18): prog-id=124 op=LOAD [ 71.950246] audit: type=1334 audit(1768353433.923:419): prog-id=75 op=UNLOAD [ 80.691926] kauditd_printk_skb: 32 callbacks suppressed [ 80.691930] audit: type=1334 audit(1768353442.682:452): prog-id=140 op=LOAD [ 80.696111] audit: type=1334 audit(1768353442.684:453): prog-id=141 op=LOAD [ 80.697352] audit: type=1334 audit(1768353442.686:454): prog-id=142 op=LOAD [ 80.700445] audit: type=1300 audit(1768353442.686:454): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3544 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.706288] audit: type=1327 audit(1768353442.686:454): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132386633396634396131343939626462336634656561333130663038 [ 80.713047] audit: type=1334 audit(1768353442.686:455): prog-id=142 op=UNLOAD [ 80.714361] audit: type=1300 audit(1768353442.686:455): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3544 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.722793] audit: type=1327 audit(1768353442.686:455): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132386633396634396131343939626462336634656561333130663038 [ 80.730055] audit: type=1334 audit(1768353442.690:456): prog-id=143 op=LOAD [ 80.731764] audit: type=1300 audit(1768353442.690:456): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=3544 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.945188] kauditd_printk_skb: 224 callbacks suppressed [ 119.945192] audit: type=1106 audit(1768353481.935:532): pid=2325 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 119.984470] audit: type=1104 audit(1768353481.968:533): pid=2325 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 120.081114] audit: type=1106 audit(1768353482.071:534): pid=2320 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 120.102595] audit: type=1104 audit(1768353482.072:535): pid=2320 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 120.135127] audit: type=1131 audit(1768353482.124:536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.22.202:22-4.153.228.146:43828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 121.751248] audit: type=1325 audit(1768353483.741:537): table=filter:105 family=2 entries=15 op=nft_register_rule pid=3866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.759968] audit: type=1300 audit(1768353483.741:537): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe12ee0e50 a2=0 a3=7ffe12ee0e3c items=0 ppid=3622 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.771541] audit: type=1327 audit(1768353483.741:537): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 121.776096] audit: type=1325 audit(1768353483.766:538): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.780835] audit: type=1300 audit(1768353483.766:538): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe12ee0e50 a2=0 a3=0 items=0 ppid=3622 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.677291] kauditd_printk_skb: 7 callbacks suppressed [ 125.677295] audit: type=1325 audit(1768353487.667:541): table=filter:109 family=2 entries=17 op=nft_register_rule pid=3870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.685202] audit: type=1300 audit(1768353487.667:541): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffd170c980 a2=0 a3=7fffd170c96c items=0 ppid=3622 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.696006] audit: type=1327 audit(1768353487.667:541): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 125.700568] audit: type=1325 audit(1768353487.686:542): table=nat:110 family=2 entries=12 op=nft_register_rule pid=3870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.704047] audit: type=1300 audit(1768353487.686:542): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffd170c980 a2=0 a3=0 items=0 ppid=3622 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.711149] audit: type=1327 audit(1768353487.686:542): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 125.770363] audit: type=1325 audit(1768353487.760:543): table=filter:111 family=2 entries=18 op=nft_register_rule pid=3872 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.775701] audit: type=1300 audit(1768353487.760:543): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc0fbc34a0 a2=0 a3=7ffc0fbc348c items=0 ppid=3622 pid=3872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.782556] audit: type=1327 audit(1768353487.760:543): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 125.786694] audit: type=1325 audit(1768353487.776:544): table=nat:112 family=2 entries=12 op=nft_register_rule pid=3872 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.923345] kauditd_printk_skb: 74 callbacks suppressed [ 133.923350] audit: type=1334 audit(1768353495.913:571): prog-id=171 op=LOAD [ 133.928479] audit: type=1334 audit(1768353495.916:572): prog-id=172 op=LOAD [ 133.931352] audit: type=1300 audit(1768353495.916:572): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3917 pid=4108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.945227] audit: type=1327 audit(1768353495.916:572): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623332346439613838656662356430316365353134343233363736 [ 133.951431] audit: type=1334 audit(1768353495.916:573): prog-id=172 op=UNLOAD [ 133.956556] audit: type=1300 audit(1768353495.916:573): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3917 pid=4108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.963708] audit: type=1327 audit(1768353495.916:573): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623332346439613838656662356430316365353134343233363736 [ 133.969540] audit: type=1334 audit(1768353495.916:574): prog-id=173 op=LOAD [ 133.971055] audit: