104 audit(1765888349.223:799): pid=5739 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 158.849030] kauditd_printk_skb: 1 callbacks suppressed [ 158.849036] audit: type=1130 audit(1765888354.264:801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.226:22-139.178.68.195:37190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.064330] audit: type=1101 audit(1765888354.480:802): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.078583] audit: type=1103 audit(1765888354.492:803): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.093015] audit: type=1006 audit(1765888354.492:804): pid=5759 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 159.099573] audit: type=1300 audit(1765888354.492:804): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffeb49bf10 a2=3 a3=0 items=0 ppid=1 pid=5759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.113574] audit: type=1327 audit(1765888354.492:804): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 159.138194] audit: type=1105 audit(1765888354.554:805): pid=5759 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.149043] audit: type=1103 audit(1765888354.562:806): pid=5762 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.398169] audit: type=1106 audit(1765888354.814:807): pid=5759 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.407894] audit: type=1104 audit(1765888354.814:808): pid=5759 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.437109] kauditd_printk_skb: 1 callbacks suppressed [ 164.437114] audit: type=1130 audit(1765888359.852:810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.226:22-139.178.68.195:37200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.647354] audit: type=1101 audit(1765888360.063:811): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.656488] audit: type=1103 audit(1765888360.070:812): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.662995] audit: type=1006 audit(1765888360.070:813): pid=5782 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 164.666864] audit: type=1300 audit(1765888360.070:813): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd97137b0 a2=3 a3=0 items=0 ppid=1 pid=5782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.673803] audit: type=1327 audit(1765888360.070:813): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.702913] audit: type=1105 audit(1765888360.118:814): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.714360] audit: type=1103 audit(1765888360.129:815): pid=5785 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.941866] audit: type=1106 audit(1765888360.356:816): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.960793] audit: type=1104 audit(1765888360.356:817): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 169.975579] kauditd_printk_skb: 1 callbacks suppressed [ 169.975585] audit: type=1130 audit(1765888365.390:819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.226:22-139.178.68.195:46576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.164495] audit: type=1101 audit(1765888365.580:820): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.171385] audit: type=1103 audit(1765888365.587:821): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.177008] audit: type=1006 audit(1765888365.593:822): pid=5800 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 170.180588] audit: type=1300 audit(1765888365.593:822): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffab338c0 a2=3 a3=0 items=0 ppid=1 pid=5800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.187577] audit: type=1327 audit(1765888365.593:822): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.216144] audit: type=1105 audit(1765888365.632:823): pid=5800 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.223758] audit: type=1103 audit(1765888365.639:824): pid=5805 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.411510] audit: type=1106 audit(1765888365.827:825): pid=5800 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.418099] audit: type=1104 audit(1765888365.827:826): pid=5800 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.450571] kauditd_printk_skb: 1 callbacks suppressed [ 175.450577] audit: type=1130 audit(1765888370.866:828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.226:22-139.178.68.195:60938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.644467] audit: type=1101 audit(1765888371.060:829): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.651571] audit: type=1103 audit(1765888371.067:830): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.657158] audit: type=1006 audit(1765888371.067:831): pid=5817 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 175.660660] audit: type=1300 audit(1765888371.067:831): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdf8f6c20 a2=3 a3=0 items=0 ppid=1 pid=5817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.667651] audit: type=1327 audit(1765888371.067:831): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.694818] audit: type=1105 audit(1765888371.111:832): pid=5817 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.702288] audit: type=1103 audit(1765888371.118:833): pid=5820 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.916279] audit: type=1106 audit(1765888371.332:834): pid=5817 