:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 68.466140] audit: type=1130 audit(1768347618.016:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.472426] audit: type=1131 audit(1768347618.016:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.746429] zram_generator::config[2793]: No configuration found. [ 69.291113] audit: type=1334 audit(1768347618.842:304): prog-id=69 op=LOAD [ 69.293390] audit: type=1334 audit(1768347618.842:305): prog-id=46 op=UNLOAD [ 69.296273] audit: type=1334 audit(1768347618.844:306): prog-id=70 op=LOAD [ 69.298699] audit: type=1334 audit(1768347618.844:307): prog-id=71 op=LOAD [ 69.301146] audit: type=1334 audit(1768347618.844:308): prog-id=57 op=UNLOAD [ 69.305120] audit: type=1334 audit(1768347618.844:309): prog-id=58 op=UNLOAD [ 71.628120] kauditd_printk_skb: 36 callbacks suppressed [ 71.628126] audit: type=1325 audit(1768347621.180:346): table=mangle:42 family=2 entries=2 op=nft_register_chain pid=2868 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.633091] audit: type=1300 audit(1768347621.180:346): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdfbc26c0 a2=0 a3=0 items=0 ppid=2853 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.639381] audit: type=1327 audit(1768347621.180:346): proctitle=69707461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 71.646076] audit: type=1325 audit(1768347621.198:347): table=filter:43 family=2 entries=1 op=nft_register_chain pid=2871 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.650180] audit: type=1300 audit(1768347621.198:347): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc76aeed0 a2=0 a3=0 items=0 ppid=2853 pid=2871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.656893] audit: type=1327 audit(1768347621.198:347): proctitle=69707461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 71.660198] audit: type=1325 audit(1768347621.209:348): table=filter:44 family=2 entries=2 op=nft_register_chain pid=2874 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.663562] audit: type=1300 audit(1768347621.209:348): arch=c00000b7 syscall=211 success=yes exit=340 a0=3 a1=ffffc9254050 a2=0 a3=0 items=0 ppid=2853 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.669961] audit: type=1327 audit(1768347621.209:348): proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C [ 71.673126] audit: type=1325 audit(1768347621.222:349): table=filter:45 family=2 entries=2 op=nft_register_chain pid=2876 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 81.415991] zram_generator::config[3463]: No configuration found. [ 82.094859] kauditd_printk_skb: 158 callbacks suppressed [ 82.094865] audit: type=1131 audit(1768347631.652:406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 68.466140] audit: type=1130 audit(1768347618.016:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.472426] audit: type=1131 audit(1768347618.016:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.746429] zram_generator::config[2793]: No configuration found. [ 69.291113] audit: type=1334 audit(1768347618.842:304): prog-id=69 op=LOAD [ 69.293390] audit: type=1334 audit(1768347618.842:305): prog-id=46 op=UNLOAD [ 69.296273] audit: type=1334 audit(1768347618.844:306): prog-id=70 op=LOAD [ 69.298699] audit: type=1334 audit(1768347618.844:307): prog-id=71 op=LOAD [ 69.301146] audit: type=1334 audit(1768347618.844:308): prog-id=57 op=UNLOAD [ 69.305120] audit: type=1334 audit(1768347618.844:309): prog-id=58 op=UNLOAD [ 71.628120] kauditd_printk_skb: 36 callbacks suppressed [ 71.628126] audit: type=1325 audit(1768347621.180:346): table=mangle:42 family=2 entries=2 op=nft_register_chain pid=2868 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.633091] audit: type=1300 audit(1768347621.180:346): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdfbc26c0 a2=0 a3=0 items=0 ppid=2853 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.639381] audit: type=1327 audit(1768347621.180:346): proctitle=69707461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 71.646076] audit: type=1325 audit(1768347621.198:347): table=filter:43 family=2 entries=1 op=nft_register_chain pid=2871 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.650180] audit: type=1300 audit(1768347621.198:347): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc76aeed0 a2=0 a3=0 items=0 ppid=2853 pid=2871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.656893] audit: type=1327 audit(1768347621.198:347): proctitle=69707461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 71.660198] audit: type=1325 audit(1768347621.209:348): table=filter:44 family=2 entries=2 op=nft_register_chain pid=2874 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 71.663562] audit: type=1300 audit(1768347621.209:348): arch=c00000b7 syscall=211 success=yes exit=340 a0=3 a1=ffffc9254050 a2=0 a3=0 items=0 ppid=2853 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.669961] audit: type=1327 audit(1768347621.209:348): proctitle=69707461626C6573002D770035002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C [ 71.673126] audit: type=1325 audit(1768347621.222:349): table=filter:45 family=2 entries=2 op=nft_register_chain pid=2876 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 81.415991] zram_generator::config[3463]: No configuration found. [ 82.094859] kauditd_printk_skb: 158 callbacks suppressed [ 82.094865] audit: type=1131 