type=1300 audit(1768353495.916:574): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3917 pid=4108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.983475] audit: type=1327 audit(1768353495.916:574): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623332346439613838656662356430316365353134343233363736 [ 139.909053] kauditd_printk_skb: 18 callbacks suppressed [ 139.909057] audit: type=1334 audit(1768353501.899:581): prog-id=176 op=LOAD [ 139.912102] audit: type=1300 audit(1768353501.899:581): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=3954 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.917989] audit: type=1327 audit(1768353501.899:581): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231356636393637656637613431646161656235623631303064666639 [ 139.930617] audit: type=1334 audit(1768353501.902:582): prog-id=177 op=LOAD [ 139.932000] audit: type=1300 audit(1768353501.902:582): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00017a218 a2=98 a3=0 items=0 ppid=3954 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.937920] audit: type=1327 audit(1768353501.902:582): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231356636393637656637613431646161656235623631303064666639 [ 139.944412] audit: type=1334 audit(1768353501.902:583): prog-id=177 op=UNLOAD [ 139.946117] audit: type=1300 audit(1768353501.902:583): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3954 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.951930] audit: type=1327 audit(1768353501.902:583): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231356636393637656637613431646161656235623631303064666639 [ 139.957742] audit: type=1334 audit(1768353501.902:584): prog-id=176 op=UNLOAD [ 151.631519] kauditd_printk_skb: 6 callbacks suppressed [ 151.631526] audit: type=1334 audit(1768353513.622:587): prog-id=179 op=LOAD [ 151.635274] audit: type=1300 audit(1768353513.622:587): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0000d4488 a2=98 a3=0 items=0 ppid=3954 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.644203] audit: type=1327 audit(1768353513.622:587): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266663061626132353831393539363539333863633639373631 [ 151.650763] audit: type=1334 audit(1768353513.624:588): prog-id=180 op=LOAD [ 151.652280] audit: type=1300 audit(1768353513.624:588): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0000d4218 a2=98 a3=0 items=0 ppid=3954 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.659329] audit: type=1327 audit(1768353513.624:588): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266663061626132353831393539363539333863633639373631 [ 151.666467] audit: type=1334 audit(1768353513.624:589): prog-id=180 op=UNLOAD [ 151.667988] audit: type=1300 audit(1768353513.624:589): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3954 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.674370] audit: type=1327 audit(1768353513.624:589): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630623266663061626132353831393539363539333863633639373631 [ 151.680624] audit: type=1334 audit(1768353513.624:590): prog-id=179 op=UNLOAD [ 154.798097] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 154.799460] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 158.205897] kauditd_printk_skb: 5 callbacks suppressed [ 158.205901] audit: type=1334 audit(1768353520.196:592): prog-id=182 op=LOAD [ 158.209344] audit: type=1300 audit(1768353520.196:592): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd6e628dd0 a2=98 a3=1fffffffffffffff items=0 ppid=4645 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.220484] audit: type=1327 audit(1768353520.196:592): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 158.228059] audit: type=1334 audit(1768353520.196:593): prog-id=182 op=UNLOAD [ 158.229757] audit: type=1300 audit(1768353520.196:593): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=8 a2=7ffd6e628da0 a3=0 items=0 ppid=4645 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.236181] audit: type=1327 audit(1768353520.196:593): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 158.243306] audit: type=1334 audit(1768353520.206:594): prog-id=183 op=LOAD [ 158.244849] audit: type=1300 audit(1768353520.206:594): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd6e628cb0 a2=94 a3=3 items=0 ppid=4645 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.250802] audit: type=1327 audit(1768353520.206:594): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 158.257009] audit: type=1334 audit(1768353520.206:595): prog-id=183 op=UNLOAD This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:41 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:41 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b ip-172-31-22-202 login: This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:42 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:42 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b ip-172-31-22-202 login: This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:44 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:44 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b ip-172-31-22-202 login: [ 163.257592] kauditd_printk_skb: 407 callbacks suppressed [ 163.257595] audit: type=1325 audit(1768353525.247:737): table=filter:130 family=2 entries=17 op=nft_register_rule pid=5347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 163.261510] audit: type=1300 audit(1768353525.247:737): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc42dd1820 a2=0 a3=7ffc42dd180c items=0 ppid=3622 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.267187] audit: type=1327 