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.923761] audit: type=1104 audit(1765888371.333:835): pid=5817 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 184.093053] kauditd_printk_skb: 57 callbacks suppressed [ 184.093059] audit: type=1130 audit(1765888379.509:877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.226:22-139.178.68.195:60986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.273083] audit: type=1101 audit(1765888379.689:878): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 184.279962] audit: type=1103 audit(1765888379.696:879): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 184.286349] audit: type=1006 audit(1765888379.696:880): pid=5918 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 184.290719] audit: type=1300 audit(1765888379.696:880): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdd6315f0 a2=3 a3=0 items=0 ppid=1 pid=5918 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.297931] audit: type=1327 audit(1765888379.696:880): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.323872] audit: type=1105 audit(1765888379.739:881): pid=5918 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 184.332034] audit: type=1103 audit(1765888379.747:882): pid=5921 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 184.515330] audit: type=1106 audit(1765888379.931:883): pid=5918 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 184.523377] audit: type=1104 audit(1765888379.931:884): pid=5918 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.560034] kauditd_printk_skb: 7 callbacks suppressed [ 189.560039] audit: type=1130 audit(1765888384.976:888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.226:22-139.178.68.195:49402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.782218] audit: type=1101 audit(1765888385.198:889): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.794597] audit: type=1103 audit(1765888385.207:890): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.804568] audit: type=1006 audit(1765888385.208:891): pid=5934 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 189.809372] audit: type=1300 audit(1765888385.208:891): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe555e0e0 a2=3 a3=0 items=0 ppid=1 pid=5934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.820191] audit: type=1327 audit(1765888385.208:891): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 189.835595] audit: type=1105 audit(1765888385.252:892): pid=5934 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.848255] audit: type=1103 audit(1765888385.259:893): pid=5937 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 190.056905] audit: type=1106 audit(1765888385.472:894): pid=5934 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 190.069052] audit: type=1104 audit(1765888385.473:895): pid=5934 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 195.095491] kauditd_printk_skb: 1 callbacks suppressed [ 195.095497] audit: type=1130 audit(1765888390.510:897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.226:22-139.178.68.195:40470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.315071] audit: type=1101 audit(1765888390.731:898): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 195.323797] audit: type=1103 audit(1765888390.739:899): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 195.331197] audit: type=1006 audit(1765888390.740:900): pid=5951 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 195.336843] audit: type=1300 audit(1765888390.740:900): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc7233750 a2=3 a3=0 items=0 ppid=1 pid=5951 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.345421] audit: type=1327 audit(1765888390.740:900): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 195.365882] audit: type=1105 audit(1765888390.782:901): pid=5951 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 195.376772] audit: type=1103 audit(1765888390.792:902): pid=5954 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 195.601898] audit: type=1106 audit(1765888391.018:903): pid=5951 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 195.609154] audit: type=1104 audit(1765888391.018:904): pid=5951 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 200.637840] kauditd_printk_skb: 1 callbacks suppressed [ 200.637845] audit: type=1130 audit(1765888396.053:906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.226:22-139.178.68.195:40486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.862574] audit: type=1101 audit(1765888396.278:907): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 200.871312] audit: type=1103 audit(1765888396.285:908): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 200.880296] audit: type=1006 audit(1765888396.286:909): pid=5969 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 200.887586] audit: type=1300 audit(1765888396.286:909): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe3b02210 a2=3 a3=0 items=0 ppid=1 pid=5969 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.896121] audit: type=1327 audit(1765888396.286:909): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 200.909309] audit: type=1105 audit(1765888396.325:910): pid=5969 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 200.916565] audit: type=1103 