audit(1768347631.652:406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 82.103750] audit: type=1334 audit(1768347631.661:407): prog-id=119 op=LOAD [ 82.105701] audit: type=1334 audit(1768347631.661:408): prog-id=69 op=UNLOAD [ 82.110705] audit: type=1334 audit(1768347631.668:409): prog-id=120 op=LOAD [ 82.112631] audit: type=1334 audit(1768347631.668:410): prog-id=82 op=UNLOAD [ 82.118002] audit: type=1334 audit(1768347631.675:411): prog-id=121 op=LOAD [ 82.119971] audit: type=1334 audit(1768347631.675:412): prog-id=86 op=UNLOAD [ 82.122067] audit: type=1334 audit(1768347631.677:413): prog-id=122 op=LOAD [ 82.123799] audit: type=1334 audit(1768347631.677:414): prog-id=123 op=LOAD [ 82.125668] audit: type=1334 audit(1768347631.677:415): prog-id=87 op=UNLOAD [ 87.969461] kauditd_printk_skb: 32 callbacks suppressed [ 87.969466] audit: type=1334 audit(1768347637.530:448): prog-id=139 op=LOAD [ 87.973263] audit: type=1334 audit(1768347637.533:449): prog-id=140 op=LOAD [ 87.974931] audit: type=1300 audit(1768347637.533:449): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001a0180 a2=98 a3=0 items=0 ppid=3575 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.980942] audit: type=1327 audit(1768347637.533:449): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139376138333836393436363063346461663539383663363535383839 [ 87.986771] audit: type=1334 audit(1768347637.533:450): prog-id=140 op=UNLOAD [ 87.988408] audit: type=1300 audit(1768347637.533:450): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3575 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.994982] audit: type=1327 audit(1768347637.533:450): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139376138333836393436363063346461663539383663363535383839 [ 88.001034] audit: type=1334 audit(1768347637.533:451): prog-id=141 op=LOAD [ 88.002746] audit: type=1300 audit(1768347637.533:451): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001a03e8 a2=98 a3=0 items=0 ppid=3575 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.010431] audit: type=1327 audit(1768347637.533:451): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139376138333836393436363063346461663539383663363535383839 [ 98.023693] kauditd_printk_skb: 224 callbacks suppressed [ 98.023700] audit: type=1106 audit(1768347647.589:528): pid=2250 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 98.033322] audit: type=1104 audit(1768347647.596:529): pid=2250 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 98.115194] audit: type=1106 audit(1768347647.679:530): pid=2245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 98.126296] audit: type=1104 audit(1768347647.679:531): pid=2245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 98.132497] audit: type=1131 audit(1768347647.694:532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.24.127:22-20.161.92.111:58736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 102.340176] audit: type=1325 audit(1768347651.907:533): table=filter:105 family=2 entries=15 op=nft_register_rule pid=3908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.345551] audit: type=1300 audit(1768347651.907:533): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe6f0b630 a2=0 a3=1 items=0 ppid=3663 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.352418] audit: type=1327 audit(1768347651.907:533): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 102.358181] audit: type=1325 audit(1768347651.925:534): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.385185] audit: type=1300 audit(1768347651.925:534): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe6f0b630 a2=0 a3=1 items=0 ppid=3663 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.480519] kauditd_printk_skb: 1 callbacks suppressed [ 103.480526] audit: type=1325 audit(1768347653.048:535): table=filter:107 family=2 entries=16 op=nft_register_rule pid=3911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.487162] audit: type=1300 audit(1768347653.048:535): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffffe40eb40 a2=0 a3=1 items=0 ppid=3663 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.495704] audit: type=1327 audit(1768347653.048:535): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 103.499865] audit: type=1325 audit(1768347653.055:536): table=nat:108 family=2 entries=12 op=nft_register_rule pid=3911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.503771] audit: type=1300 audit(1768347653.055:536): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffe40eb40 a2=0 a3=1 items=0 ppid=3663 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.512596] audit: type=1327 audit(1768347653.055:536): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 116.270466] audit: type=1325 audit(1768347665.844:537): table=filter:109 family=2 entries=17 op=nft_register_rule pid=3914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.275819] audit: type=1300 audit(1768347665.844:537): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe2bfe2f0 a2=0 a3=1 items=0 ppid=3663 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.287940] audit: type=1327 audit(1768347665.844:537): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 116.292836] audit: type=1325 audit(1768347665.854:538): table=nat:110 family=2 entries=12 op=nft_register_rule pid=3914 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.299468] audit: type=1300 audit(1768347665.854:538): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe2bfe2f0 