audit(1768353525.247:737): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 163.345115] audit: type=1325 audit(1768353525.335:738): table=nat:131 family=2 entries=47 op=nft_register_chain pid=5347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 163.348336] audit: type=1300 audit(1768353525.335:738): arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffc42dd1820 a2=0 a3=7ffc42dd180c items=0 ppid=3622 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.354304] audit: type=1327 audit(1768353525.335:738): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:45 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:45 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b ip-172-31-22-202 login: [ 164.397170] audit: type=1325 audit(1768353526.387:739): table=filter:132 family=2 entries=14 op=nft_register_rule pid=5356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 164.400312] audit: type=1300 audit(1768353526.387:739): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc15f9c550 a2=0 a3=7ffc15f9c53c items=0 ppid=3622 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.406189] audit: type=1327 audit(1768353526.387:739): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 164.409046] audit: type=1325 audit(1768353526.394:740): table=nat:133 family=2 entries=20 op=nft_register_rule pid=5356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:46 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:46 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b ip-172-31-22-202 login: [ 168.682083] kauditd_printk_skb: 2 callbacks suppressed [ 168.682087] audit: type=1325 audit(1768353530.672:741): table=filter:134 family=2 entries=56 op=nft_register_chain pid=5385 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 168.686531] audit: type=1300 audit(1768353530.672:741): arch=c000003e syscall=46 success=yes exit=25500 a0=3 a1=7ffc15150ce0 a2=0 a3=7ffc15150ccc items=0 ppid=4645 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.693127] audit: type=1327 audit(1768353530.672:741): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 168.845966] audit: type=1334 audit(1768353530.836:742): prog-id=258 op=LOAD [ 168.847686] audit: type=1334 audit(1768353530.837:743): prog-id=259 op=LOAD [ 168.849106] audit: type=1300 audit(1768353530.837:743): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=5397 pid=5409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.856212] audit: type=1327 audit(1768353530.837:743): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534646135323136323664353662626666653433633136353466663939 [ 168.863742] audit: type=1334 audit(1768353530.837:744): prog-id=259 op=UNLOAD [ 168.865271] audit: type=1300 audit(1768353530.837:744): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5397 pid=5409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.871313] audit: type=1327 audit(1768353530.837:744): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534646135323136323664353662626666653433633136353466663939 This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:53 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b This is ip-172-31-22-202 (Linux x86_64 6.12.65-flatcar) 01:18:53 SSH host key: SHA256:e6q3VPDmMaj9WRtUWTuwMsUAw61nwc7dNPCTDrriJ/Q (ECDSA) SSH host key: SHA256:cBG0JlnwTvc5e7PeK+SP7GFHoAkUlL/tcqHAMag7pQA (RSA) SSH host key: SHA256:t3m995ZwOjL6p+zX/GfX694R1C511fFxmSWXw9IZmxE (ED25519) eth0: 172.31.22.202 fe80::4c6:26ff:fe5c:929b ip-172-31-22-202 login: [ 178.602230] kauditd_printk_skb: 26 callbacks suppressed [ 178.602234] audit: type=1130 audit(1768353540.592:759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.202:22-4.153.228.146:49886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.092958] audit: type=1101 audit(1768353541.083:760): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 179.100160] audit: type=1103 audit(1768353541.085:761): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 179.105543] audit: type=1006 audit(1768353541.085:762): pid=5467 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 179.108902] audit: type=1300 audit(1768353541.085:762): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff229fa410 a2=3 a3=0 items=0 ppid=1 pid=5467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.115386] audit: type=1327 audit(1768353541.085:762): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 179.127381] audit: type=1105 audit(1768353541.117:763): pid=5467 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 179.137227] audit: type=1103 audit(1768353541.121:764): pid=5476 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 179.957517] audit: type=1106 audit(1768353541.947:765): pid=5467 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 180.001303] audit: type=1104 audit(1768353541.949:766): pid=5467 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 185.014623] kauditd_printk_skb: 1 callbacks suppressed [ 185.014627] audit: type=1130 audit(1768353547.004:768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.202:22-4.153.228.146:40962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.515064] audit: type=1101 audit(1768353547.505:769): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 185.523018] audit: type=1103 audit(1768353547.507:770): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 185.529997] audit: type=1006 audit(1768353547.507:771): pid=5514 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 185.533176] audit: type=1300 audit(1768353547.507:771): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffea71f8880 a2=3 a3=0 items=0 ppid=1 pid=5514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.540171] audit: type=1327 