audit(1765888396.332:911): pid=5972 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 201.131987] audit: type=1106 audit(1765888396.547:912): pid=5969 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 201.144957] audit: type=1104 audit(1765888396.547:913): pid=5969 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 206.170574] kauditd_printk_skb: 1 callbacks suppressed [ 206.170579] audit: type=1130 audit(1765888401.586:915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.226:22-139.178.68.195:49044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.366041] audit: type=1101 audit(1765888401.781:916): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 206.372268] audit: type=1103 audit(1765888401.788:917): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 206.379291] audit: type=1006 audit(1765888401.788:918): pid=5990 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 206.383383] audit: type=1300 audit(1765888401.788:918): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe3499dc0 a2=3 a3=0 items=0 ppid=1 pid=5990 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.390297] audit: type=1327 audit(1765888401.788:918): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 206.416368] audit: type=1105 audit(1765888401.832:919): pid=5990 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 206.424222] audit: type=1103 audit(1765888401.840:920): pid=5993 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 206.664473] audit: type=1106 audit(1765888402.080:921): pid=5990 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 206.675050] audit: type=1104 audit(1765888402.082:922): pid=5990 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 211.698923] kauditd_printk_skb: 1 callbacks suppressed [ 211.698929] audit: type=1130 audit(1765888407.115:924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.226:22-139.178.68.195:49054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.929752] audit: type=1101 audit(1765888407.346:925): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 211.938230] audit: type=1103 audit(1765888407.354:926): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 211.946512] audit: type=1006 audit(1765888407.354:927): pid=6033 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 211.951567] audit: type=1300 audit(1765888407.354:927): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff51ce300 a2=3 a3=0 items=0 ppid=1 pid=6033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.959464] audit: type=1327 audit(1765888407.354:927): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 211.990472] audit: type=1105 audit(1765888407.406:928): pid=6033 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 212.002589] audit: type=1103 audit(1765888407.416:929): pid=6036 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 212.251172] audit: type=1106 audit(1765888407.667:930): pid=6033 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 212.263475] audit: type=1104 audit(1765888407.667:931): pid=6033 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 225.853849] kauditd_printk_skb: 1 callbacks suppressed [ 225.853855] audit: type=1334 audit(1765888421.271:933): prog-id=259 op=LOAD [ 225.861288] audit: type=1334 audit(1765888421.271:934): prog-id=86 op=UNLOAD [ 225.864328] audit: type=1334 audit(1765888421.276:935): prog-id=101 op=UNLOAD [ 225.867570] audit: type=1334 audit(1765888421.276:936): prog-id=105 op=UNLOAD [ 226.105214] audit: type=1334 audit(1765888421.522:937): prog-id=149 op=UNLOAD [ 226.107752] audit: type=1334 audit(1765888421.522:938): prog-id=153 op=UNLOAD [ 226.739650] audit: type=1334 audit(1765888422.157:939): prog-id=260 op=LOAD [ 226.743710] audit: type=1334 audit(1765888422.159:940): prog-id=261 op=LOAD [ 226.746380] audit: type=1300 audit(1765888422.159:940): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000138180 a2=98 a3=0 items=0 ppid=2972 pid=6092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.753286] audit: type=1327 audit(1765888422.159:940): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031363666653935343461653161313732376362343961623865323330 [ 231.852561] kauditd_printk_skb: 40 callbacks suppressed [ 231.852567] audit: type=1334 audit(1765888427.269:955): prog-id=270 op=LOAD [ 231.856456] audit: type=1334 audit(1765888427.270:956): prog-id=91 op=UNLOAD [ 231.858895] audit: type=1334 audit(1765888427.276:957): prog-id=111 op=UNLOAD [ 231.862591] audit: type=1334 audit(1765888427.276:958): prog-id=115 op=UNLOAD [ 232.746564] audit: type=1334 audit(1765888428.163:959): prog-id=271 op=LOAD [ 232.748232] audit: type=1334 audit(1765888428.164:960): prog-id=272 op=LOAD [ 232.749759] audit: type=1300 audit(1765888428.164:960): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000174180 a2=98 a3=0 items=0 ppid=3001 pid=6175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 232.756115] audit: type=1327 audit(1765888428.164:960): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637626331613262623436363435366131643231323866373865333063 [ 232.763906] audit: type=1334 audit(1765888428.165:961): prog-id=272 op=UNLOAD [ 232.766710] audit: type=1300 audit(1765888428.165:961): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3001 pid=6175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null)