a2=0 a3=1 items=0 ppid=3663 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.310230] audit: type=1327 audit(1768347665.854:538): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 117.305895] audit: type=1325 audit(1768347666.879:539): table=filter:111 family=2 entries=18 op=nft_register_rule pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.311780] audit: type=1300 audit(1768347666.879:539): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffcb142d20 a2=0 a3=1 items=0 ppid=3663 pid=3916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.323171] audit: type=1327 audit(1768347666.879:539): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 117.335027] audit: type=1325 audit(1768347666.907:540): table=nat:112 family=2 entries=12 op=nft_register_rule pid=3916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.720861] kauditd_printk_skb: 14 callbacks suppressed [ 121.720868] audit: type=1334 audit(1768347671.298:545): prog-id=157 op=LOAD [ 121.732171] audit: type=1334 audit(1768347671.308:546): prog-id=158 op=LOAD [ 121.735247] audit: type=1300 audit(1768347671.308:546): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000178180 a2=98 a3=0 items=0 ppid=3937 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.743405] audit: type=1327 audit(1768347671.308:546): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383331343037643238613430623632393036303365333236623138 [ 121.754073] audit: type=1334 audit(1768347671.309:547): prog-id=158 op=UNLOAD [ 121.756415] audit: type=1300 audit(1768347671.309:547): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3937 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.766124] audit: type=1327 audit(1768347671.309:547): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383331343037643238613430623632393036303365333236623138 [ 121.772785] audit: type=1334 audit(1768347671.312:548): prog-id=159 op=LOAD [ 121.774721] audit: type=1300 audit(1768347671.312:548): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001783e8 a2=98 a3=0 items=0 ppid=3937 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.781307] audit: type=1327 audit(1768347671.312:548): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163383331343037643238613430623632393036303365333236623138 [ 130.189114] kauditd_printk_skb: 84 callbacks suppressed [ 130.190391] audit: type=1334 audit(1768347679.770:579): prog-id=175 op=LOAD [ 130.191833] audit: type=1300 audit(1768347679.770:579): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001863e8 a2=98 a3=0 items=0 ppid=4026 pid=4247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.198625] audit: type=1327 audit(1768347679.770:579): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613062336262313334383431376566396639646162636131366539 [ 130.204653] audit: type=1334 audit(1768347679.770:580): prog-id=176 op=LOAD [ 130.206398] audit: type=1300 audit(1768347679.770:580): arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4000186168 a2=98 a3=0 items=0 ppid=4026 pid=4247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.212492] audit: type=1327 audit(1768347679.770:580): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613062336262313334383431376566396639646162636131366539 [ 130.218409] audit: type=1334 audit(1768347679.772:581): prog-id=176 op=UNLOAD [ 130.220072] audit: type=1300 audit(1768347679.772:581): arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4026 pid=4247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.228084] audit: type=1327 audit(1768347679.772:581): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338613062336262313334383431376566396639646162636131366539 [ 130.235259] audit: type=1334 audit(1768347679.772:582): prog-id=175 op=UNLOAD [ 139.752581] kauditd_printk_skb: 6 callbacks suppressed [ 139.752587] audit: type=1334 audit(1768347689.339:585): prog-id=178 op=LOAD [ 139.756011] audit: type=1300 audit(1768347689.339:585): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001783e8 a2=98 a3=0 items=0 ppid=4026 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.762403] audit: type=1327 audit(1768347689.339:585): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732636132303031326364373337626461613263313266326563386535 [ 139.768506] audit: type=1334 audit(1768347689.339:586): prog-id=179 op=LOAD [ 139.770604] audit: type=1300 audit(1768347689.339:586): arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=4000178168 a2=98 a3=0 items=0 ppid=4026 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.777512] audit: type=1327 audit(1768347689.339:586): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732636132303031326364373337626461613263313266326563386535 [ 139.783671] audit: type=1334 audit(1768347689.341:587): prog-id=179 op=UNLOAD [ 139.785822] audit: type=1300 audit(1768347689.341:587): arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4026 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.791835] audit: type=1327 audit(1768347689.341:587): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732636132303031326364373337626461613263313266326563386535 [ 139.802739] audit: type=1334 audit(1768347689.341:588): prog-id=178 op=UNLOAD [ 140.145801] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 140.147459] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:33 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:33 