audit(1768353547.507:771): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.549320] audit: type=1105 audit(1768353547.539:772): pid=5514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 185.556169] audit: type=1103 audit(1768353547.542:773): pid=5519 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 186.000694] audit: type=1106 audit(1768353547.991:774): pid=5514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 186.008061] audit: type=1104 audit(1768353547.991:775): pid=5514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 193.040832] kauditd_printk_skb: 23 callbacks suppressed [ 193.040836] audit: type=1130 audit(1768353555.030:795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.202:22-4.153.228.146:50120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.583943] audit: type=1101 audit(1768353555.574:796): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 193.590175] audit: type=1103 audit(1768353555.574:797): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 193.596168] audit: type=1006 audit(1768353555.574:798): pid=5573 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 193.599603] audit: type=1300 audit(1768353555.574:798): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff058c3500 a2=3 a3=0 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 193.606153] audit: type=1327 audit(1768353555.574:798): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 193.615970] audit: type=1105 audit(1768353555.606:799): pid=5573 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 193.622075] audit: type=1103 audit(1768353555.608:800): pid=5577 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 194.094528] audit: type=1106 audit(1768353556.085:801): pid=5573 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 194.101908] audit: type=1104 audit(1768353556.085:802): pid=5573 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 199.198206] kauditd_printk_skb: 1 callbacks suppressed [ 199.198210] audit: type=1130 audit(1768353561.188:804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.202:22-4.153.228.146:50122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.678461] audit: type=1101 audit(1768353561.668:805): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 199.684707] audit: type=1103 audit(1768353561.670:806): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 199.690480] audit: type=1006 audit(1768353561.670:807): pid=5595 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 199.693752] audit: type=1300 audit(1768353561.670:807): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc5f282590 a2=3 a3=0 items=0 ppid=1 pid=5595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.699976] audit: type=1327 audit(1768353561.670:807): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 199.707619] audit: type=1105 audit(1768353561.698:808): pid=5595 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 199.716790] audit: type=1103 audit(1768353561.707:809): pid=5599 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 200.070054] audit: type=1106 audit(1768353562.060:810): pid=5595 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 200.076839] audit: type=1104 audit(1768353562.061:811): pid=5595 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 205.158485] kauditd_printk_skb: 1 callbacks suppressed [ 205.158488] audit: type=1130 audit(1768353567.149:813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.22.202:22-4.153.228.146:59080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.614392] audit: type=1101 audit(1768353567.604:814): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 205.622000] audit: type=1103 audit(1768353567.606:815): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 205.628589] audit: type=1006 audit(1768353567.606:816): pid=5613 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 205.631861] audit: type=1300 audit(1768353567.606:816): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff5143ead0 a2=3 a3=0 items=0 ppid=1 pid=5613 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.638103] audit: type=1327 audit(1768353567.606:816): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 205.641471] audit: type=1105 audit(1768353567.631:817): pid=5613 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 205.649672] audit: type=1103 audit(1768353567.640:818): pid=5617 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 205.944106] audit: type=1106 audit(1768353567.934:819): pid=5613 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 205.952092] audit: type=1104 audit(1768353567.934:820): pid=5613 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 211.041159] kauditd_printk_skb: 1 callbacks suppressed [ 211.041163] audit: type=1130 audit(1768353573.031:822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.202:22-4.153.228.146:59096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.524812] audit: type=1101 audit(1768353573.515:823): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 211.531977] audit: type=1103 audit(1768353573.518:824): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 211.537812] audit: type=1006 audit(1768353573.518:825): pid=5633 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 211.541124] audit: type=1300 audit(1768353573.518:825): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe317a9bd0 a2=3 a3=0 items=0 ppid=1 pid=5633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.547284] audit: type=1327 audit(1768353573.518:825): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 211.554871] audit: type=1105 audit(1768353573.545:826): pid=5633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 211.562426] audit: type=1103 audit(1768353573.547:827): pid=5637 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 211.872120] audit: type=1106 audit(1768353573.862:828): pid=5633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 211.880170] audit: type=1104 audit(1768353573.862:829): pid=5633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 216.248859] kauditd_printk_skb: 9 callbacks suppressed [ 216.248862] audit: type=1106 audit(1768353578.239:837): pid=5649 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 216.256091] audit: type=1104 audit(1768353578.239:838): pid=5649 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 216.261116] audit: type=1131 audit(1768353578.247:839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.202:22-4.153.228.146:59112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.304023] audit: type=1130 audit(1768353578.294:840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.22.202:22-4.153.228.146:47268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.800909] audit: type=1101 audit(1768353578.791:841): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 216.807299] audit: type=1103 audit(1768353578.791:842): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 216.819565] audit: type=1006 audit(1768353578.791:843): pid=5690 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 216.822783] audit: type=1300 audit(1768353578.791:843): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff8130c540 a2=3 a3=0 items=0 ppid=1 pid=5690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.828931] audit: type=1327 audit(1768353578.791:843): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 216.836767] audit: type=1105 audit(1768353578.827:844): pid=5690 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 223.570759] kauditd_printk_skb: 38 callbacks suppressed [ 223.570763] audit: type=1325 audit(1768353585.561:871): table=filter:139 family=2 entries=26 op=nft_register_rule pid=5742 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 223.575161] audit: type=1300 audit(1768353585.561:871): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc59acd540 a2=0 a3=7ffc59acd52c items=0 ppid=3622 pid=5742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.582067] audit: type=1327 audit(1768353585.561:871): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 223.585515] audit: type=1325 audit(1768353585.568:872): table=nat:140 family=2 entries=104 op=nft_register_chain pid=5742 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 223.589373] audit: type=1300 audit(1768353585.568:872): arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffc59acd540 a2=0 a3=7ffc59acd52c items=0 ppid=3622 pid=5742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.595335] audit: type=1327 audit(1768353585.568:872): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 225.312934] audit: type=1130 audit(1768353587.303:873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.202:22-4.153.228.146:47176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 225.788745] audit: type=1101 audit(1768353587.779:874): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 225.797332] audit: type=1103 audit(1768353587.783:875): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 225.804628] audit: type=1006 audit(1768353587.783:876): pid=5744 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 231.219502] kauditd_printk_skb: 7 callbacks suppressed [ 231.219506] audit: type=1130 audit(1768353593.210:882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.22.202:22-4.153.228.146:47180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 231.699426] audit: type=1101 audit(1768353593.689:883): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 231.714229] audit: type=1103 audit(1768353593.702:884): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 231.724441] audit: type=1006 audit(1768353593.702:885): pid=5760 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 231.727842] audit: type=1300 audit(1768353593.702:885): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc27b4e7c0 a2=3 a3=0 items=0 ppid=1 pid=5760 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 231.736612] audit: type=1327 audit(1768353593.702:885): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 231.745032] audit: type=1105 audit(1768353593.735:886): pid=5760 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 231.755452] audit: type=1103 audit(1768353593.742:887): pid=5764 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 232.307531] audit: type=1106 audit(1768353594.297:888): pid=5760 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 232.325227] audit: type=1104 audit(1768353594.297:889): pid=5760 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 237.394017] kauditd_printk_skb: 1 callbacks suppressed [ 237.394020] audit: type=1130 audit(1768353599.384:891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.202:22-4.153.228.146:52856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 237.904577] audit: type=1101 audit(1768353599.895:892): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 237.912271] audit: type=1103 audit(1768353599.902:893): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 237.918262] audit: type=1006 audit(1768353599.902:894): pid=5777 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 237.921523] audit: type=1300 audit(1768353599.902:894): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc47039fb0 a2=3 a3=0 items=0 ppid=1 pid=5777 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 237.928334] audit: type=1327 audit(1768353599.902:894): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 