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 ip-172-31-24-127 login: [ 144.888509] kauditd_printk_skb: 253 callbacks suppressed [ 144.888515] audit: type=1334 audit(1768347694.477:674): prog-id=222 op=LOAD [ 144.893961] audit: type=1325 audit(1768347694.480:675): table=filter:127 family=2 entries=46 op=nft_register_chain pid=5040 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 144.899612] audit: type=1300 audit(1768347694.480:675): arch=c00000b7 syscall=211 success=yes exit=23740 a0=3 a1=ffffde6d2bb0 a2=0 a3=ffff7faecfa8 items=0 ppid=4650 pid=5040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.910444] audit: type=1327 audit(1768347694.480:675): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 144.916319] audit: type=1334 audit(1768347694.485:676): prog-id=223 op=LOAD [ 144.919259] audit: type=1300 audit(1768347694.485:676): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000130180 a2=98 a3=0 items=0 ppid=5006 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.928100] audit: type=1327 audit(1768347694.485:676): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863353631616133623837613466633438343539383463623532303266 [ 144.935746] audit: type=1334 audit(1768347694.500:677): prog-id=223 op=UNLOAD [ 144.938295] audit: type=1300 audit(1768347694.500:677): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5006 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.945044] audit: type=1327 audit(1768347694.500:677): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863353631616133623837613466633438343539383463623532303266 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:35 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:35 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 ip-172-31-24-127 login: This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:36 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:36 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 ip-172-31-24-127 login: This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:37 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:37 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 ip-172-31-24-127 login: This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:38 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:38 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 ip-172-31-24-127 login: This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:39 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:39 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 ip-172-31-24-127 login: [ 150.667927] kauditd_printk_skb: 202 callbacks suppressed [ 150.667933] audit: type=1325 audit(1768347700.259:750): table=filter:139 family=2 entries=17 op=nft_register_rule pid=5506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.677031] audit: type=1300 audit(1768347700.259:750): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffa47feb0 a2=0 a3=1 items=0 ppid=3663 pid=5506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.688352] audit: type=1327 audit(1768347700.259:750): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 150.694012] audit: type=1325 audit(1768347700.284:751): table=nat:140 family=2 entries=35 op=nft_register_chain pid=5506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.700571] audit: type=1300 audit(1768347700.284:751): arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffffa47feb0 a2=0 a3=1 items=0 ppid=3663 pid=5506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.709025] audit: type=1327 audit(1768347700.284:751): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 150.758453] audit: type=1130 audit(1768347700.349:752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.24.127:22-20.161.92.111:57640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:40 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 This is ip-172-31-24-127 (Linux aarch64 6.12.65-flatcar) 23:41:40 SSH host key: SHA256:1bcNgiu/Y5CEYCsAxBc0Cj5LHUXeywhxaW48QvRzGLQ (ED25519) SSH host key: SHA256:eSXasqYwRuUFgbEscpeIZloy8X6/fJJhndK+4ZugCOM (ECDSA) SSH host key: SHA256:xe8+emT/fXRg6ZTadh1SIWDXfszawXp6QQOK1d+ui4k (RSA) eth0: 172.31.24.127 fe80::432:dfff:fee7:5cf7 ip-172-31-24-127 login: [ 151.289280] audit: type=1101 audit(1768347700.880:753): pid=5511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 151.302092] audit: type=1103 audit(1768347700.889:754): pid=5511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 151.309857] audit: type=1006 audit(1768347700.890:755): pid=5511 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 156.452819] kauditd_printk_skb: 7 callbacks suppressed [ 156.452825] audit: type=1325 audit(1768347706.047:761): table=filter:141 family=2 entries=14 op=nft_register_rule pid=5537 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 156.457502] audit: type=1300 audit(1768347706.047:761): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffea9da660 a2=0 a3=1 items=0 ppid=3663 pid=5537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.464170] audit: type=1327 audit(1768347706.047:761): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 156.531414] audit: type=1325 audit(1768347706.123:762): table=nat:142 family=2 entries=56 op=nft_register_chain pid=5537 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 156.534865] audit: type=1300 audit(1768347706.123:762): arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffea9da660 a2=0 a3=1 items=0 ppid=3663 pid=5537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.542184] audit: type=1327 audit(1768347706.123:762): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 156.928169] audit: type=1130 audit(1768347706.523:763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.24.127:22-20.161.92.111:41346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 157.404541] audit: type=1101 audit(1768347706.999:764): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 157.413566] audit: type=1103 audit(1768347707.008:765): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 157.419869] audit: type=1006 audit(1768347707.008:766): pid=5541 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 162.912704] kauditd_printk_skb: 7 callbacks suppressed [ 162.912710] audit: type=1130 audit(1768347712.510:772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.24.127:22-20.161.92.111:56428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.402294] audit: type=1101 audit(1768347713.000:773): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.411317] audit: type=1103 audit(1768347713.009:774): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.422548] audit: type=1006 audit(1768347713.016:775): pid=5561 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 163.428809] audit: type=1300 audit(1768347713.016:775): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe1853f50 a2=3 a3=0 items=0 ppid=1 pid=5561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.435649] audit: type=1327 audit(1768347713.016:775): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 163.464642] audit: type=1105 audit(1768347713.062:776): pid=5561 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.476658] audit: type=1103 audit(1768347713.068:777): pid=5565 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.810202] audit: type=1106 audit(1768347713.408:778): pid=5561 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 163.818963] audit: type=1104 audit(1768347713.409:779): pid=5561 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.930636] kauditd_printk_skb: 23 callbacks suppressed [ 170.930641] audit: type=1130 audit(1768347720.532:799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.24.127:22-20.161.92.111:56450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.404177] audit: type=1101 audit(1768347721.005:800): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.411389] audit: type=1103 audit(1768347721.013:801): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.417800] audit: type=1006 audit(1768347721.013:802): pid=5622 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 171.423083] audit: type=1300 audit(1768347721.013:802): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcf5a8d00 a2=3 a3=0 items=0 ppid=1 pid=5622 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.430419] audit: type=1327 audit(1768347721.013:802): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 171.459395] audit: type=1105 audit(1768347721.061:803): pid=5622 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.467947] audit: type=1103 audit(1768347721.070:804): pid=5649 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.822955] audit: type=1106 audit(1768347721.424:805): pid=5622 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 171.831656] audit: type=1104 audit(1768347721.428:806): pid=5622 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.874981] kauditd_printk_skb: 1 callbacks suppressed [ 176.874987] audit: type=1130 audit(1768347726.479:808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.24.127:22-20.161.92.111:38600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.350665] audit: type=1101 audit(1768347726.955:809): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 177.358256] audit: type=1103 audit(1768347726.962:810): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 177.365685] audit: type=1006 audit(1768347726.963:811): pid=5664 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 177.369687] audit: type=1300 audit(1768347726.963:811): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffbc73690 a2=3 a3=0 items=0 ppid=1 pid=5664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.376465] audit: type=1327 audit(1768347726.963:811): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 177.401042] audit: type=1105 audit(1768347727.006:812): pid=5664 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 177.412199] audit: type=1103 audit(1768347727.017:813): pid=5668 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 177.737162] audit: type=1106 audit(1768347727.341:814): pid=5664 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 177.744876] audit: type=1104 audit(1768347727.342:815): pid=5664 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 182.828974] kauditd_printk_skb: 1 callbacks suppressed [ 182.828979] audit: type=1130 audit(1768347732.436:817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.24.127:22-20.161.92.111:52422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.325749] audit: type=1101 audit(1768347732.933:818): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 183.338862] audit: type=1103 audit(1768347732.942:819): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 183.345294] audit: type=1006 audit(1768347732.942:820): pid=5684 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 183.351230] audit: type=1300 