237.943759] audit: type=1105 audit(1768353599.934:895): pid=5777 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 237.954431] audit: type=1103 audit(1768353599.937:896): pid=5781 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 238.605857] audit: type=1106 audit(1768353600.596:897): pid=5777 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 238.612970] audit: type=1104 audit(1768353600.596:898): pid=5777 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 243.706700] kauditd_printk_skb: 1 callbacks suppressed [ 243.706704] audit: type=1130 audit(1768353605.695:900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.202:22-4.153.228.146:49878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 244.227601] audit: type=1101 audit(1768353606.218:901): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 244.247431] audit: type=1103 audit(1768353606.231:902): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 244.262267] audit: type=1006 audit(1768353606.231:903): pid=5799 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 244.265832] audit: type=1300 audit(1768353606.231:903): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd2d117230 a2=3 a3=0 items=0 ppid=1 pid=5799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.279094] audit: type=1327 audit(1768353606.231:903): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 244.287688] audit: type=1105 audit(1768353606.272:904): pid=5799 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 244.294873] audit: type=1103 audit(1768353606.278:905): pid=5803 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 244.700202] audit: type=1106 audit(1768353606.689:906): pid=5799 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 244.721646] audit: type=1104 audit(1768353606.689:907): pid=5799 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 249.786860] kauditd_printk_skb: 1 callbacks suppressed [ 249.786863] audit: type=1130 audit(1768353611.776:909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.202:22-4.153.228.146:49892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 250.287251] audit: type=1101 audit(1768353612.277:910): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 250.294164] audit: type=1103 audit(1768353612.284:911): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 250.301495] audit: type=1006 audit(1768353612.284:912): pid=5842 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 250.304898] audit: type=1300 audit(1768353612.284:912): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd5d911480 a2=3 a3=0 items=0 ppid=1 pid=5842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 250.311791] audit: type=1327 audit(1768353612.284:912): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 250.333225] audit: type=1105 audit(1768353612.322:913): pid=5842 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 250.346698] audit: type=1103 audit(1768353612.334:914): pid=5846 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 250.856137] audit: type=1106 audit(1768353612.846:915): pid=5842 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 250.866981] audit: type=1104 audit(1768353612.846:916): pid=5842 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' [ 265.352530] kauditd_printk_skb: 1 callbacks suppressed [ 265.352534] audit: type=1334 audit(1768353627.342:918): prog-id=153 op=UNLOAD [ 265.356589] audit: type=1334 audit(1768353627.342:919): prog-id=157 op=UNLOAD [ 265.987289] audit: type=1334 audit(1768353627.977:920): prog-id=263 op=LOAD [ 265.989684] audit: type=1334 audit(1768353627.977:921): prog-id=92 op=UNLOAD [ 265.991744] audit: type=1334 audit(1768353627.980:922): prog-id=109 op=UNLOAD [ 265.994033] audit: type=1334 audit(1768353627.980:923): prog-id=113 op=UNLOAD [ 266.674309] audit: type=1334 audit(1768353628.664:924): prog-id=264 op=LOAD [ 266.676168] audit: type=1334 audit(1768353628.665:925): prog-id=265 op=LOAD [ 266.678930] audit: type=1300 audit(1768353628.665:925): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3527 pid=5910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 266.686456] audit: type=1327 audit(1768353628.665:925): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264353464313931623863663162663034653835366439366563396366 [ 271.569861] kauditd_printk_skb: 44 callbacks suppressed [ 271.569865] audit: type=1334 audit(1768353633.560:944): prog-id=275 op=LOAD [ 271.574495] audit: type=1334 audit(1768353633.564:945): prog-id=276 op=LOAD [ 271.576947] audit: type=1300 audit(1768353633.564:945): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=2975 pid=5983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 271.583165] audit: type=1327 audit(1768353633.564:945): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653562616236326461356462636535306138643362666438383130 [ 271.589131] audit: type=1334 audit(1768353633.564:946): prog-id=276 op=UNLOAD [ 271.590686] audit: type=1300 audit(1768353633.564:946): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=2975 pid=5983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 271.596498] audit: type=1327 audit(1768353633.564:946): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653562616236326461356462636535306138643362666438383130 [ 271.602715] audit: type=1334 audit(1768353633.564:947): prog-id=277 op=LOAD [ 271.604172] audit: type=1300 audit(1768353633.564:947): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=2975 pid=5983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 271.610716] audit: type=1327 audit(1768353633.564:947): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939653562616236326461356462636535306138643362666438383130