audit(1768347732.942:820): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc102b9d0 a2=3 a3=0 items=0 ppid=1 pid=5684 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.360682] audit: type=1327 audit(1768347732.942:820): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 183.385352] audit: type=1105 audit(1768347732.992:821): pid=5684 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 183.395666] audit: type=1103 audit(1768347733.003:822): pid=5688 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 183.873409] audit: type=1106 audit(1768347733.479:823): pid=5684 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 183.886503] audit: type=1104 audit(1768347733.480:824): pid=5684 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 188.961228] kauditd_printk_skb: 1 callbacks suppressed [ 188.961234] audit: type=1130 audit(1768347738.572:826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.24.127:22-20.161.92.111:52424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.458482] audit: type=1101 audit(1768347739.069:827): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.465840] audit: type=1103 audit(1768347739.077:828): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.472783] audit: type=1006 audit(1768347739.077:829): pid=5711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 189.476541] audit: type=1300 audit(1768347739.077:829): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd1ec2b90 a2=3 a3=0 items=0 ppid=1 pid=5711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.483663] audit: type=1327 audit(1768347739.077:829): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 189.510799] audit: type=1105 audit(1768347739.122:830): pid=5711 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.520045] audit: type=1103 audit(1768347739.131:831): pid=5715 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.843965] audit: type=1106 audit(1768347739.454:832): pid=5711 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.852647] audit: type=1104 audit(1768347739.454:833): pid=5711 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 194.011282] kauditd_printk_skb: 20 callbacks suppressed [ 194.011287] audit: type=1325 audit(1768347743.624:850): table=filter:143 family=2 entries=26 op=nft_register_rule pid=5770 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 194.017511] audit: type=1300 audit(1768347743.624:850): arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=fffff7bb7090 a2=0 a3=1 items=0 ppid=3663 pid=5770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.024381] audit: type=1327 audit(1768347743.624:850): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 194.033985] audit: type=1325 audit(1768347743.646:851): table=nat:144 family=2 entries=20 op=nft_register_rule pid=5770 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 194.041658] audit: type=1300 audit(1768347743.646:851): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff7bb7090 a2=0 a3=1 items=0 ppid=3663 pid=5770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.051997] audit: type=1327 audit(1768347743.646:851): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 194.134507] audit: type=1106 audit(1768347743.748:852): pid=5742 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 194.143348] audit: type=1104 audit(1768347743.749:853): pid=5742 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 194.150148] audit: type=1131 audit(1768347743.756:854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.24.127:22-20.161.92.111:52444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.228224] audit: type=1130 audit(1768347743.841:855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.24.127:22-20.161.92.111:36892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.828827] kauditd_printk_skb: 27 callbacks suppressed [ 200.828833] audit: type=1325 audit(1768347750.442:875): table=filter:147 family=2 entries=26 op=nft_register_rule pid=5808 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 200.833369] audit: type=1300 audit(1768347750.442:875): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe8e2c430 a2=0 a3=1 items=0 ppid=3663 pid=5808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.839900] audit: type=1327 audit(1768347750.442:875): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 200.846102] audit: type=1325 audit(1768347750.458:876): table=nat:148 family=2 entries=104 op=nft_register_chain pid=5808 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 200.849993] audit: type=1300 audit(1768347750.458:876): arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffe8e2c430 a2=0 a3=1 items=0 ppid=3663 pid=5808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.856595] audit: type=1327 audit(1768347750.458:876): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 201.446863] audit: type=1130 audit(1768347751.060:877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.24.127:22-20.161.92.111:36918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.942985] audit: type=1101 audit(1768347751.556:878): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 201.950206] audit: type=1103 audit(1768347751.564:879): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 201.957006] audit: type=1006 audit(1768347751.570:880): pid=5835 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 207.399202] kauditd_printk_skb: 7 callbacks suppressed [ 207.399208] audit: type=1130 audit(1768347757.013:886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.24.127:22-20.161.92.111:43418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.865168] audit: type=1101 audit(1768347757.479:887): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 207.875046] audit: type=1103 audit(1768347757.488:888): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 207.885300] audit: type=1006 audit(1768347757.495:889): pid=5855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 207.891505] audit: type=1300 audit(1768347757.495:889): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdae85f60 a2=3 a3=0 items=0 ppid=1 pid=5855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.898484] audit: type=1327 audit(1768347757.495:889): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 207.927860] audit: type=1105 audit(1768347757.541:890): pid=5855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 207.940334] audit: type=1103 audit(1768347757.554:891): pid=5859 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 208.293872] audit: type=1106 audit(1768347757.907:892): pid=5855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 208.309349] audit: type=1104 audit(1768347757.907:893): pid=5855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 213.388130] kauditd_printk_skb: 1 callbacks suppressed [ 213.388136] audit: type=1130 audit(1768347763.001:895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.24.127:22-20.161.92.111:35280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 213.887367] audit: type=1101 audit(1768347763.501:896): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 213.895916] audit: type=1103 audit(1768347763.510:897): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 213.902041] audit: type=1006 audit(1768347763.510:898): pid=5874 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 213.905847] audit: type=1300 audit(1768347763.510:898): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff8d54e10 a2=3 a3=0 items=0 ppid=1 pid=5874 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 213.916204] audit: type=1327 audit(1768347763.510:898): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 213.939770] audit: type=1105 audit(1768347763.553:899): pid=5874 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 213.949717] audit: type=1103 audit(1768347763.562:900): pid=5878 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 214.287907] audit: type=1106 audit(1768347763.901:901): pid=5874 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 214.297126] audit: type=1104 audit(1768347763.902:902): pid=5874 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 219.380860] kauditd_printk_skb: 1 callbacks suppressed [ 219.380866] audit: type=1130 audit(1768347768.994:904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.24.127:22-20.161.92.111:35284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 219.865833] audit: type=1101 audit(1768347769.479:905): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 219.877845] audit: type=1103 audit(1768347769.490:906): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 219.886040] audit: type=1006 audit(1768347769.490:907): pid=5890 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 219.892718] audit: type=1300 audit(1768347769.490:907): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffd76c900 a2=3 a3=0 items=0 ppid=1 pid=5890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.900877] audit: type=1327 audit(1768347769.490:907): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 219.925942] audit: type=1105 audit(1768347769.539:908): pid=5890 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 219.935440] audit: type=1103 audit(1768347769.549:909): pid=5894 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 220.263854] audit: type=1106 audit(1768347769.876:910): pid=5890 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 220.283748] audit: type=1104 audit(1768347769.885:911): pid=5890 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 225.352983] kauditd_printk_skb: 1 callbacks suppressed [ 225.352989] audit: type=1130 audit(1768347774.966:913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.24.127:22-20.161.92.111:44294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 225.856171] audit: type=1101 audit(1768347775.470:914): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 225.867865] audit: type=1103 audit(1768347775.479:915): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 225.874931] audit: type=1006 audit(1768347775.479:916): pid=5912 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 225.882418] audit: type=1300 audit(1768347775.479:916): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc919e970 a2=3 a3=0 items=0 ppid=1 pid=5912 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 225.892417] audit: type=1327 audit(1768347775.479:916): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 225.926204] audit: type=1105 audit(1768347775.540:917): pid=5912 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 225.939239] audit: type=1103 audit(1768347775.553:918): pid=5916 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 226.300360] audit: type=1106 audit(1768347775.913:919): pid=5912 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 226.311408] audit: type=1104 audit(1768347775.913:920): pid=5912 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success'